Overview

URL dpcgtsecuritasnormandie.blogspot.fr/2010/02/transaction-et-portee-du-proces-verbal.html
IP172.217.22.161
ASNAS15169 Google Inc.
Location United States
Report completed2017-10-13 15:59:36 CEST
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2017-10-13 2 atat.ro/about.html Malware
2017-10-13 2 www.atat.ro/about.html Phishing
2017-10-13 2 www.atat.ro/p/about.html Phishing
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 172.217.22.161

Date UQ / IDS / BL URL IP
2017-10-20 16:56:09 +0200
0 - 0 - 0 photos-ugc.l.googleusercontent.com 172.217.22.161
2017-10-20 13:41:16 +0200
0 - 0 - 2 4shared-link-download.blogspot.com.br/ 172.217.22.161
2017-10-20 13:37:14 +0200
0 - 0 - 2 choosystory.blogspot.ro/ 172.217.22.161
2017-10-20 13:14:48 +0200
0 - 0 - 3 ianmaulanaa.blogspot.com/2011/05/materialisme (...) 172.217.22.161
2017-10-20 13:03:44 +0200
0 - 0 - 3 azamansaidin.blogspot.my/2011/06/kerja-kerja- (...) 172.217.22.161
2017-10-20 13:00:11 +0200
0 - 0 - 1 palettespinturaypoesia.blogspot.com/2010/12/d (...) 172.217.22.161
2017-10-20 12:54:12 +0200
0 - 0 - 1 firstdrug.blogspot.com/2011/07/blog-post_4116.html 172.217.22.161
2017-10-20 12:48:22 +0200
0 - 0 - 3 miielts.blogspot.com/p/reading_9232.html 172.217.22.161
2017-10-20 12:40:21 +0200
0 - 1 - 0 olhomagic.blogspot.com.br/2012/12/o-que-voce- (...) 172.217.22.161
2017-10-20 12:36:32 +0200
0 - 0 - 3 ikaamalia1807.blogspot.com/2015/03/sistem-per (...) 172.217.22.161

Last 10 reports on ASN: AS15169 Google Inc.

Date UQ / IDS / BL URL IP
2017-10-21 01:20:00 +0200
0 - 0 - 2 aaakemegood24.com/?2233b=140091 146.148.34.125
2017-10-21 01:16:49 +0200
0 - 0 - 2 dammephim.blogspot.kr/search/label/tin%20phim 108.177.14.132
2017-10-21 01:16:56 +0200
0 - 0 - 2 comunicati-stampa-per-il-turismo.blogspot.ie/ (...) 108.177.14.132
2017-10-21 01:16:46 +0200
0 - 0 - 3 cybertrone01.blogspot.com.tr/2013 108.177.14.132
2017-10-21 01:16:39 +0200
0 - 1 - 3 dafatiro.blogspot.com.tr/2013/10 108.177.14.132
2017-10-21 01:16:38 +0200
0 - 0 - 4 cute-funny-pictures.blogspot.ru/search/label/ (...) 108.177.14.132
2017-10-21 01:15:24 +0200
0 - 0 - 1 fulloftipsmama.blogspot.cl/2012/10/emily-old- (...) 108.177.14.132
2017-10-21 01:13:47 +0200
0 - 0 - 2 food-health-book.blogspot.ca/search 108.177.14.132
2017-10-21 01:09:54 +0200
0 - 0 - 4 hot-trend-world-pictures.blogspot.kr/search/l (...) 108.177.14.132
2017-10-21 01:08:21 +0200
0 - 0 - 3 ilmupengetahuankuw.blogspot.kr/2013/03/downlo (...) 108.177.14.132

No other reports on domain: dpcgtsecuritasnormandie.blogspot.fr



JavaScript

Executed Scripts (76)


Executed Evals (0)


Executed Writes (51)

#1 JavaScript::Write (size: 0, repeated: 4) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                    

#2 JavaScript::Write (size: 1, repeated: 4) - SHA256: 36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068

                                        
                                    

#3 JavaScript::Write (size: 1, repeated: 1) - SHA256: 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b

                                        1
                                    

#4 JavaScript::Write (size: 2, repeated: 1) - SHA256: 4a44dc15364204a80fe80e9039455cc1608281820fe2b24f1e5233ade6af1dd5

