Overview

URL hairest.blogspot.com/2013/07/cabelo-cosido-em-banda.html
IP172.217.22.161
ASNAS15169 Google Inc.
Location United States
Report completed2017-10-13 13:24:53 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2017-10-13 2 atat.ro/about.html Malware
2017-10-13 2 www.atat.ro/about.html Phishing
2017-10-13 2 www.atat.ro/p/about.html Phishing
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 172.217.22.161

Date UQ / IDS / BL URL IP
2017-12-11 22:00:18 +0100
0 - 0 - 2 lorelose1810.blogspot.de/search/label/floaty% (...) 172.217.22.161
2017-12-11 22:00:09 +0100
0 - 0 - 2 beatrice-borromeo-news.blogspot.de/search/lab (...) 172.217.22.161
2017-12-11 21:56:42 +0100
0 - 0 - 3 josh-morgan-subways-news.blogspot.de/2011/09/ (...) 172.217.22.161
2017-12-11 21:56:45 +0100
0 - 0 - 2 josh-morgan-subways-news.blogspot.de/2011/09/ (...) 172.217.22.161
2017-12-11 21:41:43 +0100
0 - 0 - 2 tokoaccretiaa.blogspot.com/2012/12/blog-post.htm 172.217.22.161
2017-12-11 21:41:43 +0100
0 - 0 - 2 tokoaccretiaa.blogspot.com/2012/12/toko-accre (...) 172.217.22.161
2017-12-11 21:41:42 +0100
0 - 0 - 2 tokoaccretiaa.blogspot.com/2012_12_01_archive.html 172.217.22.161
2017-12-11 21:37:57 +0100
0 - 0 - 4 lorelose1810.blogspot.ca/search/label/winter% (...) 172.217.22.161
2017-12-11 21:36:43 +0100
1 - 0 - 3 tektekdunk.blogspot.com.es/2013/03/efax-corpo (...) 172.217.22.161
2017-12-11 17:58:21 +0100
0 - 0 - 2 hakingandsecurity.blogspot.com/2013/11/make-b (...) 172.217.22.161

Last 10 reports on ASN: AS15169 Google Inc.

Date UQ / IDS / BL URL IP
2017-12-12 02:00:57 +0100
0 - 0 - 4 community.idealwebtech.com/index.php?s=b80544 (...) 146.148.45.143
2017-12-12 01:59:27 +0100
0 - 0 - 2 southsongz4all.blogspot.ru/p/dmca-link-remova (...) 216.58.211.129
2017-12-12 01:53:47 +0100
0 - 0 - 1 goo.gl/d2ztRM 216.58.211.142
2017-12-12 01:49:05 +0100
0 - 0 - 1 www2.stardollbedavalari.gen.tr/2012/08/stardo (...) 173.194.73.121
2017-12-12 01:43:10 +0100
0 - 0 - 1 1lira.blogspot.com/2007/11/sabun-nasl-yaplr.h (...) 216.58.211.129
2017-12-12 01:41:23 +0100
0 - 0 - 2 1lira.blogspot.in/2009/08/dunyada-en-fazla-se (...) 216.58.211.129
2017-12-12 01:39:12 +0100
0 - 0 - 0 michaelharden1978@gmail.com 216.58.211.133
2017-12-12 01:39:12 +0100
0 - 0 - 0 michaelharden1978@gmail.com 216.58.211.133
2017-12-12 01:37:15 +0100
0 - 0 - 1 thecreationfallacy.blogspot.de/2012/09/emily- (...) 216.58.211.129
2017-12-12 01:37:13 +0100
0 - 0 - 1 overloadoverlook2110.blogspot.de/2011/09/off- (...) 216.58.211.129

No other reports on domain: hairest.blogspot.com



JavaScript

Executed Scripts (95)


Executed Evals (85)

#1 JavaScript::Eval (size: 76, repeated: 1) - SHA256: 324f9d7f2e873277a20c8b84cbd76f2fec79e1f4f000a78f4bc491cce7cd3ff7

                                        ((function() {
    var a = 3346745396;
    var b = -1405401344;
    return 418859 + '.' + (a + b)
})())
                                    

#2 JavaScript::Eval (size: 19, repeated: 1) - SHA256: 5421715bbdaf2550e31d10fc28d444310a8fe7147bbddecf0abb490358a1553b

                                        /.*\d:\d\d | \d+$/g
                                    

#3 JavaScript::Eval (size: 38, repeated: 1) - SHA256: d8865e7cdf96e062894a735e8402bba0823fbb0b352bc9c1613f88545aaaa269

                                        0,
function(N) {
    N.I && n(N, 0);
}
                                    

#4 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 8da56aec94b129494511119d3cbb605eafe4a7d359236a830caeaf19bf69f61c

                                        0,
function(N) {
    N.W(0);
}
                                    

#5 JavaScript::Eval (size: 30, repeated: 1) - SHA256: d705dea63c00804bcdeb81d19215819acdc53502903b55f21e68449af96c2d8e

                                        0,
function(N) {
    N.W(3);
}
                                    

#6 JavaScript::Eval (size: 30, repeated: 1) - SHA256: ca496dbc6c0006cb7b8c37fdc5672176e460285e94ffd1e0bdf77f7ab5954522

                                        0,
function(N) {
    N.W(4);
}
                                    

#7 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 258a028610b482f8134b5aa34196a8715994606d377b312c7ce4e882efe93916

                                        0,
function(N) {
    N.W(7);
}
                                    

#8 JavaScript::Eval (size: 31, repeated: 1) - SHA256: e262737bfa16ff0579e48d601746116f28c6e97e989f91e097c80cdd2b9c6ac0

                                        0,
function(N) {
    O(N, 1);
}
                                    

#9 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 64ea34ce9b9037661425ec0068f214aaa3660f2e4ed005536318bab1edeefab6

                                        0,
function(N) {
    O(N, 2);
}
                                    

#10 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 0889a733d90052e6677dac5e37f323b10a4254909b55dc3101996027e184f909

                                        0,
function(N) {
    O(N, 4);
}
                                    

#11 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 2f3ad8d6d8f52b69aa7c17aee03da970ff00cdc81823d3bb752f01b47447b9ee

                                        0,
function(N) {
    Y(N, 1);
}
                                    

#12 JavaScript::Eval (size: 31, repeated: 1) - SHA256: ed48435effecf90966c76ede3973f1514cd2939e02f9c98af2155b498d80e37f

                                        0,
function(N) {
    Y(N, 2);
}
                                    

#13 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 7b76f1bc3797b595c426e228d9ad6c3ae76a0fa4c668c457b5ef4b674d23d26f

                                        0,
function(N) {
    Y(N, 4);
}
                                    

#14 JavaScript::Eval (size: 187, repeated: 1) - SHA256: 58062062880dc4a405aa2befc3d160abfb914dd1bb245ff4775aceecc8ad831a

                                        0,
function(N, S) {
    ((S.push(N[0] << 24 | N[1] << 16 | N[2] << 8 | N[3]), S).push(N[4] << 24 | N[5] << 16 | N[6] << 8 | N[7]), S).push(N[8] << 24 | N[9] << 16 | N[10] << 8 | N[11]);
}
                                    

#15 JavaScript::Eval (size: 96, repeated: 1) - SHA256: bd6289e484900a6a3d62e57ecd0e5bc1f530237262ef7e41129057845e8c7824

                                        0,
function(N, S) {
    (N = (S = g(N), N.Y(S)), N[0]).removeEventListener(N[1], N[2], false);
}
                                    

#16 JavaScript::Eval (size: 83, repeated: 1) - SHA256: ccfe2b2634426a82d9d901b59df9906b66c5271ca6147857265bac9fdb849645

                                        0,
function(N, S) {
    M(N, 1, 5) || (S = y(N), E(N, S.o, S.f.apply(S.F, S.T)));
}
                                    

#17 JavaScript::Eval (size: 49, repeated: 1) - SHA256: e0b3b3535abafa809817d78d6802f616c40c0af73ead3dd18a39ae643c32b328

                                        0,
function(N, S) {
    S = N.Y(g(N)), f(N, S);
}
                                    

#18 JavaScript::Eval (size: 125, repeated: 1) - SHA256: 866ef6641de152397e72b2952fdb5853fae4ab20ffbec812280e5abf59a1b5c0

                                        0,
function(N, S) {
    if (void 0 === (S = this.D[N], S)) {
        throw I(this, 30, 0, N), this.h;
    }
    return S();
}
                                    

#19 JavaScript::Eval (size: 78, repeated: 1) - SHA256: fb6357e1d93637e5be85466aeb613b581b2bb291b4b20301dbd7489ea78d831b

                                        0,
function(N, S, h) {
    (h = (S = g(N), g(N)), E)(N, h, N.Y(h) % N.Y(S));
}
                                    

#20 JavaScript::Eval (size: 78, repeated: 1) - SHA256: 0c17fea695fa875425561e5f9886a8ae1f519cb745f8ce57cb91f6785dc9afca

                                        0,
function(N, S, h) {
    (h = (S = g(N), g(N)), E)(N, h, N.Y(h) * N.Y(S));
}
                                    

#21 JavaScript::Eval (size: 78, repeated: 1) - SHA256: de1a36abcdef994cd6cbc0ea19c1387a0740f7451d6ec1193a0232e7be7ea29c

                                        0,
function(N, S, h) {
    (h = (S = g(N), g(N)), E)(N, h, N.Y(h) + N.Y(S));
}
                                    

#22 JavaScript::Eval (size: 78, repeated: 1) - SHA256: 23fe0dd0d2e930a6eb80a7b65957cbfa8e1b22b990f9d665cf696da542e58ad5

                                        0,
function(N, S, h) {
    (h = (S = g(N), g(N)), E)(N, h, N.Y(h) - N.Y(S));
}
                                    

#23 JavaScript::Eval (size: 79, repeated: 1) - SHA256: 68f172c1689f0cbcca3bff2b1cc626bbc18f48069cad96c10a266084d30e7f3c

                                        0,
function(N, S, h) {
    (h = (S = g(N), g(N)), S = N.Y(S), E)(N, h, l(S));
}
                                    

#24 JavaScript::Eval (size: 86, repeated: 1) - SHA256: 0d3f169de6b18bf2168d3addd5695169d46da59df8a22e305c8b8e2959e85b79

                                        0,
function(N, S, h) {
    0 != (h = (S = g(N), g(N)), N.Y(S)) && E(N, 118, N.Y(h));
}
                                    

#25 JavaScript::Eval (size: 121, repeated: 1) - SHA256: 1d9cb755a437ddbc74397a0b18340c51276d6e02718c7387530df4a064f952da

                                        0,
function(N, S, h) {
    M(N, 1, 5) ||
        (S = g(N), h = g(N), E(N, h, function(N) {
            return eval(N);
        }(N.Y(S))));
}
                                    

#26 JavaScript::Eval (size: 86, repeated: 1) - SHA256: b20c58d152801d7c78d4761f7bcc22c6faf5348be598986d1a013f921c3a0dcc

                                        0,
function(N, S, h) {
    S = (h = (S = g(N), g(N)), N).D[S] && N.Y(S), E(N, h, S);
}
                                    

#27 JavaScript::Eval (size: 70, repeated: 1) - SHA256: 7c953af2c92884638579fed343e060adb66bf2de66c2a613eb49f7211964710d

                                        0,
function(N, S, h) {
    S = g(N), h = g(N), E(N, h, "" + N.Y(S));
}
                                    

#28 JavaScript::Eval (size: 244, repeated: 1) - SHA256: 4db5e87085ed6a5fc6f01256b6741fae442ebac59444bfd17c77de5da9612d6b

                                        0,
function(N, S, h) {
    if (3 == N.length) {
        for (h = 0; 3 > h; h++) {
            S[h] += N[h];
        }
        for (N = [13, 8, 13, 12, (h = 0, 16), 5, 3, 10, 15]; 9 > h; h++) {
            S[3](S, h % 3, N[h]);
        }
    }
}
                                    

#29 JavaScript::Eval (size: 133, repeated: 1) - SHA256: b8d5e97b507ab98d81624974487d6f20c31a1e624f444f0391150983ae2f3eb1

                                        0,
function(N, S, h) {
    return h = function() {
        return N;
    }, S = function() {
        return h();
    }, S[this.C] = function(q) {
        N = q;
    }, S;
}
                                    

#30 JavaScript::Eval (size: 292, repeated: 1) - SHA256: 8a465713df9233962fbea99d7b35a4bc236ad9a6f7ef114242bd69e098ae63d4

                                        0,
function(N, S, h, w, k, u, c) {
    if ((S = g(N), h = J(N), w = "", N).D[152]) {
        for (k = N.Y(152), c = k.length, u = 0; h--;) {
            u = (u + J(N)) % c, w += z[k[u]];
        }
    } else {
        for (; h--;) {
            w += z[g(N)];
        }
    }
    E(N, S, w);
}
                                    

#31 JavaScript::Eval (size: 214, repeated: 1) - SHA256: 45bc1def5386fc7181d2f76b88c052e55cc2c788152961d6a972f2299e0bf108

                                        0,
function(N, S, h, z) {
    (((z = (h = (N &= (S = N & 4, 3), g)(this), g(this)), h = this.Y(h), S) &&
            (h = C(("" + h).replace(/\r\n/g, "\n"))), N) &&
        G(this, z, X(h.length, 2)), G)(this, z, h);
}
                                    

#32 JavaScript::Eval (size: 103, repeated: 1) - SHA256: 1044b4064bd4baf34825c4c447e69f701f37a0415661a30023d262ad8804f9e3

                                        0,
function(N, S, h, z) {
    (S = (h = (S = g(N), g)(N), z = g(N), N.Y(S)) == N.Y(h), E)(N, z, +S);
}
                                    

#33 JavaScript::Eval (size: 102, repeated: 1) - SHA256: b4620669c321d4e0a7483ad23662bf639a3b7cae1fc94cb321f23bc0649df381

                                        0,
function(N, S, h, z) {
    (S = (h = (S = g(N), g)(N), z = g(N), N.Y(S)) > N.Y(h), E)(N, z, +S);
}
                                    

#34 JavaScript::Eval (size: 89, repeated: 1) - SHA256: 4f75300bb4ec430dbf366a00cbf45d8493830c83cb5cc1491ce046228c322549

                                        0,
function(N, S, h, z) {
    (S = g(N), h = g(N), z = g(N), E)(N, z, N.Y(S) | N.Y(h));
}
                                    

#35 JavaScript::Eval (size: 90, repeated: 1) - SHA256: 2b178759ca0c02871dad5cbedcca3aaf1f74bb2154f4e64051627ed23d0d3505

                                        0,
function(N, S, h, z) {
    (S = g(N), h = g(N), z = g(N), E)(N, z, N.Y(S) || N.Y(h));
}
                                    

#36 JavaScript::Eval (size: 108, repeated: 1) - SHA256: 2a8a7ceae4a67a0b1239bba7849f4d63bc30d6edc2aff7d508116567b25aac0a

                                        0,
function(N, S, h, z) {
    (h = (z = (h = (S = g(N), g(N)), g(N)), N.Y(h)), S = N.Y(S), E)(N, z, S[h]);
}
                                    

#37 JavaScript::Eval (size: 89, repeated: 1) - SHA256: 3c8d937f4dc252c0fa75c218d201c9e5c6ac0724f3875bc7da8365d299cee219

                                        0,
function(N, S, h, z) {
    (z = (h = (S = g(N), g)(N), g(N)), E)(N, z, N.Y(S) << h);
}
                                    

#38 JavaScript::Eval (size: 89, repeated: 1) - SHA256: 6e1955d9ce190bb94138ed022893969493fa794877facaa7ad18f7c9dbc39740

                                        0,
function(N, S, h, z) {
    (z = (h = (S = g(N), g)(N), g(N)), E)(N, z, N.Y(S) >> h);
}
                                    

#39 JavaScript::Eval (size: 92, repeated: 1) - SHA256: 7f949c59d0ed291e7d4a6f10ebf7f899b38ac1e9e1c9a946385720a7de14b4e0

                                        0,
function(N, S, h, z) {
    (z = (h = (S = g(N), g)(N), g(N)), N).Y(S)[N.Y(h)] = N.Y(z);
}
                                    

#40 JavaScript::Eval (size: 142, repeated: 1) - SHA256: a1210e54732b29d98ec225ac59c5235f4ba70cc589ea2400ac51b31836e57223

                                        0,
function(N, S, h, z) {
    for (; h--;) {
        118 != h && 92 != h && S.D[h] && (S.D[h] = S[z](S[N](h), this));
    }
    S[N] = this;
}
                                    

#41 JavaScript::Eval (size: 243, repeated: 1) - SHA256: d7d68a16d81935c46e23d4cb97cd41e231f9ced8f9a2c3d2c339ae420730ca7c

                                        0,
function(N, S, h, z) {
    if ((S = N.J.pop())) {
        for (h = g(N); 0 < h; h--) {
            z = g(N), S[z] = N.D[z];
        }
        S[S[246] = N.D[246], 108] = N.D[108], N.D = S;
    } else {
        E(N, 118, N.g.length);
    }
}
                                    

#42 JavaScript::Eval (size: 170, repeated: 1) - SHA256: 7fd64224abb6cd92d73abf700e5cbce5e4938290e845991ca4c9a4ce8fa26bce

                                        0,
function(N, S, h, z) {
    try {
        z = N[(S + 2) % 3], N[S] = N[S] - N[(S + 1) % 3] - z ^ (1 == S ? z << h : z >>> h);
    } catch (w) {
        throw w;
    }
}
                                    

#43 JavaScript::Eval (size: 96, repeated: 1) - SHA256: 935aa90223cef086c6918da76f1125ae2c01e6aa62d31b67eef09e815ca48cff

                                        0,
function(N, S, h, z) {
    z = (S = g(N), h = g(N), g)(N), E(N, z, (N.Y(S) in N.Y(h)) + 0);
}
                                    

#44 JavaScript::Eval (size: 220, repeated: 1) - SHA256: 22dd9bb231ad1a1cad77e302b6b56b0e5477fdc01ed6d19b48ba528ce00364c1

                                        0,
function(N, S, h, z, w) {
    (z = (w = (S = (S = g(N), h = g(N), z = g(N), N.Y(S)), N.Y(g(N))), h = N.Y(h), N.Y(z)), 0 !== S) &&
    (z = L(N, z, w, 1, S, h), S.addEventListener(h, z, x), E(N, 235, [S, h, z]));
}
                                    

#45 JavaScript::Eval (size: 242, repeated: 1) - SHA256: 9605a5d40e4ce193f238bccded9cb89a6c20096af9eda73f5c2c5e6cca01b253

                                        0,
function(N, S, h, z, w) {
    for (z = (h = g((S = [], N)), 0); z < h; z++) {
        w = g(N), S.push(N.Y(w));
    }
    (h = g(N), E)(N, h, function(N, h) {
        N.b++;
        try {
            for (h = 0; h < S.length; h++) {
                (0, S[h])(N);
            }
        } finally {
            N.b--;
        }
    });
}
                                    

#46 JavaScript::Eval (size: 138, repeated: 1) - SHA256: 9afb735ab8f875ae8d4a5f2daae3adb1074860c1d51cc3108895a2c66fd7e854

                                        0,
function(N, S, h, z, w) {
    for (z = (w = (h = (S = g(N), J(N)), 0), []); w < h; w++) {
        z.push(g(N));
    }
    E(N, S, z);
}
                                    

#47 JavaScript::Eval (size: 126, repeated: 1) - SHA256: c704a67877b4dc670e63eabc43f3dfc4d5ee4e1fd7fa95ce90def935ac608cc6

                                        0,
function(N, S, h, z, w) {
    w = (z = (h = (S = g(N), g(N)), N).Y(g(N)), N).Y(g(N)), h = N.Y(h), E(N, S, L(N, h, z, w));
}
                                    

#48 JavaScript::Eval (size: 405, repeated: 1) - SHA256: fd6dd425ccea1a87c7c78af367b1421ddaacb2e42c480c27b0a1835f828a6ed7

                                        0,
function(N, S, h, z, w, u) {
    if (!M(N, 1, 255)) {
        if ("object" == (N = (z = (h = (S = (w = (z = (h = (S = g(N), g(N)), g)(N), g)(N), N).Y(S), N.Y(h)), N).Y(z), N).Y(w), l)(S)) {
            for (u in w = [], S) {
                w.push(u);
            }
            S = w;
        }
        for (u = (w = 0, S.length); w < u; w += z) {
            h(S.slice(w, w + z), N);
        }
    }
}
                                    

#49 JavaScript::Eval (size: 220, repeated: 1) - SHA256: 92add830e9909d9df06b406770fe2a6bb58c2796d39444c2c7355be013ed4a08

                                        0,
function(N, S, h, z, w, u) {
    return N = ((u = (h = (z = (w = function() {
        return z();
    }, function() {
        return z[h.V + (w[h.i] === S) - !u[h.i]];
    }), this), h.O), w[h.C] = function(N) {
        z[h.A] = N;
    }, w)[h.C](N), w);
}
                                    

#50 JavaScript::Eval (size: 339, repeated: 1) - SHA256: e224d787c12f546994ba00a091cfd8331434e59a6e74f28dffb8f7df2e217d7a

