Overview

URL dhyiandra.blogspot.com/2013/12/registry-fix-untuk-fifa-14.html
IP74.125.205.132
ASNAS15169 Google Inc.
Location United States
Report completed2017-12-01 11:29:21 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2017-12-01 2 atat.ro/about.html Malware
2017-12-01 2 www.atat.ro/about.html Phishing
2017-12-01 2 www.atat.ro/p/about.html Phishing
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 74.125.205.132

Date UQ / IDS / BL URL IP
2017-12-22 16:59:14 +0100
0 - 1 - 0 forodeescritoreselsalvador.blogspot.com/p/rau (...) 74.125.205.132
2017-12-22 14:53:02 +0100
0 - 1 - 0 rizal-sprinter.blogspot.com/2012/06/contoh-es (...) 74.125.205.132
2017-12-22 14:50:03 +0100
0 - 0 - 1 mrdanjoll.blogspot.com/ 74.125.205.132
2017-12-21 22:58:55 +0100
0 - 0 - 0 allkindoffsportstv.blogspot.com/ 74.125.205.132
2017-12-21 22:54:51 +0100
0 - 0 - 4 about-yourdreams.blogspot.com/ 74.125.205.132
2017-12-19 11:00:00 +0100
0 - 0 - 1 theflashlat.blogspot.com.es/2015/11/ver-flash (...) 74.125.205.132
2017-12-01 11:22:45 +0100
0 - 1 - 0 krusay.blogspot.com/2009/11/camilo-cienfuegos (...) 74.125.205.132
2017-12-01 11:21:27 +0100
0 - 0 - 1 mercedes-elseordelamisericordia.blogspot.mx/ 74.125.205.132
2017-12-01 11:19:24 +0100
0 - 0 - 3 https://app-games-mhecrh.blogspot.de/2015/10/ (...) 74.125.205.132
2017-12-01 11:16:04 +0100
0 - 0 - 2 https://waltdisneystreaming.blogspot.ca/2017/ (...) 74.125.205.132

Last 10 reports on ASN: AS15169 Google Inc.

Date UQ / IDS / BL URL IP
2018-04-24 06:44:40 +0200
0 - 0 - 3 v9productionsgames.blogspot.com.br/2012/06/to (...) 172.217.21.129
2018-04-24 06:44:33 +0200
0 - 1 - 0 umqa4.blogspot.com/2012/01/massa-sablee-junio (...) 172.217.21.129
2018-04-24 06:30:36 +0200
0 - 0 - 0 safebrowsing.googleapis.com 172.217.20.42
2018-04-24 06:20:51 +0200
0 - 0 - 0 https://safebrowsing.googleapis.com 172.217.20.42
2018-04-24 05:45:30 +0200
0 - 0 - 0 gamebelsholic.blogspot.co.id/2018/04/gamebels (...) 172.217.20.33
2018-04-24 05:44:04 +0200
0 - 0 - 1 armmrep.blogspot.com.br/2016/01/confira-tabel (...) 172.217.21.129
2018-04-24 05:42:41 +0200
0 - 0 - 0 alt3-mtalk.google.com 64.233.179.188
2018-04-24 05:40:27 +0200
0 - 0 - 1 vina-webs.blogspot.com/ 172.217.21.129
2018-04-24 05:40:08 +0200
0 - 0 - 5 dl8.iq8download.com/dynamic/standard/standard (...) 146.148.34.125
2018-04-24 05:40:07 +0200
0 - 0 - 5 dl8.iq8download.com/dynamic/standard/standard (...) 146.148.34.125

No other reports on domain: dhyiandra.blogspot.com



JavaScript

Executed Scripts (69)


Executed Evals (86)

#1 JavaScript::Eval (size: 75, repeated: 1) - SHA256: 605e31d47d56575d471c78126e2d29733cda721bbfa6b3aa2f0199dcaa5835bf

                                        ((function() {
    var a = 3033288392;
    var b = 1169124267;
    return 420034 + '.' + (a + b)
})())
                                    

#2 JavaScript::Eval (size: 19, repeated: 1) - SHA256: 5421715bbdaf2550e31d10fc28d444310a8fe7147bbddecf0abb490358a1553b

                                        /.*\d:\d\d | \d+$/g
                                    

#3 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 694d04645e0bf03f8d16ee408d276be6c57d18c3aceff3ab4f4eef04745f241f

                                        0,
function(x) {
    K(x, 1);
}
                                    

#4 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 032d9e37aa320f09689e17ffce9332caeb89ceb7edc863af8bc5644be5529a53

                                        0,
function(x) {
    K(x, 2);
}
                                    

#5 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 9ca3dd7e0e39543cfdf97c24cfa8ab36c95e2c0ea2858f4ae0d4b7656d819a37

                                        0,
function(x) {
    K(x, 4);
}
                                    

#6 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 633e5068e5fdf54febb523a67eb602306b1aa5e08807c1a29f858c486213a01a

                                        0,
function(x) {
    t(x, 1);
}
                                    

#7 JavaScript::Eval (size: 31, repeated: 1) - SHA256: a0e04e169e4971ce965219bc0b663696ce4e936158d54cc9fcc7280615f63d01

                                        0,
function(x) {
    t(x, 2);
}
                                    

#8 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 713b9abf6a884a5a51c0162b7dedd8aa8975fbfbf1e4f1e21272fe333e0962f8

                                        0,
function(x) {
    t(x, 4);
}
                                    

#9 JavaScript::Eval (size: 38, repeated: 1) - SHA256: 860d538699a954de9b788e1a776a0610f1c2e1c7d6380dd93879432e93a666e2

                                        0,
function(x) {
    x.J && J(x, 0);
}
                                    

#10 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 7693ee49eea00748ecca87c409a996715fcceb0a7e0fab74d53dd33365a0184a

                                        0,
function(x) {
    x.m(0);
}
                                    

#11 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 7b603adf5a84784f6c829313fe8050335a92d6d96eee105c99d9da45c095a1c8

                                        0,
function(x) {
    x.m(3);
}
                                    

#12 JavaScript::Eval (size: 30, repeated: 1) - SHA256: d373ec7a8005a1c55cf136fbe02236f669a1881d0f2d4e7f67ca35f4c4f9f42e

                                        0,
function(x) {
    x.m(4);
}
                                    

#13 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 1742febf92e48d62f677bcd0db75ed8948ba6ca0be7606935ba0635179ea10c2

                                        0,
function(x) {
    x.m(7);
}
                                    

#14 JavaScript::Eval (size: 187, repeated: 1) - SHA256: 0aa3d91913e4c42668d2cffb83fe87257746e62d46f69260fbcf66efefbc389b

                                        0,
function(x, n) {
    ((n.push(x[0] << 24 | x[1] << 16 | x[2] << 8 | x[3]), n).push(x[4] << 24 | x[5] << 16 | x[6] << 8 | x[7]), n).push(x[8] << 24 | x[9] << 16 | x[10] << 8 | x[11]);
}
                                    

#15 JavaScript::Eval (size: 94, repeated: 1) - SHA256: 117304da6302590b65eec888eaf89796bb4c12c9897401a45981b6efa30011b6

                                        0,
function(x, n) {
    (n = f(x), x = x.R(n), x)[0].removeEventListener(x[1], x[2], false);
}
                                    

#16 JavaScript::Eval (size: 83, repeated: 1) - SHA256: 7d5375ccad246740bd0fbda1817900e16743b5a77ecdfbf002c3056c2ff31890

                                        0,
function(x, n) {
    E(x, 1, 5) || (n = H(x), w(x, n.H, n.D.apply(n.Z, n.V)));
}
                                    

#17 JavaScript::Eval (size: 123, repeated: 1) - SHA256: 589f1167233c68139f01c747e943ba05340914f842786b22a1849f13a58b5902

                                        0,
function(x, n) {
    if (n = this.s[x], void 0 === n) {
        throw V(this, 30, 0, x), this.I;
    }
    return n();
}
                                    

#18 JavaScript::Eval (size: 49, repeated: 1) - SHA256: eaa0d73bfd0adbf74a722bba676e7cf6712d4c3f5aeee2812379b6722b8ee573

                                        0,
function(x, n) {
    n = x.R(f(x)), q(x, n);
}
                                    

#19 JavaScript::Eval (size: 78, repeated: 1) - SHA256: 4daa99f22d9d35ef340bf76af6c3d499d9ad84f4a35cce02c86bd567bc21425a

                                        0,
function(x, n, R) {
    (R = (n = f(x), f)(x), w)(x, R, x.R(R) % x.R(n));
}
                                    

#20 JavaScript::Eval (size: 78, repeated: 1) - SHA256: f58cd63d35d85aa9582c1678eb4f3226987fbc4e31c9bb4253d51dd607dd334e

                                        0,
function(x, n, R) {
    (R = (n = f(x), f)(x), w)(x, R, x.R(R) * x.R(n));
}
                                    

#21 JavaScript::Eval (size: 78, repeated: 1) - SHA256: 1f6423b02ef91e5e888423f40dde89418054b06ac0c59a9579e8bb4c8fa4952e

                                        0,
function(x, n, R) {
    (R = (n = f(x), f)(x), w)(x, R, x.R(R) + x.R(n));
}
                                    

#22 JavaScript::Eval (size: 78, repeated: 1) - SHA256: a35e94600348a14384c4b6a4edbc0016ddaa5b55fdbafdbce47fe2d024410b76

                                        0,
function(x, n, R) {
    (R = (n = f(x), f)(x), w)(x, R, x.R(R) - x.R(n));
}
                                    

#23 JavaScript::Eval (size: 86, repeated: 1) - SHA256: e291a53cf9dc95443047182927a14229a89d227480884d140c44146e2ecd6cc2

                                        0,
function(x, n, R) {
    (n = (n = f(x), R = f(x), x).s[n] && x.R(n), w)(x, R, n);
}
                                    

#24 JavaScript::Eval (size: 85, repeated: 1) - SHA256: 6e42f58f116f53d5f223147686e5bda62aa33050bcc3fa7f4ac0e159b5965536

                                        0,
function(x, n, R) {
    0 != (R = (n = f(x), f(x)), x.R(n)) && w(x, 36, x.R(R));
}
                                    

#25 JavaScript::Eval (size: 121, repeated: 1) - SHA256: 42fbd5f28b314dfb99425f7c9ca3338755bb986dd310d19cdeed277133c0a94f

                                        0,
function(x, n, R) {
    E(x, 1, 5) ||
        (n = f(x), R = f(x), w(x, R, function(x) {
            return eval(x);
        }(x.R(n))));
}
                                    

#26 JavaScript::Eval (size: 72, repeated: 1) - SHA256: d0e3dba5139c920f76010efa9d452b7dff58c7aa2727f93e78e6d043579f74c3

                                        0,
function(x, n, R) {
    R = (n = f(x), f(x)), w(x, R, "" + x.R(n));
}
                                    

#27 JavaScript::Eval (size: 244, repeated: 1) - SHA256: 584d4f7ba49416a337f0e789d9c23f12e4f641127b6d3021b5c347cb699cb887

                                        0,
function(x, n, R) {
    if (3 == x.length) {
        for (R = 0; 3 > R; R++) {
            n[R] += x[R];
        }
        for (x = [13, 8, 13, 12, 16, 5, 3, (R = 0, 10), 15]; 9 > R; R++) {
            n[3](n, R % 3, x[R]);
        }
    }
}
                                    

#28 JavaScript::Eval (size: 79, repeated: 1) - SHA256: a4ef6b1bd3bd39ce1ccc707db8e20c3106bf4757d727aa592653fa79a4a28410

                                        0,
function(x, n, R) {
    n = (R = (n = f(x), f)(x), x.R(n)), w(x, R, z(n));
}
                                    

#29 JavaScript::Eval (size: 133, repeated: 1) - SHA256: 7d55deb518836528a10dd830c704bd7c892bf5c79d36803ff3a7c846d936e333

                                        0,
function(x, n, R) {
    return R = function() {
        return x;
    }, n = function() {
        return R();
    }, n[this.l] = function(n) {
        x = n;
    }, n;
}
                                    

#30 JavaScript::Eval (size: 296, repeated: 1) - SHA256: f1dcfa9aaf4b604944072e52ea74f49007834b2aa0587d2963dd42c12f5e3018

                                        0,
function(x, n, R, S, N, k, p) {
    if ((S = (R = (n = f(x), F(x)), ""), x).s[215]) {
        for (N = x.R(215), p = N.length, k = 0; R--;) {
            k = (k + F(x)) % p, S += c[N[k]];
        }
    } else {
        for (; R--;) {
            S += c[f(x)];
        }
    }
    w(x, n, S);
}
                                    

#31 JavaScript::Eval (size: 89, repeated: 1) - SHA256: a0097d912c4cdc270ce5907bad2e6cab428e96a23d516ae453ef609f534f80d9

                                        0,
function(x, n, R, c) {
    (c = (R = (n = f(x), f(x)), f(x)), w)(x, c, x.R(n) << R);
}
                                    

#32 JavaScript::Eval (size: 89, repeated: 1) - SHA256: c65404fd09bca8366385e3006c8b7ed9f05ff15acc2a3d7474301a4dc4eaaaa1

                                        0,
function(x, n, R, c) {
    (c = (R = (n = f(x), f(x)), f(x)), w)(x, c, x.R(n) >> R);
}
                                    

#33 JavaScript::Eval (size: 106, repeated: 1) - SHA256: 0dc311cdf819835eb2cd7d225b379feb352b5aadb1618e36ba9b2bee36dcaf7f

                                        0,
function(x, n, R, c) {
    (c = (R = (n = f(x), f)(x), f(x)), R = x.R(R), n = x.R(n), w)(x, c, n[R]);
}
                                    

#34 JavaScript::Eval (size: 88, repeated: 1) - SHA256: 5b0b5d23a7f9b71432aec701fa48fb26fa72f752b811c9b72c91118dbe2ec034

                                        0,
function(x, n, R, c) {
    (n = f(x), R = f(x), c = f(x), x).R(n)[x.R(R)] = x.R(c);
}
                                    

#35 JavaScript::Eval (size: 192, repeated: 1) - SHA256: c86aa0fa7933ddad14220d6714c91253c675f4b25534cdf51f55f09154e71a97

                                        0,
function(x, n, R, c) {
    R = (c = (R = (n = x & 4, x &= 3, f)(this), f)(this), this.R(R)), n && (R = m(("" + R).replace(/\r\n/g, "\n"))), x && e(this, c, W(R.length, 2)), e(this, c, R);
}
                                    

#36 JavaScript::Eval (size: 89, repeated: 1) - SHA256: 1328a9fa2a8af0f3a9f37fd50c761702496612f6d353b782c904f8dfeeb4035b

                                        0,
function(x, n, R, c) {
    R = (n = f(x), f(x)), c = f(x), w(x, c, x.R(n) | x.R(R));
}
                                    

#37 JavaScript::Eval (size: 90, repeated: 1) - SHA256: 14b6a0e59f7de92d69d1bc084973fa5c0e4328397c809ed16354c4da45b2df91

                                        0,
function(x, n, R, c) {
    R = (n = f(x), f(x)), c = f(x), w(x, c, x.R(n) || x.R(R));
}
                                    