                                        10
                                    

#5 JavaScript::Write (size: 2, repeated: 1) - SHA256: 4fc82b26aecb47d2868c4efbe3581732a3e7cbcc6c2efb32062c08170a05eeb8

                                        11
                                    

#6 JavaScript::Write (size: 2, repeated: 1) - SHA256: 6b51d431df5d7f141cbececcf79edf3dd861c3b4069f0b11661a3eefacbba918

                                        12
                                    

#7 JavaScript::Write (size: 2, repeated: 1) - SHA256: 3fdba35f04dc8c462986c992bcf875546257113072a909c162f7e470e581e278

                                        13
                                    

#8 JavaScript::Write (size: 2, repeated: 1) - SHA256: 8527a891e224136950ff32ca212b45bc93f69fbb801c3b1ebedac52775f99e61

                                        14
                                    

#9 JavaScript::Write (size: 2, repeated: 1) - SHA256: e629fa6598d732768f7c726b4b621285f9c3b85303900aa912017db7617d8bdb

                                        15
                                    

#10 JavaScript::Write (size: 2, repeated: 1) - SHA256: b17ef6d19c7a5b1ee83b907c595526dcb1eb06db8227d650d5dda0a9f4ce8cd9

                                        16
                                    

#11 JavaScript::Write (size: 2, repeated: 1) - SHA256: 4523540f1504cd17100c4835e85b7eefd49911580f8efff0599a8f283be6b9e3

                                        17
                                    

#12 JavaScript::Write (size: 2, repeated: 1) - SHA256: 4ec9599fc203d176a301536c2e091a19bc852759b255bd6818810a42c5fed14a

                                        18
                                    

#13 JavaScript::Write (size: 2, repeated: 1) - SHA256: 9400f1b21cb527d7fa3d3eabba93557a18ebe7a2ca4e471cfe5e4c5b4ca7f767

                                        19
                                    

#14 JavaScript::Write (size: 1, repeated: 1) - SHA256: d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35

                                        2
                                    

#15 JavaScript::Write (size: 2, repeated: 1) - SHA256: f5ca38f748a1d6eaf726b8a42fb575c3c71f1864a8143301782de13da2d9202b

                                        20
                                    

#16 JavaScript::Write (size: 2, repeated: 1) - SHA256: 6f4b6612125fb3a0daecd2799dfd6c9c299424fd920f9b308110a2c1fbd8f443

                                        21
                                    

#17 JavaScript::Write (size: 2, repeated: 1) - SHA256: 785f3ec7eb32f30b90cd0fcf3657d388b5ff4297f2f9716ff66e9b69c05ddd09

                                        22
                                    

#18 JavaScript::Write (size: 2, repeated: 1) - SHA256: 535fa30d7e25dd8a49f1536779734ec8286108d115da5045d77f3b4185d8f790

                                        23
                                    

#19 JavaScript::Write (size: 2, repeated: 1) - SHA256: c2356069e9d1e79ca924378153cfbbfb4d4416b1f99d41a2940bfdb66c5319db

                                        24
                                    

#20 JavaScript::Write (size: 2, repeated: 1) - SHA256: b7a56873cd771f2c446d369b649430b65a756ba278ff97ec81bb6f55b2e73569

                                        25
                                    

#21 JavaScript::Write (size: 2, repeated: 1) - SHA256: 5f9c4ab08cac7457e9111a30e4664920607ea2c115a1433d7be98e97e64244ca

                                        26
                                    

#22 JavaScript::Write (size: 2, repeated: 1) - SHA256: 670671cd97404156226e507973f2ab8330d3022ca96e0c93bdbdb320c41adcaf

                                        27
                                    

#23 JavaScript::Write (size: 2, repeated: 1) - SHA256: 59e19706d51d39f66711c2653cd7eb1291c94d9b55eb14bda74ce4dc636d015a

                                        28
                                    

#24 JavaScript::Write (size: 2, repeated: 1) - SHA256: 35135aaa6cc23891b40cb3f378c53a17a1127210ce60e125ccf03efcfdaec458

                                        29
                                    

#25 JavaScript::Write (size: 1, repeated: 1) - SHA256: 4e07408562bedb8b60ce05c1decfe3ad16b72230967de01f640b7e4729b49fce

                                        3
                                    

#26 JavaScript::Write (size: 2, repeated: 1) - SHA256: 624b60c58c9d8bfb6ff1886c2fd605d2adeb6ea4da576068201b6c6958ce93f4