                                        0,
function(N, S, h, z, w, u, c) {
    M(N, 1, 5) ||
        (S = y(N), w = S.f, z = S.F, h = S.T, c = h.length, 0 == c ? (u = new(z[w])) : 1 == c ? (u = new(z[w])(h[0])) : 2 == c ? (u = new(z[w])(h[0], h[1])) : 3 == c ? (u = new(z[w])(h[0], h[1], h[2])) : 4 == c ? (u = new(z[w])(h[0], h[1], h[2], h[3])) : I(N, 22), E(N, S.o, u));
}
                                    

#51 JavaScript::Eval (size: 39, repeated: 1) - SHA256: bb6753823aebc94f3cc0c4b3c3ed5b60753622b1198ec8abd45102911d59e131

                                        0,
function($, _) {
    _._ += !_.$[_[_._] = $[0]]
}
                                    

#52 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 6b23c0d5f35d1b11f9b683f0b0a617355deb11277d91ae091d399c655b87940d

                                        C
                                    

#53 JavaScript::Eval (size: 485, repeated: 1) - SHA256: d2f59596a19a7d054ee79567b809b68f5b8a7845e9592e215726e2d8b9db6bf0

                                        C = function(N, S, h, z, w) {
    for (S = [], z = h = 0; z < N.length; z++) {
        w = N.charCodeAt(z), 128 > w ? (S[h++] = w) : (2048 > w ? (S[h++] = w >> 6 | 192) : (55296 == (w & 64512) &&
            z + 1 < N.length && 56320 == (N.charCodeAt(z + 1) & 64512) ? (w = 65536 + ((w & 1023) << 10) + (N.charCodeAt(++z) & 1023), S[h++] = w >> 18 | 240, S[h++] = w >> 12 & 63 | 128) : (S[h++] = w >> 12 | 224), S[h++] = w >> 6 & 63 | 128), S[h++] = w & 63 | 128);
    }
    return S;
}
                                    

#54 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 3f39d5c348e5b79d06e842c114e6cc571583bbf44e4b0ebfda1a01ec05745d43

                                        D
                                    

#55 JavaScript::Eval (size: 603, repeated: 1) - SHA256: 00fef79c6050452c97025123f0dd2247b88e8cd5db6aa46537e1295248c1f53b

                                        D = function(N, S, h, z, w, q, A) {
    N.b++;
    try {
        for (h = (q = (w = (z = 5001, void 0), 0), N.g.length);
            (--z || N.M) && (q = N.Y(118)) < h;) {
            try {
                E(N, 92, q), A = g(N), (w = N.Y(A)) && w.call ? w(N) : I(N, 21, 0, A), N.j = true, M(N, 0, 2);
            } catch (T) {
                T != N.h && (N.Y(171) ? I(N, 22, T) : E(N, 171, T));
            }
        }
        z || I(N, 33);
    } catch (T) {
        try {
            I(N, 22, T);
        } catch (Z) {
            K(N, Z);
        }
    }
    return (h = N.Y(104), S) && E(N, 118, S), N.b--, h;
}
                                    

#56 JavaScript::Eval (size: 1, repeated: 1) - SHA256: a9f51566bd6705f7ea6ad54bb9deb449f795582d6529a0e22207b8981233ec58

                                        E
                                    

#57 JavaScript::Eval (size: 325, repeated: 1) - SHA256: 948c0d7b025cd87ed8553ea4b43a2cd04d49839b3638cf8dda494a1e2ca06c77

                                        E = function(N, S, h) {
    if (118 == S || 92 == S) {
        if (N.D[S]) {
            N.D[S][N.C](h);
        } else {
            N.D[S] = N.P(h);
        }
    } else if (190 != S && 11 != S && 45 != S && 246 != S || !N.D[S]) {
        N.D[S] = N.H(h, N.Y);
    }
    10 == S && (N.c = void 0, E(N, 118, N.Y(118) + 4));
}
                                    

#58 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 333e0a1e27815d0ceee55c473fe3dc93d56c63e3bee2b3b4aee8eed6d70191a3

                                        G
                                    

#59 JavaScript::Eval (size: 413, repeated: 1) - SHA256: 179ea18df698fb2b5c98429d89bf3cd83efb5a001f6f02c6343dc074748e3624

                                        G = function(N, S, h, z, w, q) {
    for (N = (z = ((11 == (w = N.Y(S), S) ? (S = function(N, S, h, z) {
                if ((h = (S = w.length, S - 4 >> 3), w).K != h) {
                    h = (h << (z = [0, 0, 0, q], w.K = h, 3)) - 4;
                    try {
                        w.L = v(R(w, h), R(w, h + 4), z);
                    } catch (u) {
                        throw u;
                    }
                }
                w.push(w.L[S & 7] ^ N);
            }, q = N.Y(73)) : (S = function(N) {
                w.push(N);
            }), z) &&
            S(z & 255), 0), h).length; z < N; z++) {
        S(h[z]);
    }
}
                                    

#60 JavaScript::Eval (size: 1, repeated: 1) - SHA256: a83dd0ccbffe39d071cc317ddf6e97f5c6b1c87af91919271f9fa140b0508c6c

                                        I
                                    

#61 JavaScript::Eval (size: 441, repeated: 1) - SHA256: 60f5d814185902aa143025db9d91cb7cd18e23d3d055c6bbfefd30bfc4c91728

                                        I = function(N, S, h, z, w) {
    3 < (h = ((((S = (w = N.Y(92), [S, w >> 8 & 255, w & 255]), void 0) != z &&
                    S.push(z), 0 == N.Y(246).length) &&
                (N.D[246] = void 0, E(N, 246, S)), z = "", h) &&
            (h.message && (z += h.message), h.stack && (z += ":" + h.stack)), N.Y(108)), h) &&
        (z = z.slice(0, h - 3), h -= z.length + 3, z = C(z.replace(/\r\n/g, "\n")), G(N, 11, X(z.length, 2).concat(z), 12)), E(N, 108, h);
}
                                    

#62 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5

                                        J
                                    

#63 JavaScript::Eval (size: 85, repeated: 1) - SHA256: 1657d6bb6644193ced8c3309fade21f02a86447bd280edce72c71aa74a0d3372

                                        J = function(N, S) {
    return (S = g(N), S) & 128 && (S = S & 127 | g(N) << 7), S;
}
                                    

#64 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 72dfcfb0c470ac255cde83fb8fe38de8a128188e03ea5ba5b2a93adbea1062fa

                                        L
                                    

#65 JavaScript::Eval (size: 272, repeated: 1) - SHA256: e61e6d33dfdde0a24873b2c97152c41cc9bcadbe579b007d738acd937e5f3be6

                                        L = function(N, S, h, z, w, q) {
    return function() {
        var A = z & 1,
            T = [6, S, h, void 0, w, q, arguments];
        if (z & 2) {
            var Z = (d(N, T), V)(N, true, false, false);
        } else {
            A && N.R.length ? d(N, T) : A ? (d(N, T), V(N, true, false, false)) : (Z = Q(N, T));
        }
        return Z;
    };
}
                                    

#66 JavaScript::Eval (size: 1, repeated: 1) - SHA256: c4694f2e93d5c4e7d51f9c5deb75e6cc8be5e1114178c6a45b6fc2c566a0aa8c

                                        O
                                    

#67 JavaScript::Eval (size: 78, repeated: 1) - SHA256: 1856d749a0401a6daf21913e195fb7f785f40efa819ddbf36f659ed21e976f87

                                        O = function(N, S, h, z) {
    (z = (h = g(N), g(N)), G)(N, z, X(N.Y(h), S));
}
                                    

#68 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 8c2574892063f995fdf756bce07f46c1a5193e54cd52837ed91e32008ccf41ac

                                        R
                                    

#69 JavaScript::Eval (size: 88, repeated: 1) - SHA256: 5a00a7445dbf775544dafd1871b6c79d337c8106fae32b9ccacb6578b4438a2d

                                        R = function(N, S) {
    return N[S] << 24 | N[S + 1] << 16 | N[S + 2] << 8 | N[S + 3];
}
                                    

#70 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 18f5384d58bcb1bba0bcd9e6a6781d1a6ac2cc280c330ecbab6cb7931b721552

                                        Y
                                    

#71 JavaScript::Eval (size: 118, repeated: 1) - SHA256: a2b6ef9d55cab74e7def9f57718b0f50a6baa68b0391f31eab7d8d191baa5c61

                                        Y = function(N, S, h, z) {
    for (z = (h = g(N), 0); 0 < S; S--) {
        z = z << 8 | g(N);
    }
    E(N, h, z);
}
                                    

#72 JavaScript::Eval (size: 5950, repeated: 1) - SHA256: b6315a8be87e1dc95b9c44a506b8e6d331a0aa2406c491481d99c773cd323c2d

                                        ["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\u003d\u003d"]
                                    

#73 JavaScript::Eval (size: 2, repeated: 14) - SHA256: 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                        []
                                    

#74 JavaScript::Eval (size: 35, repeated: 1) - SHA256: 1e3606d95ce27d593157594820335681a9380f51a96147303cd8000e60a95e12

                                        document.createElement('div').style
                                    

#75 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 252f10c83610ebca1a059c0bae8255eba2f95be4d1d7bcfa89d7248a82d9f111

                                        f
                                    

#76 JavaScript::Eval (size: 83, repeated: 1) - SHA256: a842dfd17f55363858c13880e44d156189ec1cc58919f44e14669f413d24e6ab

                                        f = function(N, S) {
    (N.J.push(N.D.slice()), N.D[118] = void 0, E)(N, 118, S);
}
                                    

#77 JavaScript::Eval (size: 1, repeated: 1) - SHA256: cd0aa9856147b6c5b4ff2b7dfee5da20aa38253099ef1b4a64aced233c9afe29

                                        g
                                    

#78 JavaScript::Eval (size: 291, repeated: 1) - SHA256: a79d3f0a306497e0058afbd2fd7d4f4cfb0f1b02f57fc7eb5cdcac819fe16b20

                                        g = function(N, S, h) {
    if (!(S = N.Y(118), S in N.g)) {
        throw I(N, 31), N.h;
    }
    return ((void 0 == N.c && (N.c = R(N.g, S - 4), N.s = void 0), N).s != S >> 3 &&
        (N.s = S >> 3, h = [0, 0, 0, N.Y(10)], N.l = v(N.c, N.s, h)), E(N, 118, S + 1), N.g)[S] ^ N.l[S % 8];
}
                                    

#79 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 148de9c5a7a44d19e56cd9ae1a554bf67847afb0c58f6e12fa29ac7ddfca9940

                                        p
                                    

#80 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 454349e422f05297191ead13e21d3db520e5abef52055e4964b82fb213f593a1

                                        r
                                    

#81 JavaScript::Eval (size: 133, repeated: 1) - SHA256: 0cdccae6cbcac8ced4ae997ee4c805e527a25228d1e13afd3be276c8c8f51efc

                                        r = function(N, S, h) {
    return (h = N.Y(118), N.g && h < N.g.length ? (E(N, 118, N.g.length), f(N, S)) : E(N, 118, S), D)(N, h);
}
                                    

#82 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 4c94485e0c21ae6c41ce1dfe7b6bfaceea5ab68e40a2476f50208e526f506080

                                        v
                                    

#83 JavaScript::Eval (size: 366, repeated: 1) - SHA256: ab9ee7388c643e1a664dabd064a8041df5be2bcba0aa9c1472b7acc2d128fe6f

                                        v = function(N, S, h, z) {
    try {
        for (z = 0; 79669387488 != z;) {
            N += (S << 4 ^ S >>> 5) + S ^ z + h[z & 3], z += 2489668359, S += (N << 4 ^ N >>> 5) + N ^ z + h[z >>> 11 & 3];
        }
        return [N >>> 24, N >> 16 & 255, N >> 8 & 255, N & 255, S >>> 24, S >> 16 & 255, S >> 8 & 255, S & 255];
    } catch (w) {
        throw w;
    }
}
                                    

#84 JavaScript::Eval (size: 1, repeated: 1) - SHA256: a1fce4363854ff888cff4b8e7875d600c2682390412a8cf79b37d0b11148b0fa

                                        y
                                    

#85 JavaScript::Eval (size: 262, repeated: 1) - SHA256: 0be0f4d41795c815f90fbe4e303986ce3517f4d0c1d2a3af615ef41478900014

                                        y = function(N, S, h, z, w, q) {
    for (q = (w = (z = ((S = {}, h = g(N), S).o = g(N), S.T = [], g(N) - 1), g(N)), 0); q < z; q++) {
        S.T.push(g(N));
    }
    for ((S.f = N.Y(h), S).F = N.Y(w); z--;) {
        S.T[z] = N.Y(S.T[z]);
    }
    return S;
}
                                    

Executed Writes (57)

#1 JavaScript::Write (size: 0, repeated: 6) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                    

#2 JavaScript::Write (size: 1, repeated: 4) - SHA256: 36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068

                                        
                                    

#3 JavaScript::Write (size: 1, repeated: 1) - SHA256: 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b

                                        1
                                    

#4 JavaScript::Write (size: 2, repeated: 1) - SHA256: 4a44dc15364204a80fe80e9039455cc1608281820fe2b24f1e5233ade6af1dd5

                                        10
                                    

#5 JavaScript::Write (size: 2, repeated: 1) - SHA256: 4fc82b26aecb47d2868c4efbe3581732a3e7cbcc6c2efb32062c08170a05eeb8

                                        11
                                    

#6 JavaScript::Write (size: 2, repeated: 1) - SHA256: 6b51d431df5d7f141cbececcf79edf3dd861c3b4069f0b11661a3eefacbba918

                                        12
                                    

#7 JavaScript::Write (size: 2, repeated: 1) - SHA256: 3fdba35f04dc8c462986c992bcf875546257113072a909c162f7e470e581e278

                                        13
                                    

#8 JavaScript::Write (size: 2, repeated: 1) - SHA256: 8527a891e224136950ff32ca212b45bc93f69fbb801c3b1ebedac52775f99e61

                                        14
                                    

#9 JavaScript::Write (size: 2, repeated: 1) - SHA256: e629fa6598d732768f7c726b4b621285f9c3b85303900aa912017db7617d8bdb

                                        15
                                    

#10 JavaScript::Write (size: 2, repeated: 1) - SHA256: b17ef6d19c7a5b1ee83b907c595526dcb1eb06db8227d650d5dda0a9f4ce8cd9

                                        16
                                    

#11 JavaScript::Write (size: 2, repeated: 1) - SHA256: 4523540f1504cd17100c4835e85b7eefd49911580f8efff0599a8f283be6b9e3

                                        17
                                    

#12 JavaScript::Write (size: 2, repeated: 1) - SHA256: 4ec9599fc203d176a301536c2e091a19bc852759b255bd6818810a42c5fed14a

                                        18
                                    

#13 JavaScript::Write (size: 2, repeated: 1) - SHA256: 9400f1b21cb527d7fa3d3eabba93557a18ebe7a2ca4e471cfe5e4c5b4ca7f767

                                        19
                                    

#14 JavaScript::Write (size: 1, repeated: 1) - SHA256: d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35

                                        2
                                    

#15 JavaScript::Write (size: 2, repeated: 1) - SHA256: f5ca38f748a1d6eaf726b8a42fb575c3c71f1864a8143301782de13da2d9202b

                                        20
                                    

#16 JavaScript::Write (size: 2, repeated: 1) - SHA256: 6f4b6612125fb3a0daecd2799dfd6c9c299424fd920f9b308110a2c1fbd8f443

                                        21
                                    

#17 JavaScript::Write (size: 2, repeated: 1) - SHA256: 785f3ec7eb32f30b90cd0fcf3657d388b5ff4297f2f9716ff66e9b69c05ddd09

                                        22
                                    

#18 JavaScript::Write (size: 2, repeated: 1) - SHA256: 535fa30d7e25dd8a49f1536779734ec8286108d115da5045d77f3b4185d8f790

                                        23
                                    

#19 JavaScript::Write (size: 2, repeated: 1) - SHA256: c2356069e9d1e79ca924378153cfbbfb4d4416b1f99d41a2940bfdb66c5319db

                                        24
                                    

#20 JavaScript::Write (size: 2, repeated: 1) - SHA256: b7a56873cd771f2c446d369b649430b65a756ba278ff97ec81bb6f55b2e73569

                                        25
                                    

#21 JavaScript::Write (size: 2, repeated: 1) - SHA256: 5f9c4ab08cac7457e9111a30e4664920607ea2c115a1433d7be98e97e64244ca

                                        26
                                    

#22 JavaScript::Write (size: 2, repeated: 1) - SHA256: 670671cd97404156226e507973f2ab8330d3022ca96e0c93bdbdb320c41adcaf

                                        27
                                    

#23 JavaScript::Write (size: 2, repeated: 1) - SHA256: 59e19706d51d39f66711c2653cd7eb1291c94d9b55eb14bda74ce4dc636d015a

                                        28
                                    

#24 JavaScript::Write (size: 2, repeated: 1) - SHA256: 35135aaa6cc23891b40cb3f378c53a17a1127210ce60e125ccf03efcfdaec458

                                        29
                                    

#25 JavaScript::Write (size: 1, repeated: 1) - SHA256: 4e07408562bedb8b60ce05c1decfe3ad16b72230967de01f640b7e4729b49fce

                                        3
                                    

#26 JavaScript::Write (size: 2, repeated: 1) - SHA256: 624b60c58c9d8bfb6ff1886c2fd605d2adeb6ea4da576068201b6c6958ce93f4

                                        30
                                    

#27 JavaScript::Write (size: 2, repeated: 1) - SHA256: eb1e33e8a81b697b75855af6bfcdbcbf7cbbde9f94962ceaec1ed8af21f5a50f

                                        31
                                    

#28 JavaScript::Write (size: 1, repeated: 1) - SHA256: 4b227777d4dd1fc61c6f884f48641d02b4d121d3fd328cb08b5531fcacdabf8a

                                        4
                                    

#29 JavaScript::Write (size: 1, repeated: 1) - SHA256: ef2d127de37b942baad06145e54b0c619a1f22327b2ebbcfbec78f5564afe39d

                                        5
                                    

#30 JavaScript::Write (size: 1, repeated: 1) - SHA256: e7f6c011776e8db7cd330b54174fd76f7d0216b612387a5ffcfb81e6f0919683

                                        6
                                    

#31 JavaScript::Write (size: 1, repeated: 1) - SHA256: 7902699be42c8a8e46fbbb4501726517e86b22c56a189f7625a6da49081b2451

                                        7
                                    

#32 JavaScript::Write (size: 1, repeated: 1) - SHA256: 2c624232cdd221771294dfbb310aca000a0df6ac8b66b696d90ef06fdefb64a3

                                        8
                                    

#33 JavaScript::Write (size: 1, repeated: 1) - SHA256: 19581e27de7ced00ff1ce50b2047e7a567c76b1cbaebabe5ef03f7c3017bb5b7

                                        9
                                    

#34 JavaScript::Write (size: 16, repeated: 1) - SHA256: 179d2296541cc6cc3735dcefd744e76c893bdf22e340950093cb8c2a9dba219c

                                        < /strong></font >
                                    

#35 JavaScript::Write (size: 12, repeated: 1) - SHA256: 6383e3ab79831381d64fbfb9d0e0847628265a75c29eaf5d0500f4d2cc5ed940

                                        < /table></p >
                                    

#36 JavaScript::Write (size: 5, repeated: 35) - SHA256: b8073d8a2f01abcc6c6b69a83e3a57c34dc786f638df7da5c76b8e1197d16d13

                                        < /td>
                                    

#37 JavaScript::Write (size: 5, repeated: 6) - SHA256: 3ed7440ce0756928276fbc0d9c75b59a8e152f7121e8edda0730bbebe4b8604d

                                        < /tr>
                                    

#38 JavaScript::Write (size: 483, repeated: 1) - SHA256: 96a9b45f12916a845455d2a5d55461b52cd25599a352d282a6d5fd93b38e8106

                                        < a href = "http://www.webnode.com/r/53904cc605399/42d628f8?utm_source=affil&utm_medium=banner&utm_campaign=affil"
target = "_top" > < img src = "http://affiliate.webnode.com/accounts/default1/banners/webnode_banner_160x600_ver5.jpg"
alt = "Webnode - Crie seu site de gra�a!"
title = "Webnode - Crie seu site de gra�a!"
width = "160"
height = "600" / > < /a><img style="border:0" src="http:/ / affiliate.webnode.com / scripts / imp.php ? a_aid = 53904 cc605399 & amp;
a_bid = 42 d628f8 " width="
1 " height="
1 " alt="
" />
                                    

#39 JavaScript::Write (size: 483, repeated: 1) - SHA256: 2b0c14a0618991d569bfc6963e26a5dc884a47fd1f66b7f702a2ef414db89a43

                                        < a href = "http://www.webnode.com/r/53904cc605399/c476df8f?utm_source=affil&utm_medium=banner&utm_campaign=affil"
target = "_top" > < img src = "http://affiliate.webnode.com/accounts/default1/banners/webnode_banner_300x250_ver1.jpg"
alt = "Webnode - Crie seu site de gra�a!"
title = "Webnode - Crie seu site de gra�a!"
width = "300"
height = "250" / > < /a><img style="border:0" src="http:/ / affiliate.webnode.com / scripts / imp.php ? a_aid = 53904 cc605399 & amp;
a_bid = c476df8f " width="
1 " height="
1 " alt="
" />
                                    

#40 JavaScript::Write (size: 50, repeated: 1) - SHA256: 9919cbf41a991d115daf40c3b75f9bf15346fb2e6d82c7696bd3bd051f962072

                                        < a id = '580086'
style = 'display:none!important' > < /a>
                                    

#41 JavaScript::Write (size: 29, repeated: 1) - SHA256: f814e6ecd1ae504eb0585542aea300290d42f346b0b88e69189932e31db87e6b