#38 JavaScript::Eval (size: 98, repeated: 1) - SHA256: 911cb40484470e34bde1c10d2210288faf4a6eebf5801a2079d4e63185a39e82

                                        0,
function(x, n, R, c) {
    c = (R = (n = f(x), f(x)), f(x)), w(x, c, (x.R(n) in x.R(R)) + 0);
}
                                    

#39 JavaScript::Eval (size: 142, repeated: 1) - SHA256: 366055a5301db6297e73a4ae097bb20e4ff41bf2a26219faf63444890dbed03c

                                        0,
function(x, n, R, c) {
    for (; R--;) {
        36 != R && 239 != R && n.s[R] && (n.s[R] = n[c](n[x](R), this));
    }
    n[x] = this;
}
                                    

#40 JavaScript::Eval (size: 240, repeated: 1) - SHA256: 5935d4b30a1ed3eaeed1a373ec687bcf08da65c05ccf42b5c41992a1af801c64

                                        0,
function(x, n, R, c) {
    if ((n = x.A.pop())) {
        for (R = f(x); 0 < R; R--) {
            c = f(x), n[c] = x.s[c];
        }
        n[104] = x.s[104], n[94] = x.s[94], x.s = n;
    } else {
        w(x, 36, x.f.length);
    }
}
                                    

#41 JavaScript::Eval (size: 101, repeated: 1) - SHA256: e1bffe99165e32ce7c20e2be855dbd6a6377763c985c1ccccf40efc892043531

                                        0,
function(x, n, R, c) {
    n = (R = (n = f(x), f)(x), c = f(x), x.R(n) == x.R(R)), w(x, c, +n);
}
                                    

#42 JavaScript::Eval (size: 100, repeated: 1) - SHA256: 40f58666d4e74cce971daf9b45614c88a5904a75562efec5922c2d698cf1bdd7

                                        0,
function(x, n, R, c) {
    n = (R = (n = f(x), f)(x), c = f(x), x.R(n) > x.R(R)), w(x, c, +n);
}
                                    

#43 JavaScript::Eval (size: 170, repeated: 1) - SHA256: 722c6a230e189e8a27ebb5c72ea5263be92f262cfded7d55b8eaeb51e0065d0c

                                        0,
function(x, n, R, c) {
    try {
        c = x[(n + 2) % 3], x[n] = x[n] - x[(n + 1) % 3] - c ^ (1 == n ? c << R : c >>> R);
    } catch (S) {
        throw S;
    }
}
                                    

#44 JavaScript::Eval (size: 128, repeated: 1) - SHA256: 194da0241e9ea19f43d595a6240c2d52140a613d5055fbc57763840caef667f2

                                        0,
function(x, n, R, c, S) {
    R = (S = (c = (R = (n = f(x), f(x)), x).R(f(x)), x).R(f(x)), x.R(R)), w(x, n, M(x, R, c, S));
}
                                    

#45 JavaScript::Eval (size: 215, repeated: 1) - SHA256: 18ce8743a11514a7584d059ef24251aecfcb904550f20a139fa2d9a4de7dbd36

                                        0,
function(x, n, R, c, S) {
    c = (n = (n = f(x), R = f(x), c = f(x), x.R(n)), S = x.R(f(x)), R = x.R(R), x.R(c)), 0 !== n &&
        (c = M(x, c, S, 1, n, R), n.addEventListener(R, c, b), w(x, 90, [n, R, c]));
}
                                    

#46 JavaScript::Eval (size: 238, repeated: 1) - SHA256: 775ec7070ded63a5e4534e28bcc9deac9f38aa9fe4df936bafeb0068280fba32

                                        0,
function(x, n, R, c, S) {
    for (R = (n = [], f(x)), c = 0; c < R; c++) {
        S = f(x), n.push(x.R(S));
    }
    R = f(x), w(x, R, function(x, R) {
        x.K++;
        try {
            for (R = 0; R < n.length; R++) {
                (0, n[R])(x);
            }
        } finally {
            x.K--;
        }
    });
}
                                    

#47 JavaScript::Eval (size: 134, repeated: 1) - SHA256: ce688ec52ac640685c13c4ea2eb52241c1fdd85d476142e8c8a6b24a6d680d15

                                        0,
function(x, n, R, c, S) {
    for (R = (n = f(x), F(x)), S = 0, c = []; S < R; S++) {
        c.push(f(x));
    }
    w(x, n, c);
}
                                    

#48 JavaScript::Eval (size: 397, repeated: 1) - SHA256: 144f8ba09b73f7a12396a68f679bc68abb9ff09c5509d095e365fb82ee8b6746

                                        0,
function(x, n, R, c, S, k) {
    if (!E(x, 1, 255)) {
        if (R = (S = (c = (R = (n = f(x), f)(x), f)(x), f(x)), n = x.R(n), x.R(R)), c = x.R(c), x = x.R(S), "object" == z(n)) {
            for (k in S = [], n) {
                S.push(k);
            }
            n = S;
        }
        for (k = (S = 0, n.length); S < k; S += c) {
            R(n.slice(S, S + c), x);
        }
    }
}
                                    

#49 JavaScript::Eval (size: 216, repeated: 1) - SHA256: 70483dd82ddf31d7da3d3daa9cc8ffb1f173b27ce8cf0615c49e9f076d455ce0

                                        0,
function(x, n, R, c, S, k) {
    return k = (R = (c = (S = function() {
        return c();
    }, function() {
        return c[R.O + (S[R.g] === n) - !k[R.g]];
    }), this), R.a), S[R.l] = function(x) {
        c[R.Y] = x;
    }, S[R.l](x), x = S;
}
                                    

#50 JavaScript::Eval (size: 339, repeated: 1) - SHA256: 699ac4fa59e2bb00c8b97acd3cfaeff5ff0ea88ce3d4e74359c68fec8694b868

                                        0,
function(x, n, R, c, S, k, p) {
    E(x, 1, 5) ||
        (n = H(x), S = n.D, c = n.Z, R = n.V, p = R.length, 0 == p ? (k = new(c[S])) : 1 == p ? (k = new(c[S])(R[0])) : 2 == p ? (k = new(c[S])(R[0], R[1])) : 3 == p ? (k = new(c[S])(R[0], R[1], R[2])) : 4 == p ? (k = new(c[S])(R[0], R[1], R[2], R[3])) : V(x, 22), w(x, n.H, k));
}
                                    

#51 JavaScript::Eval (size: 39, repeated: 1) - SHA256: bb6753823aebc94f3cc0c4b3c3ed5b60753622b1198ec8abd45102911d59e131

                                        0,
function($, _) {
    _._ += !_.$[_[_._] = $[0]]
}
                                    

#52 JavaScript::Eval (size: 1, repeated: 1) - SHA256: df7e70e5021544f4834bbee64a9e3789febc4be81470df629cad6ddb03320a5c

                                        B
                                    

#53 JavaScript::Eval (size: 366, repeated: 1) - SHA256: e3bc7ebdb8b938752ae75b548b9dd746295d60d35f1fa60dfa84e84389630671

                                        B = function(x, n, R, c) {
    try {
        for (c = 0; 79669387488 != c;) {
            x += (n << 4 ^ n >>> 5) + n ^ c + R[c & 3], c += 2489668359, n += (x << 4 ^ x >>> 5) + x ^ c + R[c >>> 11 & 3];
        }
        return [x >>> 24, x >> 16 & 255, x >> 8 & 255, x & 255, n >>> 24, n >> 16 & 255, n >> 8 & 255, n & 255];
    } catch (S) {
        throw S;
    }
}
                                    

#54 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 6b23c0d5f35d1b11f9b683f0b0a617355deb11277d91ae091d399c655b87940d

                                        C
                                    

#55 JavaScript::Eval (size: 88, repeated: 1) - SHA256: 515637809fe2f171c0c18b4662d21bb40d821be1511ffeba1b8eb2bb827f29ca

                                        C = function(x, n) {
    return x[n] << 24 | x[n + 1] << 16 | x[n + 2] << 8 | x[n + 3];
}
                                    

#56 JavaScript::Eval (size: 1, repeated: 1) - SHA256: f67ab10ad4e4c53121b6a5fe4da9c10ddee905b978d3788d2723d7bfacbe28a9

                                        F
                                    

#57 JavaScript::Eval (size: 83, repeated: 1) - SHA256: 24fdb8cdaf1ceed5fecbee127dcc1f7d0d827a5ef4af0961c233157239e60fc5

                                        F = function(x, n) {
    return n = f(x), n & 128 && (n = n & 127 | f(x) << 7), n;
}
                                    

#58 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 333e0a1e27815d0ceee55c473fe3dc93d56c63e3bee2b3b4aee8eed6d70191a3

                                        G
                                    

#59 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 44bd7ae60f478fae1061e11a7739f4b94d1daf917982d33b6fc8a01a63f89c21

                                        H
                                    

#60 JavaScript::Eval (size: 260, repeated: 1) - SHA256: 818a86df8e2c8271937ae826a56dad413f5866af5d7daef70ac3961a21de0e0a

                                        H = function(x, n, R, c, S, A) {
    for (A = (S = ((R = (n = {}, f(x)), n).H = f(x), n.V = [], c = f(x) - 1, f)(x), 0); A < c; A++) {
        n.V.push(f(x));
    }
    for (n.D = x.R(R), n.Z = x.R(S); c--;) {
        n.V[c] = x.R(n.V[c]);
    }
    return n;
}
                                    

#61 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 86be9a55762d316a3026c2836d044f5fc76e34da10e1b45feee5f18be7edb177

                                        K
                                    

#62 JavaScript::Eval (size: 118, repeated: 1) - SHA256: 400af398790f722d634d6f846ffbbe90d454ac455a20b1e8017eabea1cf4a220

                                        K = function(x, n, R, c) {
    for (c = (R = f(x), 0); 0 < n; n--) {
        c = c << 8 | f(x);
    }
    w(x, R, c);
}
                                    

#63 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 08f271887ce94707da822d5263bae19d5519cb3614e0daedc4c7ce5dab7473f1

                                        M
                                    

#64 JavaScript::Eval (size: 272, repeated: 1) - SHA256: ad7e3aa2aa31529a83a90544656132c955733ff0c849ba02f2c084b0407d1cab

                                        M = function(x, n, R, c, S, A) {
    return function() {
        var P = c & 1,
            Y = [6, n, R, void 0, S, A, arguments];
        if (c & 2) {
            var D = (O(x, Y), g)(x, true, false, false);
        } else {
            P && x.T.length ? O(x, Y) : P ? (O(x, Y), g(x, true, false, false)) : (D = I(x, Y));
        }
        return D;
    };
}
                                    

#65 JavaScript::Eval (size: 1, repeated: 1) - SHA256: e632b7095b0bf32c260fa4c539e9fd7b852d0de454e9be26f24d0d6f91d069d3

                                        T
                                    

#66 JavaScript::Eval (size: 596, repeated: 1) - SHA256: 2f6c0c7a3bb5a0a249c741e65a1d7a341565eae2f34460a5253e09bde6661bf9

                                        T = function(x, n, R, c, S, A, P) {
    x.K++;
    try {
        for (S = (c = 5001, void 0), A = 0, R = x.f.length;
            (--c || x.L) && (A = x.R(36)) < R;) {
            try {
                w(x, 239, A), P = f(x), (S = x.R(P)) && S.call ? S(x) : V(x, 21, 0, P), x.F = true, E(x, 0, 2);
            } catch (Y) {
                Y != x.I && (x.R(227) ? V(x, 22, Y) : w(x, 227, Y));
            }
        }
        c || V(x, 33);
    } catch (Y) {
        try {
            V(x, 22, Y);
        } catch (D) {
            Q(x, D);
        }
    }
    return R = x.R(161), n && w(x, 36, n), x.K--, R;
}
                                    

#67 JavaScript::Eval (size: 1, repeated: 1) - SHA256: de5a6f78116eca62d7fc5ce159d23ae6b889b365a1739ad2cf36f925a140d0cc

                                        V
                                    

#68 JavaScript::Eval (size: 421, repeated: 1) - SHA256: 827f029c6d94af2c0d976ffcd0dd126d25a2af5cf1c96f658821b54306c367fb

                                        V = function(x, n, R, c, S) {
    ((R = (n = [(S = x.R(239), n), S >> 8 & 255, S & 255], void 0 != c && n.push(c), 0 == x.R(104).length && (x.s[104] = void 0, w(x, 104, n)), c = "", R &&
            (R.message && (c += R.message), R.stack && (c += ":" + R.stack)), x).R(94), 3 < R) &&
        (c = c.slice(0, R - 3), R -= c.length + 3, c = m(c.replace(/\r\n/g, "\n")), e(x, 145, W(c.length, 2).concat(c), 12)), w)(x, 94, R);
}
                                    

#69 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 4b68ab3847feda7d6c62c1fbcbeebfa35eab7351ed5e78f4ddadea5df64b8015

                                        X
                                    

#70 JavaScript::Eval (size: 132, repeated: 1) - SHA256: 7c5c6a8c908dac72a9f3b6389796b3d6de39d36d93471fc02d2008bcbc810565

                                        X = function(x, n, R) {
    return ((R = x.R(36), x.f && R < x.f.length) ? (w(x, 36, x.f.length), q(x, n)) : w(x, 36, n), T)(x, R);
}
                                    

#71 JavaScript::Eval (size: 5949, repeated: 1) - SHA256: 2d1edae737643ec949c3971eb604ff4e6125740009c236ab80f520c71c2fb02e

                                        ["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\u003d"]
                                    

#72 JavaScript::Eval (size: 2, repeated: 14) - SHA256: 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                        []
                                    

#73 JavaScript::Eval (size: 35, repeated: 1) - SHA256: 1e3606d95ce27d593157594820335681a9380f51a96147303cd8000e60a95e12

                                        document.createElement('div').style
                                    

#74 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 3f79bb7b435b05321651daefd374cdc681dc06faa65e374e38337b88ca046dea

                                        e
                                    

#75 JavaScript::Eval (size: 413, repeated: 1) - SHA256: 910e8329e71668fe3081e03f8e79338796594da3fd105f4b834f0a3ac7b3fb61

                                        e = function(x, n, R, c, S, A) {
    for (x = (((S = x.R(n), 145 == n) ? (n = function(x, n, R, c) {
                if (S.i != (n = S.length, R = n - 4 >> 3, R)) {
                    R = ((c = [(S.i = R, 0), 0, 0, A], R) << 3) - 4;
                    try {
                        S.h = B(C(S, R), C(S, R + 4), c);
                    } catch (k) {
                        throw k;
                    }
                }
                S.push(S.h[n & 7] ^ x);
            }, A = x.R(150)) : (n = function(x) {
                S.push(x);
            }), c) &&
            n(c & 255), c = 0, R).length; c < x; c++) {
        n(R[c]);
    }
}
                                    

#76 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 252f10c83610ebca1a059c0bae8255eba2f95be4d1d7bcfa89d7248a82d9f111

                                        f
                                    

#77 JavaScript::Eval (size: 292, repeated: 1) - SHA256: 73a662b7b5cefb41b9d17e09dd83d23edd7bfee9a8b8d51959f430b5f9622cd9