                                        30
                                    

#27 JavaScript::Write (size: 2, repeated: 1) - SHA256: eb1e33e8a81b697b75855af6bfcdbcbf7cbbde9f94962ceaec1ed8af21f5a50f

                                        31
                                    

#28 JavaScript::Write (size: 1, repeated: 1) - SHA256: 4b227777d4dd1fc61c6f884f48641d02b4d121d3fd328cb08b5531fcacdabf8a

                                        4
                                    

#29 JavaScript::Write (size: 1, repeated: 1) - SHA256: ef2d127de37b942baad06145e54b0c619a1f22327b2ebbcfbec78f5564afe39d

                                        5
                                    

#30 JavaScript::Write (size: 1, repeated: 1) - SHA256: e7f6c011776e8db7cd330b54174fd76f7d0216b612387a5ffcfb81e6f0919683

                                        6
                                    

#31 JavaScript::Write (size: 1, repeated: 1) - SHA256: 7902699be42c8a8e46fbbb4501726517e86b22c56a189f7625a6da49081b2451

                                        7
                                    

#32 JavaScript::Write (size: 1, repeated: 1) - SHA256: 2c624232cdd221771294dfbb310aca000a0df6ac8b66b696d90ef06fdefb64a3

                                        8
                                    

#33 JavaScript::Write (size: 1, repeated: 1) - SHA256: 19581e27de7ced00ff1ce50b2047e7a567c76b1cbaebabe5ef03f7c3017bb5b7

                                        9
                                    

#34 JavaScript::Write (size: 16, repeated: 1) - SHA256: 179d2296541cc6cc3735dcefd744e76c893bdf22e340950093cb8c2a9dba219c

                                        < /strong></font >
                                    

#35 JavaScript::Write (size: 12, repeated: 1) - SHA256: 6383e3ab79831381d64fbfb9d0e0847628265a75c29eaf5d0500f4d2cc5ed940

                                        < /table></p >
                                    

#36 JavaScript::Write (size: 5, repeated: 35) - SHA256: b8073d8a2f01abcc6c6b69a83e3a57c34dc786f638df7da5c76b8e1197d16d13

                                        < /td>
                                    

#37 JavaScript::Write (size: 5, repeated: 6) - SHA256: 3ed7440ce0756928276fbc0d9c75b59a8e152f7121e8edda0730bbebe4b8604d

                                        < /tr>
                                    

#38 JavaScript::Write (size: 50, repeated: 1) - SHA256: 9919cbf41a991d115daf40c3b75f9bf15346fb2e6d82c7696bd3bd051f962072

                                        < a id = '580086'
style = 'display:none!important' > < /a>
                                    

#39 JavaScript::Write (size: 29, repeated: 1) - SHA256: f814e6ecd1ae504eb0585542aea300290d42f346b0b88e69189932e31db87e6b

                                        < font color = 'FF0000' > < strong >
                                    

#40 JavaScript::Write (size: 76, repeated: 1) - SHA256: 51f28c42cd4e80a2dd5ec90a946f237ca5209ff28abde66bb40acdd72691a5f1

                                        < table width = '100%'
border = 1 bgcolor = white style = 'border-collapse: collapse'
                                    

#41 JavaScript::Write (size: 23, repeated: 1) - SHA256: 4e45888eabaa6b172986c30d5e15cbc6f4664093e8672647969ec175155fa43a

                                        < td align = center > F < /td>
                                    

#42 JavaScript::Write (size: 23, repeated: 1) - SHA256: 5ebe221bcecc0c83fe9193499d1b1227fd2c9f9a2dbf63886eeef763cf3aabe1

                                        < td align = center > M < /td>
                                    

#43 JavaScript::Write (size: 24, repeated: 1) - SHA256: c69fc2521a6c633f7f64b870a61e0545e04c46ce33af15ee82f034dee2062a12

                                        < td align = center > Sa < /td>
                                    

#44 JavaScript::Write (size: 24, repeated: 1) - SHA256: 572ffa9588101371c163f63de5c876626a3366199c3e7213163b2e54c6e28ba5

                                        < td align = center > Su < /td>
                                    

#45 JavaScript::Write (size: 24, repeated: 1) - SHA256: bc0fb78df272f5806e0a81a754f819b5127bc4988e53bdf930937faadae62fb5