                                        < font color = 'FF0000' > < strong >
                                    

#42 JavaScript::Write (size: 2877, repeated: 1) - SHA256: a8956dfb57aaaed0d9c305a8c8d88b98b880ff37f888d5db54ffbcf09017a7f6

                                        < head > < meta http - equiv = "Content-Type"
content = "text/html; charset=UTF8" > < link rel = "stylesheet"
type = "text/css"
href = "https://translate.googleapis.com/translate_static/css/translateelement.css" > < /head><body class="goog-te-banner" scroll="no" border=0 dir="ltr"><table border=0 cellspacing=0 cellpadding=0 width=100% height=100%><tr valign=middle><td width=1 nowrap><a href="https:/ / translate.google.com " class="
goog - logo - link " target="
_blank "><img src="
https: //www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png" alt="Google Translate"></a></td><td width=1><img src="https://www.google.com/images/cleardot.gif" width="9" height="15" title="The content of this secure page will be sent to Google for translation using a secure connection." alt="The content of this secure page will be sent to Google for translation using a secure connection." style="background-image:url(https://translate.googleapis.com/translate_static/img/te_ctrl3.gif);background-position:-56px 0px;margin:0 4px"></td><td class="goog-te-banner-margin"></td><td><table border=0 cellspacing=0 cellpadding=0 height=100%><tr id=":1.promptSection" style="display:none" valign=middle><td nowrap><span class="goog-te-banner-content">View this page in: <span id=":1.promptTargetLang"></span></span></td><td class="goog-te-banner-margin"></td><td nowrap><div class="goog-te-button"><div><button id=":1.confirm"><b>Translate</b></button></div></div></td><td class="goog-te-banner-margin"></td><td nowrap><div class="goog-te-button"><div><button id=":1.noAutoPopup"></button></div></div></td></tr><tr id=":1.progressSection" style="display:none" valign=middle><td><span class="goog-te-banner-content">Translation in progress&nbsp;<span dir="ltr">(<b id=":1.progressValue"></b>%)</span>&nbsp;<img src="https://translate.googleapis.com/translate_static/img/loading.gif"></span></td><td class="goog-te-banner-margin"></td><td nowrap><div class="goog-te-button"><div><button id=":1.cancel">Cancel</button></div></div></td></tr><tr id=":1.finishSection" style="display:none"><td><span class="goog-te-banner-content">Translated to: <span id=":1.finishTargetLang"></span></span></td><td class="goog-te-banner-margin"></td><td nowrap><div class="goog-te-button"><div><button id=":1.restore">Show original</button></div></div></td></tr><tr id=":1.errorSection" style="display:none" valign=middle><td><span id=":1.errorContent" class="goog-te-banner-content"></span></td></tr></table></td><td><td class="goog-te-banner-margin"></td></td><td width=1 id="options"></td><td width=1><a id=":1.close" class="goog-close-link" href="javascript:void(0)" title="Close"><img src="https://www.google.com/images/cleardot.gif" width="15" height="15" alt="Close" style="background-image:url(https://translate.googleapis.com/translate_static/img/te_ctrl3.gif);background-position:-28px 0px"></a></td></tr></table></body>
                                    

#43 JavaScript::Write (size: 382, repeated: 1) - SHA256: d2485660acb012ca34ca118cb59e6fbb11edb83ea98a0e050dd9bed186ee9274

                                        < head > < meta http - equiv = "Content-Type"
content = "text/html; charset=UTF8" > < link rel = "stylesheet"
type = "text/css"
href = "https://translate.googleapis.com/translate_static/css/translateelement.css" > < /head><body scroll="no" style="margin:0px;overflow:hidden" dir="ltr" marginHeight=0 marginWidth=0 leftMargin=0 topMargin=0 border=0><div id=":2.menuBody" class="goog-te-menu"></div > < /body>
                                    

#44 JavaScript::Write (size: 382, repeated: 1) - SHA256: c68c84b340115ef05318c4438aed24d3cd6198fdac59ac30dc7bac98452fda69

                                        < head > < meta http - equiv = "Content-Type"
content = "text/html; charset=UTF8" > < link rel = "stylesheet"
type = "text/css"
href = "https://translate.googleapis.com/translate_static/css/translateelement.css" > < /head><body scroll="no" style="margin:0px;overflow:hidden" dir="ltr" marginHeight=0 marginWidth=0 leftMargin=0 topMargin=0 border=0><div id=":3.menuBody" class="goog-te-menu"></div > < /body>
                                    

#45 JavaScript::Write (size: 191, repeated: 1) - SHA256: c0ad3e7ca1c5cb005179a2233dc55dda3825e83de37cca5bb05539b659303592

                                        < script type = "text/javascript"
src = "//www-blogger-opensocial.googleusercontent.com/gadgets/js/rpc.js?container=blogger&nocache=0&debug=0&c=1&v=89e9ae02ef0b8b6c37aabbfe2eeac27f&sv=10" > < /script>
                                    

#46 JavaScript::Write (size: 76, repeated: 1) - SHA256: 51f28c42cd4e80a2dd5ec90a946f237ca5209ff28abde66bb40acdd72691a5f1

                                        < table width = '100%'
border = 1 bgcolor = white style = 'border-collapse: collapse'
                                    

#47 JavaScript::Write (size: 23, repeated: 1) - SHA256: 4e45888eabaa6b172986c30d5e15cbc6f4664093e8672647969ec175155fa43a

                                        < td align = center > F < /td>
                                    

#48 JavaScript::Write (size: 23, repeated: 1) - SHA256: 5ebe221bcecc0c83fe9193499d1b1227fd2c9f9a2dbf63886eeef763cf3aabe1

                                        < td align = center > M < /td>
                                    

#49 JavaScript::Write (size: 24, repeated: 1) - SHA256: c69fc2521a6c633f7f64b870a61e0545e04c46ce33af15ee82f034dee2062a12

                                        < td align = center > Sa < /td>
                                    

#50 JavaScript::Write (size: 24, repeated: 1) - SHA256: 572ffa9588101371c163f63de5c876626a3366199c3e7213163b2e54c6e28ba5

                                        < td align = center > Su < /td>
                                    

#51 JavaScript::Write (size: 24, repeated: 1) - SHA256: bc0fb78df272f5806e0a81a754f819b5127bc4988e53bdf930937faadae62fb5

                                        < td align = center > Th < /td>
                                    

#52 JavaScript::Write (size: 24, repeated: 1) - SHA256: 8dcb2c7a26d3530cad633cb3f4cec9db4201b43e8a695410047846e9c735e4ba

                                        < td align = center > Tu < /td>
                                    

#53 JavaScript::Write (size: 23, repeated: 1) - SHA256: 6c8f333a01fb16eced8da341aeb9baa69d985476ff944c7cf84a766ce09e2cb7

                                        < td align = center > W < /td>
                                    

#54 JavaScript::Write (size: 4, repeated: 35) - SHA256: ad76f84d9f135f96caeea833da7e9ecc375198cd0414bb5541fbe08c68295b19

                                        < td >
                                    

#55 JavaScript::Write (size: 4, repeated: 7) - SHA256: 9b84c614b473bf1d182e62ccb9eff4250f9977d5da975548052d5ead5c442815

                                        < tr >
                                    

#56 JavaScript::Write (size: 141, repeated: 1) - SHA256: 945270f73b9d59a6723ee9c8c60cf97d898fcf5fe1c3cf24bde20a55d275210e

                                        < tr > < td colspan = 7 > < center > < strong > < a href = 'http://atat.ro/'
style = 'text-decoration: none' > October 2017 < /a></strong > < /center></font > < /td></tr >
                                    

#57 JavaScript::Write (size: 36, repeated: 1) - SHA256: 7c1bf0096ea8317bf604a688479a4e21dcdaa699d788a0fb49cd87fc6c7e6b5f

                                        bordercolor = black > < font color = black >
                                    


HTTP Transactions (142)


Request Response
                                        
                                            GET /2013/07/cabelo-cosido-em-banda.html HTTP/1.1 
Host: hairest.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.217.22.161
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
Location: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 11:30:53 GMT
Expires: Fri, 13 Oct 2017 11:30:53 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 203
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   203
Md5:    492bcd7170bf3344cbd82ae9d8f0e9c4
Sha1:   9b997becc9f032865d69e1d277eb0bece6b70422
Sha256: e331c6e4c4f4c885c220d3a8a897e5d74daf655373eb30a23e21ba1b8fcc3c85
                                        
                                            GET /2013/07/cabelo-cosido-em-banda.html HTTP/1.1 
Host: hairest.blogspot.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Expires: Fri, 13 Oct 2017 11:30:54 GMT
Date: Fri, 13 Oct 2017 11:30:54 GMT
Cache-Control: private, max-age=0
Last-Modified: Sat, 16 Sep 2017 01:02:54 GMT
Etag: W/"26c49a5110a6978a27a31d8ac7bb17e112e5a9df4a37ab7c34c622fd85c013da"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 18445
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   18445
Md5:    420e55d5f9e3b2286bf2aae42b22fac0
Sha1:   8185a404f94210020b4df95d5612e5ff9a604fb0
Sha256: fbc2a6752024ed11d441eb8da9eab2cc1975244533a895004a5b1e43191c8266
                                        
                                            GET /blogblog/data/res/1151574448-YTvideoBar_compiled.css HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 553
Date: Thu, 12 Oct 2017 23:27:36 GMT
Expires: Thu, 19 Oct 2017 23:27:36 GMT
Last-Modified: Thu, 12 Oct 2017 21:24:53 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 43398


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   553
Md5:    33321f345fa34946764730aad7da0fcd
Sha1:   a7f39f558d2ec396a75c405509d60300ebd36013
Sha256: 424166949f60d65e200233fa42e35a69349f0cdef0fcb2a6bb2fccbb05365d52
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 11:30:54 GMT
Expires: Tue, 17 Oct 2017 11:30:54 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    c588b5e7f5749d9d056036ba1cfed2e3
Sha1:   9705100a2d064fd97528af037834bf03768ce199
Sha256: 3a24566634cdc1cc85455d337eca0f8d2b1ebe90deef8ed1b72effa37c5aaee1
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 11:30:54 GMT
Expires: Tue, 17 Oct 2017 11:30:54 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    6bf50ec404fb4a8b4a94be8390d11938
Sha1:   0caaab7704d6221abc5e0342909a4928cee50b1c
Sha256: 63b592179b1e9a528344ce1d430b9479fc55f43420a468ec35aaeaa9dff911cf
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: hairest.blogspot.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/x-icon; charset=UTF-8
                                        
Expires: Fri, 13 Oct 2017 11:30:54 GMT
Date: Fri, 13 Oct 2017 11:30:54 GMT
Cache-Control: private, max-age=86400
Last-Modified: Sat, 16 Sep 2017 01:02:54 GMT
Etag: W/"26c49a5110a6978a27a31d8ac7bb17e112e5a9df4a37ab7c34c622fd85c013da"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 227
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   227
Md5:    5787b8fb0d428faf25e73b317cfed1c6
Sha1:   340414313150839c70383f90888735d24d286b3d
Sha256: 051e713c1a05819381db8dde0f979e72b1e2a1edab8658a9cbb4981bef6c8083
                                        
                                            GET /static/v1/widgets/73244247-css_bundle_v2.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 9609
Date: Thu, 12 Oct 2017 23:35:07 GMT
Expires: Fri, 12 Oct 2018 23:35:07 GMT
Last-Modified: Thu, 12 Oct 2017 01:54:12 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 42947
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   9609
Md5:    0f31846649ae2c2c0aaa43f1f2d45662
Sha1:   c4e46209ffa4052f6caa01c7c9408a42859a2e2f
Sha256: 5a95b901eba5846ebff70ffca4ba09c36a157cbc2222155850896da73218f841
                                        
                                            GET /dyn-css/authorization.css?targetBlogID=905693602556410941&zx=66d6a1e9-e7f1-4626-a270-4c3a812d98ba HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/css; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: private, max-age=1800
Pragma: no-cache
Expires: Fri, 13 Oct 2017 11:30:54 GMT
Date: Fri, 13 Oct 2017 11:30:54 GMT
Last-Modified: Fri, 13 Oct 2017 11:30:54 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   21
Md5:    b9afc501fc43fbea335a2dc5d43263a1
Sha1:   7290a2dd6afbf39ecfc35b52dfb32a38fc222994
Sha256: d6e425ca7840c0ab6f26f5fc2822a47e26b4a8bbd104468a9c185bc132b8662f
                                        
                                            GET /blogblog/data/1kt/watermark/body_background_birds.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 22568
Date: Thu, 12 Oct 2017 23:10:20 GMT
Expires: Thu, 19 Oct 2017 23:10:20 GMT
Last-Modified: Thu, 12 Oct 2017 21:24:53 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 44434
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 300 x 300, 2-bit colormap, non-interlaced
Size:   22568
Md5:    5cd8cda0e75b359eb8f15dc83b0c5c29
Sha1:   86c99fbb62aadacb3ebd3f948d345b917f65253f
Sha256: 0220dbf46954d4efe2e91d261dd3d40f06e6402c722cc5580129af64bddc58f9
                                        
                                            GET /static/v1/widgets/2682751544-widgets.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 46164
Date: Fri, 06 Oct 2017 01:52:29 GMT
Expires: Sat, 06 Oct 2018 01:52:29 GMT
Last-Modified: Thu, 05 Oct 2017 23:11:42 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 639505
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   46164
Md5:    7035c45baf033ca693de092b42a02000
Sha1:   ec2136e5613226a45279a0b3dfe79a3cf4d8f1a7
Sha256: 5cd86ef91ebf028d0c1673b662e640dbd682cb5f0732ab8998022c2599b591ed
                                        
                                            GET /iframe_api HTTP/1.1 
Host: youtube.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         216.58.211.138
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Expires: Tue, 27 Apr 1971 19:44:06 EST
X-XSS-Protection: 1; mode=block; report=https://www.google.com/appserve/security-bugs/log/youtube
Content-Length: 739
Cache-Control: no-cache
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 11:30:54 GMT
Server: YouTube Frontend Proxy


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   739
Md5:    da94902139b965685114ec145937a7d3
Sha1:   19db13e7a53c09c1f152d3d8b2f04a2ca43d8426
Sha256: 24c2de2ba84d2c3d15341a8cc3d10a31c5796080b8c6bb1c07a3e2ca2598fc5c
                                        
                                            GET /html/buttons/blogger-ipower-kahki.gif HTTP/1.1 
Host: img1.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 1372
Date: Fri, 13 Oct 2017 01:55:13 GMT
Expires: Fri, 20 Oct 2017 01:55:13 GMT
Last-Modified: Thu, 12 Oct 2017 21:24:53 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 34541


--- Additional Info ---
Magic:  GIF image data, version 89a, 88 x 30
Size:   1372
Md5:    f620ea24c5669940a0426a963ed98042
Sha1:   7964cd4a538e42e5afc698bed6a33488ba658451
Sha256: d890077832ef8d00588f2f4e27e398339af061f454abc5e345c78da9aa1d804e
                                        
                                            GET /jsapi HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         172.217.22.164
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Expires: Fri, 13 Oct 2017 11:30:54 GMT
Date: Fri, 13 Oct 2017 11:30:54 GMT
Cache-Control: private, max-age=3600, must-revalidate
Vary: Accept-Encoding
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 6229
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   6229
Md5:    160d699e1ca5431a9b496d89fd804019
Sha1:   4fc13a555861519c4f83a2a9f4132ec3839a652d
Sha256: a7c94e90d0a8fd9ff9df1973cc0eacb0e80617cc49686eca299d4899615c921f
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 11:30:54 GMT
Expires: Tue, 17 Oct 2017 11:30:54 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    63c0c42876b179e938da75d435caf455
Sha1:   2496362f8b1e77dfa75695dc7c63d02afd31ef67
Sha256: e186173a64acae1a86f9725f1f063c69dd7b05c9ffaacf03329212c6411a892a
                                        
                                            GET /pagead/show_ads.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Fri, 13 Oct 2017 11:30:54 GMT
Expires: Fri, 13 Oct 2017 11:30:54 GMT
Cache-Control: private, max-age=3600
Etag: 7705980033080564708
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 17726
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17726
Md5:    89b2135440cbf0008abaef621ceacc52
Sha1:   c1c5d686553767c524cdc88aa85fb385787c425d
Sha256: 3cf571e82b5a79a10a0bdcf002c065b3f2ab57cdecb4b929ec4c514b1969ab94
                                        
                                            GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1 
Host: translate.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Date: Fri, 13 Oct 2017 11:30:54 GMT
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Content-Language: en
Pragma: no-cache
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: HTTP server (unknown)
Content-Length: 770
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   770
Md5:    32618027eefc44f98ad37d9aa716a6e5
Sha1:   b18b169ff88e765ffa8499ba077a0e940455a5dc
Sha256: e62f73b1fc57f50b492ea1e1f12ff7c93eb3659a34a42c404efcacdbb7a2bdaf
                                        
                                            GET /static/v1/jsbin/3223910711-comment_from_post_iframe.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5025
Date: Thu, 12 Oct 2017 23:05:57 GMT
Expires: Fri, 12 Oct 2018 23:05:57 GMT
Last-Modified: Wed, 11 Oct 2017 23:43:43 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 44697
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   5025
Md5:    503ba2376916f3be69ed457491b57590
Sha1:   c226f70358341e0affee74c68763e31833f62d09
Sha256: 9e613c2535853e9cb50c815384ddb4dae4d2240106f20244af6106aa1c9ad597
                                        
                                            GET /img/icon18_wrench_allbkg.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 475
Date: Tue, 10 Oct 2017 16:10:32 GMT
Expires: Tue, 17 Oct 2017 16:10:32 GMT
Last-Modified: Tue, 10 Oct 2017 11:46:04 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 242422
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 18 x 18, 8-bit colormap, non-interlaced
Size:   475
Md5:    f617effe6d96c15acfea8b2e8aae551f
Sha1:   6d676af11ad2e84b620cce4d5992b657cb2d8ab6
Sha256: d172d750493be64a7ed84dec1dd2a0d787ba42f78bc694b0858f152c52b6620b
                                        
                                            GET /img/icon_feed12.png HTTP/1.1 
Host: img1.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 500
Date: Thu, 12 Oct 2017 23:11:30 GMT
Expires: Thu, 19 Oct 2017 23:11:30 GMT
Last-Modified: Thu, 12 Oct 2017 17:52:12 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 44364
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 12 x 12, 8-bit colormap, non-interlaced
Size:   500
Md5:    44e7355a788fd1082deff0018883758e
Sha1:   50e3a28a44978e85d13c30522e0c71c8d0b24675
Sha256: 3cd341f37642f8a58b0fe14c2645913449c0ffe10be6ba0986275bfef29bc319
                                        
                                            GET /js/plusone.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Timing-Allow-Origin: *
Etag: "ff43a59f940b9e31a0283d768b2237d6"
Expires: Fri, 13 Oct 2017 11:30:54 GMT
Date: Fri, 13 Oct 2017 11:30:54 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
Strict-Transport-Security: max-age=31536000
P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Set-Cookie: NID=114=YC-IgmAmVrjWSdbb7azLfpcNe7JMuWpGnmEjh-f7PJdGb1OzwyPlVDPGl3HgMMUWIkHw0xgAhtD66wGs-XoKoJTlwCPsk0MjdvPOmLnPIJlxGzCw6pK09yFCKZ8lugmh;Domain=.google.com;Path=/;Expires=Sat, 14-Apr-2018 11:30:54 GMT;HttpOnly
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17422
Md5:    55ec928073d654d0096eae22b36eb937
Sha1:   09761def4d1ae443c8a72041d182f68f7117a341
Sha256: c564fe1f5fbd3837fd83f3c61a614465c969486d9ef4cda157c0719b360d674f
                                        
                                            GET /pagead/js/google_top_exp.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 12 Oct 2017 23:13:33 GMT
Expires: Thu, 26 Oct 2017 23:13:33 GMT
Etag: 13036835877489095579
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 44242


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   67
Md5:    9bbc3ca32ec951a484589ce0e6b4db73
Sha1:   753d6f6183b33b2dee5dde2208fca91c17f5bb13
Sha256: b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
                                        
                                            GET /scripts/banner.php?a_aid=53904cc605399&a_bid=c476df8f HTTP/1.1 
Host: affiliate.webnode.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         85.239.227.111
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Fri, 13 Oct 2017 11:30:55 GMT
Content-Length: 499
Keep-Alive: timeout=1, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  UTF-8 Unicode text, with very long lines, with no line terminators
Size:   499
Md5:    ce995e2340f4e6ccf9bf8a95c8a07ef4
Sha1:   e81367f48a6eace422eee6f2a963f9e9974e11be
Sha256: 576f433ca1305ccdbf0466610440168b412695ed1bf2480d7291d9032313fdc1
                                        
                                            GET /scripts/banner.php?a_aid=53904cc605399&a_bid=42d628f8 HTTP/1.1 
Host: affiliate.webnode.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         85.239.227.111
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Fri, 13 Oct 2017 11:30:55 GMT
Content-Length: 499
Keep-Alive: timeout=1, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  UTF-8 Unicode text, with very long lines, with no line terminators
Size:   499
Md5:    ea8c0ef77cb1df14e38d804d503f2205
Sha1:   8da346eb65c0988abf314225d57a4e7ff20662ce
Sha256: e435827903e6242726fd19905134a23c12ab0e5a742e12bcbb7c86a483069645
                                        