                                        f = function(x, n, R) {
    if (n = x.R(36), !(n in x.f)) {
        throw V(x, 31), x.I;
    }
    return (((void 0 == x.j && (x.j = C(x.f, n - 4), x.v = void 0), x.v) != n >> 3 &&
        (x.v = n >> 3, R = [0, 0, 0, x.R(165)], x.C = B(x.j, x.v, R)), w)(x, 36, n + 1), x.f[n]) ^ x.C[n % 8];
}
                                    

#78 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 62c66a7a5dd70c3146618063c344e531e6d4b59e379808443ce962b3abd63c5a

                                        m
                                    

#79 JavaScript::Eval (size: 487, repeated: 1) - SHA256: eb6041eea55eb7c2448b94534d6ca054b5362f1120757f67e0589b8371714617

                                        m = function(x, n, R, c, S) {
    for (c = R = (n = [], 0); c < x.length; c++) {
        S = x.charCodeAt(c), 128 > S ? (n[R++] = S) : (2048 > S ? (n[R++] = S >> 6 | 192) : (55296 == (S & 64512) &&
            c + 1 < x.length && 56320 == (x.charCodeAt(c + 1) & 64512) ? (S = 65536 + ((S & 1023) << 10) + (x.charCodeAt(++c) & 1023), n[R++] = S >> 18 | 240, n[R++] = S >> 12 & 63 | 128) : (n[R++] = S >> 12 | 224), n[R++] = S >> 6 & 63 | 128), n[R++] = S & 63 | 128);
    }
    return n;
}
                                    

#80 JavaScript::Eval (size: 9, repeated: 1) - SHA256: ebf49dcd836f810084c14e0f2dab4dc1768bbdc5980481bf201fcf76771dff7a

                                        navigator
                                    

#81 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 8e35c2cd3bf6641bdb0e2050b76932cbb2e6034a0ddacc1d9bea82a6ba57f7cf

                                        q
                                    

#82 JavaScript::Eval (size: 83, repeated: 1) - SHA256: fd1daaa550abb5c32a46f3c3714eec6218a1c64ac4d83274aefe81c96f0e33b7

                                        q = function(x, n) {
    ((x.A.push(x.s.slice()), x.s)[36] = void 0, w)(x, 36, n);
}
                                    

#83 JavaScript::Eval (size: 1, repeated: 1) - SHA256: e3b98a4da31a127d4bde6e43033f66ba274cab0eb7eb1c70ec41402bf6273dd8

                                        t
                                    

#84 JavaScript::Eval (size: 76, repeated: 1) - SHA256: 45f13fd0980ba224413675945d8ecadc9bb90df7fd6ffcc08eabdbc926817be1

                                        t = function(x, n, R, c) {
    (R = f(x), c = f(x), e)(x, c, W(x.R(R), n));
}
                                    

#85 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326

                                        w
                                    

#86 JavaScript::Eval (size: 325, repeated: 1) - SHA256: 1b830736ec67808cada3609e01971d4dc8f5555184dfb3e5352e80c298cd951c

                                        w = function(x, n, R) {
    if (36 == n || 239 == n) {
        if (x.s[n]) {
            x.s[n][x.l](R);
        } else {
            x.s[n] = x.X(R);
        }
    } else if (100 != n && 145 != n && 87 != n && 104 != n || !x.s[n]) {
        x.s[n] = x.w(R, x.R);
    }
    165 == n && (x.j = void 0, w(x, 36, x.R(36) + 4));
}
                                    

Executed Writes (53)

#1 JavaScript::Write (size: 0, repeated: 5) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                    

#2 JavaScript::Write (size: 1, repeated: 6) - SHA256: 36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068

                                        
                                    

#3 JavaScript::Write (size: 1, repeated: 1) - SHA256: 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b

                                        1
                                    

#4 JavaScript::Write (size: 2, repeated: 1) - SHA256: 4a44dc15364204a80fe80e9039455cc1608281820fe2b24f1e5233ade6af1dd5

                                        10
                                    

#5 JavaScript::Write (size: 2, repeated: 1) - SHA256: 4fc82b26aecb47d2868c4efbe3581732a3e7cbcc6c2efb32062c08170a05eeb8

                                        11
                                    

#6 JavaScript::Write (size: 2, repeated: 1) - SHA256: 6b51d431df5d7f141cbececcf79edf3dd861c3b4069f0b11661a3eefacbba918

                                        12
                                    

#7 JavaScript::Write (size: 2, repeated: 1) - SHA256: 3fdba35f04dc8c462986c992bcf875546257113072a909c162f7e470e581e278

                                        13
                                    

#8 JavaScript::Write (size: 2, repeated: 1) - SHA256: 8527a891e224136950ff32ca212b45bc93f69fbb801c3b1ebedac52775f99e61

                                        14
                                    

#9 JavaScript::Write (size: 2, repeated: 1) - SHA256: e629fa6598d732768f7c726b4b621285f9c3b85303900aa912017db7617d8bdb

                                        15
                                    

#10 JavaScript::Write (size: 2, repeated: 1) - SHA256: b17ef6d19c7a5b1ee83b907c595526dcb1eb06db8227d650d5dda0a9f4ce8cd9

                                        16
                                    

#11 JavaScript::Write (size: 2, repeated: 1) - SHA256: 4523540f1504cd17100c4835e85b7eefd49911580f8efff0599a8f283be6b9e3

                                        17
                                    

#12 JavaScript::Write (size: 2, repeated: 1) - SHA256: 4ec9599fc203d176a301536c2e091a19bc852759b255bd6818810a42c5fed14a

                                        18
                                    

#13 JavaScript::Write (size: 2, repeated: 1) - SHA256: 9400f1b21cb527d7fa3d3eabba93557a18ebe7a2ca4e471cfe5e4c5b4ca7f767

                                        19
                                    

#14 JavaScript::Write (size: 1, repeated: 1) - SHA256: d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35

                                        2
                                    

#15 JavaScript::Write (size: 2, repeated: 1) - SHA256: f5ca38f748a1d6eaf726b8a42fb575c3c71f1864a8143301782de13da2d9202b

                                        20
                                    

#16 JavaScript::Write (size: 4, repeated: 1) - SHA256: 46e67c525617663b392a53c0e94ba79e62db62a851fb175ae87756d4e73c9718

                                        2017
                                    

#17 JavaScript::Write (size: 2, repeated: 1) - SHA256: 6f4b6612125fb3a0daecd2799dfd6c9c299424fd920f9b308110a2c1fbd8f443

                                        21
                                    

#18 JavaScript::Write (size: 2, repeated: 1) - SHA256: 785f3ec7eb32f30b90cd0fcf3657d388b5ff4297f2f9716ff66e9b69c05ddd09

                                        22
                                    

#19 JavaScript::Write (size: 2, repeated: 1) - SHA256: 535fa30d7e25dd8a49f1536779734ec8286108d115da5045d77f3b4185d8f790

                                        23
                                    

#20 JavaScript::Write (size: 2, repeated: 1) - SHA256: c2356069e9d1e79ca924378153cfbbfb4d4416b1f99d41a2940bfdb66c5319db

                                        24
                                    

#21 JavaScript::Write (size: 2, repeated: 1) - SHA256: b7a56873cd771f2c446d369b649430b65a756ba278ff97ec81bb6f55b2e73569

                                        25
                                    

#22 JavaScript::Write (size: 2, repeated: 1) - SHA256: 5f9c4ab08cac7457e9111a30e4664920607ea2c115a1433d7be98e97e64244ca

                                        26
                                    

#23 JavaScript::Write (size: 2, repeated: 1) - SHA256: 670671cd97404156226e507973f2ab8330d3022ca96e0c93bdbdb320c41adcaf

                                        27
                                    

#24 JavaScript::Write (size: 2, repeated: 1) - SHA256: 59e19706d51d39f66711c2653cd7eb1291c94d9b55eb14bda74ce4dc636d015a

                                        28
                                    

#25 JavaScript::Write (size: 2, repeated: 1) - SHA256: 35135aaa6cc23891b40cb3f378c53a17a1127210ce60e125ccf03efcfdaec458

                                        29
                                    

#26 JavaScript::Write (size: 1, repeated: 1) - SHA256: 4e07408562bedb8b60ce05c1decfe3ad16b72230967de01f640b7e4729b49fce

                                        3
                                    

#27 JavaScript::Write (size: 2, repeated: 1) - SHA256: 624b60c58c9d8bfb6ff1886c2fd605d2adeb6ea4da576068201b6c6958ce93f4

                                        30
                                    

#28 JavaScript::Write (size: 2, repeated: 1) - SHA256: eb1e33e8a81b697b75855af6bfcdbcbf7cbbde9f94962ceaec1ed8af21f5a50f

                                        31
                                    

#29 JavaScript::Write (size: 1, repeated: 1) - SHA256: 4b227777d4dd1fc61c6f884f48641d02b4d121d3fd328cb08b5531fcacdabf8a

                                        4
                                    

#30 JavaScript::Write (size: 1, repeated: 1) - SHA256: ef2d127de37b942baad06145e54b0c619a1f22327b2ebbcfbec78f5564afe39d

                                        5
                                    

#31 JavaScript::Write (size: 1, repeated: 1) - SHA256: e7f6c011776e8db7cd330b54174fd76f7d0216b612387a5ffcfb81e6f0919683

                                        6
                                    

#32 JavaScript::Write (size: 1, repeated: 1) - SHA256: 7902699be42c8a8e46fbbb4501726517e86b22c56a189f7625a6da49081b2451

                                        7
                                    

#33 JavaScript::Write (size: 1, repeated: 1) - SHA256: 2c624232cdd221771294dfbb310aca000a0df6ac8b66b696d90ef06fdefb64a3

                                        8
                                    

#34 JavaScript::Write (size: 1, repeated: 1) - SHA256: 19581e27de7ced00ff1ce50b2047e7a567c76b1cbaebabe5ef03f7c3017bb5b7

                                        9
                                    

#35 JavaScript::Write (size: 16, repeated: 1) - SHA256: 179d2296541cc6cc3735dcefd744e76c893bdf22e340950093cb8c2a9dba219c

                                        < /strong></font >
                                    

#36 JavaScript::Write (size: 12, repeated: 1) - SHA256: 6383e3ab79831381d64fbfb9d0e0847628265a75c29eaf5d0500f4d2cc5ed940

                                        < /table></p >
                                    

#37 JavaScript::Write (size: 5, repeated: 37) - SHA256: b8073d8a2f01abcc6c6b69a83e3a57c34dc786f638df7da5c76b8e1197d16d13

                                        < /td>
                                    

#38 JavaScript::Write (size: 5, repeated: 7) - SHA256: 3ed7440ce0756928276fbc0d9c75b59a8e152f7121e8edda0730bbebe4b8604d

                                        < /tr>
                                    

#39 JavaScript::Write (size: 29, repeated: 1) - SHA256: f814e6ecd1ae504eb0585542aea300290d42f346b0b88e69189932e31db87e6b

                                        < font color = 'FF0000' > < strong >
                                    

#40 JavaScript::Write (size: 76, repeated: 1) - SHA256: 51f28c42cd4e80a2dd5ec90a946f237ca5209ff28abde66bb40acdd72691a5f1

                                        < table width = '100%'
border = 1 bgcolor = white style = 'border-collapse: collapse'
                                    

#41 JavaScript::Write (size: 23, repeated: 1) - SHA256: 4e45888eabaa6b172986c30d5e15cbc6f4664093e8672647969ec175155fa43a

                                        < td align = center > F < /td>
                                    

#42 JavaScript::Write (size: 23, repeated: 1) - SHA256: 5ebe221bcecc0c83fe9193499d1b1227fd2c9f9a2dbf63886eeef763cf3aabe1

                                        < td align = center > M < /td>
                                    

#43 JavaScript::Write (size: 24, repeated: 1) - SHA256: c69fc2521a6c633f7f64b870a61e0545e04c46ce33af15ee82f034dee2062a12

                                        < td align = center > Sa < /td>
                                    

#44 JavaScript::Write (size: 24, repeated: 1) - SHA256: 572ffa9588101371c163f63de5c876626a3366199c3e7213163b2e54c6e28ba5

                                        < td align = center > Su < /td>
                                    

#45 JavaScript::Write (size: 24, repeated: 1) - SHA256: bc0fb78df272f5806e0a81a754f819b5127bc4988e53bdf930937faadae62fb5

                                        < td align = center > Th < /td>
                                    

#46 JavaScript::Write (size: 24, repeated: 1) - SHA256: 8dcb2c7a26d3530cad633cb3f4cec9db4201b43e8a695410047846e9c735e4ba

                                        < td align = center > Tu < /td>
                                    

#47 JavaScript::Write (size: 23, repeated: 1) - SHA256: 6c8f333a01fb16eced8da341aeb9baa69d985476ff944c7cf84a766ce09e2cb7

                                        < td align = center > W < /td>
                                    

#48 JavaScript::Write (size: 4, repeated: 37) - SHA256: ad76f84d9f135f96caeea833da7e9ecc375198cd0414bb5541fbe08c68295b19

                                        < td >
                                    

#49 JavaScript::Write (size: 10, repeated: 5) - SHA256: 015b82130e0be9737678c19debaae5e584e74233ba46bbf4c0c1915348069537

                                        < td > < /td>
                                    

#50 JavaScript::Write (size: 4, repeated: 8) - SHA256: 9b84c614b473bf1d182e62ccb9eff4250f9977d5da975548052d5ead5c442815

                                        < tr >
                                    

#51 JavaScript::Write (size: 142, repeated: 1) - SHA256: ed2ab9f18b57160909f2831aaf66c7a1f539a6380d353f5dc5e89a15995ef162

                                        < tr > < td colspan = 7 > < center > < strong > < a href = 'http://atat.ro/'
style = 'text-decoration: none' > December 2017 < /a></strong > < /center></font > < /td></tr >
                                    

#52 JavaScript::Write (size: 24, repeated: 1) - SHA256: a3ba8250ebf2c8e28e99b0cbcb48488777fa3f512e83a7a56930803eb5d35e05

                                        < xmp style = display: none >
                                    

#53 JavaScript::Write (size: 36, repeated: 1) - SHA256: 7c1bf0096ea8317bf604a688479a4e21dcdaa699d788a0fb49cd87fc6c7e6b5f

                                        bordercolor = black > < font color = black >
                                    


HTTP Transactions (81)


Request Response
                                        
                                            GET /2013/12/registry-fix-untuk-fifa-14.html HTTP/1.1 
Host: dhyiandra.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.217.22.161
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
Location: http://dhyiandra.blogspot.no/2013/12/registry-fix-untuk-fifa-14.html
Content-Encoding: gzip
Date: Fri, 01 Dec 2017 10:35:22 GMT
Expires: Fri, 01 Dec 2017 10:35:22 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 207
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   207
Md5:    516979794b61b9bc82108644a5a3e3c7
Sha1:   bf6932fa12a75d7af01174b2ddcc7a70f3fa9e61
Sha256: 20cd1adce3a962e3ed74f422a70630a4925bb7da041425156f193a4a21eada24
                                        