                                        < td align = center > Th < /td>
                                    

#46 JavaScript::Write (size: 24, repeated: 1) - SHA256: 8dcb2c7a26d3530cad633cb3f4cec9db4201b43e8a695410047846e9c735e4ba

                                        < td align = center > Tu < /td>
                                    

#47 JavaScript::Write (size: 23, repeated: 1) - SHA256: 6c8f333a01fb16eced8da341aeb9baa69d985476ff944c7cf84a766ce09e2cb7

                                        < td align = center > W < /td>
                                    

#48 JavaScript::Write (size: 4, repeated: 35) - SHA256: ad76f84d9f135f96caeea833da7e9ecc375198cd0414bb5541fbe08c68295b19

                                        < td >
                                    

#49 JavaScript::Write (size: 4, repeated: 7) - SHA256: 9b84c614b473bf1d182e62ccb9eff4250f9977d5da975548052d5ead5c442815

                                        < tr >
                                    

#50 JavaScript::Write (size: 141, repeated: 1) - SHA256: 945270f73b9d59a6723ee9c8c60cf97d898fcf5fe1c3cf24bde20a55d275210e

                                        < tr > < td colspan = 7 > < center > < strong > < a href = 'http://atat.ro/'
style = 'text-decoration: none' > October 2017 < /a></strong > < /center></font > < /td></tr >
                                    

#51 JavaScript::Write (size: 36, repeated: 1) - SHA256: 7c1bf0096ea8317bf604a688479a4e21dcdaa699d788a0fb49cd87fc6c7e6b5f

                                        bordercolor = black > < font color = black >
                                    


HTTP Transactions (82)


Request Response
                                        
                                            GET /2010/02/transaction-et-portee-du-proces-verbal.html HTTP/1.1 
Host: dpcgtsecuritasnormandie.blogspot.fr
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.217.22.161
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
Location: http://dpcgtsecuritasnormandie.blogspot.no/2010/02/transaction-et-portee-du-proces-verbal.html
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 14:05:40 GMT
Expires: Fri, 13 Oct 2017 14:05:40 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 225
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   225
Md5:    c5694b9f1da960472054630ca4ca3a23
Sha1:   5a95cf891cae2cda0b19343137b42c7911939f55
Sha256: b21bad5f0da27b670c5d66c0e8ef09d812fc7468ec177151544b7948a7298590
                                        
                                            GET /2010/02/transaction-et-portee-du-proces-verbal.html HTTP/1.1 
Host: dpcgtsecuritasnormandie.blogspot.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Expires: Fri, 13 Oct 2017 14:05:41 GMT
Date: Fri, 13 Oct 2017 14:05:41 GMT
Cache-Control: private, max-age=0
Last-Modified: Thu, 04 Feb 2016 20:27:20 GMT
Etag: W/"11b8a53b7e0ffec906647a4c9ad0b0d668f008a309ba4c79846dbdbaf14704e5"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 15640
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   15640
Md5:    64710d65849d7d6f8b03d846a9efef73
Sha1:   c5b5c3c3f94b93c7faac440f88b77eea9845e687
Sha256: 1ff9f76c45de47529356486766872c1483516ec5ae371758eda6cb2ab151daa3
                                        
                                            GET /blogblog/data/res/1151574448-YTvideoBar_compiled.css HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpcgtsecuritasnormandie.blogspot.no/2010/02/transaction-et-portee-du-proces-verbal.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 553
Date: Thu, 12 Oct 2017 23:27:36 GMT
Expires: Thu, 19 Oct 2017 23:27:36 GMT
Last-Modified: Thu, 12 Oct 2017 21:24:53 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 52685


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   553
Md5:    33321f345fa34946764730aad7da0fcd
Sha1:   a7f39f558d2ec396a75c405509d60300ebd36013
Sha256: 424166949f60d65e200233fa42e35a69349f0cdef0fcb2a6bb2fccbb05365d52
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 14:05:41 GMT
Expires: Tue, 17 Oct 2017 14:05:41 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    c588b5e7f5749d9d056036ba1cfed2e3
Sha1:   9705100a2d064fd97528af037834bf03768ce199
Sha256: 3a24566634cdc1cc85455d337eca0f8d2b1ebe90deef8ed1b72effa37c5aaee1
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 14:05:41 GMT
Expires: Tue, 17 Oct 2017 14:05:41 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    6bf50ec404fb4a8b4a94be8390d11938
Sha1:   0caaab7704d6221abc5e0342909a4928cee50b1c
Sha256: 63b592179b1e9a528344ce1d430b9479fc55f43420a468ec35aaeaa9dff911cf
                                        