                                            GET /img/share_buttons_20_3.png HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/static/v1/widgets/73244247-css_bundle_v2.css

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 5080
Date: Thu, 12 Oct 2017 23:27:42 GMT
Expires: Thu, 19 Oct 2017 23:27:42 GMT
Last-Modified: Thu, 12 Oct 2017 01:54:12 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 43393
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 120 x 60, 8-bit/color RGBA, non-interlaced
Size:   5080
Md5:    ad9999106d5f550920b586e8e1704e5a
Sha1:   93fd02c51166402a41f96509cd0ca3fb917877dd
Sha256: 3829a5b2ade7cfc416c80b8f3df71e49e68672875f025d525223978f5cee3fd3
                                        
                                            GET /blogblog/data/res/230357638-YTvideoBar_compiled.js HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2515
Date: Thu, 12 Oct 2017 22:59:52 GMT
Expires: Thu, 19 Oct 2017 22:59:52 GMT
Last-Modified: Thu, 12 Oct 2017 21:24:53 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 45063
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   2515
Md5:    89b01598bcff9cf22fc2174f4b80c82e
Sha1:   7532ac4ea49bc490d17fba32e77d6b9a6bd732e2
Sha256: 203cd2d02a0f1d648b3d3c9f300e0ddb0892d7d3b4950be8ef0e888cbfc2f644
                                        
                                            GET /img/widgets/subscribe-netvibes.png HTTP/1.1 
Host: img1.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 1445
Date: Thu, 12 Oct 2017 23:32:17 GMT
Expires: Thu, 19 Oct 2017 23:32:17 GMT
Last-Modified: Thu, 12 Oct 2017 01:54:12 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 43117
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 91 x 17, 8-bit colormap, non-interlaced
Size:   1445
Md5:    c52a5f4ecb6be5d7e93b23ef4122ee4e
Sha1:   4e698a5f455daf3a8ea1e219b1998079f0546716
Sha256: 71b8ad79c680b3e5d452a792c3b418b23f739a0a34005e0f37ec674f4c78cb5d
                                        
                                            GET /img/widgets/arrow_dropdown.gif HTTP/1.1 
Host: img2.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 141
Date: Thu, 12 Oct 2017 23:26:15 GMT
Expires: Thu, 19 Oct 2017 23:26:15 GMT
Last-Modified: Thu, 12 Oct 2017 21:24:53 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 43479
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 13 x 10
Size:   141
Md5:    2964a07d60a4e76b299130fb1b4115f6
Sha1:   3b72dcc19f3ad685513eaba612e07e0ed495f2e1
Sha256: 28ab89f0285c48d2faed701905c185c302f2b389584a52ceaa76a91ea64dc3a7
                                        
                                            GET /-vb9N24iKAi4/UfUwJNzn9bI/AAAAAAAAANs/mNrbZkcqhPw/s320/mod.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "vdb"
Expires: Sat, 14 Oct 2017 11:30:55 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="mod.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 11:30:55 GMT
Server: fife
Content-Length: 17493
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   17493
Md5:    bf3234d26ae707eb27e435fd6ce043fc
Sha1:   3fae8f45f7b1910eb5ce928412f5058262670a77
Sha256: 465d1899d277375638bfc2832516c53a5490dd4fb89d09bf02b483c541236cb7
                                        
                                            GET /gadgets/js/rpc.js?container=blogger&nocache=0&debug=0&c=1&v=89e9ae02ef0b8b6c37aabbfe2eeac27f&sv=10 HTTP/1.1 
Host: www-blogger-opensocial.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Expires: Thu, 04 Oct 2018 19:16:33 GMT
Content-Encoding: gzip
Date: Wed, 04 Oct 2017 19:16:33 GMT
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 8501
Server: GSE
Cache-Control: public,max-age=31536000
Age: 749662


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   8501
Md5:    34023e66e57c35d8bb2fca4ab4884ece
Sha1:   9e4a5c784f61466897fde68a67fed0e4727ea01f
Sha256: 9928c4f14090d500786104cecf299445bdac3fd8f2a6fbb22bcdc003b8390505
                                        
                                            GET /-I8LJmcaJB0w/UfUwJLgMCxI/AAAAAAAAANw/wHVoksVj1mk/s200/easy21.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "vdc"
Expires: Sat, 14 Oct 2017 11:30:55 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="easy21.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 11:30:55 GMT
Server: fife
Content-Length: 3817
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   3817
Md5:    dd60f9840fa7357c8cae08b5a11c0eaa
Sha1:   a5d4b5ca635a7f8e9e1224864fb6acc85769341e
Sha256: c2fadcd0b758f99e640aefccf90338737244b9eea221f7f2d96a1c0e9b618e47
                                        
                                            GET /gadgets/ifr?url=http://hosting.gmodules.com/ig/gadgets/file/111311123200664007084/calendar.xml&container=blogger&view=default&lang=pt&country=PT&sanitize=0&v=4b0c87b8da3b9f9e&libs=core&parent=hairest.blogspot.no/&mid=1 HTTP/1.1 
Host: www-blogger-opensocial.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: CP="CAO PSA OUR"
Expires: Sat, 13 Oct 2018 11:30:55 GMT
Cache-Control: private,max-age=31536000
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 11:30:55 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 3865
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   3865
Md5:    bd658746512b242a067327aea6a64495
Sha1:   027088859cc98f92f27ff64e9dc1475bc046f9b2
Sha256: 97cfeb9d79e5b80e371f4152d38fd035f5fbda47aca3674f397c31d46d3d0838
                                        
                                            GET /accounts/default1/banners/webnode_banner_300x250_ver1.jpg HTTP/1.1 
Host: affiliate.webnode.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         85.239.227.111
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 13 Oct 2017 11:30:55 GMT
Last-Modified: Tue, 13 Dec 2011 11:41:46 GMT
Etag: "60758217-5a1e-4b3f7bc66f280"
Accept-Ranges: bytes
Content-Length: 23070
Keep-Alive: timeout=1, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   23070
Md5:    4ebf4654edcfc43888bb0b19f001c811
Sha1:   41e6477dfdf763183f3267e5fb4c2f54b72054e5
Sha256: f4477a99e6e91780e57fe2b25eaa9d81f81cc3a56048cb3953fb0922681afc44
                                        
                                            GET /-5GC-rV1Fj_w/UfUwJLLQQtI/AAAAAAAAANk/2nQmkdkGAEM/s200/full.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "vd9"
Expires: Sat, 14 Oct 2017 11:30:55 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="full.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 11:30:55 GMT
Server: fife
Content-Length: 4673
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   4673
Md5:    cd38b4a500608a9eedc8232c4bbf5dd0
Sha1:   89645d57f4c6b0f3cc5b109359c93bff3eeb1e38
Sha256: 5f502b19488374199a36dcbae39d8c701a08117d74e70db97454ef4ce1328c13
                                        
                                            GET /scripts/imp.php?a_aid=53904cc605399&a_bid=c476df8f HTTP/1.1 
Host: affiliate.webnode.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         85.239.227.111
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Fri, 13 Oct 2017 11:30:55 GMT
Set-Cookie: PAPCookie_Imp_c476df8f=pap; expires=Wed, 13-Oct-2027 21:38:35 GMT
Content-Length: 42
Keep-Alive: timeout=1, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    accba0b69f352b4c9440f05891b015c5
Sha1:   9d01cc5dc8e042c0d4ad6cfb8b3ac38e84a5ef9f
Sha256: 47043e4823a6c21a8881de789b4185355330b5804629d23f6b43dd93f5265292
                                        
                                            GET /gadgets/js/core.js?container=blogger&nocache=0&debug=0&c=0&v=b6f0905716eb3c75139b7aa3b49d0994&sv=10&jsload=0 HTTP/1.1 
Host: www-blogger-opensocial.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www-blogger-opensocial.googleusercontent.com/gadgets/ifr?url=http://hosting.gmodules.com/ig/gadgets/file/111311123200664007084/calendar.xml&container=blogger&view=default&lang=pt&country=PT&sanitize=0&v=4b0c87b8da3b9f9e&libs=core&parent=hairest.blogspot.no/&mid=1

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Expires: Wed, 26 Sep 2018 19:54:57 GMT
Content-Encoding: gzip
Date: Tue, 26 Sep 2017 19:54:57 GMT
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Cache-Control: public,max-age=31536000
Content-Length: 16191
Age: 1438558


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   16191
Md5:    cf4811cda68d05bbb30021d3ec0cbefe
Sha1:   8434e46e2432d498a9d5991fd15352d276625940
Sha256: 3f855694363ece14da1c27142b1b884fbbb076d6addca45e9e86b790044eab79
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html
Cookie: NID=114=YC-IgmAmVrjWSdbb7azLfpcNe7JMuWpGnmEjh-f7PJdGb1OzwyPlVDPGl3HgMMUWIkHw0xgAhtD66wGs-XoKoJTlwCPsk0MjdvPOmLnPIJlxGzCw6pK09yFCKZ8lugmh

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 46907
Date: Thu, 12 Oct 2017 19:31:29 GMT
Expires: Fri, 12 Oct 2018 19:31:29 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 57566
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   46907
Md5:    663da4522821133a5116f57abe7d6a86
Sha1:   1b157f22c825d5bee65867d2709bfcbb4c04a086
Sha256: 8010ae2811b2cf468d24a4e896dcdcd1457c10af769525ad1928c502b56550fb
                                        
                                            GET /pub/banner.php?id=104&c=8ca2558052 HTTP/1.1 
Host: afiliados.e-goi.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         94.46.251.50
HTTP/1.1 200 OK
Content-Type: text/html;charset=UTF-8
                                        
Server: nginx
Date: Fri, 13 Oct 2017 11:30:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubdomains
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   676
Md5:    82d1a86681778a73fd04364ced90d932
Sha1:   20798312b7ebeef0a3bbaa0c456c5cbacd48b3ed
Sha256: 1951a416bb152b83019764ae28109f71eb56334a4efe1852674673552f3ce4b1
                                        
                                            GET /pub/include/javascript/swfobject.js HTTP/1.1 
Host: afiliados.e-goi.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://afiliados.e-goi.com/pub/banner.php?id=104&c=8ca2558052

                                         
                                         94.46.251.50
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Fri, 13 Oct 2017 11:30:55 GMT
Last-Modified: Thu, 27 Jan 2011 17:21:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"4d41a9b5-1b6b"
Expires: Sat, 13 Oct 2018 11:30:55 GMT
Cache-Control: max-age=31536000
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubdomains
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2456
Md5:    be9dd547d6ae195ed292390ffcdf0afc
Sha1:   97a9e5bab129b2837a18ac1ce273ae03c5fcb34d
Sha256: 05c825fcb8b6611a45972b34ae8892cb3fdb84e2ac39d614485751abc3bd649d
                                        
                                            GET /comment-iframe.g?blogID=905693602556410941&postID=3700451734594602583&blogspotRpcToken=9356062 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         216.58.211.137
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Location: https://accounts.google.com/ServiceLogin?continue=https://www.blogger.com/comment-iframe.g?blogID%3D905693602556410941%26postID%3D3700451734594602583%26blogspotRpcToken%3D9356062%26bpli%3D1&followup=https://www.blogger.com/comment-iframe.g?blogID%3D905693602556410941%26postID%3D3700451734594602583%26blogspotRpcToken%3D9356062%26bpli%3D1&passive=true&go=true
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 11:30:55 GMT
Expires: Fri, 13 Oct 2017 11:30:55 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   317
Md5:    d9ac3ed466caef2dfff0e30c97c9975b
Sha1:   47b3a100e3571497f50ab558e8b68638000c86c9
Sha256: c1c9a9bdbca10093c638277f8f72bc3e08838d9da3e18c120d496d8d830474d4
                                        
                                            GET /blogblog/data/1kt/watermark/post_background_birds.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 103
Date: Thu, 12 Oct 2017 23:01:28 GMT
Expires: Thu, 19 Oct 2017 23:01:28 GMT
Last-Modified: Thu, 12 Oct 2017 17:52:12 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 44967
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 10 x 10, 8-bit colormap, non-interlaced
Size:   103
Md5:    7928cb1e4fb733117a1479c289f29d92
Sha1:   bd1bbe65951f64f44ec85910877dabd35c6dbc07
Sha256: 8a44923efeda7708df28a77f7e01bb10be3831d112891172950fe8c2d6b2566e
                                        
                                            GET /about.html HTTP/1.1 
Host: atat.ro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www-blogger-opensocial.googleusercontent.com/gadgets/ifr?url=http://hosting.gmodules.com/ig/gadgets/file/111311123200664007084/calendar.xml&container=blogger&view=default&lang=pt&country=PT&sanitize=0&v=4b0c87b8da3b9f9e&libs=core&parent=hairest.blogspot.no/&mid=1

                                         
                                         216.239.32.21
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Location: http://www.atat.ro/about.html
Date: Fri, 13 Oct 2017 11:30:55 GMT
Server: ghs
Content-Length: 226
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  HTML document text
Size:   226
Md5:    3fef4966078fff9e3d2ed14526e9079f
Sha1:   73f5bf1fa28a0e04cee825cc3c9178c473a2a9b8
Sha256: 3cbfc185eecd8fbbd610090740c275d4aef3ca515f12bf00970100d5889351d8

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=gapi_iframes,gapi_iframes_style_bubble/exm=plusone/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_1 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html
Cookie: NID=114=YC-IgmAmVrjWSdbb7azLfpcNe7JMuWpGnmEjh-f7PJdGb1OzwyPlVDPGl3HgMMUWIkHw0xgAhtD66wGs-XoKoJTlwCPsk0MjdvPOmLnPIJlxGzCw6pK09yFCKZ8lugmh

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 16938
Date: Thu, 12 Oct 2017 19:31:42 GMT
Expires: Fri, 12 Oct 2018 19:31:42 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 57553
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   16938
Md5:    6aae7bc152acc744cf63755ed47be736
Sha1:   79cc54dc61a1ef9944e6e5611a334c5bc8f194bf
Sha256: 62fee77a073cb0944c55664aa5c61ee35e83e567fa41155fd9b94b6f4f0a3a1c
                                        
                                            GET /img/widgets/icon_wikipedia_search.png HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/static/v1/widgets/73244247-css_bundle_v2.css

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 249
Date: Thu, 12 Oct 2017 23:37:01 GMT
Expires: Thu, 19 Oct 2017 23:37:01 GMT
Last-Modified: Thu, 12 Oct 2017 17:52:12 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 42834
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 19 x 19, 8-bit/color RGBA, non-interlaced
Size:   249
Md5:    99daed35a47a7b6118ea81913ee33049
Sha1:   848a235dcbfa13048025a65daaaea49ee04201d8
Sha256: ec78b04a8c78bde91dcaed1aacaeb1d84e793a2eb9cf04368f6711382edaa9a8
                                        
                                            GET /img/widgets/subscribe-yahoo.png HTTP/1.1 
Host: img1.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 580
Date: Thu, 12 Oct 2017 23:22:30 GMT
Expires: Thu, 19 Oct 2017 23:22:30 GMT
Last-Modified: Thu, 12 Oct 2017 17:52:12 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 43705
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 91 x 17, 8-bit colormap, non-interlaced
Size:   580
Md5:    79f602b6ac18bee79b4e2353a6674010
Sha1:   28accf82263aa1a11bb821439d4d185865662530
Sha256: bbf9b924cc32bff4738bb54d86905476349f90c8b20f748633e56f64379d553e
                                        
                                            GET /img/widgets/icon_wikipedia_w.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 410
Date: Thu, 12 Oct 2017 23:22:32 GMT
Expires: Thu, 19 Oct 2017 23:22:32 GMT
Last-Modified: Thu, 12 Oct 2017 17:52:12 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 43703
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 43 x 28, 8-bit colormap, non-interlaced
Size:   410
Md5:    6d98867f58398a6017b729f147d7713d
Sha1:   6b51125eb6a5b8254a3465474322a768a53acfef
Sha256: 21f335cf5dc6e2a74037fef424c8686d125d6cd01e196b8a4db759de0cc29d26
                                        
                                            GET /pub/images/banner/email_marketing_pt_250x250.jpg HTTP/1.1 
Host: afiliados.e-goi.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://afiliados.e-goi.com/pub/banner.php?id=104&c=8ca2558052

                                         
                                         94.46.251.50
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Fri, 13 Oct 2017 11:30:55 GMT
Content-Length: 26024
Last-Modified: Tue, 04 Nov 2014 09:42:44 GMT
Connection: keep-alive
Etag: "54589f94-65a8"
Expires: Sat, 13 Oct 2018 11:30:55 GMT
Cache-Control: max-age=31536000
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubdomains
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   26024
Md5:    dcfab4461c5d91d500d4dd4bfae3bfdc
Sha1:   de8d51df4bffcb733c25db7e4e692401fc5b44da
Sha256: 57f53abc74983fde18a9e460fac8847c0b555244086db2ad71afbd9d04ad0304
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=114=YC-IgmAmVrjWSdbb7azLfpcNe7JMuWpGnmEjh-f7PJdGb1OzwyPlVDPGl3HgMMUWIkHw0xgAhtD66wGs-XoKoJTlwCPsk0MjdvPOmLnPIJlxGzCw6pK09yFCKZ8lugmh

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 11:30:56 GMT
Expires: Tue, 17 Oct 2017 11:30:56 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    0a14338a299b2c02742cd6f9e33596b0
Sha1:   a69501c94549c32d1b3b25358a2305e9d628ea16
Sha256: c3cc36c99da38011eda1ff5ddf24d8367eb22fd9668046f8c4857ddb55e7b82e
                                        
                                            GET /about.html HTTP/1.1 
Host: www.atat.ro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www-blogger-opensocial.googleusercontent.com/gadgets/ifr?url=http://hosting.gmodules.com/ig/gadgets/file/111311123200664007084/calendar.xml&container=blogger&view=default&lang=pt&country=PT&sanitize=0&v=4b0c87b8da3b9f9e&libs=core&parent=hairest.blogspot.no/&mid=1

                                         
                                         173.194.220.121
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Location: /p/about.html
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 11:30:56 GMT
Expires: Fri, 13 Oct 2017 11:30:56 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 163
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   163
Md5:    883692b5c128ac16c2b102209a8f556c
Sha1:   2eaaafedfd3ccda67974601ca27e820e99e050bf
Sha256: 56bc96f7c8e2c73262c429ba233627737ecb17e9edd7c6391d48d8f8c33f734f

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: g.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1390
Content-Transfer-Encoding: binary
Cache-Control: max-age=306308, public, no-transform, must-revalidate
Last-Modified: Tue, 10 Oct 2017 00:34:08 GMT
Expires: Tue, 17 Oct 2017 00:34:08 GMT
Date: Fri, 13 Oct 2017 11:30:57 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1390
Md5:    fccd40351d25d6f5eecda73fdef9b3d8
Sha1:   0d2d2f37814bb53b7dca796acc9ee278ef6297ba
Sha256: 23e276d6aa20791de9110019cb7992bae490040d4cc3a06678449d1b3f2063e4
                                        
                                            GET /img/widgets/s_top.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/static/v1/widgets/73244247-css_bundle_v2.css

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 335
Date: Thu, 12 Oct 2017 23:01:23 GMT
Expires: Thu, 19 Oct 2017 23:01:23 GMT
Last-Modified: Thu, 12 Oct 2017 14:47:23 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 44972
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 144 x 400, 4-bit colormap, non-interlaced
Size:   335
Md5:    c4908f4189f7698dc8afdd67df8ce041
Sha1:   b6f7cd64ff84e7cedb4b8b92ceb8b9800ad7624a
Sha256: cfe1d5dd45c7f0897d769e6c95ae9036fbdc7dad76ac9ed6ce6b21a785ecd6de
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 11:30:57 GMT
Expires: Tue, 17 Oct 2017 11:30:57 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    816dbd3479ac72bbf29083d1d60e2345
Sha1:   211eba5157d2bc56c2d2b168c28f05924d050da8
Sha256: b8821ac5e989b638e7c1f86893bda713df909c079c55217bda5c14a11a9361dc
                                        
                                            GET /p/about.html HTTP/1.1 
Host: www.atat.ro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www-blogger-opensocial.googleusercontent.com/gadgets/ifr?url=http://hosting.gmodules.com/ig/gadgets/file/111311123200664007084/calendar.xml&container=blogger&view=default&lang=pt&country=PT&sanitize=0&v=4b0c87b8da3b9f9e&libs=core&parent=hairest.blogspot.no/&mid=1

                                         
                                         173.194.220.121
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Expires: Fri, 13 Oct 2017 11:30:57 GMT
Date: Fri, 13 Oct 2017 11:30:57 GMT
Cache-Control: private, max-age=0
Last-Modified: Fri, 13 Oct 2017 11:26:34 GMT
Etag: W/"591134ce0e3fa05666b8818af95862e9248c8f653b866bb3e7c20a1d1b2fbf48"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 50248
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   50248
Md5:    f6ae77d5bbac13bb21ad8fbd851d6f93
Sha1:   acc6221821dd561339e15199fc7000f38d36c030
Sha256: 52345fb5536f272bbbbd45c9b0d1e63304abb9c73bc37783fa9315d37b06092e

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            GET /adsid/integrator.js?domain=hairest.blogspot.no HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html
Cookie: NID=114=YC-IgmAmVrjWSdbb7azLfpcNe7JMuWpGnmEjh-f7PJdGb1OzwyPlVDPGl3HgMMUWIkHw0xgAhtD66wGs-XoKoJTlwCPsk0MjdvPOmLnPIJlxGzCw6pK09yFCKZ8lugmh