                                            GET /2013/12/registry-fix-untuk-fifa-14.html HTTP/1.1 
Host: dhyiandra.blogspot.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Expires: Fri, 01 Dec 2017 10:35:23 GMT
Date: Fri, 01 Dec 2017 10:35:23 GMT
Cache-Control: private, max-age=0
Last-Modified: Wed, 13 Sep 2017 10:16:00 GMT
Etag: W/"66addc6f833685db5c6bdc7368fa992892bc8fedb9e56d67f7ccfc33ac9a5383"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 13438
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   13438
Md5:    adaccab8a8a83af8278e5d05d4aed96f
Sha1:   c1ab4c0db797aaedf94a7ad08fd5d9bf524bedbf
Sha256: 860bea61cac453aab26eccc6c55117496d5f1c97cf905654c658c2b8d50a1f19
                                        
                                            GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1 
Host: translate.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dhyiandra.blogspot.no/2013/12/registry-fix-untuk-fifa-14.html

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Date: Fri, 01 Dec 2017 10:35:23 GMT
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Content-Language: en
Pragma: no-cache
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: HTTP server (unknown)
Content-Length: 769
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   769
Md5:    98b2b32cdf2d4ae87ba61683656b6a0e
Sha1:   6405b38f706d19f4090eda29364d4d96a2072e1c
Sha256: 3f9a71258fcb31cbae7ce06f3c48cb165d8b116f43f59da82726059f1d039146
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 01 Dec 2017 10:35:23 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    a1df81a7e603355cd123153b9231b654
Sha1:   cdf8d1b3b7ef6db29d70caf4326f69bbe98990ff
Sha256: 051ffe56b52a2a6508b3af99d33f7dceeb8ae178583f17cdf2f56d0dcd60daa3
                                        
                                            GET /-GtZcaAHsL78/UnIghteM9mI/AAAAAAAACug/qb0-hfDNJNM/s400/registry-fix.jpg HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dhyiandra.blogspot.no/2013/12/registry-fix-untuk-fifa-14.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "vae9"
Expires: Sat, 02 Dec 2017 10:35:23 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="registry-fix.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 01 Dec 2017 10:35:23 GMT
Server: fife
Content-Length: 35978
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   35978
Md5:    ea622f8d4b877bc3d1ef626478d8b919
Sha1:   8b01bcd156537c147e8865792e77d07b50e3dd2c
Sha256: a14f0b8af4a44c32dcb6ee4fabd0b6593311c5100d6ac136c0d2ed052885ce1f
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 01 Dec 2017 10:35:23 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    6bf50ec404fb4a8b4a94be8390d11938
Sha1:   0caaab7704d6221abc5e0342909a4928cee50b1c
Sha256: 63b592179b1e9a528344ce1d430b9479fc55f43420a468ec35aaeaa9dff911cf
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: dhyiandra.blogspot.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/x-icon; charset=UTF-8
                                        
Expires: Fri, 01 Dec 2017 10:35:23 GMT
Date: Fri, 01 Dec 2017 10:35:23 GMT
Cache-Control: private, max-age=86400
Last-Modified: Wed, 13 Sep 2017 10:16:00 GMT
Etag: W/"66addc6f833685db5c6bdc7368fa992892bc8fedb9e56d67f7ccfc33ac9a5383"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 412
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   412
Md5:    23e5eb1119a7f4d2ab629ccd77a5f84b
Sha1:   f7a5a792e41005ba918551e4416c4bf639ec80ec
Sha256: a0c8d4831f453c316840a502432719f7f7d833bea4a9b59f548e4a1bc2bf0c8a
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 01 Dec 2017 10:35:23 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    97bd94a01922e0e402d6536434af95bb
Sha1:   b87f0b8cdce5966da6af84cb9c0964cdf71338fd
Sha256: 4d7b4641021614ee28aac8eccc98d97d740749b4f490170330cd181a4442b7c4
                                        
                                            GET /static/v1/widgets/3213516723-css_bundle_v2.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dhyiandra.blogspot.no/2013/12/registry-fix-untuk-fifa-14.html

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 9140
Date: Thu, 16 Nov 2017 19:42:57 GMT
Expires: Fri, 16 Nov 2018 19:42:57 GMT
Last-Modified: Thu, 16 Nov 2017 09:51:04 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1263146
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   9140
Md5:    1bf88096130547066d138d29c11830da
Sha1:   9764bd4b0a22b32b6399662928151abb67579862
Sha256: 41bb63ee72939adc57a1e04f2ba14467bd67ed87ed7176fd01d9acdeaccc79d0
                                        
                                            GET /img/icon18_edit_allbkg.gif HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dhyiandra.blogspot.no/2013/12/registry-fix-untuk-fifa-14.html

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 162
Date: Thu, 30 Nov 2017 20:26:44 GMT
Expires: Thu, 07 Dec 2017 20:26:44 GMT
Last-Modified: Thu, 30 Nov 2017 18:49:43 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 50919
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 18 x 18
Size:   162
Md5:    c991641178ff05adf0d004298b5eafa9
Sha1:   d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
Sha256: ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
                                        
                                            GET /static/v1/jsbin/1930376684-comment_from_post_iframe.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dhyiandra.blogspot.no/2013/12/registry-fix-untuk-fifa-14.html

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4408
Date: Fri, 17 Nov 2017 02:26:37 GMT
Expires: Sat, 17 Nov 2018 02:26:37 GMT
Last-Modified: Fri, 17 Nov 2017 00:59:39 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1238926
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4408
Md5:    51c14805118fe950fd6aa861ef4813fb
Sha1:   d5d4b010d0a2920a4c115f656d800c30d7fa54b8
Sha256: 93262de70a34fb45095a255d5f8b2d118c224324da33bd151bc95cfeaea38358
                                        
                                            GET /img/icon18_wrench_allbkg.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dhyiandra.blogspot.no/2013/12/registry-fix-untuk-fifa-14.html

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 475
Date: Thu, 30 Nov 2017 19:52:22 GMT
Expires: Thu, 07 Dec 2017 19:52:22 GMT
Last-Modified: Thu, 30 Nov 2017 16:32:35 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 52981
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 18 x 18, 8-bit colormap, non-interlaced
Size:   475
Md5:    f617effe6d96c15acfea8b2e8aae551f
Sha1:   6d676af11ad2e84b620cce4d5992b657cb2d8ab6
Sha256: d172d750493be64a7ed84dec1dd2a0d787ba42f78bc694b0858f152c52b6620b
                                        
                                            GET /js/plusone.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dhyiandra.blogspot.no/2013/12/registry-fix-untuk-fifa-14.html

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Timing-Allow-Origin: *
Etag: "ff49338d3d5faece783ef000b8be8490"
Expires: Fri, 01 Dec 2017 10:35:23 GMT
Date: Fri, 01 Dec 2017 10:35:23 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Set-Cookie: NID=118=kwFjgkahcRXuLHssssTo02wuygZkIj3Ht-ga60VHnPGn2bMdwdImel99P0GY77S7IM6vERtNaZO9nLTrvySFKuUcARl2qvNPjn3Dt-hr4JXfsriNIYtmWsuNcxZGNreL;Domain=.google.com;Path=/;Expires=Sat, 02-Jun-2018 10:35:23 GMT;HttpOnly
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   16874
Md5:    98b5e32f1f34570c6d0d7059289ea973
Sha1:   08559ddaaf82c2d082822252cc2ef9967d629e5b
Sha256: 3a738f77c37a469229eddb86dc23f8a7344c06d237bed85aad273716a43c46c8
                                        
                                            GET /dyn-css/authorization.css?targetBlogID=5190493164327322817&zx=0025a77b-7db7-4440-93d4-5978b62fc8fd HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dhyiandra.blogspot.no/2013/12/registry-fix-untuk-fifa-14.html

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/css; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: private, max-age=1800
Pragma: no-cache
Expires: Fri, 01 Dec 2017 10:35:23 GMT
Date: Fri, 01 Dec 2017 10:35:23 GMT
Last-Modified: Fri, 01 Dec 2017 10:35:23 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   21
Md5:    b9afc501fc43fbea335a2dc5d43263a1
Sha1:   7290a2dd6afbf39ecfc35b52dfb32a38fc222994
Sha256: d6e425ca7840c0ab6f26f5fc2822a47e26b4a8bbd104468a9c185bc132b8662f
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.44L0sd7fgqc.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMu3f06Q03X6JhLePjeseevEl8LCw/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dhyiandra.blogspot.no/2013/12/registry-fix-untuk-fifa-14.html
Cookie: NID=118=kwFjgkahcRXuLHssssTo02wuygZkIj3Ht-ga60VHnPGn2bMdwdImel99P0GY77S7IM6vERtNaZO9nLTrvySFKuUcARl2qvNPjn3Dt-hr4JXfsriNIYtmWsuNcxZGNreL

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 46614
Date: Thu, 30 Nov 2017 23:54:51 GMT
Expires: Fri, 30 Nov 2018 23:54:51 GMT
Last-Modified: Thu, 30 Nov 2017 01:59:47 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 38433
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   46614
Md5:    eb4e870d33f503c9ba8f201fbe381214
Sha1:   9a1754944576b0ac2e1cad422460f135ffe71324
Sha256: f1d61e823c42d00736db7794ed237a84ac2aac3a3f19ae18a654f956ecbb0603
                                        
                                            GET /pagead/js/google_top_exp.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dhyiandra.blogspot.no/2013/12/registry-fix-untuk-fifa-14.html

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Wed, 29 Nov 2017 04:01:58 GMT
Expires: Wed, 13 Dec 2017 04:01:58 GMT
Etag: 13036835877489095579
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 1; mode=block
Age: 196406
Cache-Control: public, max-age=1209600


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   67
Md5:    9bbc3ca32ec951a484589ce0e6b4db73
Sha1:   753d6f6183b33b2dee5dde2208fca91c17f5bb13
Sha256: b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
                                        
                                            GET /img/share_buttons_20_3.png HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/static/v1/widgets/3213516723-css_bundle_v2.css

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 5080
Date: Thu, 30 Nov 2017 20:23:27 GMT
Expires: Thu, 07 Dec 2017 20:23:27 GMT
Last-Modified: Thu, 30 Nov 2017 16:32:35 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 51117
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 120 x 60, 8-bit/color RGBA, non-interlaced
Size:   5080
Md5:    ad9999106d5f550920b586e8e1704e5a
Sha1:   93fd02c51166402a41f96509cd0ca3fb917877dd
Sha256: 3829a5b2ade7cfc416c80b8f3df71e49e68672875f025d525223978f5cee3fd3
                                        
                                            GET /s/mountainsofchristmas/v10/PymufKtHszoLrY0uiAYKNNMJQ1kXdW7gxNBCG4zxl74_BNIuymZ_hD58qNx2bu5M.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dhyiandra.blogspot.no/2013/12/registry-fix-untuk-fifa-14.html
Origin: http://dhyiandra.blogspot.no

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 66012
Date: Thu, 16 Nov 2017 20:15:21 GMT
Expires: Fri, 16 Nov 2018 20:15:21 GMT
Last-Modified: Tue, 10 Oct 2017 20:51:17 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1261203


--- Additional Info ---
Magic:  data
Size:   66012
Md5:    674e8d67540e479e558671a1a0672b82
Sha1:   bc79e560948354206b4a73a8611b336a3276ec22
Sha256: 9d1f625ade1ac1f1b6d9b7e44c752f42089e483a73b4224ae418c4260c5edb21
                                        
                                            GET /html/buttons/blogger-simple-white.gif HTTP/1.1 
Host: img2.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dhyiandra.blogspot.no/2013/12/registry-fix-untuk-fifa-14.html

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 692
Date: Thu, 30 Nov 2017 20:19:28 GMT
Expires: Thu, 07 Dec 2017 20:19:28 GMT
Last-Modified: Thu, 30 Nov 2017 18:49:43 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 51356


--- Additional Info ---
Magic:  GIF image data, version 89a, 88 x 30
Size:   692
Md5:    0e702b249fa4e9f3d1b5104fbc49a756
Sha1:   984efa34dd954e286769af8826c2e5920d91985a
Sha256: 9db517fb026d425e77ba29808d69c2ef986829dc7fe293de66c81e3737c41e7d
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.44L0sd7fgqc.O/m=gapi_iframes,gapi_iframes_style_bubble/exm=plusone/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMu3f06Q03X6JhLePjeseevEl8LCw/cb=gapi.loaded_1 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dhyiandra.blogspot.no/2013/12/registry-fix-untuk-fifa-14.html
Cookie: NID=118=kwFjgkahcRXuLHssssTo02wuygZkIj3Ht-ga60VHnPGn2bMdwdImel99P0GY77S7IM6vERtNaZO9nLTrvySFKuUcARl2qvNPjn3Dt-hr4JXfsriNIYtmWsuNcxZGNreL

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 16431
Date: Fri, 01 Dec 2017 00:01:39 GMT
Expires: Sat, 01 Dec 2018 00:01:39 GMT
Last-Modified: Thu, 30 Nov 2017 01:59:47 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 38025
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   16431
Md5:    30f706397131a3fed0adc8cafd83f56d
Sha1:   269c594ff683af8c4b90c599fba34fcc35c67124
Sha256: 047d33e6a09fb38c2977de780a5d8158114a83089f14542ba2ab015a07f58f94
                                        
                                            GET /static/v1/widgets/3577707566-widgets.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dhyiandra.blogspot.no/2013/12/registry-fix-untuk-fifa-14.html

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 45872
Date: Thu, 23 Nov 2017 02:04:52 GMT
Expires: Fri, 23 Nov 2018 02:04:52 GMT
Last-Modified: Thu, 23 Nov 2017 00:04:15 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 721832
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   45872
Md5:    56f524d504d88bd8450cc02363a3f197
Sha1:   527a03804652458f43f0e70fb7fd78d1086405a4
Sha256: 428d50394f942fb350337872aba8b27e0c82f04c84599e5ae224e1518b444a75
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=118=kwFjgkahcRXuLHssssTo02wuygZkIj3Ht-ga60VHnPGn2bMdwdImel99P0GY77S7IM6vERtNaZO9nLTrvySFKuUcARl2qvNPjn3Dt-hr4JXfsriNIYtmWsuNcxZGNreL

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 01 Dec 2017 10:35:24 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    71003e55a643e7c126434824ce38d470
Sha1:   a9cefc7ea247103ef758b3e60d2799be8372cd4d
Sha256: 5e66b3493531a756b44af0e90f7966e80eaf9f360014516e4059d3e4aa57ce2f
                                        
                                            POST / HTTP/1.1 
Host: g.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1390
Content-Transfer-Encoding: binary
Cache-Control: max-age=305454, public, no-transform, must-revalidate
Last-Modified: Mon, 27 Nov 2017 23:23:24 GMT
Expires: Mon, 4 Dec 2017 23:23:24 GMT
Date: Fri, 01 Dec 2017 10:35:24 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1390
Md5:    7737d4262461890127770c12fd0c6110
Sha1:   9d26b26c72e7be81263075fefc06160096c0c5f7
Sha256: 078c3d323b3b64d0aa265e14329d3d1948a3fa0fdb47e29f6f4b6eac4e2c13d9
                                        