                                            GET /static/v1/widgets/1917767771-widget_css_bundle.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpcgtsecuritasnormandie.blogspot.no/2010/02/transaction-et-portee-du-proces-verbal.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8450
Date: Thu, 12 Oct 2017 23:04:33 GMT
Expires: Fri, 12 Oct 2018 23:04:33 GMT
Last-Modified: Thu, 12 Oct 2017 08:43:57 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 54068
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   8450
Md5:    a5f71e88ca9b26a749243568aa6cf14d
Sha1:   0ea88166a0447850ae1630b8a3720bf7e63245b7
Sha256: 9869cc111f0cf849928f9573b7d581c0b71cb1e7436bf8d02469aa83b120a748
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 14:05:41 GMT
Expires: Tue, 17 Oct 2017 14:05:41 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    63c0c42876b179e938da75d435caf455
Sha1:   2496362f8b1e77dfa75695dc7c63d02afd31ef67
Sha256: e186173a64acae1a86f9725f1f063c69dd7b05c9ffaacf03329212c6411a892a
                                        
                                            GET /js/plusone.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpcgtsecuritasnormandie.blogspot.no/2010/02/transaction-et-portee-du-proces-verbal.html

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Timing-Allow-Origin: *
Etag: "ff43a59f940b9e31a0283d768b2237d6"
Expires: Fri, 13 Oct 2017 14:05:41 GMT
Date: Fri, 13 Oct 2017 14:05:41 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
Strict-Transport-Security: max-age=31536000
P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Set-Cookie: NID=114=W3adkjYEJ9G8qD8Yxx9X4mb6eAOltdehKBZt92aMPLWVmpux9dvI3hRJh_O1oikRwxRoRVJ_LM7p9pKwacSR7RrdGAXxp9osn8yResAcPBdok9CbWhMZj48HVxfaNBF8;Domain=.google.com;Path=/;Expires=Sat, 14-Apr-2018 14:05:41 GMT;HttpOnly
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17422
Md5:    55ec928073d654d0096eae22b36eb937
Sha1:   09761def4d1ae443c8a72041d182f68f7117a341
Sha256: c564fe1f5fbd3837fd83f3c61a614465c969486d9ef4cda157c0719b360d674f
                                        
                                            GET /dyn-css/authorization.css?targetBlogID=4639768403685124918&zx=2bcf72e7-d44e-4edf-b1ca-1b6a6254583c HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpcgtsecuritasnormandie.blogspot.no/2010/02/transaction-et-portee-du-proces-verbal.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/css; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: private, max-age=1800
Pragma: no-cache
Expires: Fri, 13 Oct 2017 14:05:41 GMT
Date: Fri, 13 Oct 2017 14:05:41 GMT
Last-Modified: Fri, 13 Oct 2017 14:05:41 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   21
Md5:    b9afc501fc43fbea335a2dc5d43263a1
Sha1:   7290a2dd6afbf39ecfc35b52dfb32a38fc222994
Sha256: d6e425ca7840c0ab6f26f5fc2822a47e26b4a8bbd104468a9c185bc132b8662f
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: dpcgtsecuritasnormandie.blogspot.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Expires: Fri, 13 Oct 2017 14:05:41 GMT
Date: Fri, 13 Oct 2017 14:05:41 GMT
Cache-Control: private, max-age=86400
Last-Modified: Thu, 04 Feb 2016 20:27:20 GMT
Etag: W/"11b8a53b7e0ffec906647a4c9ad0b0d668f008a309ba4c79846dbdbaf14704e5"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 412
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   412
Md5:    23e5eb1119a7f4d2ab629ccd77a5f84b
Sha1:   f7a5a792e41005ba918551e4416c4bf639ec80ec
Sha256: a0c8d4831f453c316840a502432719f7f7d833bea4a9b59f548e4a1bc2bf0c8a
                                        
                                            GET /pagead/js/google_top_exp.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpcgtsecuritasnormandie.blogspot.no/2010/02/transaction-et-portee-du-proces-verbal.html