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 11:30:57 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   107
Md5:    5432a558d422eaeaa6f7e8a15c0c1134
Sha1:   252ee6dbb502fd998fbdc5721da5986b877f1c73
Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
                                        
                                            GET /img/widgets/s_bottom.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/static/v1/widgets/73244247-css_bundle_v2.css

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 172
Date: Thu, 12 Oct 2017 23:11:32 GMT
Expires: Thu, 19 Oct 2017 23:11:32 GMT
Last-Modified: Thu, 12 Oct 2017 17:52:12 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 44365
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 144 x 3, 4-bit colormap, non-interlaced
Size:   172
Md5:    a9bbd1bf495055e06e61aec7f8c1b6c4
Sha1:   491c1a006da8a9eea4f3d1bb27e5815ab66a9f45
Sha256: 91fe35689444e53c1bf3e04f24c154fa0468be9edd3c84344f9f64c2eff89eeb
                                        
                                            GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1 
Host: fpdownload2.macromedia.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         91.135.34.11
HTTP/1.1 200 OK
Content-Type: text/xml
                                        
Server: Apache
Last-Modified: Tue, 10 Oct 2017 09:00:43 GMT
Etag: "60c-55b2d8aca2f07"
Accept-Ranges: bytes
Content-Length: 1548
Date: Fri, 13 Oct 2017 11:30:57 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  XML document text\012 XML document text
Size:   1548
Md5:    e7664061d466c21a4f6b843a5a803007
Sha1:   3cbe9ab67ec553511440bc401627930461d1d2cd
Sha256: cf8c939324f5a50cc7fbf9739d230bc3b99dd80db106b005bef3be53aeb8b28a
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 11:30:57 GMT
Expires: Tue, 17 Oct 2017 11:30:57 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    1e563f806a20ef3d52596871e2ccc921
Sha1:   37610e9f1787c0d87ac8958461b1e9da167e8243
Sha256: afe71ff42d56cc4dd019854a1e6c7e876e866bf0070ea5d81ba289d63044e451
                                        
                                            GET /pub-config/r20160913/ca-pub-5617971326091946.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Length: 125
Date: Fri, 13 Oct 2017 11:30:57 GMT
Expires: Fri, 13 Oct 2017 23:30:57 GMT
Cache-Control: public, max-age=43200
Last-Modified: Thu, 12 Oct 2017 20:23:25 GMT
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: sffe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   125
Md5:    21aea2dae0239adff4f9f063cdacfc76
Sha1:   ce64c497ac1dd86393da79e8cea239de113c1de7
Sha256: a59ee78166b8467dd7dd8c7acb03d8df7d16cf4a04f45c8558366df1c33b868f
                                        
                                            GET /blog-post-reactions.g?options=%5BInteressante%5D&textColor=%23997755 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Expires: Fri, 13 Oct 2017 11:30:56 GMT
Date: Fri, 13 Oct 2017 11:30:56 GMT
Cache-Control: private, max-age=300
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   866
Md5:    ae79676d58a92a9d78c480a49dd43f7c
Sha1:   1b8e9bf215cc6df00ec612ac2fc9d49fe192504e
Sha256: b9a208bb222713a18c9a1db1dadfbce8b7d2934a9fc3f47efcfef01fe58331b7
                                        
                                            GET /blogblog/data/1kt/watermark/body_overlay_birds.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 3523
Date: Thu, 12 Oct 2017 23:15:18 GMT
Expires: Thu, 19 Oct 2017 23:15:18 GMT
Last-Modified: Thu, 12 Oct 2017 12:41:33 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 44137
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 386 x 121, 8-bit colormap, non-interlaced
Size:   3523
Md5:    031c64f442b967c59b28cdc8b03ac349
Sha1:   59f743959d06ced56f36b5e262c76e6cbfef9720
Sha256: 4bff767832f0cae6ed521f2436871dba9c4e1d036efd4889457b9e797738154a
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=114=YC-IgmAmVrjWSdbb7azLfpcNe7JMuWpGnmEjh-f7PJdGb1OzwyPlVDPGl3HgMMUWIkHw0xgAhtD66wGs-XoKoJTlwCPsk0MjdvPOmLnPIJlxGzCw6pK09yFCKZ8lugmh

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 11:30:57 GMT
Expires: Tue, 17 Oct 2017 11:30:57 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    a352c8963f53bbddb3c2ee43ae62b276
Sha1:   8553e71b2e4c06afea3bf11df2ae53b03e24cc8b
Sha256: 0957480062e48be7163da3a9ec8f5598b368cede5b8822753f40ae78c03b5c9a
                                        
                                            GET /dyn-css/authorization.css?targetBlogID=4418609707762801235&zx=33819c00-f71f-43d9-9ce9-de4a65582b48 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/css; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: private, max-age=1800
Pragma: no-cache
Expires: Fri, 13 Oct 2017 11:30:57 GMT
Date: Fri, 13 Oct 2017 11:30:57 GMT
Last-Modified: Fri, 13 Oct 2017 11:30:57 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   21
Md5:    b9afc501fc43fbea335a2dc5d43263a1
Sha1:   7290a2dd6afbf39ecfc35b52dfb32a38fc222994
Sha256: d6e425ca7840c0ab6f26f5fc2822a47e26b4a8bbd104468a9c185bc132b8662f
                                        
                                            GET /static/v1/jsbin/3974223637-rx.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/blog-post-reactions.g?options=%5BInteressante%5D&textColor=%23997755

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 9679
Date: Thu, 12 Oct 2017 23:00:10 GMT
Expires: Fri, 12 Oct 2018 23:00:10 GMT
Last-Modified: Thu, 12 Oct 2017 12:41:33 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 45047
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   9679
Md5:    1fae300e363eaccc2b74bc78af59ab4b
Sha1:   4a9e95bdadf35fad2f0302e2e5c2fccb16c8a1ad
Sha256: 58dfe28e124f99fd891f7bbe92b639f4c59d20c06b31fe0d01470a4d58ac7cdd
                                        
                                            GET /adsid/integrator.js?domain=hairest.blogspot.no HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 11:30:57 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   107
Md5:    5432a558d422eaeaa6f7e8a15c0c1134
Sha1:   252ee6dbb502fd998fbdc5721da5986b877f1c73
Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
                                        
                                            GET /external_hosted/clipboardjs/clipboard.min.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4096
Date: Fri, 13 Oct 2017 11:30:57 GMT
Expires: Fri, 13 Oct 2017 11:30:57 GMT
Last-Modified: Fri, 12 May 2017 18:45:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=0
Age: 0
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4096
Md5:    6be7bb32519d4f901aef3cf3ebd48299
Sha1:   5fc67ff7b82dcea664ce13cdef7965554f51cd9f
Sha256: 83dd577df59e9c5fd07b37fcc5c56764503d480de1dd10b783fc8bceef5ade45
                                        
                                            GET /s/lora/v11/4A-myfZX6oDr9CtSTkTGig.ttf HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html
Origin: http://www.atat.ro

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: font/ttf
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 32820
Date: Wed, 11 Oct 2017 18:50:38 GMT
Expires: Thu, 11 Oct 2018 18:50:38 GMT
Last-Modified: Wed, 11 Oct 2017 18:25:02 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 146419


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   32820
Md5:    1e949c1bcc6d19d2a17963cc71c9e020
Sha1:   c6899f6602dd0055769507281d9c5bc431b43dfb
Sha256: bdf2208b9221dbad92fad3f05a8e932d4e2ecef0025b10f2e1365e2e5043f44a
                                        
                                            GET /pub/images/banner/email_marketing_pt_250x250.swf HTTP/1.1 
Host: afiliados.e-goi.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://afiliados.e-goi.com/pub/banner.php?id=104&c=8ca2558052

                                         
                                         94.46.251.50
HTTP/1.1 200 OK
Content-Type: application/x-shockwave-flash
                                        
Server: nginx
Date: Fri, 13 Oct 2017 11:30:57 GMT
Content-Length: 58780
Last-Modified: Mon, 02 Dec 2013 12:50:35 GMT
Connection: keep-alive
Etag: "529c821b-e59c"
Expires: Sat, 13 Oct 2018 11:30:57 GMT
Cache-Control: max-age=31536000
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubdomains
Accept-Ranges: bytes


--- Additional Info ---
Magic:  Macromedia Flash data (compressed), version 10
Size:   58780
Md5:    5eed19452512b2fc4a4bcd143bb5cb0e
Sha1:   248a1bee2427e3a753a6b25be6a85140de2c2091
Sha256: 56be40faca1d143fa80f0af8634ab731ecf34f5f64cc242222477dcf6f80dc77
                                        
                                            GET /s/opensans/v15/PRmiXeptR36kaC0GEAetxi8cqLH4MEiSE0ROcU-qHOA.ttf HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html
Origin: http://www.atat.ro

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: font/ttf
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 17308
Date: Wed, 11 Oct 2017 21:53:06 GMT
Expires: Thu, 11 Oct 2018 21:53:06 GMT
Last-Modified: Wed, 11 Oct 2017 21:49:51 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 135472


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17308
Md5:    9d34e4aa2a37c8388ddcd59b31eb2735
Sha1:   c5da1a7f1fd2ddfdbf20d27d1c514e2a59bfd06c
Sha256: 3e996416e2906feb5e4dcdf1e0e5798efcabca864790b72d3493a15f4709de52
                                        
                                            GET /s/opensans/v15/MTP_ySUJH_bn48VBG8sNSonF5uFdDttMLvmWuJdhhgs.ttf HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html
Origin: http://www.atat.ro

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: font/ttf
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 18442
Date: Wed, 11 Oct 2017 21:53:06 GMT
Expires: Thu, 11 Oct 2018 21:53:06 GMT
Last-Modified: Wed, 11 Oct 2017 21:49:51 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 135472


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   18442
Md5:    e48885ccd8f641f3fdbe08b235a71780
Sha1:   3ee38a988b067234ee971da4e232c8af29333fdf
Sha256: 1c1efc12fb54ef0c3632bf56045006029bd04e05c615dbff2322d8eafc4be055
                                        
                                            GET /ae-game/thirdparty/show-window/index.js HTTP/1.1 
Host: i.alicdn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         104.123.141.37
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Last-Modified: Thu, 06 Apr 2017 02:42:41 GMT
SERVED-FROM: 80.239.159.86
Server: Tengine
Content-Security-Policy-Report-Only: style-src 'self' 'unsafe-inline' *.alibaba.com *.alisoft.com *.aliyun.com *.alipay.com *.aliexpress.com *.taobao.com *.taobao.net https://assets.alicdn.com https://login.alibaba.com *.alicdn.com *.tbcdn.com *.tbcdn.cn *.aliimg.com *.aliunicorn.com *.1688.com https://*.1688.com *.taobaocdn.com *.taobaocdn.cn *.mmstat.com *.alimama.com *.alimama.cn *.amap.com *.meitipu.com yui.yahooapis.com *.amap.com http://localhost.wwbizsrv.alibaba.com:4012 http://localhost.wwbizsrv.alibaba.com:4812 https://localhost.wwbizsrv.alibaba.com:4013 https://localhost.wwbizsrv.alibaba.com:4813 *.cnzz.com *.cnzz.net www.google.com apis.google.com translate.googleapis.com translate.google.com widgets.twimg.com platform.twitter.com twitter.com;img-src 'self' data: *.alibaba.com *.alisoft.com *.aliyun.com *.alipay.com *.aliexpress.com *.taobao.com *.taobao.net https://assets.alicdn.com https://login.alibaba.com *.alicdn.com *.tbcdn.com *.tbcdn.cn *.aliimg.com *.aliunicorn.com *.1688.com https://*.1688.com *.taobaocdn.com *.taobaocdn.cn *.mmstat.com *.alimama.com *.alimama.cn *.amap.com *.meitipu.com yui.yahooapis.com *.amap.com http://localhost.wwbizsrv.alibaba.com:4012 http://localhost.wwbizsrv.alibaba.com:4812 https://localhost.wwbizsrv.alibaba.com:4013 https://localhost.wwbizsrv.alibaba.com:4813 *.cnzz.com *.cnzz.net www.google.com apis.google.com translate.googleapis.com translate.google.com widgets.twimg.com platform.twitter.com twitter.com www.google-analytics.com www.googleadservices.com googleads.g.doubleclick.net stats.g.doubleclick.net;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.alibaba.com *.alisoft.com *.aliyun.com *.alipay.com *.aliexpress.com *.taobao.com *.taobao.net https://assets.alicdn.com https://login.alibaba.com *.alicdn.com *.tbcdn.com *.tbcdn.cn *.aliimg.com *.aliunicorn.com *.1688.com https://*.1688.com *.taobaocdn.com *.taobaocdn.cn *.mmstat.com *.alimama.com *.alimama.cn *.amap.com *.meitipu.com yui.yahooapis.com *.amap.com http://localhost.wwbizsrv.alibaba.com:4012 http://localhost.wwbizsrv.alibaba.com:4812 https://localhost.wwbizsrv.alibaba.com:4013 https://localhost.wwbizsrv.alibaba.com:4813 *.cnzz.com *.cnzz.net www.google.com apis.google.com translate.googleapis.com translate.google.com widgets.twimg.com platform.twitter.com twitter.com www.google-analytics.com www.googleadservices.com googleads.g.doubleclick.net stats.g.doubleclick.net;;report-uri //pointman.alibaba.com/csp?app=default
Content-Length: 45306
Content-Encoding: gzip
Cache-Control: max-age=684
Expires: Fri, 13 Oct 2017 11:42:22 GMT
Date: Fri, 13 Oct 2017 11:30:58 GMT
Connection: keep-alive
Vary: Accept-Encoding
Network_Info: NO_OSLO_5381
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: FW_IP
FW_IP: 104.123.141.37


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   45306
Md5:    fa3d7a2d1c82f90c904ab5459140a03c
Sha1:   b6005695b93b6543db9da30414f776fa491405f7
Sha256: 93a22f68d870a7b8bc9bc2d6d1595184866e632ff3b3382109b7ea775120614d
                                        
                                            GET /s/opensans/v15/k3k702ZOKiLJc3WVjuplzInF5uFdDttMLvmWuJdhhgs.ttf HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html
Origin: http://www.atat.ro

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: font/ttf
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 18670
Date: Wed, 11 Oct 2017 21:53:06 GMT
Expires: Thu, 11 Oct 2018 21:53:06 GMT
Last-Modified: Wed, 11 Oct 2017 21:49:43 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 135472


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   18670
Md5:    b9ebbca69dfcb94dd85e370c54de6403
Sha1:   d8da7728fb8441c9613b3bb9069b13a6650aa037
Sha256: c75a888229ad2a7583f66d3489400b302d05e0fa7248d8195c9cceebe25b1d3d
                                        
                                            GET /ajax/libs/jquery/3.2.1/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         172.217.22.170
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 30306
Date: Tue, 29 Aug 2017 14:11:56 GMT
Expires: Wed, 29 Aug 2018 14:11:56 GMT
Last-Modified: Fri, 24 Mar 2017 20:55:54 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 3878342


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   30306
Md5:    fc3fc31e5e7c0933dc18e562c1c071bf
Sha1:   a44c31323f6bd29e583cc585036e6eb39f7014a6
Sha256: ddad766fb94b23efeb5574cdedc5e8446d496fb91bd0b08cd80be212e001055d
                                        
                                            GET /s/opensans/v15/cJZKeOuBrn4kERxqtaUH3aCWcynf_cDxXwCLxiixG1c.ttf HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html
Origin: http://www.atat.ro

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: font/ttf
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 17857
Date: Wed, 11 Oct 2017 21:53:06 GMT
Expires: Thu, 11 Oct 2018 21:53:06 GMT
Last-Modified: Sat, 07 Oct 2017 03:46:26 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 135472


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17857
Md5:    5a3d8c6b3a13e96eca413685de0b0478
Sha1:   3cb1e827b14625e1e3469c694c758718c3a0e058
Sha256: 57f3aa4e0a629160d5ab710a4e87f4d499b3291111ef958701051f971225e36e
                                        
                                            GET /navbar.g?targetBlogID=905693602556410941&blogName=Posticeria,+cabelo+e+outras+est%C3%A9ticas&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=http://hairest.blogspot.com/search&blogLocale=pt_PT&v=2&homepageUrl=http://hairest.blogspot.com/&targetPostID=3700451734594602583&blogPostOrPageUrl=http://hairest.blogspot.com/2013/07/cabelo-cosido-em-banda.html&vt=-5843008141899717951&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 13 Oct 2017 11:30:57 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   2797
Md5:    35e2c2b53c2214375616164180e6c9ca
Sha1:   875c5964221554f82f6838a4cb6c3e4343b3833e
Sha256: 223a5b2a3a4f67160bf38c4e217dd7ec1de1397860ecae431702f70fc1c89808
                                        
                                            GET /js/300/addthis_widget.js HTTP/1.1 
Host: s7.addthis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         104.16.16.35
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Date: Fri, 13 Oct 2017 11:30:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 25 Sep 2017 19:48:20 GMT
Etag: "570d3-55a08d72f6900"
Vary: Accept-Encoding
Content-Encoding: gzip
Timing-Allow-Origin: *
Surrogate-Key: client_dist
Edge-Cache-Tag: client_dist
Cache-Control: public, no-check, max-age=600
CF-Cache-Status: HIT
X-Host: s7.addthis.com
X-Distribution: 99
Server: cloudflare-nginx
CF-RAY: 3ad1f851242f429d-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   113848
Md5:    6035f3674af9bb2dbad6f7f1c6375ebc
Sha1:   3aa29295e4216995f86dab2254bb76cfa19de6e5
Sha256: 783963a701ad4e463f4eacd4befca7c81b831ad2aec2bb6d8eeaf921625c4901
                                        
                                            GET /img/navbar/arrows-blue.png HTTP/1.1 
Host: img1.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=905693602556410941&blogName=Posticeria,+cabelo+e+outras+est%C3%A9ticas&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=http://hairest.blogspot.com/search&blogLocale=pt_PT&v=2&homepageUrl=http://hairest.blogspot.com/&targetPostID=3700451734594602583&blogPostOrPageUrl=http://hairest.blogspot.com/2013/07/cabelo-cosido-em-banda.html&vt=-5843008141899717951&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 104
Date: Thu, 12 Oct 2017 23:14:51 GMT
Expires: Thu, 19 Oct 2017 23:14:51 GMT
Last-Modified: Thu, 12 Oct 2017 17:03:45 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 44168
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 19 x 4, 8-bit/color RGBA, non-interlaced
Size:   104
Md5:    38c95719e05f4184a301768d8de91e09
Sha1:   d0ed1147d46f2cf592584239a5a101d6f2abb588
Sha256: 259ece79a45ad7ecbcf6fb0669de61aa6a01ebedaba47a7e88283435e0e6b1be
                                        
                                            GET /img/checks_sprite.png HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/blog-post-reactions.g?options=%5BInteressante%5D&textColor=%23997755

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 1354
Date: Thu, 12 Oct 2017 23:14:14 GMT
Expires: Thu, 19 Oct 2017 23:14:14 GMT
Last-Modified: Thu, 12 Oct 2017 01:54:12 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 44205
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 16 x 800, 8-bit colormap, non-interlaced
Size:   1354
Md5:    7d89a1c33b24dce1d6374f00b2ef63b2
Sha1:   5a55c68715d999781d5715e98e8c6f0d2116dd5f
Sha256: 559d83aa76d08c52bf57c1876179400e4aa192e696099ffe836515138000d497
                                        
                                            GET /js/cookiechoices.js HTTP/1.1 
Host: www.atat.ro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         173.194.220.121
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1949
Date: Tue, 10 Oct 2017 04:51:35 GMT
Expires: Tue, 17 Oct 2017 04:51:35 GMT
Last-Modified: Tue, 21 Mar 2017 02:50:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 283164


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   1949
Md5:    55617d5777b77daabe42b9ba8f79cf89
Sha1:   583546c7106a17b990de20c5a571dc773919150c
Sha256: 0b64080ab3c3e668b191e288dda405b7c4fdf6819d87a499daec75093dccef6e
                                        
                                            GET /exp/blank.html HTTP/1.1 
Host: adservice.aliexpress.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         198.11.132.250
HTTP/1.1 200
Content-Type: text/html
                                        
Date: Fri, 13 Oct 2017 11:30:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: ali_apache_id=10.182.213.149.1507894259467.212060.1; path=/; domain=.aliexpress.com; expires=Wed, 30-Nov-2084 01:01:01 GMT xman_us_f=x_l=0; Domain=.aliexpress.com; Expires=Wed, 31-Oct-2085 14:45:06 GMT; Path=/ acs_usuc_t=x_csrf=6thzqa8q0et1&acs_rt=fdfb052c00ed488793d7331628ea3b84; Domain=.aliexpress.com; Path=/ xman_t=7iG5F7vN7gH0Ll+EaeQ2hVUCq419UpMrb2CcolS86V0YaPyoAi3nKF4Q79oVFTll; Domain=.aliexpress.com; Path=/; HttpOnly xman_f=F56NLQ/ae6Mi3a3D3auh5Clu08oF/Cmy4c79PoFDBJwKSAdaaqqkbXPy0eqNHpIm7tgGr8HQK331o+w9eTxlkQ+w90sc1LDI6EBEqlASsdyzNP++Y1C38w==; Domain=.aliexpress.com; Expires=Wed, 31-Oct-2085 14:45:06 GMT; Path=/; HttpOnly XSRF-TOKEN=377e8c8a-047b-4f50-a9c8-c3ef0ab315a1;path=/;HttpOnly
P3P: CP="CAO PSA OUR"
X-Application-Context: affiliatedynamicwindow:prod:7001
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Content-Encoding: gzip
Server: Tengine/Aserver
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   403
Md5:    66d6c5cb03912d2089bab936548da181
Sha1:   ae0b88246b6e541545a713136e7c0b01057c64da
Sha256: 94be27608c3fe0dfea3d2b9a49f492c7442df66dc494c15c7867624e5e978c82
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 108
Content-Type: application/ocsp-request