                                            GET /img/widgets/icon_wikipedia_w.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dhyiandra.blogspot.no/2013/12/registry-fix-untuk-fifa-14.html

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 410
Date: Thu, 30 Nov 2017 20:16:16 GMT
Expires: Thu, 07 Dec 2017 20:16:16 GMT
Last-Modified: Thu, 30 Nov 2017 18:49:43 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 51548
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 43 x 28, 8-bit colormap, non-interlaced
Size:   410
Md5:    6d98867f58398a6017b729f147d7713d
Sha1:   6b51125eb6a5b8254a3465474322a768a53acfef
Sha256: 21f335cf5dc6e2a74037fef424c8686d125d6cd01e196b8a4db759de0cc29d26
                                        
                                            GET /comment-iframe.g?blogID=5190493164327322817&postID=4714137756373164634&blogspotRpcToken=8121640 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dhyiandra.blogspot.no/2013/12/registry-fix-untuk-fifa-14.html

                                         
                                         172.217.22.169
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Location: https://accounts.google.com/ServiceLogin?continue=https://www.blogger.com/comment-iframe.g?blogID%3D5190493164327322817%26postID%3D4714137756373164634%26blogspotRpcToken%3D8121640%26bpli%3D1&followup=https://www.blogger.com/comment-iframe.g?blogID%3D5190493164327322817%26postID%3D4714137756373164634%26blogspotRpcToken%3D8121640%26bpli%3D1&passive=true&go=true
Content-Encoding: gzip
Date: Fri, 01 Dec 2017 10:35:24 GMT
Expires: Fri, 01 Dec 2017 10:35:24 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   318
Md5:    69d27d0421c41f99935631e93b513996
Sha1:   4a65ae4b3248261e831ee710d3db957e0e3f3352
Sha256: 967eb81cc06401414c3b295371632632a63702c436ae6cac419dccd8b9537a4a
                                        
                                            GET /translate_static/js/element/main.js HTTP/1.1 
Host: translate.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dhyiandra.blogspot.no/2013/12/registry-fix-untuk-fifa-14.html

                                         
                                         172.217.22.170
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1512
Date: Fri, 01 Dec 2017 10:02:07 GMT
Expires: Fri, 01 Dec 2017 11:02:07 GMT
Last-Modified: Thu, 14 Sep 2017 18:15:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=3600
Age: 1997
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   1512
Md5:    f0face2803929896766489beb403daed
Sha1:   6670aacb37bac6bb335ce13cb4d8f427f567e222
Sha256: 4702156d6e0ba94a770ce765d30be717a51be393b2f34fcdb9ac237e091adbe1
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=118=kwFjgkahcRXuLHssssTo02wuygZkIj3Ht-ga60VHnPGn2bMdwdImel99P0GY77S7IM6vERtNaZO9nLTrvySFKuUcARl2qvNPjn3Dt-hr4JXfsriNIYtmWsuNcxZGNreL

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 01 Dec 2017 10:35:24 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    29c5df29d77ab5dd447b37eff7de02a2
Sha1:   c0d249b64171de2019cd7e85a9f8f4ba9ac42487
Sha256: faf910743ce6db7781d2b7727c40e2ea9c8645a67f6834b7d04dc9f4fb0a539f
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.44L0sd7fgqc.O/m=profile/exm=gapi_iframes,gapi_iframes_style_bubble,plusone/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMu3f06Q03X6JhLePjeseevEl8LCw/cb=gapi.loaded_2 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dhyiandra.blogspot.no/2013/12/registry-fix-untuk-fifa-14.html
Cookie: NID=118=kwFjgkahcRXuLHssssTo02wuygZkIj3Ht-ga60VHnPGn2bMdwdImel99P0GY77S7IM6vERtNaZO9nLTrvySFKuUcARl2qvNPjn3Dt-hr4JXfsriNIYtmWsuNcxZGNreL

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8112
Date: Fri, 01 Dec 2017 00:06:36 GMT
Expires: Sat, 01 Dec 2018 00:06:36 GMT
Last-Modified: Thu, 30 Nov 2017 01:59:47 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 37728
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   8112
Md5:    f0fb55c95a380041bd42815259ac8fcb
Sha1:   511e7994f0d788e07e3ea363a718fdc27dd4a7e3
Sha256: b518c9d65f0850884a3d1c69a0b8660f39fe95f35fa5914e176309a9c4e6b14c
                                        
                                            GET /translate_static/css/translateelement.css HTTP/1.1 
Host: translate.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dhyiandra.blogspot.no/2013/12/registry-fix-untuk-fifa-14.html

                                         
                                         172.217.22.170
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3619
Date: Fri, 01 Dec 2017 10:17:50 GMT
Expires: Fri, 01 Dec 2017 11:17:50 GMT
Last-Modified: Tue, 03 Jan 2017 23:15:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=3600
Age: 1054
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   3619
Md5:    026feece41808720d7daf983e1aeecad
Sha1:   277a95ad77e6bd2a3be17ea406628fa24c771379
Sha256: 07805211e21a7433cc8c05f820a0f86aca292d9139828a97196540ec60ccfdad
                                        
                                            GET /element/TE_20170911_00/e/js/element/element_main.js HTTP/1.1 
Host: translate.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dhyiandra.blogspot.no/2013/12/registry-fix-untuk-fifa-14.html

                                         
                                         172.217.22.170
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Length: 87012
Date: Thu, 16 Nov 2017 20:26:01 GMT
Expires: Fri, 16 Nov 2018 20:26:01 GMT
Last-Modified: Mon, 11 Sep 2017 09:50:21 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1260563
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   87012
Md5:    cbb78a2bb94e17d53ca2e6bf22af703d
Sha1:   f5e1c8525c0ee3451c1b198231c546a40656ab4e
Sha256: 815ef68dd0a3233c6a7a3522d2c62b05a2aaba850c7aac1f056dfa952ab707ff
                                        
                                            GET /ServiceLogin?continue=https://www.blogger.com/comment-iframe.g?blogID%3D5190493164327322817%26postID%3D4714137756373164634%26blogspotRpcToken%3D8121640%26bpli%3D1&followup=https://www.blogger.com/comment-iframe.g?blogID%3D5190493164327322817%26postID%3D4714137756373164634%26blogspotRpcToken%3D8121640%26bpli%3D1&passive=true&go=true HTTP/1.1 
Host: accounts.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dhyiandra.blogspot.no/2013/12/registry-fix-untuk-fifa-14.html
Cookie: NID=118=kwFjgkahcRXuLHssssTo02wuygZkIj3Ht-ga60VHnPGn2bMdwdImel99P0GY77S7IM6vERtNaZO9nLTrvySFKuUcARl2qvNPjn3Dt-hr4JXfsriNIYtmWsuNcxZGNreL

                                         
                                         172.217.22.173
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
X-Frame-Options: DENY
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 01 Dec 2017 10:35:24 GMT
Location: https://www.blogger.com/comment-iframe.g?blogID=5190493164327322817&postID=4714137756373164634&blogspotRpcToken=8121640&bpli=1
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Security-Policy-Report-Only: script-src 'unsafe-inline' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Set-Cookie: GAPS=1:QRUMZRPoa0InwHAXJ1Ni1G6Pyvy-Kg:Kpdo3RKpw8gWt_ks;Path=/;Expires=Sun, 01-Dec-2019 10:35:24 GMT;Secure;HttpOnly;Priority=HIGH
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   256
Md5:    39dfa47bfda9852abdb58ebde2c002bc
Sha1:   0ef4875ae9c5958e5367cb799cd64076b3674931
Sha256: 422c10a0c587ed4170afa2685520a57b256e770bdbc325a785c19fff114e6a66
                                        
                                            GET /navbar.g?targetBlogID=5190493164327322817&blogName=ANDRA+SOFTWARE&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=TAN&layoutType=LAYOUTS&searchRoot=http://dhyiandra.blogspot.com/search&blogLocale=in&v=2&homepageUrl=http://dhyiandra.blogspot.com/&targetPostID=4714137756373164634&blogPostOrPageUrl=http://dhyiandra.blogspot.com/2013/12/registry-fix-untuk-fifa-14.html&vt=-6464615247625932353&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.44L0sd7fgqc.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMu3f06Q03X6JhLePjeseevEl8LCw HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dhyiandra.blogspot.no/2013/12/registry-fix-untuk-fifa-14.html

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 01 Dec 2017 10:35:24 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   2804
Md5:    38b7787b6a9723a3180ff1d2bafb8ab5
Sha1:   e182ae435575ef32d4cb6db1b3bce8d73c317f4b
Sha256: e3dc881b5efba25f8177a51dc002a70893e63a35e4d7f6451fec57db33295760
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.44L0sd7fgqc.O/m=gapi_iframes_style_slide_menu/exm=auth,gapi_iframes,gapi_iframes_style_bubble,plusone,profile/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMu3f06Q03X6JhLePjeseevEl8LCw/cb=gapi.loaded_4 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dhyiandra.blogspot.no/2013/12/registry-fix-untuk-fifa-14.html
Cookie: NID=118=kwFjgkahcRXuLHssssTo02wuygZkIj3Ht-ga60VHnPGn2bMdwdImel99P0GY77S7IM6vERtNaZO9nLTrvySFKuUcARl2qvNPjn3Dt-hr4JXfsriNIYtmWsuNcxZGNreL

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2796
Date: Fri, 01 Dec 2017 00:06:37 GMT
Expires: Sat, 01 Dec 2018 00:06:37 GMT
Last-Modified: Thu, 30 Nov 2017 01:59:47 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 37728
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   2796
Md5:    a0cb0280a2d32fb0dfb1f6aa54fc4506
Sha1:   7f639f15db9d088a82b7903a474ba7fd88986823
Sha256: 2f4c40a0a8410f3ed654b849712db8ac821cb6c0a7e48c830ad0600f5e144609
                                        
                                            GET /gadgets/ifr?url=http://hosting.gmodules.com/ig/gadgets/file/111311123200664007084/calendar.xml&container=blogger&view=default&lang=in&country=ALL&sanitize=0&v=552f95ab62fcc7c4&libs=core&parent=dhyiandra.blogspot.no/&mid=1 HTTP/1.1 
Host: www-blogger-opensocial.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dhyiandra.blogspot.no/2013/12/registry-fix-untuk-fifa-14.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: CP="CAO PSA OUR"
Expires: Sat, 01 Dec 2018 10:35:25 GMT
Cache-Control: private,max-age=31536000
Content-Encoding: gzip
Date: Fri, 01 Dec 2017 10:35:25 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 3789
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   3789
Md5:    3095daa78d83f4e059ebadb0e77da23a
Sha1:   f5243d506f6aa7fdabd1f131b0909d8f789d6739
Sha256: 13405a2709f0e4b4c6fcb009f6a537a1213c1adb483ed84c70d5c1fd93a22aaa
                                        
                                            GET /se/0/_/+1/fastbutton?usegapi=1&annotation=inline&width=300&size=medium&source=blogger%3Ablog%3Aplusone&hl=id&origin=http%3A%2F%2Fdhyiandra.blogspot.no&url=http%3A%2F%2Fdhyiandra.blogspot.com%2F2013%2F12%2Fregistry-fix-untuk-fifa-14.html&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.44L0sd7fgqc.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMu3f06Q03X6JhLePjeseevEl8LCw HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dhyiandra.blogspot.no/2013/12/registry-fix-untuk-fifa-14.html
Cookie: NID=118=kwFjgkahcRXuLHssssTo02wuygZkIj3Ht-ga60VHnPGn2bMdwdImel99P0GY77S7IM6vERtNaZO9nLTrvySFKuUcARl2qvNPjn3Dt-hr4JXfsriNIYtmWsuNcxZGNreL

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Vary: Accept-Encoding
Timing-Allow-Origin: *
Expires: Fri, 01 Dec 2017 10:35:25 GMT
Date: Fri, 01 Dec 2017 10:35:25 GMT
Cache-Control: private, max-age=3600
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4045
Md5:    4e55c479f0bc4235ea91b09cd5f03687
Sha1:   3f7a689ce80853400938adf60d65bdb0c5696138
Sha256: bae3b2a84aef79e25185092b9235e7a3118f59285b80c8e4ad7d9d7ab9b2dab1
                                        
                                            GET /img/navbar/icons_orange.png HTTP/1.1 
Host: img1.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=5190493164327322817&blogName=ANDRA+SOFTWARE&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=TAN&layoutType=LAYOUTS&searchRoot=http://dhyiandra.blogspot.com/search&blogLocale=in&v=2&homepageUrl=http://dhyiandra.blogspot.com/&targetPostID=4714137756373164634&blogPostOrPageUrl=http://dhyiandra.blogspot.com/2013/12/registry-fix-untuk-fifa-14.html&vt=-6464615247625932353&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.44L0sd7fgqc.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMu3f06Q03X6JhLePjeseevEl8LCw

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 915
Date: Thu, 30 Nov 2017 20:14:05 GMT
Expires: Thu, 07 Dec 2017 20:14:05 GMT
Last-Modified: Thu, 30 Nov 2017 16:32:35 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 51681
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 46 x 20, 8-bit colormap, non-interlaced
Size:   915
Md5:    87f25844d23ac1ee03604e668f5c1797
Sha1:   85d440947d70a78672740ff7e8062f68ce9d99a3
Sha256: d70c36f2f61b735573caa3dd5a1602e19916701bb88d99ff4527cd2c89fa8b72
                                        
                                            GET /img/widgets/icon_wikipedia_search.png HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/static/v1/widgets/3213516723-css_bundle_v2.css

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 249
Date: Thu, 30 Nov 2017 20:16:17 GMT
Expires: Thu, 07 Dec 2017 20:16:17 GMT
Last-Modified: Thu, 30 Nov 2017 16:32:35 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 51549
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 19 x 19, 8-bit/color RGBA, non-interlaced
Size:   249
Md5:    99daed35a47a7b6118ea81913ee33049
Sha1:   848a235dcbfa13048025a65daaaea49ee04201d8
Sha256: ec78b04a8c78bde91dcaed1aacaeb1d84e793a2eb9cf04368f6711382edaa9a8
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.44L0sd7fgqc.O/m=auth/exm=gapi_iframes,gapi_iframes_style_bubble,plusone,profile/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMu3f06Q03X6JhLePjeseevEl8LCw/cb=gapi.loaded_3 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dhyiandra.blogspot.no/2013/12/registry-fix-untuk-fifa-14.html
Cookie: NID=118=kwFjgkahcRXuLHssssTo02wuygZkIj3Ht-ga60VHnPGn2bMdwdImel99P0GY77S7IM6vERtNaZO9nLTrvySFKuUcARl2qvNPjn3Dt-hr4JXfsriNIYtmWsuNcxZGNreL

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 19236
Date: Fri, 01 Dec 2017 00:06:36 GMT
Expires: Sat, 01 Dec 2018 00:06:36 GMT
Last-Modified: Thu, 30 Nov 2017 01:59:47 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 37728
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   19236
Md5:    511a8423c69f6efa933cbf70ec7046a4
Sha1:   4071a5c54b7fcd7e1bb2a8a32fe562cbf3d09e45
Sha256: 7cd7c92e4b59cc9b558d78afe43213ca66917d9468a02106fff7901961c4f7e9
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=118=kwFjgkahcRXuLHssssTo02wuygZkIj3Ht-ga60VHnPGn2bMdwdImel99P0GY77S7IM6vERtNaZO9nLTrvySFKuUcARl2qvNPjn3Dt-hr4JXfsriNIYtmWsuNcxZGNreL