                                         
                                         216.58.201.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Wed, 11 Oct 2017 22:53:15 GMT
Expires: Wed, 25 Oct 2017 22:53:15 GMT
Etag: 13036835877489095579
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 1; mode=block
Age: 141147
Cache-Control: public, max-age=1209600


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   67
Md5:    9bbc3ca32ec951a484589ce0e6b4db73
Sha1:   753d6f6183b33b2dee5dde2208fca91c17f5bb13
Sha256: b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
                                        
                                            GET /blogblog/data/dots/bg_dots.gif HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpcgtsecuritasnormandie.blogspot.no/2010/02/transaction-et-portee-du-proces-verbal.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 6622
Date: Thu, 12 Oct 2017 23:59:53 GMT
Expires: Thu, 19 Oct 2017 23:59:53 GMT
Last-Modified: Thu, 12 Oct 2017 21:24:53 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 50749
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 400 x 300
Size:   6622
Md5:    df06a8a8e8bbf128fb207096540478b1
Sha1:   02ced004fd4c7233026dfc9fc4bee211097281c0
Sha256: 49e68781bd9b699d4237269cb8111b56bc60e5be1210c7656a9973bcc6a32919
                                        
                                            GET /pagead/show_ads.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpcgtsecuritasnormandie.blogspot.no/2010/02/transaction-et-portee-du-proces-verbal.html

                                         
                                         216.58.201.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Fri, 13 Oct 2017 14:05:42 GMT
Expires: Fri, 13 Oct 2017 14:05:42 GMT
Cache-Control: private, max-age=3600
Etag: 7705980033080564708
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 17726
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17726
Md5:    89b2135440cbf0008abaef621ceacc52
Sha1:   c1c5d686553767c524cdc88aa85fb385787c425d
Sha256: 3cf571e82b5a79a10a0bdcf002c065b3f2ab57cdecb4b929ec4c514b1969ab94
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpcgtsecuritasnormandie.blogspot.no/2010/02/transaction-et-portee-du-proces-verbal.html
Cookie: NID=114=W3adkjYEJ9G8qD8Yxx9X4mb6eAOltdehKBZt92aMPLWVmpux9dvI3hRJh_O1oikRwxRoRVJ_LM7p9pKwacSR7RrdGAXxp9osn8yResAcPBdok9CbWhMZj48HVxfaNBF8

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 46907
Date: Thu, 12 Oct 2017 19:31:29 GMT
Expires: Fri, 12 Oct 2018 19:31:29 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 66853
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   46907
Md5:    663da4522821133a5116f57abe7d6a86
Sha1:   1b157f22c825d5bee65867d2709bfcbb4c04a086
Sha256: 8010ae2811b2cf468d24a4e896dcdcd1457c10af769525ad1928c502b56550fb
                                        
                                            GET /static/v1/widgets/2682751544-widgets.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpcgtsecuritasnormandie.blogspot.no/2010/02/transaction-et-portee-du-proces-verbal.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 46164
Date: Fri, 13 Oct 2017 05:22:28 GMT
Expires: Sat, 13 Oct 2018 05:22:28 GMT
Last-Modified: Wed, 11 Oct 2017 05:18:35 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 31394
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   46164
Md5:    7035c45baf033ca693de092b42a02000
Sha1:   ec2136e5613226a45279a0b3dfe79a3cf4d8f1a7
Sha256: 5cd86ef91ebf028d0c1673b662e640dbd682cb5f0732ab8998022c2599b591ed
                                        
                                            GET /iframe_api HTTP/1.1 
Host: youtube.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpcgtsecuritasnormandie.blogspot.no/2010/02/transaction-et-portee-du-proces-verbal.html

                                         
                                         173.194.222.95
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
X-Content-Type-Options: nosniff
Expires: Tue, 27 Apr 1971 19:44:06 EST
Content-Length: 739
Cache-Control: no-cache
X-XSS-Protection: 1; mode=block; report=https://www.google.com/appserve/security-bugs/log/youtube
Date: Fri, 13 Oct 2017 14:05:42 GMT
Server: YouTube Frontend Proxy


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   739
Md5:    da94902139b965685114ec145937a7d3
Sha1:   19db13e7a53c09c1f152d3d8b2f04a2ca43d8426
Sha256: 24c2de2ba84d2c3d15341a8cc3d10a31c5796080b8c6bb1c07a3e2ca2598fc5c
                                        