                                         
                                         72.167.239.239
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 11:30:59 GMT
Server: Apache
Content-Transfer-Encoding: Binary
Cache-Control: max-age=122913, public, no-transform, must-revalidate
Last-Modified: Fri, 13 Oct 2017 11:27:22 GMT
Expires: Sat, 14 Oct 2017 23:27:22 GMT
Etag: "e91b0a1775e8deab7d78c5694cfe651348f31c5c"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
Content-Length: 1777
Connection: close


--- Additional Info ---
Magic:  data
Size:   1777
Md5:    b013c13a1126ff17979452edc0d584fb
Sha1:   e91b0a1775e8deab7d78c5694cfe651348f31c5c
Sha256: 0a1e2b9c9f6f5cb113b15051db57c986f1b6c79309db6a023edc441f8db305fc
                                        
                                            GET /comment-iframe.g?blogID=905693602556410941&postID=3700451734594602583&blogspotRpcToken=9356062&bpli=1 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 13 Oct 2017 11:30:59 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Set-Cookie: S=blogger=bz2eWJeUWceMxe5OQLUD0_7PqNkKfV3A; Domain=.blogger.com; Path=/; Secure; HttpOnly; Priority=LOW
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   1922
Md5:    fa307560bd38f63975bffba8d2224e7e
Sha1:   315ef64c8f46e257fd173314068462f1c351ffb8
Sha256: 49bc933d9b930a6217390ca21b1c21604c7ed4ae171acf86c5c0e755410c859c
                                        
                                            GET /img/navbar/icons_orange.png HTTP/1.1 
Host: img1.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=905693602556410941&blogName=Posticeria,+cabelo+e+outras+est%C3%A9ticas&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=http://hairest.blogspot.com/search&blogLocale=pt_PT&v=2&homepageUrl=http://hairest.blogspot.com/&targetPostID=3700451734594602583&blogPostOrPageUrl=http://hairest.blogspot.com/2013/07/cabelo-cosido-em-banda.html&vt=-5843008141899717951&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 915
Date: Thu, 12 Oct 2017 23:21:23 GMT
Expires: Thu, 19 Oct 2017 23:21:23 GMT
Last-Modified: Thu, 12 Oct 2017 17:52:12 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 43776
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 46 x 20, 8-bit colormap, non-interlaced
Size:   915
Md5:    87f25844d23ac1ee03604e668f5c1797
Sha1:   85d440947d70a78672740ff7e8062f68ce9d99a3
Sha256: d70c36f2f61b735573caa3dd5a1602e19916701bb88d99ff4527cd2c89fa8b72
                                        
                                            GET /obtain_ads.do?callback=jQuery1113032903461085467545_1507894259105&proxyurl=&publisherid=&memberid=&wid=580086&size=468x60&shortkey=JeqJ2bMvN&lang=en-US&ip=&url=http%3A%2F%2Fwww.atat.ro%2Fp%2Fabout.html&ref=http%3A%2F%2Fwww-blogger-opensocial.googleusercontent.com%2Fgadgets%2Fifr%3Furl%3Dhttp%3A%2F%2Fhosting.gmodules.com%2Fig%2Fgadgets%2Ffile%2F111311123200664007084%2Fcalendar.xml%26container%3Dblogger%26view%3Ddefault%26lang%3Dpt%26country%3DPT%26sanitize%3D0%26v%3D4b0c87b8da3b9f9e%26libs%3Dcore%26parent%3Dhairest.blogspot.no%2F%26mid%3D1&custom=&browser=firefox+3.6.13&screen=234x60&cookieid=&version=1&ct=Disclaimer&_=1507894259106 HTTP/1.1 
Host: adservice.aliexpress.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         198.11.132.250
HTTP/1.1 200
Content-Type: application/javascript;charset=UTF-8
                                        
Date: Fri, 13 Oct 2017 11:30:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: ali_apache_id=11.227.118.67.1507894259461.214327.1; path=/; domain=.aliexpress.com; expires=Wed, 30-Nov-2084 01:01:01 GMT xman_us_f=x_l=0; Domain=.aliexpress.com; Expires=Wed, 31-Oct-2085 14:45:06 GMT; Path=/ acs_usuc_t=x_csrf=ic8ot60ar_l_&acs_rt=7dfcd193becc40f6be5a32386dae7399; Domain=.aliexpress.com; Path=/ xman_t=W53GXr6BkbnbsDy2lZ30wn/7IlIL0cIfqmv0pwsEtMrGcVMGzIfFlZ5jIQ+TRc+v; Domain=.aliexpress.com; Path=/; HttpOnly xman_f=C17amviJv1uaeXViIrbcZRD+C4gEzQl27mNRL/duA0JJjcLzsWpACejLWwJ9gFXg2+pyRMTDx029WB2DjAAKOAkZB6RokELLCqqWg60FG3udX5p4zyQGqA==; Domain=.aliexpress.com; Expires=Wed, 31-Oct-2085 14:45:06 GMT; Path=/; HttpOnly XSRF-TOKEN=284f9e9d-f575-429f-9b06-c3843df3c5c0;path=/;HttpOnly
P3P: CP="CAO PSA OUR"
X-Application-Context: affiliatedynamicwindow:prod:7001
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Content-Encoding: gzip
Server: Tengine/Aserver
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2279
Md5:    3e8d9abb3820c21d2d56d91b195fd23c
Sha1:   54fbff40946f470d48d547c73542fa7167f87c69
Sha256: c86ce10aa8127beada667f5a10b59766f1221f5d18f464c409ab416ca6c1b963
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=114=YC-IgmAmVrjWSdbb7azLfpcNe7JMuWpGnmEjh-f7PJdGb1OzwyPlVDPGl3HgMMUWIkHw0xgAhtD66wGs-XoKoJTlwCPsk0MjdvPOmLnPIJlxGzCw6pK09yFCKZ8lugmh

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 11:30:59 GMT
Expires: Tue, 17 Oct 2017 11:30:59 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    4a36c3a0f62e5090abbee327b6c5a777
Sha1:   37a0315fbdf892194cc735b14d8f024a0b196de5
Sha256: d5012467277681fb71e08741691463135ac7d35f532f412c680cd7a031658b2a
                                        
                                            GET /img/blank.gif HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=905693602556410941&postID=3700451734594602583&blogspotRpcToken=9356062&bpli=1

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 43
Date: Thu, 12 Oct 2017 23:25:18 GMT
Expires: Thu, 19 Oct 2017 23:25:18 GMT
Last-Modified: Thu, 12 Oct 2017 21:24:53 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 43541
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            GET /js/platform:gapi.iframes.style.common.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=905693602556410941&blogName=Posticeria,+cabelo+e+outras+est%C3%A9ticas&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=http://hairest.blogspot.com/search&blogLocale=pt_PT&v=2&homepageUrl=http://hairest.blogspot.com/&targetPostID=3700451734594602583&blogPostOrPageUrl=http://hairest.blogspot.com/2013/07/cabelo-cosido-em-banda.html&vt=-5843008141899717951&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=YC-IgmAmVrjWSdbb7azLfpcNe7JMuWpGnmEjh-f7PJdGb1OzwyPlVDPGl3HgMMUWIkHw0xgAhtD66wGs-XoKoJTlwCPsk0MjdvPOmLnPIJlxGzCw6pK09yFCKZ8lugmh

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Timing-Allow-Origin: *
Etag: "04daa091e8f5885baefc06708bb31518"
Expires: Fri, 13 Oct 2017 11:30:59 GMT
Date: Fri, 13 Oct 2017 11:30:59 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17435
Md5:    43ab6752c3cd424007b1ca3f730b1cee
Sha1:   dc2658bc093c37bbf5a19ada14643b7be34be421
Sha256: 83301b9f3b744710ac30f1c7bfe8f237dfd1cf91e26453f33d34d6cd727c0a8c
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=114=YC-IgmAmVrjWSdbb7azLfpcNe7JMuWpGnmEjh-f7PJdGb1OzwyPlVDPGl3HgMMUWIkHw0xgAhtD66wGs-XoKoJTlwCPsk0MjdvPOmLnPIJlxGzCw6pK09yFCKZ8lugmh

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 11:30:59 GMT
Expires: Tue, 17 Oct 2017 11:30:59 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    c26d19cfb2cf80da024dca34a52d07ee
Sha1:   20e7a5a5251819a67413644d22a48cc29e58231b
Sha256: 1d8888fe4341af8b314cdff3bf4ab478b14824141d5bd044a9332a78cec3cf94
                                        
                                            GET /static/v1/jsbin/3426685687-cmt__pt_pt.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=905693602556410941&postID=3700451734594602583&blogspotRpcToken=9356062&bpli=1
Cookie: S=blogger=bz2eWJeUWceMxe5OQLUD0_7PqNkKfV3A

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 31074
Date: Fri, 13 Oct 2017 00:04:10 GMT
Expires: Sat, 13 Oct 2018 00:04:10 GMT
Last-Modified: Thu, 12 Oct 2017 21:24:53 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 41209
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   31074
Md5:    a85ef62356db14cfdaefa4ae2f9d124c
Sha1:   ec0827193bd19c81ec5ccb0ce9ece33e3c674b1b
Sha256: 42e3abb2aeb6f5b28599039e40a121ff7280f3f5c9da705d059b13d9ebbb34cd
                                        
                                            GET /static/v1/v-css/2218177523-cmtfp.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=905693602556410941&postID=3700451734594602583&blogspotRpcToken=9356062&bpli=1
Cookie: S=blogger=bz2eWJeUWceMxe5OQLUD0_7PqNkKfV3A

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3619
Date: Thu, 12 Oct 2017 23:17:14 GMT
Expires: Fri, 12 Oct 2018 23:17:14 GMT
Last-Modified: Thu, 12 Oct 2017 01:54:12 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 44025
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   3619
Md5:    f11194c1a58fe620f82a69a80d7d1b69
Sha1:   69a5e7ea4398a61a6a597af0b7a7437107bf0cd0
Sha256: 933d248895e0d8967298b63dd4762e2254d2a47112ac6d5130e5c817bcdc668d
                                        
                                            GET /-0-nPO9NAgyw/WQLqmqQ3S7I/AAAAAAAAfZc/76QjD42E_tkoJBXB56Tptg3I5M_QSODXQCLcB/w600-h400-p-k-no-nu/likes.png HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v7d98"
Expires: Sat, 14 Oct 2017 05:45:44 GMT
Content-Disposition: inline;filename="likes.png"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 10:36:25 GMT
Server: fife
Content-Length: 56554
X-XSS-Protection: 1; mode=block
Age: 3274
Cache-Control: public, max-age=86400, no-transform
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 400 x 266, 8-bit/color RGB, non-interlaced
Size:   56554
Md5:    7183ee09b2bcd14dcd3a2dd405bd8db7
Sha1:   3526011f5bd7f805ab56652195c5f90d8a861875
Sha256: 0e369647d27daa83eb0995cba679fcb4660981c29998d457f08e82b7c5548307
                                        
                                            GET /img/cmt/close.gif HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=905693602556410941&postID=3700451734594602583&blogspotRpcToken=9356062&bpli=1
Cookie: S=blogger=bz2eWJeUWceMxe5OQLUD0_7PqNkKfV3A

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 347
Date: Thu, 12 Oct 2017 23:29:55 GMT
Expires: Thu, 19 Oct 2017 23:29:55 GMT
Last-Modified: Thu, 12 Oct 2017 01:54:12 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 43265
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 16 x 16
Size:   347
Md5:    6671b9932cbb79a2c2a018ed2c3bf3fb
Sha1:   40566dd706279a44ebd477df58a4cf75ab99cae8
Sha256: df6cb367e3692c4d2056dd69c54bea18458148ef028ce7b998824f9f49ceafd6
                                        
                                            POST /reviews/json/aggregates HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Referer: https://www.blogger.com/blog-post-reactions.g?options=%5BInteressante%5D&textColor=%23997755
Content-Length: 234
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Date: Fri, 13 Oct 2017 11:30:59 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: zfe
X-XSS-Protection: 1; mode=block
Set-Cookie: NID=114=OzCvPmpGZp3PwnD58wxoMfHxqwIGN2bWx2pA6kNNsPf0INOv-GxLlnIp2KwxdNdaUBKaUDtkj4vQtG1jM2XBrazsqHyL-YMu0CuOvi2CE6xNFseOapeLyWE6HCI9HCRH; expires=Sat, 14-Apr-2018 11:30:59 GMT; path=/; domain=.blogger.com; HttpOnly
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   304
Md5:    9f6810eb14811c8e3a7a988f5d29e0ab
Sha1:   f2a4a332d893fb093af6fe02ac03f199cfa04d45
Sha256: 155e298f3ee2287231dbadfd7a7184e15fe73e4ceb22f443dd13edfdd9729aca
                                        
                                            GET /se/0/_/+1/fastbutton?usegapi=1&source=blogger%3Anavbar%3Aplusone&size=medium&hl=no&origin=https%3A%2F%2Fwww.blogger.com&url=http%3A%2F%2Fhairest.blogspot.com%2F2013%2F07%2Fcabelo-cosido-em-banda.html&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=905693602556410941&blogName=Posticeria,+cabelo+e+outras+est%C3%A9ticas&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=http://hairest.blogspot.com/search&blogLocale=pt_PT&v=2&homepageUrl=http://hairest.blogspot.com/&targetPostID=3700451734594602583&blogPostOrPageUrl=http://hairest.blogspot.com/2013/07/cabelo-cosido-em-banda.html&vt=-5843008141899717951&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=YC-IgmAmVrjWSdbb7azLfpcNe7JMuWpGnmEjh-f7PJdGb1OzwyPlVDPGl3HgMMUWIkHw0xgAhtD66wGs-XoKoJTlwCPsk0MjdvPOmLnPIJlxGzCw6pK09yFCKZ8lugmh

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Vary: Accept-Encoding
Timing-Allow-Origin: *
Expires: Fri, 13 Oct 2017 11:31:00 GMT
Date: Fri, 13 Oct 2017 11:31:00 GMT
Cache-Control: private, max-age=3600
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4042
Md5:    2f37eaa26612d2d741d00cf20cdb6ae0
Sha1:   1e4f9d410a03789efd82564c392c28a6c9c38f11
Sha256: 87a0d920a03f1a5c2c7d26f1eae9fdd5351b98fa4d2715c62ec60873bd4ece18
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=auth/exm=gapi_iframes_style_common,plusone/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_1 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=905693602556410941&blogName=Posticeria,+cabelo+e+outras+est%C3%A9ticas&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=http://hairest.blogspot.com/search&blogLocale=pt_PT&v=2&homepageUrl=http://hairest.blogspot.com/&targetPostID=3700451734594602583&blogPostOrPageUrl=http://hairest.blogspot.com/2013/07/cabelo-cosido-em-banda.html&vt=-5843008141899717951&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=YC-IgmAmVrjWSdbb7azLfpcNe7JMuWpGnmEjh-f7PJdGb1OzwyPlVDPGl3HgMMUWIkHw0xgAhtD66wGs-XoKoJTlwCPsk0MjdvPOmLnPIJlxGzCw6pK09yFCKZ8lugmh

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 19422
Date: Thu, 12 Oct 2017 20:26:09 GMT
Expires: Fri, 12 Oct 2018 20:26:09 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 54291
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   19422
Md5:    ac80b1c4b4c427abb05209c3cd2e1b8b
Sha1:   3f0e766aa8942538b0b15ea6d3d7c998b7831fae
Sha256: 77f6eded601b1c7c62c6d89c21b359206819c5b7992420ac178362a4f07f3ad0
                                        
                                            GET /blogblog/data/res/1782006661-rockpool_compiled.js HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 45717
Date: Thu, 12 Oct 2017 23:04:59 GMT
Expires: Thu, 19 Oct 2017 23:04:59 GMT
Last-Modified: Wed, 11 Oct 2017 20:56:15 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 44760
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   45717
Md5:    6ec8997cc9a610abc45b3b97081a825c
Sha1:   f03afb1257eaf326d5a5f8644775fa61e64081d3
Sha256: 207ab1419f8d8c7d8f38db38bbc875a04e74d9a824237d571a5f4467e614d075
                                        
                                            GET /js/link-converter.js HTTP/1.1 
Host: cdn.adf.ly
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         104.20.0.4
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Fri, 13 Oct 2017 11:31:00 GMT
Content-Length: 11963
Connection: keep-alive
Set-Cookie: __cfduid=d51c90ce3365f4d03174a4cfdfea79d721507894260; expires=Sat, 13-Oct-18 11:31:00 GMT; path=/; domain=.adf.ly; HttpOnly
Cache-Control: public, max-age=604800
Expires: Fri, 20 Oct 2017 11:31:00 GMT
Etag: "7b8e-59cb9e8c-67066fa7126fe724"
Last-Modified: Wed, 27 Sep 2017 12:50:20 GMT
Content-Encoding: gzip
Vary: Accept-Encoding
X-Turbo-Charged-By: LiteSpeed
CF-Cache-Status: HIT
Accept-Ranges: bytes
Server: cloudflare-nginx
CF-RAY: 3ad1f8555f8b427f-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   11963
Md5:    2af395b0d51f4c8caf65e100035706e7
Sha1:   f440f35a825f8e54be1fb7e5b9798f93175df75d
Sha256: 8868abbcc0b9780471640a599a9aae6383355fd297cd2cd4aad278f394191975
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=114=YC-IgmAmVrjWSdbb7azLfpcNe7JMuWpGnmEjh-f7PJdGb1OzwyPlVDPGl3HgMMUWIkHw0xgAhtD66wGs-XoKoJTlwCPsk0MjdvPOmLnPIJlxGzCw6pK09yFCKZ8lugmh

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 11:31:01 GMT
Expires: Tue, 17 Oct 2017 11:31:01 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    f99c8fd2106061228e04e44345827db9
Sha1:   3d8a35a963b5d0481e02b6dad5feb9be33471993
Sha256: 57b59a56c619c145d4800ded6e727e32aa7a48e271c8708424527a7576c14f04
                                        
                                            GET /translate_static/css/translateelement.css HTTP/1.1 
Host: translate.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         173.194.220.95
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3619
Date: Fri, 13 Oct 2017 10:44:26 GMT
Expires: Fri, 13 Oct 2017 11:44:26 GMT
Last-Modified: Tue, 03 Jan 2017 23:15:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=3600
Age: 2794
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   3619
Md5:    026feece41808720d7daf983e1aeecad
Sha1:   277a95ad77e6bd2a3be17ea406628fa24c771379
Sha256: 07805211e21a7433cc8c05f820a0f86aca292d9139828a97196540ec60ccfdad
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=googleapis_client,gapi_iframes_style_common,gapi_iframes_iframer/am=AQ/rt=j/d=1/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://apis.google.com/se/0/_/+1/fastbutton?usegapi=1&source=blogger%3Anavbar%3Aplusone&size=medium&hl=no&origin=https%3A%2F%2Fwww.blogger.com&url=http%3A%2F%2Fhairest.blogspot.com%2F2013%2F07%2Fcabelo-cosido-em-banda.html&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=YC-IgmAmVrjWSdbb7azLfpcNe7JMuWpGnmEjh-f7PJdGb1OzwyPlVDPGl3HgMMUWIkHw0xgAhtD66wGs-XoKoJTlwCPsk0MjdvPOmLnPIJlxGzCw6pK09yFCKZ8lugmh

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 44716
Date: Thu, 12 Oct 2017 18:17:58 GMT
Expires: Fri, 12 Oct 2018 18:17:58 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 61983
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   44716
Md5:    95050c9c51441ce7aedcb15c820b1b6f
Sha1:   069e96a92ce71a14833c53bd3516f5f8a2556d91
Sha256: 1da03bc638069e15274f8bcf41401e46837ceea995075934702afc3aa9e5a933
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=gapi_iframes_style_common,plusone/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=905693602556410941&blogName=Posticeria,+cabelo+e+outras+est%C3%A9ticas&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=http://hairest.blogspot.com/search&blogLocale=pt_PT&v=2&homepageUrl=http://hairest.blogspot.com/&targetPostID=3700451734594602583&blogPostOrPageUrl=http://hairest.blogspot.com/2013/07/cabelo-cosido-em-banda.html&vt=-5843008141899717951&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=YC-IgmAmVrjWSdbb7azLfpcNe7JMuWpGnmEjh-f7PJdGb1OzwyPlVDPGl3HgMMUWIkHw0xgAhtD66wGs-XoKoJTlwCPsk0MjdvPOmLnPIJlxGzCw6pK09yFCKZ8lugmh

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 58976
Date: Thu, 12 Oct 2017 20:13:59 GMT
Expires: Fri, 12 Oct 2018 20:13:59 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 55021
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   58976
Md5:    19c76688d8c32cad0bc39aa1ebd2de70
Sha1:   7d4321f4521b894dafdcbaaf3b396cf93a00b334
Sha256: 6cf6e0443b0d9b73af2eacfd2910e417875dd16594487563f5596fd230f9dd61
                                        