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 01 Dec 2017 10:35:26 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    f6a6b8de57bf34ce23ea34b78f267505
Sha1:   dc834688ea8d7ca34d8491bfca803a861e0c2764
Sha256: b7c285a7e0d07ae7a521e5e9cb407ad03ffea373d6192670124514f9638de0e3
                                        
                                            GET /gadgets/js/core.js?container=blogger&nocache=0&debug=0&c=0&v=b6f0905716eb3c75139b7aa3b49d0994&sv=10&jsload=0 HTTP/1.1 
Host: www-blogger-opensocial.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www-blogger-opensocial.googleusercontent.com/gadgets/ifr?url=http://hosting.gmodules.com/ig/gadgets/file/111311123200664007084/calendar.xml&container=blogger&view=default&lang=in&country=ALL&sanitize=0&v=552f95ab62fcc7c4&libs=core&parent=dhyiandra.blogspot.no/&mid=1

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Expires: Fri, 16 Nov 2018 20:08:01 GMT
Content-Encoding: gzip
Date: Thu, 16 Nov 2017 20:08:01 GMT
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Cache-Control: public,max-age=31536000
Content-Length: 16191
Age: 1261644


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   16191
Md5:    cf4811cda68d05bbb30021d3ec0cbefe
Sha1:   8434e46e2432d498a9d5991fd15352d276625940
Sha256: 3f855694363ece14da1c27142b1b884fbbb076d6addca45e9e86b790044eab79
                                        
                                            GET /img/navbar/arrows-tan.png HTTP/1.1 
Host: img1.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=5190493164327322817&blogName=ANDRA+SOFTWARE&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=TAN&layoutType=LAYOUTS&searchRoot=http://dhyiandra.blogspot.com/search&blogLocale=in&v=2&homepageUrl=http://dhyiandra.blogspot.com/&targetPostID=4714137756373164634&blogPostOrPageUrl=http://dhyiandra.blogspot.com/2013/12/registry-fix-untuk-fifa-14.html&vt=-6464615247625932353&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.44L0sd7fgqc.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMu3f06Q03X6JhLePjeseevEl8LCw

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 117
Date: Thu, 30 Nov 2017 19:48:05 GMT
Expires: Thu, 07 Dec 2017 19:48:05 GMT
Last-Modified: Thu, 30 Nov 2017 18:49:43 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 53241
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 19 x 4, 8-bit/color RGBA, non-interlaced
Size:   117
Md5:    80571dfb974a01241e34a7ba28d8bb01
Sha1:   233a9a320d863c5d49fee28da46ccf6ec8bcda43
Sha256: 4cab1a6eac923c89c5612cfa945f8d8cda7b46259e512c5f3f7788b4aea2e051
                                        
                                            GET /js/platform:gapi.iframes.style.common.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=5190493164327322817&blogName=ANDRA+SOFTWARE&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=TAN&layoutType=LAYOUTS&searchRoot=http://dhyiandra.blogspot.com/search&blogLocale=in&v=2&homepageUrl=http://dhyiandra.blogspot.com/&targetPostID=4714137756373164634&blogPostOrPageUrl=http://dhyiandra.blogspot.com/2013/12/registry-fix-untuk-fifa-14.html&vt=-6464615247625932353&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.44L0sd7fgqc.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMu3f06Q03X6JhLePjeseevEl8LCw
Cookie: NID=118=kwFjgkahcRXuLHssssTo02wuygZkIj3Ht-ga60VHnPGn2bMdwdImel99P0GY77S7IM6vERtNaZO9nLTrvySFKuUcARl2qvNPjn3Dt-hr4JXfsriNIYtmWsuNcxZGNreL

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Timing-Allow-Origin: *
Etag: "ef2cecd2dfffc1916349c7ade7915955"
Expires: Fri, 01 Dec 2017 10:35:26 GMT
Date: Fri, 01 Dec 2017 10:35:26 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   16886
Md5:    fce6ea46d607fa7a9e90752bd685144f
Sha1:   59998fcd87f6a9966627eaecff6a5b57c9663aac
Sha256: 02c6c4f8c37573cc33e6f5f19ccba9560f0466ec1d37c6c403de34bfd9e4aa38
                                        
                                            GET /o/oauth2/postmessageRelay?parent=http%3A%2F%2Fdhyiandra.blogspot.no&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.44L0sd7fgqc.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMu3f06Q03X6JhLePjeseevEl8LCw HTTP/1.1 
Host: accounts.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dhyiandra.blogspot.no/2013/12/registry-fix-untuk-fifa-14.html
Cookie: NID=118=kwFjgkahcRXuLHssssTo02wuygZkIj3Ht-ga60VHnPGn2bMdwdImel99P0GY77S7IM6vERtNaZO9nLTrvySFKuUcARl2qvNPjn3Dt-hr4JXfsriNIYtmWsuNcxZGNreL; GAPS=1:QRUMZRPoa0InwHAXJ1Ni1G6Pyvy-Kg:Kpdo3RKpw8gWt_ks

                                         
                                         172.217.22.173
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 01 Dec 2017 10:35:26 GMT
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   363
Md5:    1309d9eccb6c07d05c3343205b6fd18e
Sha1:   2ff24828837a1bb39e2f2db22db083ed4a0a006f
Sha256: be18f0e8b1cb4cb26d2049a048d7243aa93dbfbbfeefa289a23edebdddd4ff43
                                        
                                            GET /comment-iframe.g?blogID=5190493164327322817&postID=4714137756373164634&blogspotRpcToken=8121640&bpli=1 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dhyiandra.blogspot.no/2013/12/registry-fix-untuk-fifa-14.html

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 01 Dec 2017 10:35:26 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Set-Cookie: S=blogger=_eVC6nb5npz6nRau-vmle533Rj9fG9Nz; Domain=.blogger.com; Path=/; Secure; HttpOnly; Priority=LOW
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   1868
Md5:    ca9bffc6acad77270b3b62ec4e45f0b5
Sha1:   6e672d028b234b1549cdd6088218a1401776205f
Sha256: 81d4bbe474280143fc677979e2dab8b424c56b04e0d3701533de38ef5d950d2f
                                        
                                            GET /followers.g?blogID=5190493164327322817&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByNmZjk5MDAqByMwMDAwMDAyByNmZmZmZmY6ByNmZmZmZmZCByNmZjk5MDBKByMwMDAwMDBSByNmZjk5MDBaC3RyYW5zcGFyZW50&pageSize=21&postID=4714137756373164634&origin=http://dhyiandra.blogspot.no/&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.44L0sd7fgqc.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMu3f06Q03X6JhLePjeseevEl8LCw HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dhyiandra.blogspot.no/2013/12/registry-fix-untuk-fifa-14.html

                                         
                                         172.217.22.169
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Location: https://accounts.google.com/ServiceLogin?continue=https://www.blogger.com/followers.g?blogID%3D5190493164327322817%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByNmZjk5MDAqByMwMDAwMDAyByNmZmZmZmY6ByNmZmZmZmZCByNmZjk5MDBKByMwMDAwMDBSByNmZjk5MDBaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D4714137756373164634%26origin%3Dhttp://dhyiandra.blogspot.no/%26usegapi%3D1%26jsh%3Dm;/_/scs/apps-static/_/js/k%253Doz.gapi.no.44L0sd7fgqc.O/m%253D__features__/am%253DAQ/rt%253Dj/d%253D1/rs%253DAGLTcCMu3f06Q03X6JhLePjeseevEl8LCw%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D5190493164327322817%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByNmZjk5MDAqByMwMDAwMDAyByNmZmZmZmY6ByNmZmZmZmZCByNmZjk5MDBKByMwMDAwMDBSByNmZjk5MDBaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D4714137756373164634%26origin%3Dhttp://dhyiandra.blogspot.no/%26usegapi%3D1%26jsh%3Dm;/_/scs/apps-static/_/js/k%253Doz.gapi.no.44L0sd7fgqc.O/m%253D__features__/am%253DAQ/rt%253Dj/d%253D1/rs%253DAGLTcCMu3f06Q03X6JhLePjeseevEl8LCw%26bpli%3D1&passive=true&go=true
Content-Encoding: gzip
Date: Fri, 01 Dec 2017 10:35:26 GMT
Expires: Fri, 01 Dec 2017 10:35:26 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   539
Md5:    bea6c8f7e443b95e821dacfc7027c63f
Sha1:   ada1150f8fd388b172e78547b4eb690b111c9b35
Sha256: 1e1a1aae3f73fb410c7840a4420b30d9c877c8367992a35aa353dc3c8f1e3ee5
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.44L0sd7fgqc.O/m=googleapis_client,gapi_iframes_style_common,gapi_iframes_iframer/am=AQ/rt=j/d=1/rs=AGLTcCMu3f06Q03X6JhLePjeseevEl8LCw HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://apis.google.com/se/0/_/+1/fastbutton?usegapi=1&annotation=inline&width=300&size=medium&source=blogger%3Ablog%3Aplusone&hl=id&origin=http%3A%2F%2Fdhyiandra.blogspot.no&url=http%3A%2F%2Fdhyiandra.blogspot.com%2F2013%2F12%2Fregistry-fix-untuk-fifa-14.html&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.44L0sd7fgqc.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMu3f06Q03X6JhLePjeseevEl8LCw
Cookie: NID=118=kwFjgkahcRXuLHssssTo02wuygZkIj3Ht-ga60VHnPGn2bMdwdImel99P0GY77S7IM6vERtNaZO9nLTrvySFKuUcARl2qvNPjn3Dt-hr4JXfsriNIYtmWsuNcxZGNreL

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 43999
Date: Thu, 30 Nov 2017 18:28:40 GMT
Expires: Fri, 30 Nov 2018 18:28:40 GMT
Last-Modified: Thu, 30 Nov 2017 01:59:47 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 58006
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   43999
Md5:    287f6c32f1083b44a4e23c06bf93cf42
Sha1:   11f5c03f817447c4cf19fcd63e147988dce2b619
Sha256: febfe9ea0278005e53d7daa437a0b8a985e9d4919b79934620de2399a34a2614
                                        
                                            GET /about.html HTTP/1.1 
Host: atat.ro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www-blogger-opensocial.googleusercontent.com/gadgets/ifr?url=http://hosting.gmodules.com/ig/gadgets/file/111311123200664007084/calendar.xml&container=blogger&view=default&lang=in&country=ALL&sanitize=0&v=552f95ab62fcc7c4&libs=core&parent=dhyiandra.blogspot.no/&mid=1

                                         
                                         216.239.32.21
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Location: http://www.atat.ro/about.html
Date: Fri, 01 Dec 2017 10:35:26 GMT
Server: ghs
Content-Length: 226
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  HTML document text
Size:   226
Md5:    3fef4966078fff9e3d2ed14526e9079f
Sha1:   73f5bf1fa28a0e04cee825cc3c9178c473a2a9b8
Sha256: 3cbfc185eecd8fbbd610090740c275d4aef3ca515f12bf00970100d5889351d8

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.44L0sd7fgqc.O/m=auth/exm=gapi_iframes_style_common,plusone/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMu3f06Q03X6JhLePjeseevEl8LCw/cb=gapi.loaded_1 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=5190493164327322817&blogName=ANDRA+SOFTWARE&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=TAN&layoutType=LAYOUTS&searchRoot=http://dhyiandra.blogspot.com/search&blogLocale=in&v=2&homepageUrl=http://dhyiandra.blogspot.com/&targetPostID=4714137756373164634&blogPostOrPageUrl=http://dhyiandra.blogspot.com/2013/12/registry-fix-untuk-fifa-14.html&vt=-6464615247625932353&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.44L0sd7fgqc.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMu3f06Q03X6JhLePjeseevEl8LCw
Cookie: NID=118=kwFjgkahcRXuLHssssTo02wuygZkIj3Ht-ga60VHnPGn2bMdwdImel99P0GY77S7IM6vERtNaZO9nLTrvySFKuUcARl2qvNPjn3Dt-hr4JXfsriNIYtmWsuNcxZGNreL

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 19902
Date: Fri, 01 Dec 2017 00:01:46 GMT
Expires: Sat, 01 Dec 2018 00:01:46 GMT
Last-Modified: Thu, 30 Nov 2017 01:59:47 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 38020
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   19902
Md5:    8152fd6f9c21c139097c95552a5f78b2
Sha1:   e7612f17eaea811a443b100794803a8bee7cf5a1
Sha256: 1de6929ff124c35e9ee3111a7949380f495246a1d066719833b8e8e8067756f7
                                        
                                            GET /se/0/_/+1/fastbutton?usegapi=1&source=blogger%3Anavbar%3Aplusone&size=medium&hl=no&origin=https%3A%2F%2Fwww.blogger.com&url=http%3A%2F%2Fdhyiandra.blogspot.com%2F2013%2F12%2Fregistry-fix-untuk-fifa-14.html&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.44L0sd7fgqc.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMu3f06Q03X6JhLePjeseevEl8LCw HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=5190493164327322817&blogName=ANDRA+SOFTWARE&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=TAN&layoutType=LAYOUTS&searchRoot=http://dhyiandra.blogspot.com/search&blogLocale=in&v=2&homepageUrl=http://dhyiandra.blogspot.com/&targetPostID=4714137756373164634&blogPostOrPageUrl=http://dhyiandra.blogspot.com/2013/12/registry-fix-untuk-fifa-14.html&vt=-6464615247625932353&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.44L0sd7fgqc.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMu3f06Q03X6JhLePjeseevEl8LCw
Cookie: NID=118=kwFjgkahcRXuLHssssTo02wuygZkIj3Ht-ga60VHnPGn2bMdwdImel99P0GY77S7IM6vERtNaZO9nLTrvySFKuUcARl2qvNPjn3Dt-hr4JXfsriNIYtmWsuNcxZGNreL

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Vary: Accept-Encoding
Timing-Allow-Origin: *
Expires: Fri, 01 Dec 2017 10:35:26 GMT
Date: Fri, 01 Dec 2017 10:35:26 GMT
Cache-Control: private, max-age=3600
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4045
Md5:    3103aac273fb8fb8c5bfbce724b1342e
Sha1:   6c5c9a3f7126360d6a846406126a5d76e9c52d50
Sha256: 1aca87fde769c6563dc19cc96dd46ac50145857392ec0779d883cb24478fe115
                                        
                                            GET /img/blank.gif HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=5190493164327322817&postID=4714137756373164634&blogspotRpcToken=8121640&bpli=1