                                            GET /jsapi HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpcgtsecuritasnormandie.blogspot.no/2010/02/transaction-et-portee-du-proces-verbal.html
Cookie: NID=114=W3adkjYEJ9G8qD8Yxx9X4mb6eAOltdehKBZt92aMPLWVmpux9dvI3hRJh_O1oikRwxRoRVJ_LM7p9pKwacSR7RrdGAXxp9osn8yResAcPBdok9CbWhMZj48HVxfaNBF8

                                         
                                         172.217.22.164
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Expires: Fri, 13 Oct 2017 14:05:42 GMT
Date: Fri, 13 Oct 2017 14:05:42 GMT
Cache-Control: private, max-age=3600, must-revalidate
Vary: Accept-Encoding
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 6226
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   6226
Md5:    f50e79549aeec975686ce61f49cbd758
Sha1:   eeec61f71220c4e5e63d1aff695bee5215246718
Sha256: 2d376ba3b98979c97def65b1d0ae3b62b7bf6b1a5be2c4307ba35de92700e49b
                                        
                                            GET /blogblog/data/res/230357638-YTvideoBar_compiled.js HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpcgtsecuritasnormandie.blogspot.no/2010/02/transaction-et-portee-du-proces-verbal.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2515
Date: Thu, 12 Oct 2017 22:59:52 GMT
Expires: Thu, 19 Oct 2017 22:59:52 GMT
Last-Modified: Thu, 12 Oct 2017 21:24:53 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 54350
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   2515
Md5:    89b01598bcff9cf22fc2174f4b80c82e
Sha1:   7532ac4ea49bc490d17fba32e77d6b9a6bd732e2
Sha256: 203cd2d02a0f1d648b3d3c9f300e0ddb0892d7d3b4950be8ef0e888cbfc2f644
                                        
                                            GET /img/icon18_wrench_allbkg.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpcgtsecuritasnormandie.blogspot.no/2010/02/transaction-et-portee-du-proces-verbal.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 475
Date: Fri, 13 Oct 2017 00:43:53 GMT
Expires: Fri, 20 Oct 2017 00:43:53 GMT
Last-Modified: Thu, 12 Oct 2017 11:51:34 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 48109
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 18 x 18, 8-bit colormap, non-interlaced
Size:   475
Md5:    f617effe6d96c15acfea8b2e8aae551f
Sha1:   6d676af11ad2e84b620cce4d5992b657cb2d8ab6
Sha256: d172d750493be64a7ed84dec1dd2a0d787ba42f78bc694b0858f152c52b6620b
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=gapi_iframes,gapi_iframes_style_bubble/exm=plusone/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_1 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpcgtsecuritasnormandie.blogspot.no/2010/02/transaction-et-portee-du-proces-verbal.html
Cookie: NID=114=W3adkjYEJ9G8qD8Yxx9X4mb6eAOltdehKBZt92aMPLWVmpux9dvI3hRJh_O1oikRwxRoRVJ_LM7p9pKwacSR7RrdGAXxp9osn8yResAcPBdok9CbWhMZj48HVxfaNBF8

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 16938
Date: Thu, 12 Oct 2017 19:31:42 GMT
Expires: Fri, 12 Oct 2018 19:31:42 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 66840
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   16938
Md5:    6aae7bc152acc744cf63755ed47be736
Sha1:   79cc54dc61a1ef9944e6e5611a334c5bc8f194bf
Sha256: 62fee77a073cb0944c55664aa5c61ee35e83e567fa41155fd9b94b6f4f0a3a1c
                                        
                                            GET /_Q_6dwfK_DcY/SLEarZxP4BI/AAAAAAAAAAo/7KfcVoq9atY/S220-s80/manif9.jpg HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpcgtsecuritasnormandie.blogspot.no/2010/02/transaction-et-portee-du-proces-verbal.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "va"
Expires: Sat, 14 Oct 2017 14:05:42 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="manif9.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 14:05:42 GMT
Server: fife
Content-Length: 3635
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   3635
Md5:    cc30afd5a156bfc255221a349f0c35dc
Sha1:   ee6693fa6df52e27bed575cbcd7aa6fa8a11be8f
Sha256: 52bee0c310206c33d7961b6430b22c0e4be437617c8b195adab68e3ba4cca139
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 14:05:42 GMT
Expires: Tue, 17 Oct 2017 14:05:42 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    816dbd3479ac72bbf29083d1d60e2345
Sha1:   211eba5157d2bc56c2d2b168c28f05924d050da8
Sha256: b8821ac5e989b638e7c1f86893bda713df909c079c55217bda5c14a11a9361dc
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=114=W3adkjYEJ9G8qD8Yxx9X4mb6eAOltdehKBZt92aMPLWVmpux9dvI3hRJh_O1oikRwxRoRVJ_LM7p9pKwacSR7RrdGAXxp9osn8yResAcPBdok9CbWhMZj48HVxfaNBF8