                                            GET /js/bg/_7krDbof0JW4elAnpriFoXUhMVT27jq8tLT8egbKKaM.js HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=905693602556410941&postID=3700451734594602583&blogspotRpcToken=9356062&bpli=1
Cookie: NID=114=YC-IgmAmVrjWSdbb7azLfpcNe7JMuWpGnmEjh-f7PJdGb1OzwyPlVDPGl3HgMMUWIkHw0xgAhtD66wGs-XoKoJTlwCPsk0MjdvPOmLnPIJlxGzCw6pK09yFCKZ8lugmh

                                         
                                         172.217.22.164
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4730
Date: Thu, 12 Oct 2017 18:15:26 GMT
Expires: Fri, 12 Oct 2018 18:15:26 GMT
Last-Modified: Mon, 02 Oct 2017 11:00:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 62135
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4730
Md5:    d1c9ce8aab342010cded37ef9793bc5b
Sha1:   70e204f6af3ff559200990e5d2cce71f4d7c9b7d
Sha256: 78fc9bd2efadb30fc1bf35b658c56ce5444502468068457d9adf57bda1309e35
                                        
                                            GET /post_ads_position.do?cmpParams=Short_key%3DJeqJ2bMvN%26scm%3D1007.12506.84939.0%26Exp_ID%3D580086150789425963100371%26Object_type%3Ditem%26Object_id%3D32716265317%2C32702383727%2C32785164603%2C32812986903%2C32825854006%2C32737559733%2C32731569451%2C32819138937%2C32790326857%2C32596327081%2C32795257894%2C32796999788%26memberId%3Dnull%26cookieId%3D%26country%3DNO%26language%3Den%26verison%3D1%26windowSize%3D468x60%26isCaCompositor%3DN%26isComple%3DN%26isCookieCart%3DN%26isCookie%3DN%26isRealTimeCookie%3DN%26isCountry%3DN%26isMem%3DY%26isMemCart%3DN%26isSite%3DN%26isPage%3DN&exposureId=580086150789425963100371&shortkey=JeqJ2bMvN&dwidth=254&dheight=4021&pleft=0&ptop=1498&t=1507894261819 HTTP/1.1 
Host: adservice.aliexpress.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html
Cookie: ali_apache_id=11.227.118.67.1507894259461.214327.1; xman_us_f=x_l=0; acs_usuc_t=x_csrf=ic8ot60ar_l_&acs_rt=7dfcd193becc40f6be5a32386dae7399; xman_t=W53GXr6BkbnbsDy2lZ30wn/7IlIL0cIfqmv0pwsEtMrGcVMGzIfFlZ5jIQ+TRc+v; xman_f=C17amviJv1uaeXViIrbcZRD+C4gEzQl27mNRL/duA0JJjcLzsWpACejLWwJ9gFXg2+pyRMTDx029WB2DjAAKOAkZB6RokELLCqqWg60FG3udX5p4zyQGqA==; XSRF-TOKEN=284f9e9d-f575-429f-9b06-c3843df3c5c0

                                         
                                         198.11.132.250
HTTP/1.1 200
Content-Type: application/javascript;charset=UTF-8
                                        
Date: Fri, 13 Oct 2017 11:31:02 GMT
Content-Length: 36
Connection: keep-alive
Set-Cookie: acs_usuc_t=x_csrf=ic8ot60ar_l_&acs_rt=7dfcd193becc40f6be5a32386dae7399; Domain=.aliexpress.com; Path=/
P3P: CP="CAO PSA OUR"
X-Application-Context: affiliatedynamicwindow:prod:7001
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Server: Tengine/Aserver
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   36
Md5:    952d6ef9c2d0bc2e86c32d4e463a23a1
Sha1:   3af1032ebdd224d3409fd816fa9826b833e78ef9
Sha256: 4073d690ab3aea580ebf5720df9ae1c716aeefecd82bd3137f933fb22ebca7e2
                                        
                                            GET /cpm.jpg?t=1507894261823&Short_key=JeqJ2bMvN&scm=1007.12506.84939.0&Exp_ID=580086150789425963100371&Object_type=item&Object_id=32716265317,32702383727,32785164603,32812986903,32825854006,32737559733,32731569451,32819138937,32790326857,32596327081,32795257894,32796999788&memberId=null&cookieId=&country=NO&language=en&verison=1&windowSize=468x60&isCaCompositor=N&isComple=N&isCookieCart=N&isCookie=N&isRealTimeCookie=N&isCountry=N&isMem=Y&isMemCart=N&isSite=N&isPage=N HTTP/1.1 
Host: adservice.aliexpress.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html
Cookie: ali_apache_id=11.227.118.67.1507894259461.214327.1; xman_us_f=x_l=0; acs_usuc_t=x_csrf=ic8ot60ar_l_&acs_rt=7dfcd193becc40f6be5a32386dae7399; xman_t=W53GXr6BkbnbsDy2lZ30wn/7IlIL0cIfqmv0pwsEtMrGcVMGzIfFlZ5jIQ+TRc+v; xman_f=C17amviJv1uaeXViIrbcZRD+C4gEzQl27mNRL/duA0JJjcLzsWpACejLWwJ9gFXg2+pyRMTDx029WB2DjAAKOAkZB6RokELLCqqWg60FG3udX5p4zyQGqA==; XSRF-TOKEN=284f9e9d-f575-429f-9b06-c3843df3c5c0

                                         
                                         198.11.132.250
HTTP/1.1 200
Content-Type: image/jpeg;charset=UTF-8
                                        
Date: Fri, 13 Oct 2017 11:31:02 GMT
Content-Length: 7
Connection: keep-alive
Set-Cookie: acs_usuc_t=x_csrf=ic8ot60ar_l_&acs_rt=7dfcd193becc40f6be5a32386dae7399; Domain=.aliexpress.com; Path=/
P3P: CP="CAO PSA OUR"
X-Application-Context: affiliatedynamicwindow:prod:7001
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Server: Tengine/Aserver
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   7
Md5:    260ca9dd8a4577fc00b7bd5810298076
Sha1:   53a5687cb26dc41f2ab4033e97e13adefd3740d6
Sha256: aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27
                                        
                                            GET /cpm.jpg?t=1507894261827&Short_key=JeqJ2bMvN&scm=1007.12506.84939.0&Exp_ID=580086150789425963100371&Object_type=item&Object_id=32716265317,32702383727,32785164603,32812986903,32825854006,32737559733,32731569451,32819138937,32790326857,32596327081,32795257894,32796999788&memberId=null&cookieId=&country=NO&language=en&verison=1&windowSize=468x60&isCaCompositor=N&isComple=N&isCookieCart=N&isCookie=N&isRealTimeCookie=N&isCountry=N&isMem=Y&isMemCart=N&isSite=N&isPage=N HTTP/1.1 
Host: adservice.aliexpress.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html
Cookie: ali_apache_id=11.227.118.67.1507894259461.214327.1; xman_us_f=x_l=0; acs_usuc_t=x_csrf=ic8ot60ar_l_&acs_rt=7dfcd193becc40f6be5a32386dae7399; xman_t=W53GXr6BkbnbsDy2lZ30wn/7IlIL0cIfqmv0pwsEtMrGcVMGzIfFlZ5jIQ+TRc+v; xman_f=C17amviJv1uaeXViIrbcZRD+C4gEzQl27mNRL/duA0JJjcLzsWpACejLWwJ9gFXg2+pyRMTDx029WB2DjAAKOAkZB6RokELLCqqWg60FG3udX5p4zyQGqA==; XSRF-TOKEN=284f9e9d-f575-429f-9b06-c3843df3c5c0

                                         
                                         198.11.132.250
HTTP/1.1 200
Content-Type: image/jpeg;charset=UTF-8
                                        
Date: Fri, 13 Oct 2017 11:31:02 GMT
Content-Length: 7
Connection: keep-alive
Set-Cookie: acs_usuc_t=x_csrf=ic8ot60ar_l_&acs_rt=7dfcd193becc40f6be5a32386dae7399; Domain=.aliexpress.com; Path=/
P3P: CP="CAO PSA OUR"
X-Application-Context: affiliatedynamicwindow:prod:7001
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Server: Tengine/Aserver
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   7
Md5:    260ca9dd8a4577fc00b7bd5810298076
Sha1:   53a5687cb26dc41f2ab4033e97e13adefd3740d6
Sha256: aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27
                                        
                                            GET /translate_static/js/element/main.js HTTP/1.1 
Host: translate.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         173.194.220.95
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1512
Date: Fri, 13 Oct 2017 10:37:10 GMT
Expires: Fri, 13 Oct 2017 11:37:10 GMT
Last-Modified: Thu, 14 Sep 2017 18:15:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Age: 3232
Cache-Control: public, max-age=3600
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   1512
Md5:    f0face2803929896766489beb403daed
Sha1:   6670aacb37bac6bb335ce13cb4d8f427f567e222
Sha256: 4702156d6e0ba94a770ce765d30be717a51be393b2f34fcdb9ac237e091adbe1
                                        
                                            GET /zFdxGE77vvD2w5xHy6jkVuElKv-U9_9qLkRYK8OnbDeJPtjSZ82UPq5w6hJ-SA=w35 HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v1"
Expires: Sat, 14 Oct 2017 06:45:35 GMT
Content-Disposition: inline;filename="unnamed.png"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 10:45:47 GMT
Server: fife
Content-Length: 1758
X-XSS-Protection: 1; mode=block
Age: 2715
Cache-Control: public, max-age=86400, no-transform
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 35 x 35, 8-bit/color RGBA, non-interlaced
Size:   1758
Md5:    1399cebd5450ed86eb2e3ece87ec8233
Sha1:   8b9ae975e930640a47cd39f9495c41810eb34abd
Sha256: 9249f958fddd3a64459c5422d64f6bcbc967a8007fa6b40566c93ed05dc7fb86
                                        
                                            GET /element/TE_20170911_00/e/js/element/element_main.js HTTP/1.1 
Host: translate.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         173.194.220.95
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Length: 87012
Date: Thu, 12 Oct 2017 20:18:40 GMT
Expires: Fri, 12 Oct 2018 20:18:40 GMT
Last-Modified: Mon, 11 Sep 2017 09:50:21 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 54742
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   87012
Md5:    cbb78a2bb94e17d53ca2e6bf22af703d
Sha1:   f5e1c8525c0ee3451c1b198231c546a40656ab4e
Sha256: 815ef68dd0a3233c6a7a3522d2c62b05a2aaba850c7aac1f056dfa952ab707ff
                                        
                                            GET /comment-iframe-bg.g?bgresponse=js_disabled&bgint=_7krDbof0JW4elAnpriFoXUhMVT27jq8tLT8egbKKaM HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=905693602556410941&postID=3700451734594602583&blogspotRpcToken=9356062&bpli=1
Cookie: S=blogger=bz2eWJeUWceMxe5OQLUD0_7PqNkKfV3A; NID=114=OzCvPmpGZp3PwnD58wxoMfHxqwIGN2bWx2pA6kNNsPf0INOv-GxLlnIp2KwxdNdaUBKaUDtkj4vQtG1jM2XBrazsqHyL-YMu0CuOvi2CE6xNFseOapeLyWE6HCI9HCRH

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 13 Oct 2017 11:31:02 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   4540
Md5:    4d0d1499d445fec3bc22eef7be042263
Sha1:   2892aaf7927edc1ed23d469107317b3db2739172
Sha256: 9e72abd267c4d887beef04e2dcff97f36dfe9697c2dec4aecd417990f0631452
                                        
                                            GET /csi?v=3&s=opensocial-gadgets&action=blogger_default&gadget=http%3A%2F%2Fhosting.gmodules.com%2Fig%2Fgadgets%2Ffile%2F111311123200664007084%2Fcalendar.xml&container=blogger&view=default&e=&rt=dl.97,ol.7419,prt.7420 HTTP/1.1 
Host: csi.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www-blogger-opensocial.googleusercontent.com/gadgets/ifr?url=http://hosting.gmodules.com/ig/gadgets/file/111311123200664007084/calendar.xml&container=blogger&view=default&lang=pt&country=PT&sanitize=0&v=4b0c87b8da3b9f9e&libs=core&parent=hairest.blogspot.no/&mid=1

                                         
                                         216.58.201.163
HTTP/1.1 204 No Content
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Fri, 13 Oct 2017 11:31:03 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT
Server: Golfe2
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /o/oauth2/postmessageRelay?parent=https%3A%2F%2Fwww.blogger.com&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: accounts.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=905693602556410941&blogName=Posticeria,+cabelo+e+outras+est%C3%A9ticas&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=http://hairest.blogspot.com/search&blogLocale=pt_PT&v=2&homepageUrl=http://hairest.blogspot.com/&targetPostID=3700451734594602583&blogPostOrPageUrl=http://hairest.blogspot.com/2013/07/cabelo-cosido-em-banda.html&vt=-5843008141899717951&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=YC-IgmAmVrjWSdbb7azLfpcNe7JMuWpGnmEjh-f7PJdGb1OzwyPlVDPGl3HgMMUWIkHw0xgAhtD66wGs-XoKoJTlwCPsk0MjdvPOmLnPIJlxGzCw6pK09yFCKZ8lugmh; GAPS=1:Elt44Xj8zT5tr2U4v_X1qJEbA2PiXw:IaEQToUdMqOAEech

                                         
                                         172.217.22.173
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Expires: Sat, 14 Oct 2017 11:31:02 GMT
Date: Fri, 13 Oct 2017 11:31:02 GMT
Cache-Control: public, max-age=86400
Content-Security-Policy-Report-Only: script-src 'unsafe-inline' https: http:;object-src 'none';base-uri 'none';report-uri /_/cspreport
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   364
Md5:    38b2f3b216d19cbb6ae8c3731a2af427
Sha1:   bb2ab5083c431b4e4dd2dcf8ff7ab8b3cd44091b
Sha256: 4e12bc99efb2707156f6333fa507622d369a5c12a441b54319360b735e3335c3
                                        
                                            GET /accounts/default1/banners/webnode_banner_160x600_ver5.jpg HTTP/1.1 
Host: affiliate.webnode.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         85.239.227.111
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 13 Oct 2017 11:31:03 GMT
Last-Modified: Tue, 13 Dec 2011 11:39:21 GMT
Etag: "605e9fb9-92c1-4b3f7b3c26c40"
Accept-Ranges: bytes
Content-Length: 37569
Keep-Alive: timeout=1, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   37569
Md5:    de5135f185d4726e20bfb88eac5187e3
Sha1:   8fb65626c4de21fc50697f5b052943102297aeff
Sha256: f8a4bc7378df16bc4f670bf7764dd0faab740cb29787773a69a3e21fe7aba586
                                        
                                            GET /scripts/imp.php?a_aid=53904cc605399&a_bid=42d628f8 HTTP/1.1 
Host: affiliate.webnode.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html
Cookie: PAPCookie_Imp_c476df8f=pap

                                         
                                         85.239.227.111
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Fri, 13 Oct 2017 11:31:03 GMT
Set-Cookie: PAPCookie_Imp_42d628f8=pap; expires=Wed, 13-Oct-2027 21:38:44 GMT
Content-Length: 42
Keep-Alive: timeout=1, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    accba0b69f352b4c9440f05891b015c5
Sha1:   9d01cc5dc8e042c0d4ad6cfb8b3ac38e84a5ef9f
Sha256: 47043e4823a6c21a8881de789b4185355330b5804629d23f6b43dd93f5265292
                                        
                                            GET /pub/banner.php?id=21&c=8ca2558052 HTTP/1.1 
Host: afiliados.e-goi.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         94.46.251.50
HTTP/1.1 200 OK
Content-Type: text/html;charset=UTF-8
                                        
Server: nginx
Date: Fri, 13 Oct 2017 11:31:03 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubdomains
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   662
Md5:    48a32d302d71136ed4e6e9836df2389c
Sha1:   2a81a4d8814cb0173ec56fbd39f3df1cce27e98d
Sha256: 8199b164f9210ac0ec96f92b362332a691baf9998eb683ace45c41c8ddcf72ad
                                        
                                            GET /yts/jsbin/www-widgetapi-vflK6YIUJ/www-widgetapi.js HTTP/1.1 
Host: s.ytimg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding, Origin
Content-Encoding: gzip
Timing-Allow-Origin: https://www.youtube.com
Content-Length: 9110
Date: Wed, 11 Oct 2017 23:03:15 GMT
Expires: Thu, 19 Oct 2017 23:03:15 GMT
Last-Modified: Wed, 11 Oct 2017 08:23:08 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=691200
Age: 131269


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   9110
Md5:    9d14d0c2338d4e2d65612a5792d2cd41
Sha1:   d52f3233dd2df19e0505c310015825dace2c8e5b
Sha256: b899abffc3a32c497fb36667fdb15d826f6aebae01de7d54c84339354f20f826
                                        
                                            GET /b/stats?style=WHITE_TRANSPARENT&timeRange=ALL_TIME&token=bc03F18BAAA.sMYlNntrV46Qa-HOz_KIyNlYg-yG21bPHfEdLvZ18oA.XvigLt7MZJrFN3Yx2PbgMQ HTTP/1.1 
Host: hairest.blogspot.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 11:31:04 GMT
Expires: Fri, 13 Oct 2017 11:31:04 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 209
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   209
Md5:    18ab50615f5f93d7bba8e130acd4d249
Sha1:   2043488df70860a554f1fc9cb3a1d03a51a1fd6d
Sha256: 82c8eb16b11e4fa5edba1a352ada86f0958ab03c48aadb5be6545ad8ecb38102
                                        
                                            GET /accounts/o/971028622-postmessagerelay.js HTTP/1.1 
Host: ssl.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fwww.blogger.com&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4512
Date: Thu, 12 Oct 2017 18:15:26 GMT
Expires: Fri, 12 Oct 2018 18:15:26 GMT
Last-Modified: Wed, 11 Oct 2017 22:34:08 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 62139
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4512
Md5:    c41dc9da703c13b923ba04f7f4dd9137
Sha1:   0c4fc1bdf44857be1104d9eb4c87fcfa88b6a066
Sha256: b0161a7902e960e4de936ed83bfcc4af8b6063d5503ca13edd7eea8f86af03a9
                                        
                                            GET /blogblog/data/1kt/watermark/body_background_navigator.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 35181
Date: Thu, 12 Oct 2017 23:21:00 GMT
Expires: Thu, 19 Oct 2017 23:21:00 GMT
Last-Modified: Thu, 12 Oct 2017 21:24:53 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 43805
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 300 x 300, 4-bit colormap, non-interlaced
Size:   35181
Md5:    ab9048c3644036ed38499e69286744a8
Sha1:   81e54038caaaec75747cc8d0731e85c7ab196085
Sha256: 9754838f8b597bda799ff6a75743fbc1b7ba671e79ed618b7b7e14017d3345ca
                                        
                                            GET /chart?cht=lfi&chd=s:AABBAGABAACBBBCABABBAEACAHADzD&chds=0.0,100.0&chs=75x30&chco=ffffffb2&chf=bg,s,FFFFFF14&chls=2.0,0.0,0.0&chm=B,ffffff4c,0,0.0,0.0&hl=en-US HTTP/1.1 
Host: chart.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         172.217.22.170
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 13 Oct 2017 11:31:05 GMT
Expires: Sat, 14 Oct 2017 11:31:05 GMT
Cache-Control: public, max-age=86400
Last-Modified: Wed, 06-Sep-2017 18:25:34 GMT
X-Frame-Options: ALLOWALL
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: GoogleChartAPI/1.0
Content-Length: 687
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  PNG image, 75 x 30, 8-bit/color RGBA, non-interlaced
Size:   687
Md5:    b3159b1f25ae18af1baad2e719600cf6
Sha1:   2ff22cb2bdbfd5342ba3a089602b9d7fd877fc22
Sha256: 9052dc76975ba4e512fa85418b29488d81e590f5edaf084f71337ce28f05776f
                                        
                                            GET /pub/images/banner/250x250.jpg HTTP/1.1 
Host: afiliados.e-goi.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://afiliados.e-goi.com/pub/banner.php?id=21&c=8ca2558052

                                         
                                         94.46.251.50
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Fri, 13 Oct 2017 11:31:05 GMT
Content-Length: 56978
Last-Modified: Thu, 28 May 2015 16:20:50 GMT
Connection: keep-alive
Etag: "55674062-de92"
Expires: Sat, 13 Oct 2018 11:31:05 GMT
Cache-Control: max-age=31536000
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubdomains
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   56978
Md5:    c2466689102b4c7a510f9a3818b2cd6a
Sha1:   3ac439d2cfd589cf22f238ed9b8721cd5ef35d40
Sha256: 0abf730d24346ac8f4cce3d90b4b29d0296e5f4bd1d1cd8414209fed764412fe
                                        
                                            GET /images/branding/product/2x/translate_24dp.png HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://translate.googleapis.com/translate_static/css/translateelement.css