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 43
Date: Thu, 30 Nov 2017 20:25:58 GMT
Expires: Thu, 07 Dec 2017 20:25:58 GMT
Last-Modified: Thu, 30 Nov 2017 18:49:43 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 50968
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            GET /ServiceLogin?continue=https://www.blogger.com/followers.g?blogID%3D5190493164327322817%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByNmZjk5MDAqByMwMDAwMDAyByNmZmZmZmY6ByNmZmZmZmZCByNmZjk5MDBKByMwMDAwMDBSByNmZjk5MDBaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D4714137756373164634%26origin%3Dhttp://dhyiandra.blogspot.no/%26usegapi%3D1%26jsh%3Dm;/_/scs/apps-static/_/js/k%253Doz.gapi.no.44L0sd7fgqc.O/m%253D__features__/am%253DAQ/rt%253Dj/d%253D1/rs%253DAGLTcCMu3f06Q03X6JhLePjeseevEl8LCw%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D5190493164327322817%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByNmZjk5MDAqByMwMDAwMDAyByNmZmZmZmY6ByNmZmZmZmZCByNmZjk5MDBKByMwMDAwMDBSByNmZjk5MDBaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D4714137756373164634%26origin%3Dhttp://dhyiandra.blogspot.no/%26usegapi%3D1%26jsh%3Dm;/_/scs/apps-static/_/js/k%253Doz.gapi.no.44L0sd7fgqc.O/m%253D__features__/am%253DAQ/rt%253Dj/d%253D1/rs%253DAGLTcCMu3f06Q03X6JhLePjeseevEl8LCw%26bpli%3D1&passive=true&go=true HTTP/1.1 
Host: accounts.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dhyiandra.blogspot.no/2013/12/registry-fix-untuk-fifa-14.html
Cookie: NID=118=kwFjgkahcRXuLHssssTo02wuygZkIj3Ht-ga60VHnPGn2bMdwdImel99P0GY77S7IM6vERtNaZO9nLTrvySFKuUcARl2qvNPjn3Dt-hr4JXfsriNIYtmWsuNcxZGNreL; GAPS=1:QRUMZRPoa0InwHAXJ1Ni1G6Pyvy-Kg:Kpdo3RKpw8gWt_ks

                                         
                                         172.217.22.173
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
X-Frame-Options: DENY
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 01 Dec 2017 10:35:26 GMT
Location: https://www.blogger.com/followers.g?blogID=5190493164327322817&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByNmZjk5MDAqByMwMDAwMDAyByNmZmZmZmY6ByNmZmZmZmZCByNmZjk5MDBKByMwMDAwMDBSByNmZjk5MDBaC3RyYW5zcGFyZW50&pageSize=21&postID=4714137756373164634&origin=http%3A%2F%2Fdhyiandra.blogspot.no%2F&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.44L0sd7fgqc.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMu3f06Q03X6JhLePjeseevEl8LCw&bpli=1
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Security-Policy-Report-Only: script-src 'unsafe-inline' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Set-Cookie: GAPS=1:g_1h5YX7kD2H5vSTjSc0WJGI2DlAWA:SPKrmF88PJY352Uv;Path=/;Expires=Sun, 01-Dec-2019 10:35:26 GMT;Secure;HttpOnly;Priority=HIGH
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   486
Md5:    bea220cf60f013a3f2be8cd251577d8d
Sha1:   42046c5030b6339f8f9a5b738823cfee90a182c6
Sha256: f14e9f7e5a68bfafdc01c822e35707b5419fb55af3a73412f8c476e30f93d3ef
                                        
                                            GET /js/rpc:shindig_random.js?onload=init HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://accounts.google.com/o/oauth2/postmessageRelay?parent=http%3A%2F%2Fdhyiandra.blogspot.no&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.44L0sd7fgqc.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMu3f06Q03X6JhLePjeseevEl8LCw
Cookie: NID=118=kwFjgkahcRXuLHssssTo02wuygZkIj3Ht-ga60VHnPGn2bMdwdImel99P0GY77S7IM6vERtNaZO9nLTrvySFKuUcARl2qvNPjn3Dt-hr4JXfsriNIYtmWsuNcxZGNreL

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Timing-Allow-Origin: *
Etag: "62d9d7bb4dcf04375ed633eb9897b2f1"
Expires: Fri, 01 Dec 2017 10:35:26 GMT
Date: Fri, 01 Dec 2017 10:35:26 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4747
Md5:    aa4169405067a80707be48d48e307ce6
Sha1:   ac27ea16aeae81cbc19c54d1ad2a2d8aa5cddfa0
Sha256: 511a05544794f0fc5a290507c5666ec195b97a8c6652340a2370e7f08dd269e8
                                        
                                            GET /images/branding/product/1x/translate_24dp.png HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dhyiandra.blogspot.no/2013/12/registry-fix-untuk-fifa-14.html

                                         
                                         173.194.221.94
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 825
Date: Thu, 16 Nov 2017 12:29:44 GMT
Expires: Fri, 16 Nov 2018 12:29:44 GMT
Last-Modified: Thu, 21 Apr 2016 03:17:22 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1289142
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit/color RGBA, non-interlaced
Size:   825
Md5:    55ff382a8b09329e3230a1797eb8f5fd
Sha1:   026ae089006a674da7dcc9bf6b986c5d59e75478
Sha256: 1bb2279aed6bc1438d2b17a5ffcbac9d37864582aedeeec8d301eab162b2c213
                                        
                                            GET /static/v1/jsbin/2602634485-cmt.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=5190493164327322817&postID=4714137756373164634&blogspotRpcToken=8121640&bpli=1
Cookie: S=blogger=_eVC6nb5npz6nRau-vmle533Rj9fG9Nz

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 30980
Date: Thu, 23 Nov 2017 02:11:09 GMT
Expires: Fri, 23 Nov 2018 02:11:09 GMT
Last-Modified: Thu, 23 Nov 2017 00:59:09 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 721457
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   30980
Md5:    400c0885dd2d0bb32bd18a3bc7d163c9
Sha1:   180c98f772c229531ae135d14b8c75d557429e16
Sha256: e7d14149ddb686924c74235632def1a3fbf52a3647b1009c33fd222adcaaebed
                                        
                                            GET /img/cmt/close.gif HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=5190493164327322817&postID=4714137756373164634&blogspotRpcToken=8121640&bpli=1
Cookie: S=blogger=_eVC6nb5npz6nRau-vmle533Rj9fG9Nz

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 347
Date: Thu, 30 Nov 2017 20:29:02 GMT
Expires: Thu, 07 Dec 2017 20:29:02 GMT
Last-Modified: Thu, 30 Nov 2017 18:49:43 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 50784
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 16 x 16
Size:   347
Md5:    6671b9932cbb79a2c2a018ed2c3bf3fb
Sha1:   40566dd706279a44ebd477df58a4cf75ab99cae8
Sha256: df6cb367e3692c4d2056dd69c54bea18458148ef028ce7b998824f9f49ceafd6
                                        
                                            GET /feedback/js/help/prod/service/lazy.min.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dhyiandra.blogspot.no/2013/12/registry-fix-untuk-fifa-14.html

                                         
                                         173.194.221.94
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 11278
Date: Fri, 01 Dec 2017 00:42:02 GMT
Expires: Fri, 08 Dec 2017 00:42:02 GMT
Last-Modified: Tue, 28 Nov 2017 15:33:30 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 35604
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   11278
Md5:    a7218db45eac0da852cb4f69133c1f57
Sha1:   e99f176a07c7dede8dcd82cd385bf8d8e5039768
Sha256: 2071bea4ec51d47337bfe86ca483a394020f457067d52dc45dcd05903ceb8d73
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=118=kwFjgkahcRXuLHssssTo02wuygZkIj3Ht-ga60VHnPGn2bMdwdImel99P0GY77S7IM6vERtNaZO9nLTrvySFKuUcARl2qvNPjn3Dt-hr4JXfsriNIYtmWsuNcxZGNreL

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 01 Dec 2017 10:35:26 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    9a2f0d73601a09653ad85f36f223e595
Sha1:   043955fe8de8f7b6535a8c3a5b8762395c865f33
Sha256: 177ecf8d2337576e167cc6e737adb4d2c63b8eb4d4fe0cee167fedc53d6c31ba
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.44L0sd7fgqc.O/m=gapi_iframes_style_common,plusone/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMu3f06Q03X6JhLePjeseevEl8LCw/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=5190493164327322817&blogName=ANDRA+SOFTWARE&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=TAN&layoutType=LAYOUTS&searchRoot=http://dhyiandra.blogspot.com/search&blogLocale=in&v=2&homepageUrl=http://dhyiandra.blogspot.com/&targetPostID=4714137756373164634&blogPostOrPageUrl=http://dhyiandra.blogspot.com/2013/12/registry-fix-untuk-fifa-14.html&vt=-6464615247625932353&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.44L0sd7fgqc.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMu3f06Q03X6JhLePjeseevEl8LCw
Cookie: NID=118=kwFjgkahcRXuLHssssTo02wuygZkIj3Ht-ga60VHnPGn2bMdwdImel99P0GY77S7IM6vERtNaZO9nLTrvySFKuUcARl2qvNPjn3Dt-hr4JXfsriNIYtmWsuNcxZGNreL

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 58201
Date: Thu, 30 Nov 2017 23:58:44 GMT
Expires: Fri, 30 Nov 2018 23:58:44 GMT
Last-Modified: Thu, 30 Nov 2017 01:59:47 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 38202
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   58201
Md5:    8e53ff0fe2507fca6911b8b01fa0b02c
Sha1:   9b99fa81dfaab2b616d280ca53de9790726e1880
Sha256: b4e27bfdef4419197c1aaf4bf60ff7f4e3a3ded6bc32e192337160bb170440ea
                                        
                                            GET /about.html HTTP/1.1 
Host: www.atat.ro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www-blogger-opensocial.googleusercontent.com/gadgets/ifr?url=http://hosting.gmodules.com/ig/gadgets/file/111311123200664007084/calendar.xml&container=blogger&view=default&lang=in&country=ALL&sanitize=0&v=552f95ab62fcc7c4&libs=core&parent=dhyiandra.blogspot.no/&mid=1

                                         
                                         173.194.221.121
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Location: /p/about.html
Content-Encoding: gzip
Date: Fri, 01 Dec 2017 10:35:26 GMT
Expires: Fri, 01 Dec 2017 10:35:26 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 163
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   163
Md5:    883692b5c128ac16c2b102209a8f556c
Sha1:   2eaaafedfd3ccda67974601ca27e820e99e050bf
Sha256: 56bc96f7c8e2c73262c429ba233627737ecb17e9edd7c6391d48d8f8c33f734f

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            GET /followers.g?blogID=5190493164327322817&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByNmZjk5MDAqByMwMDAwMDAyByNmZmZmZmY6ByNmZmZmZmZCByNmZjk5MDBKByMwMDAwMDBSByNmZjk5MDBaC3RyYW5zcGFyZW50&pageSize=21&postID=4714137756373164634&origin=http%3A%2F%2Fdhyiandra.blogspot.no%2F&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.44L0sd7fgqc.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMu3f06Q03X6JhLePjeseevEl8LCw&bpli=1 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dhyiandra.blogspot.no/2013/12/registry-fix-untuk-fifa-14.html
Cookie: S=blogger=_eVC6nb5npz6nRau-vmle533Rj9fG9Nz

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 01 Dec 2017 10:35:26 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   1690
Md5:    319ccae2331981028402673ac131466d
Sha1:   838081af2523f323741ada8101828117564973d8
Sha256: 8597a929930ed1085e7aa8629f47031ae3dbb1d2045cbafc1165984978c37a85
                                        
                                            GET /js/bg/xyxcEPMYnyQfHtFyj8FViRmgUG09fasClMCir8_uuGA.js HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=5190493164327322817&postID=4714137756373164634&blogspotRpcToken=8121640&bpli=1
Cookie: NID=118=kwFjgkahcRXuLHssssTo02wuygZkIj3Ht-ga60VHnPGn2bMdwdImel99P0GY77S7IM6vERtNaZO9nLTrvySFKuUcARl2qvNPjn3Dt-hr4JXfsriNIYtmWsuNcxZGNreL

                                         
                                         173.194.221.147
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4708
Date: Thu, 30 Nov 2017 04:53:39 GMT
Expires: Fri, 30 Nov 2018 04:53:39 GMT
Last-Modified: Mon, 27 Nov 2017 13:30:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 106908
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4708
Md5:    06043d65796e432a870a9ddcc0d530ff
Sha1:   ba3584c4f2e79b916f77b5f6dfcb2d91e53567e5
Sha256: 75098040e083627066b701e9ff06bad8e763aa5e0c39bacd2c1ce0330be03bba
                                        
                                            GET /translate_a/l?client=te&alpha=true&hl=en&cb=_callbacks____0janrwfpr HTTP/1.1 
Host: translate.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dhyiandra.blogspot.no/2013/12/registry-fix-untuk-fifa-14.html

                                         
                                         172.217.22.170
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Date: Fri, 01 Dec 2017 10:35:27 GMT
Expires: Fri, 01 Dec 2017 10:35:27 GMT
Cache-Control: private, max-age=86400
Content-Language: en
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: HTTP server (unknown)
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   917
Md5:    5e88a4c6591ab2c447f0ae501db25f4a
Sha1:   624ec30ccbf244ce1fc84167d2863139776708d1
Sha256: 13cdbd3b1832c7bfec0b39e26f7b55cca2feaef6286c5adbd124b0b3d429c09f
                                        
                                            GET /p/about.html HTTP/1.1 
Host: www.atat.ro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www-blogger-opensocial.googleusercontent.com/gadgets/ifr?url=http://hosting.gmodules.com/ig/gadgets/file/111311123200664007084/calendar.xml&container=blogger&view=default&lang=in&country=ALL&sanitize=0&v=552f95ab62fcc7c4&libs=core&parent=dhyiandra.blogspot.no/&mid=1

                                         
                                         173.194.221.121
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Expires: Fri, 01 Dec 2017 10:35:27 GMT
Date: Fri, 01 Dec 2017 10:35:27 GMT
Cache-Control: private, max-age=0
Last-Modified: Fri, 01 Dec 2017 10:30:43 GMT
Etag: W/"0f2b83037da642628609a08f1e3bc4837386a9afe96361258d0e898910c520ba"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 22648
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   22648
Md5:    25cf1a62a34c233d0a0d56cf743c6781
Sha1:   39e0e6592fc133e8d9b7863470827d82e6a516c2
Sha256: d555f4faa6cca2855b32bb41a7ac1d335bf1cb59b0d27b189c5b3b4e5abfdf45

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dhyiandra.blogspot.no/2013/12/registry-fix-untuk-fifa-14.html

                                         
                                         173.194.221.94
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 910
Date: Thu, 16 Nov 2017 12:29:52 GMT
Expires: Fri, 16 Nov 2018 12:29:52 GMT
Last-Modified: Wed, 04 Jan 2017 15:45:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1289135
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 42 x 16, 8-bit/color RGBA, non-interlaced
Size:   910
Md5:    efa6bb2bfe459bc6f4bdafa3db0383f6
Sha1:   52d15ce52fe50643e542c17812de43f4ed1b6ee0
Sha256: 6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2
                                        