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 1847
Date: Thu, 12 Oct 2017 18:15:21 GMT
Expires: Fri, 12 Oct 2018 18:15:21 GMT
Last-Modified: Thu, 21 Apr 2016 03:17:22 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 62144
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 48 x 48, 8-bit/color RGBA, non-interlaced
Size:   1847
Md5:    bfa09d19aea98592c45ce0a814f0eb2c
Sha1:   5db965a451d9b6b3a5156836182abe8240d4a0de
Sha256: 5fe03bfd95a2d4e640ed7d04dcb08ef991c327a5ab6f6fdb9eb06e1efc76af30
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=profile/exm=gapi_iframes,gapi_iframes_style_bubble,plusone/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_2 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html
Cookie: NID=114=YC-IgmAmVrjWSdbb7azLfpcNe7JMuWpGnmEjh-f7PJdGb1OzwyPlVDPGl3HgMMUWIkHw0xgAhtD66wGs-XoKoJTlwCPsk0MjdvPOmLnPIJlxGzCw6pK09yFCKZ8lugmh

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8191
Date: Thu, 12 Oct 2017 19:31:42 GMT
Expires: Fri, 12 Oct 2018 19:31:42 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 57563
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   8191
Md5:    b0bd9e3d50772d490411c2ca7da0507b
Sha1:   7ac7ef7c35d0939da2b9324f1b6d4517dfe1ac11
Sha256: be8fc68d1c599657b90baa2b8e29e2f4f03d0113315c19aa1e16792df373cd9c
                                        
                                            GET /images/branding/product/1x/translate_24dp.png HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 825
Date: Thu, 12 Oct 2017 18:15:21 GMT
Expires: Fri, 12 Oct 2018 18:15:21 GMT
Last-Modified: Thu, 21 Apr 2016 03:17:22 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 62144
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit/color RGBA, non-interlaced
Size:   825
Md5:    55ff382a8b09329e3230a1797eb8f5fd
Sha1:   026ae089006a674da7dcc9bf6b986c5d59e75478
Sha256: 1bb2279aed6bc1438d2b17a5ffcbac9d37864582aedeeec8d301eab162b2c213
                                        
                                            GET /js/rpc:shindig_random.js?onload=init HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fwww.blogger.com&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=YC-IgmAmVrjWSdbb7azLfpcNe7JMuWpGnmEjh-f7PJdGb1OzwyPlVDPGl3HgMMUWIkHw0xgAhtD66wGs-XoKoJTlwCPsk0MjdvPOmLnPIJlxGzCw6pK09yFCKZ8lugmh

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Timing-Allow-Origin: *
Etag: "862447553fc7f21eefa0f5321e562c86"
Expires: Fri, 13 Oct 2017 11:31:05 GMT
Date: Fri, 13 Oct 2017 11:31:05 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   5456
Md5:    ac397d26c01a6b9c4c4d6abbf610a356
Sha1:   1a8c65bc3c48432c46b2310760c418447d2c3a2a
Sha256: 06d9001b61ee40837e6221e22b1b50401463180d73d293a96418bdebd935fa1d
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=gapi_iframes_style_slide_menu/exm=auth,gapi_iframes,gapi_iframes_style_bubble,plusone,profile/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_4 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html
Cookie: NID=114=YC-IgmAmVrjWSdbb7azLfpcNe7JMuWpGnmEjh-f7PJdGb1OzwyPlVDPGl3HgMMUWIkHw0xgAhtD66wGs-XoKoJTlwCPsk0MjdvPOmLnPIJlxGzCw6pK09yFCKZ8lugmh

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2796
Date: Thu, 12 Oct 2017 19:31:43 GMT
Expires: Fri, 12 Oct 2018 19:31:43 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 57562
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   2796
Md5:    a0cb0280a2d32fb0dfb1f6aa54fc4506
Sha1:   7f639f15db9d088a82b7903a474ba7fd88986823
Sha256: 2f4c40a0a8410f3ed654b849712db8ac821cb6c0a7e48c830ad0600f5e144609
                                        
                                            GET /feedback/js/help/prod/service/lazy.min.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 11836
Date: Thu, 12 Oct 2017 18:15:43 GMT
Expires: Thu, 19 Oct 2017 18:15:43 GMT
Last-Modified: Wed, 11 Oct 2017 00:10:28 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 62122
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   11836
Md5:    c5258804f66599a9b214665cebf5704f
Sha1:   7962a226cafb1c0fe74bcac746e0e05640d7dfbd
Sha256: 6fda3d09a7fb2440e36494cd97b5801b68325ce358972ff8e7c1e124b2d2bee1
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=rpc,shindig_random/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fwww.blogger.com&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=YC-IgmAmVrjWSdbb7azLfpcNe7JMuWpGnmEjh-f7PJdGb1OzwyPlVDPGl3HgMMUWIkHw0xgAhtD66wGs-XoKoJTlwCPsk0MjdvPOmLnPIJlxGzCw6pK09yFCKZ8lugmh

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 16477
Date: Thu, 12 Oct 2017 18:17:59 GMT
Expires: Fri, 12 Oct 2018 18:17:59 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 61986
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   16477
Md5:    456c107e71e6baabd35161f27bac6414
Sha1:   260083dd624f008fc37e8b3b450e01408e3c16b5
Sha256: e686866e5db4c98de53f2fe74970d3146da36eb3a0ce4b14ba2f6e583cbbe5cc
                                        
                                            GET /se/0/_/+1/fastbutton?usegapi=1&width=250&source=blogger%3Ablog%3Aplusone&size=standard&annotation=bubble&hl=pt_PT&origin=http%3A%2F%2Fhairest.blogspot.no&url=http%3A%2F%2Fhairest.blogspot.com%2F&gsrc=3p&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html
Cookie: NID=114=YC-IgmAmVrjWSdbb7azLfpcNe7JMuWpGnmEjh-f7PJdGb1OzwyPlVDPGl3HgMMUWIkHw0xgAhtD66wGs-XoKoJTlwCPsk0MjdvPOmLnPIJlxGzCw6pK09yFCKZ8lugmh

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Vary: Accept-Encoding
Timing-Allow-Origin: *
Expires: Fri, 13 Oct 2017 11:31:05 GMT
Date: Fri, 13 Oct 2017 11:31:05 GMT
Cache-Control: private, max-age=3600
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4032
Md5:    163a00663af1acee7971e728893f76f8
Sha1:   2e667bbc70b035aff08d7458187e7e2bba917d59
Sha256: cdf6b2fa375ac47941f38c3458b4b72e72e4aa7d8da128e91b0237d34e14e835
                                        
                                            GET /se/0/_/+1/fastbutton?usegapi=1&annotation=inline&width=300&size=medium&source=blogger%3Ablog%3Aplusone&hl=pt_PT&origin=http%3A%2F%2Fhairest.blogspot.no&url=http%3A%2F%2Fhairest.blogspot.com%2F2013%2F07%2Fcabelo-cosido-em-banda.html&gsrc=3p&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html
Cookie: NID=114=YC-IgmAmVrjWSdbb7azLfpcNe7JMuWpGnmEjh-f7PJdGb1OzwyPlVDPGl3HgMMUWIkHw0xgAhtD66wGs-XoKoJTlwCPsk0MjdvPOmLnPIJlxGzCw6pK09yFCKZ8lugmh

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Vary: Accept-Encoding
Timing-Allow-Origin: *
Expires: Fri, 13 Oct 2017 11:31:05 GMT
Date: Fri, 13 Oct 2017 11:31:05 GMT
Cache-Control: private, max-age=3600
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4046
Md5:    d2ca834c2c6eb4592f51ef8a9516b0be
Sha1:   0668d197adddccda124db16d8a5d8fc62adbbb60
Sha256: 96aae46394bfb1313e205c75370b6f8565b2f0bd39354c223ea6bb75a433b0c8
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=auth/exm=gapi_iframes,gapi_iframes_style_bubble,plusone,profile/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_3 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html
Cookie: NID=114=YC-IgmAmVrjWSdbb7azLfpcNe7JMuWpGnmEjh-f7PJdGb1OzwyPlVDPGl3HgMMUWIkHw0xgAhtD66wGs-XoKoJTlwCPsk0MjdvPOmLnPIJlxGzCw6pK09yFCKZ8lugmh

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 18760
Date: Thu, 12 Oct 2017 19:31:42 GMT
Expires: Fri, 12 Oct 2018 19:31:42 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 57563
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   18760
Md5:    2d797cea7686e8bfdf687e7e3f1185f8
Sha1:   18508fd8d4d7d1a60260f374ff44143287448b43
Sha256: ff5a84ffa0a43f93e1ea6bfd87c95185fd97fdbf8e9c890a9c3bcf854a4aa8af
                                        
                                            GET /pub/images/banner/250x250.swf HTTP/1.1 
Host: afiliados.e-goi.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://afiliados.e-goi.com/pub/banner.php?id=21&c=8ca2558052

                                         
                                         94.46.251.50
HTTP/1.1 200 OK
Content-Type: application/x-shockwave-flash
                                        
Server: nginx
Date: Fri, 13 Oct 2017 11:31:05 GMT
Content-Length: 23001
Last-Modified: Thu, 28 May 2015 16:20:50 GMT
Connection: keep-alive
Etag: "55674062-59d9"
Expires: Sat, 13 Oct 2018 11:31:05 GMT
Cache-Control: max-age=31536000
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubdomains
Accept-Ranges: bytes


--- Additional Info ---
Magic:  Macromedia Flash data (compressed), version 10
Size:   23001
Md5:    dffe88e007cd813ea4b31a54df73fc33
Sha1:   bd1e67d0e7fe9b5fed8ed297ae32419e4fcfb375
Sha256: 4cd7f2541f571c9d96eaa7ce39c2323eaf8af0e436a66b786da8583f1b08f375
                                        
                                            GET /translate_a/l?client=te&alpha=true&hl=en&cb=_callbacks____0j8ptb90q HTTP/1.1 
Host: translate.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         173.194.220.95
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Date: Fri, 13 Oct 2017 11:31:05 GMT
Expires: Fri, 13 Oct 2017 11:31:05 GMT
Cache-Control: private, max-age=86400
Content-Language: en
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: HTTP server (unknown)
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   920
Md5:    de2828205e3985db00e3c75a316d97c6
Sha1:   ff82156e2ae06b340467c7aed35af47cb4a0d731
Sha256: 6a684b3f134ab2443519f400ca4f8c12236f00d142a96b6cf86b6d51aeeb71a2
                                        
                                            GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 910
Date: Thu, 21 Sep 2017 13:40:18 GMT
Expires: Fri, 21 Sep 2018 13:40:18 GMT
Last-Modified: Wed, 04 Jan 2017 15:45:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1893047
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 42 x 16, 8-bit/color RGBA, non-interlaced
Size:   910
Md5:    efa6bb2bfe459bc6f4bdafa3db0383f6
Sha1:   52d15ce52fe50643e542c17812de43f4ed1b6ee0
Sha256: 6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2
                                        
                                            GET /o/oauth2/postmessageRelay?parent=http%3A%2F%2Fhairest.blogspot.no&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: accounts.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html
Cookie: NID=114=YC-IgmAmVrjWSdbb7azLfpcNe7JMuWpGnmEjh-f7PJdGb1OzwyPlVDPGl3HgMMUWIkHw0xgAhtD66wGs-XoKoJTlwCPsk0MjdvPOmLnPIJlxGzCw6pK09yFCKZ8lugmh; GAPS=1:Elt44Xj8zT5tr2U4v_X1qJEbA2PiXw:IaEQToUdMqOAEech

                                         
                                         172.217.22.173
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Expires: Sat, 14 Oct 2017 11:31:06 GMT
Date: Fri, 13 Oct 2017 11:31:06 GMT
Cache-Control: public, max-age=86400
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   364
Md5:    bd07ad8c5a6a83306503c1c0e9227223
Sha1:   c954168913e5e921f5389c9436793bedf0ff3a63
Sha256: f4861b3139a5e0aa29fcdbace1cd367957b87ab21a00f1713dd8bdad7b70564d
                                        
                                            GET /gen204?sl=pt&nca=te_ap&client=te&logld=vTE_20170911_00 HTTP/1.1 
Host: translate.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html
Cookie: NID=114=YC-IgmAmVrjWSdbb7azLfpcNe7JMuWpGnmEjh-f7PJdGb1OzwyPlVDPGl3HgMMUWIkHw0xgAhtD66wGs-XoKoJTlwCPsk0MjdvPOmLnPIJlxGzCw6pK09yFCKZ8lugmh

                                         
                                         172.217.22.174
HTTP/1.1 204 No Content
Content-Type: image/gif
                                        
Date: Fri, 13 Oct 2017 11:31:06 GMT
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
X-Content-Type-Options: nosniff
Server: HTTP server (unknown)
Content-Length: 0
X-XSS-Protection: 1; mode=block


--- Additional Info ---
                                        
                                            GET /images/branding/googlelogo/1x/googlelogo_color_68x28dp.png HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 1597
Date: Tue, 29 Aug 2017 15:01:28 GMT
Expires: Wed, 29 Aug 2018 15:01:28 GMT
Last-Modified: Thu, 21 Apr 2016 03:17:22 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 3875378
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 68 x 28, 8-bit/color RGBA, non-interlaced
Size:   1597
Md5:    c4a931d597decd2553aac6634b766cf2
Sha1:   6ec84fb4a2745b4b71520241be77db1fd1013830
Sha256: f56402b127698db4b4dc611a97a6f081d04c4691c60522c5912d189e37c94a9e
                                        
                                            GET /images/cleardot.gif HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html
Cookie: NID=114=YC-IgmAmVrjWSdbb7azLfpcNe7JMuWpGnmEjh-f7PJdGb1OzwyPlVDPGl3HgMMUWIkHw0xgAhtD66wGs-XoKoJTlwCPsk0MjdvPOmLnPIJlxGzCw6pK09yFCKZ8lugmh

                                         
                                         172.217.22.164
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 43
Date: Fri, 13 Oct 2017 11:31:06 GMT
Expires: Fri, 13 Oct 2017 11:31:06 GMT
Cache-Control: private, max-age=31536000
Last-Modified: Thu, 08 Dec 2016 01:00:57 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    fc94fb0c3ed8a8f909dbc7630a0987ff
Sha1:   56d45f8a17f5078a20af9962c992ca4678450765
Sha256: 2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
                                        
                                            GET /translate_static/img/loading.gif HTTP/1.1 
Host: translate.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         173.194.220.95
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 702
Date: Thu, 12 Oct 2017 20:19:27 GMT
Expires: Fri, 12 Oct 2018 20:19:27 GMT
Last-Modified: Thu, 21 Apr 2016 03:17:22 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 54699
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 16 x 16
Size:   702
Md5:    eefaa072b284a305c12c06608333abc2
Sha1:   58272721ccc1efda26eaa22354022c7c793edbb6
Sha256: fb6b7bcc1ab09f27db17bcbdf5239ce1d52af34f1fc5125b3fc8528a07848d21
                                        
                                            GET /cpm.jpg?t=1507894266351&Short_key=JeqJ2bMvN&scm=1007.12506.84939.0&Exp_ID=580086150789425963100371&Object_type=item&Object_id=32716265317,32702383727,32785164603,32812986903,32825854006,32737559733,32731569451,32819138937,32790326857,32596327081,32795257894,32796999788&memberId=null&cookieId=&country=NO&language=en&verison=1&windowSize=468x60&isCaCompositor=N&isComple=N&isCookieCart=N&isCookie=N&isRealTimeCookie=N&isCountry=N&isMem=Y&isMemCart=N&isSite=N&isPage=N HTTP/1.1 
Host: adservice.aliexpress.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html
Cookie: ali_apache_id=11.227.118.67.1507894259461.214327.1; xman_us_f=x_l=0; acs_usuc_t=x_csrf=ic8ot60ar_l_&acs_rt=7dfcd193becc40f6be5a32386dae7399; xman_t=W53GXr6BkbnbsDy2lZ30wn/7IlIL0cIfqmv0pwsEtMrGcVMGzIfFlZ5jIQ+TRc+v; xman_f=C17amviJv1uaeXViIrbcZRD+C4gEzQl27mNRL/duA0JJjcLzsWpACejLWwJ9gFXg2+pyRMTDx029WB2DjAAKOAkZB6RokELLCqqWg60FG3udX5p4zyQGqA==; XSRF-TOKEN=284f9e9d-f575-429f-9b06-c3843df3c5c0

                                         
                                         198.11.132.250
HTTP/1.1 200
Content-Type: image/jpeg;charset=UTF-8
                                        
Date: Fri, 13 Oct 2017 11:31:06 GMT
Content-Length: 7
Connection: keep-alive
Set-Cookie: acs_usuc_t=x_csrf=ic8ot60ar_l_&acs_rt=7dfcd193becc40f6be5a32386dae7399; Domain=.aliexpress.com; Path=/
P3P: CP="CAO PSA OUR"
X-Application-Context: affiliatedynamicwindow:prod:7001
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Server: Tengine/Aserver
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   7
Md5:    260ca9dd8a4577fc00b7bd5810298076
Sha1:   53a5687cb26dc41f2ab4033e97e13adefd3740d6
Sha256: aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27
                                        
                                            GET /translate_static/img/te_bk.gif HTTP/1.1 
Host: translate.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         173.194.220.95
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 848
Date: Thu, 12 Oct 2017 20:19:57 GMT
Expires: Fri, 12 Oct 2018 20:19:57 GMT
Last-Modified: Thu, 21 Apr 2016 03:17:22 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 54669
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 59
Size:   848
Md5:    daf9b48977041ac85a62dc9b7c16b38d
Sha1:   049dcb061470572d06fd83b287ebd1d96e6bb870
Sha256: cb1fd0e051209c32622e91cdeda967e50d80a184b185ac6a656a807986e8eb75
                                        
                                            GET /static/v1/v-css/368954415-lightbox_bundle.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html
Cookie: S=blogger=bz2eWJeUWceMxe5OQLUD0_7PqNkKfV3A; NID=114=OzCvPmpGZp3PwnD58wxoMfHxqwIGN2bWx2pA6kNNsPf0INOv-GxLlnIp2KwxdNdaUBKaUDtkj4vQtG1jM2XBrazsqHyL-YMu0CuOvi2CE6xNFseOapeLyWE6HCI9HCRH

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6541
Date: Thu, 12 Oct 2017 23:21:48 GMT
Expires: Fri, 12 Oct 2018 23:21:48 GMT
Last-Modified: Thu, 12 Oct 2017 01:54:12 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 43759
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   6541
Md5:    b4d05072b89cf2574170f64bdcded69e
Sha1:   af18e0787d801da60edb8d94e76c49ada4498e3a
Sha256: 58b89b1c09589455482e037eab33c5f4021df5ad69445dd01785e2a061d1d6b7
                                        
                                            GET /translate_static/img/te_ctrl3.gif HTTP/1.1 
Host: translate.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html

                                         
                                         173.194.220.95
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 1412
Date: Thu, 12 Oct 2017 20:18:42 GMT
Expires: Fri, 12 Oct 2018 20:18:42 GMT
Last-Modified: Tue, 15 Aug 2017 20:15:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 54745
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 84 x 19
Size:   1412
Md5:    9afe50090c0bc612953d081295eab5b1
Sha1:   71a4da2a622879c29176ecfa5afe1bbe3e8cfa40
Sha256: d228d0256370863119c043f1e5ca8f3930f6999bd9f250434b6d8935f45dc171
                                        
                                            GET /static/v1/jsbin/2407483593-lbx__pt_pt.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html
Cookie: S=blogger=bz2eWJeUWceMxe5OQLUD0_7PqNkKfV3A; NID=114=OzCvPmpGZp3PwnD58wxoMfHxqwIGN2bWx2pA6kNNsPf0INOv-GxLlnIp2KwxdNdaUBKaUDtkj4vQtG1jM2XBrazsqHyL-YMu0CuOvi2CE6xNFseOapeLyWE6HCI9HCRH

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 129519
Date: Thu, 12 Oct 2017 23:31:57 GMT
Expires: Fri, 12 Oct 2018 23:31:57 GMT
Last-Modified: Wed, 11 Oct 2017 05:18:35 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 43150
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   129519
Md5:    4c58a9b916c8198cca10e2d864c80dfa
Sha1:   7fc9fce55f3e97c01ed3f7e75f02e5696da46b85
Sha256: 914f63987782ad64f10111eed9b8ef3dd95364b82aa2ad899723949637474f59
                                        
                                            GET /ServiceLogin?continue=https://www.blogger.com/comment-iframe.g?blogID%3D905693602556410941%26postID%3D3700451734594602583%26blogspotRpcToken%3D9356062%26bpli%3D1&followup=https://www.blogger.com/comment-iframe.g?blogID%3D905693602556410941%26postID%3D3700451734594602583%26blogspotRpcToken%3D9356062%26bpli%3D1&passive=true&go=true HTTP/1.1 
Host: accounts.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hairest.blogspot.no/2013/07/cabelo-cosido-em-banda.html
Cookie: NID=114=YC-IgmAmVrjWSdbb7azLfpcNe7JMuWpGnmEjh-f7PJdGb1OzwyPlVDPGl3HgMMUWIkHw0xgAhtD66wGs-XoKoJTlwCPsk0MjdvPOmLnPIJlxGzCw6pK09yFCKZ8lugmh

                                         
                                         172.217.22.173
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
X-Frame-Options: DENY
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 13 Oct 2017 11:30:59 GMT
Location: https://www.blogger.com/comment-iframe.g?blogID=905693602556410941&postID=3700451734594602583&blogspotRpcToken=9356062&bpli=1
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Security-Policy: script-src 'unsafe-inline' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Set-Cookie: GAPS=1:Elt44Xj8zT5tr2U4v_X1qJEbA2PiXw:IaEQToUdMqOAEech;Path=/;Expires=Sun, 13-Oct-2019 11:30:59 GMT;Secure;HttpOnly;Priority=HIGH
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---