                                            GET /-ll_oICaHhZQ/Wg7knV2Og2I/AAAAAAAAhcU/3S3Oxp5cRxcN87uYCUiD8akNBPBSXt61gCK4BGAYYCw/s300/stiri-noi.png HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v85c7"
Expires: Fri, 01 Dec 2017 06:51:54 GMT
Content-Disposition: inline;filename="stiri-noi.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 01 Dec 2017 09:45:28 GMT
Server: fife
Content-Length: 3009
X-XSS-Protection: 1; mode=block
Age: 2999
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  PNG image, 238 x 66, 8-bit colormap, non-interlaced
Size:   3009
Md5:    3d6d446fea9f1d666b3ce7d0413326a7
Sha1:   a66eaa669d1283ac98fb73a71418dfc3d67b6fce
Sha256: 8ecd35c4286e088ce41e5cf5f7c28f623d387f4472e89b47df19b66d9d6be7dd
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=118=kwFjgkahcRXuLHssssTo02wuygZkIj3Ht-ga60VHnPGn2bMdwdImel99P0GY77S7IM6vERtNaZO9nLTrvySFKuUcARl2qvNPjn3Dt-hr4JXfsriNIYtmWsuNcxZGNreL

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 01 Dec 2017 10:35:27 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    f2046f37b2afce914cdfc5625a07a0a4
Sha1:   ea99fdb0ed0bbdb25fa9926f6a6ecdbca70245d6
Sha256: 4664dca72f3d72389258bb451313ddf9426d52885831d5c58c1a7d09d2b603cc
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.44L0sd7fgqc.O/m=gapi_iframes,gapi_iframes_style_common/exm=plusone/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMu3f06Q03X6JhLePjeseevEl8LCw/cb=gapi.loaded_1 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/followers.g?blogID=5190493164327322817&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByNmZjk5MDAqByMwMDAwMDAyByNmZmZmZmY6ByNmZmZmZmZCByNmZjk5MDBKByMwMDAwMDBSByNmZjk5MDBaC3RyYW5zcGFyZW50&pageSize=21&postID=4714137756373164634&origin=http%3A%2F%2Fdhyiandra.blogspot.no%2F&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.44L0sd7fgqc.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMu3f06Q03X6JhLePjeseevEl8LCw&bpli=1
Cookie: NID=118=kwFjgkahcRXuLHssssTo02wuygZkIj3Ht-ga60VHnPGn2bMdwdImel99P0GY77S7IM6vERtNaZO9nLTrvySFKuUcARl2qvNPjn3Dt-hr4JXfsriNIYtmWsuNcxZGNreL

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 11469
Date: Fri, 01 Dec 2017 00:06:39 GMT
Expires: Sat, 01 Dec 2018 00:06:39 GMT
Last-Modified: Thu, 30 Nov 2017 01:59:47 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 37728
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   11469
Md5:    4e2f2e0957a1bcdf55e298d2403ef8ab
Sha1:   c4746bb05eef564a6d5f66522d1e5479d5f311f5
Sha256: 9cf15305adf223a1f29e4a37a9e4178c06d06302eade4580b1c56e86ae0efaad
                                        
                                            GET /-PnE6kXsDzd8/WKrfaH_eyCI/AAAAAAAACR4/XjGgGd-AUV8aVglWZyI84jF1UlSjaweJQCK4B/s300/robotfx_forex_trading_tools.jpg HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v91f"
Expires: Tue, 28 Nov 2017 17:15:59 GMT
Content-Disposition: inline;filename="robotfx_forex_trading_tools.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 01 Dec 2017 09:42:24 GMT
Server: fife
Content-Length: 25588
X-XSS-Protection: 1; mode=block
Age: 3183
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   25588
Md5:    d10d7475bc8a96939ebf16cdb0d02bd1
Sha1:   08474ca36596a53140acea5663282d1b1b52a32f
Sha256: 2d80f717dabf77e87ee14a0c262cf8513946f99d996cc7c05618d921097c260a
                                        
                                            GET /ajax/libs/jquery/1.11.3/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         216.58.211.138
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 33507
Date: Wed, 15 Nov 2017 04:05:08 GMT
Expires: Thu, 15 Nov 2018 04:05:08 GMT
Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 1405819


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   33507
Md5:    90128e2d673104f8c8d0ab0d7361cf06
Sha1:   f04b03a3cc61b7cc4073a74e0d79f4a5c9e36d9e
Sha256: 7e5a40bf22da7ed3a97fad06333456923ff87eb7b05a12654fef2f185a01b4f6
                                        
                                            GET /o/oauth2/postmessageRelay?parent=https%3A%2F%2Fwww.blogger.com&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.44L0sd7fgqc.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMu3f06Q03X6JhLePjeseevEl8LCw HTTP/1.1 
Host: accounts.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=5190493164327322817&blogName=ANDRA+SOFTWARE&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=TAN&layoutType=LAYOUTS&searchRoot=http://dhyiandra.blogspot.com/search&blogLocale=in&v=2&homepageUrl=http://dhyiandra.blogspot.com/&targetPostID=4714137756373164634&blogPostOrPageUrl=http://dhyiandra.blogspot.com/2013/12/registry-fix-untuk-fifa-14.html&vt=-6464615247625932353&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.44L0sd7fgqc.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMu3f06Q03X6JhLePjeseevEl8LCw
Cookie: NID=118=kwFjgkahcRXuLHssssTo02wuygZkIj3Ht-ga60VHnPGn2bMdwdImel99P0GY77S7IM6vERtNaZO9nLTrvySFKuUcARl2qvNPjn3Dt-hr4JXfsriNIYtmWsuNcxZGNreL; GAPS=1:g_1h5YX7kD2H5vSTjSc0WJGI2DlAWA:SPKrmF88PJY352Uv

                                         
                                         172.217.22.173
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 01 Dec 2017 10:35:27 GMT
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   365
Md5:    8e07312acdd3c14868767fc0fb6fee78
Sha1:   6dc6ab5413cc4665e8df65f562c5a2a7a1a91b7b
Sha256: 4a2e22c8011a769a4eb33cce7afd490ff2bc22892ba1ea27648e7a62122a0ae1
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=118=kwFjgkahcRXuLHssssTo02wuygZkIj3Ht-ga60VHnPGn2bMdwdImel99P0GY77S7IM6vERtNaZO9nLTrvySFKuUcARl2qvNPjn3Dt-hr4JXfsriNIYtmWsuNcxZGNreL

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 01 Dec 2017 10:35:27 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    f6e7c522b035b8f03d07941eadeb8934
Sha1:   02bb9fe50cee2b1c158f5861e2c05e3b8a8af81e
Sha256: 9d294a46554371552600d7ff3533acc2e51a0daf2ba8a33f659cfd403abc9b4c
                                        
                                            GET /-NwhcmNLnxJ4/AAAAAAAAAAI/AAAAAAAAAC8/I2WWf0QPVn8/s45-c/photo.jpg HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/followers.g?blogID=5190493164327322817&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByNmZjk5MDAqByMwMDAwMDAyByNmZmZmZmY6ByNmZmZmZmZCByNmZjk5MDBKByMwMDAwMDBSByNmZjk5MDBaC3RyYW5zcGFyZW50&pageSize=21&postID=4714137756373164634&origin=http%3A%2F%2Fdhyiandra.blogspot.no%2F&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.44L0sd7fgqc.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMu3f06Q03X6JhLePjeseevEl8LCw&bpli=1

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v2f"
Expires: Thu, 30 Nov 2017 06:47:55 GMT
Content-Disposition: inline;filename=""
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 01 Dec 2017 10:35:27 GMT
Server: fife
Content-Length: 1433
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 0
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   1433
Md5:    865200bfd41230fd493ce251c636d80b
Sha1:   220dea3cff6c10e893753b12fa936d2244688e5e
Sha256: 1684bddbe044ba43e8702fc36b7a853d787c67241f4227c4d428f2f6284c16e2
                                        
                                            GET /static/v1/v-css/2218177523-cmtfp.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=5190493164327322817&postID=4714137756373164634&blogspotRpcToken=8121640&bpli=1
Cookie: S=blogger=_eVC6nb5npz6nRau-vmle533Rj9fG9Nz

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3619
Date: Thu, 16 Nov 2017 20:07:56 GMT
Expires: Fri, 16 Nov 2018 20:07:56 GMT
Last-Modified: Thu, 16 Nov 2017 02:39:35 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1261651
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   3619
Md5:    f11194c1a58fe620f82a69a80d7d1b69
Sha1:   69a5e7ea4398a61a6a597af0b7a7437107bf0cd0
Sha256: 933d248895e0d8967298b63dd4762e2254d2a47112ac6d5130e5c817bcdc668d
                                        
                                            GET /accounts/o/1765587600-postmessagerelay.js HTTP/1.1 
Host: ssl.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://accounts.google.com/o/oauth2/postmessageRelay?parent=http%3A%2F%2Fdhyiandra.blogspot.no&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.44L0sd7fgqc.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMu3f06Q03X6JhLePjeseevEl8LCw

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3869
Date: Thu, 16 Nov 2017 20:25:16 GMT
Expires: Fri, 16 Nov 2018 20:25:16 GMT
Last-Modified: Tue, 14 Nov 2017 11:34:26 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1260611
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   3869
Md5:    517b730ed4187b2010856914003eeede
Sha1:   4482eab87e32e103a9e6cf9362dfbb7dc4356c81
Sha256: 92c25f7249e36f8147938176d88790281117b38bbade4414e5bc9955b35fe235
                                        
                                            GET /images/branding/product/2x/translate_24dp.png HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://translate.googleapis.com/translate_static/css/translateelement.css

                                         
                                         173.194.221.94
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 1847
Date: Thu, 16 Nov 2017 12:29:50 GMT
Expires: Fri, 16 Nov 2018 12:29:50 GMT
Last-Modified: Thu, 21 Apr 2016 03:17:22 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1289137
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 48 x 48, 8-bit/color RGBA, non-interlaced
Size:   1847
Md5:    bfa09d19aea98592c45ce0a814f0eb2c
Sha1:   5db965a451d9b6b3a5156836182abe8240d4a0de
Sha256: 5fe03bfd95a2d4e640ed7d04dcb08ef991c327a5ab6f6fdb9eb06e1efc76af30
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.44L0sd7fgqc.O/m=rpc,shindig_random/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMu3f06Q03X6JhLePjeseevEl8LCw/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://accounts.google.com/o/oauth2/postmessageRelay?parent=http%3A%2F%2Fdhyiandra.blogspot.no&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.44L0sd7fgqc.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMu3f06Q03X6JhLePjeseevEl8LCw
Cookie: NID=118=kwFjgkahcRXuLHssssTo02wuygZkIj3Ht-ga60VHnPGn2bMdwdImel99P0GY77S7IM6vERtNaZO9nLTrvySFKuUcARl2qvNPjn3Dt-hr4JXfsriNIYtmWsuNcxZGNreL

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 16359
Date: Thu, 30 Nov 2017 18:27:01 GMT
Expires: Fri, 30 Nov 2018 18:27:01 GMT
Last-Modified: Thu, 30 Nov 2017 01:59:47 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 58107
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   16359
Md5:    f477b677ed4582ff289eb1286abc2bd0
Sha1:   968f88623065835ae2dfd5772249d0a994c7d194
Sha256: 4c2fff3ee419083e08f9f3763a8628f99e5f5307bd1a541c44fe0d6b59ce4e8a
                                        
                                            GET /comment-iframe-bg.g?bgresponse=js_disabled&bgint=xyxcEPMYnyQfHtFyj8FViRmgUG09fasClMCir8_uuGA HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=5190493164327322817&postID=4714137756373164634&blogspotRpcToken=8121640&bpli=1
Cookie: S=blogger=_eVC6nb5npz6nRau-vmle533Rj9fG9Nz

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 01 Dec 2017 10:35:29 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   4544
Md5:    4ecf76c96c01b396f875164ad0cf4255
Sha1:   0435fe4cc56ab6d311fda460a10fcd0db874be1c
Sha256: cf0adaccdf8724a318a05ac2a78ea57006a54594c447094869c2371f57292e29
                                        
                                            GET /dyn-css/authorization.css?targetBlogID=4418609707762801235&zx=6903a6b3-deea-4d62-b66d-a3a440c225f2 HTTP/1.1 
Host: draft.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html
Cookie: S=blogger=_eVC6nb5npz6nRau-vmle533Rj9fG9Nz

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/css; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: private, max-age=1800
Pragma: no-cache
Expires: Fri, 01 Dec 2017 10:35:29 GMT
Date: Fri, 01 Dec 2017 10:35:29 GMT
Last-Modified: Fri, 01 Dec 2017 10:35:29 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   21
Md5:    b9afc501fc43fbea335a2dc5d43263a1
Sha1:   7290a2dd6afbf39ecfc35b52dfb32a38fc222994
Sha256: d6e425ca7840c0ab6f26f5fc2822a47e26b4a8bbd104468a9c185bc132b8662f
                                        
                                            GET /static/v1/v-css/368954415-lightbox_bundle.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dhyiandra.blogspot.no/2013/12/registry-fix-untuk-fifa-14.html
Cookie: S=blogger=_eVC6nb5npz6nRau-vmle533Rj9fG9Nz

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6541
Date: Thu, 16 Nov 2017 20:14:14 GMT
Expires: Fri, 16 Nov 2018 20:14:14 GMT
Last-Modified: Thu, 16 Nov 2017 02:39:35 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1261276
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   6541
Md5:    b4d05072b89cf2574170f64bdcded69e
Sha1:   af18e0787d801da60edb8d94e76c49ada4498e3a
Sha256: 58b89b1c09589455482e037eab33c5f4021df5ad69445dd01785e2a061d1d6b7
                                        
                                            GET /static/v1/jsbin/3053021603-lbx.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dhyiandra.blogspot.no/2013/12/registry-fix-untuk-fifa-14.html
Cookie: S=blogger=_eVC6nb5npz6nRau-vmle533Rj9fG9Nz

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 128831
Date: Tue, 28 Nov 2017 03:02:02 GMT
Expires: Wed, 28 Nov 2018 03:02:02 GMT
Last-Modified: Mon, 27 Nov 2017 20:51:54 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 286408
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   128831
Md5:    07c879e6065ed93a0a9a9a0a69dbecbb
Sha1:   28b213f51c0f89859d0e4888ee530ba17ccf2f0d
Sha256: c209c94d943fad406977b05b6f8b31ae8908331beb0482a71938bd5842090fbe
                                        
                                            GET /csi?v=3&s=opensocial-gadgets&action=blogger_default&gadget=http%3A%2F%2Fhosting.gmodules.com%2Fig%2Fgadgets%2Ffile%2F111311123200664007084%2Fcalendar.xml&container=blogger&view=default&e=&rt=dl.355,ol.4307,prt.4308 HTTP/1.1 
Host: csi.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www-blogger-opensocial.googleusercontent.com/gadgets/ifr?url=http://hosting.gmodules.com/ig/gadgets/file/111311123200664007084/calendar.xml&container=blogger&view=default&lang=in&country=ALL&sanitize=0&v=552f95ab62fcc7c4&libs=core&parent=dhyiandra.blogspot.no/&mid=1

                                         
                                         64.233.177.94
HTTP/1.1 204 No Content
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Fri, 01 Dec 2017 10:35:30 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT
Server: Golfe2
Content-Length: 0


--- Additional Info ---