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 14:05:42 GMT
Expires: Tue, 17 Oct 2017 14:05:42 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    0a14338a299b2c02742cd6f9e33596b0
Sha1:   a69501c94549c32d1b3b25358a2305e9d628ea16
Sha256: c3cc36c99da38011eda1ff5ddf24d8367eb22fd9668046f8c4857ddb55e7b82e
                                        
                                            POST / HTTP/1.1 
Host: g.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.51.123.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1390
Content-Transfer-Encoding: binary
Cache-Control: max-age=598464, public, no-transform, must-revalidate
Last-Modified: Fri, 13 Oct 2017 12:19:39 GMT
Expires: Fri, 20 Oct 2017 12:19:39 GMT
Date: Fri, 13 Oct 2017 14:05:42 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1390
Md5:    df996a75bf8bc1fac903d9c242fb0ab5
Sha1:   17022cd9eae9808bff16284ed63cbd895be5976f
Sha256: 1563ba4124e2c93a2f6cea42d53083fac0b22854a7a8b68b317e4e90a60df9c8
                                        
                                            GET /img/icon18_edit_allbkg.gif HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpcgtsecuritasnormandie.blogspot.no/2010/02/transaction-et-portee-du-proces-verbal.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 162
Date: Thu, 12 Oct 2017 13:48:59 GMT
Expires: Thu, 19 Oct 2017 13:48:59 GMT
Last-Modified: Wed, 11 Oct 2017 21:40:48 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 87403
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 18 x 18
Size:   162
Md5:    c991641178ff05adf0d004298b5eafa9
Sha1:   d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
Sha256: ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 14:05:42 GMT
Expires: Tue, 17 Oct 2017 14:05:42 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    1e563f806a20ef3d52596871e2ccc921
Sha1:   37610e9f1787c0d87ac8958461b1e9da167e8243
Sha256: afe71ff42d56cc4dd019854a1e6c7e876e866bf0070ea5d81ba289d63044e451
                                        
                                            GET /navbar.g?targetBlogID=4639768403685124918&blogName=dp+cgt+securitas+normandie&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=http://dpcgtsecuritasnormandie.blogspot.com/search&blogLocale=fr&v=2&homepageUrl=http://dpcgtsecuritasnormandie.blogspot.com/&targetPostID=6070714219606191979&blogPostOrPageUrl=http://dpcgtsecuritasnormandie.blogspot.com/2010/02/transaction-et-portee-du-proces-verbal.html&vt=-8084742653241547344&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpcgtsecuritasnormandie.blogspot.no/2010/02/transaction-et-portee-du-proces-verbal.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 13 Oct 2017 14:05:42 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   2837
Md5:    12a2f6ec318b53dabf1ef5453fdba110
Sha1:   e294c4f9563f2d82ef595bdab87fca29553ce561
Sha256: 92cc951d4b10f0a8091f588860381d50976b7cfa48933684809f7d0dcc6b3322
                                        
                                            GET /pub-config/r20160913/ca-pub-0760281782740538.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpcgtsecuritasnormandie.blogspot.no/2010/02/transaction-et-portee-du-proces-verbal.html

                                         
                                         216.58.201.162
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Date: Fri, 13 Oct 2017 14:05:42 GMT
Expires: Sat, 14 Oct 2017 02:05:42 GMT
Cache-Control: public, max-age=43200
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: sffe
Content-Length: 88
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   88
Md5:    447300cfe76a026545c27482e7ada077
Sha1:   995fa7efb4f9b8be29ea4c3c69a361e0a1f27ba1
Sha256: 994d8a1f3b94c1b503343b827ffd37a0a2a50015d48a054812591825cc305a40
                                        
                                            GET /img/icon18_email.gif HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpcgtsecuritasnormandie.blogspot.no/2010/02/transaction-et-portee-du-proces-verbal.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 164
Date: Thu, 12 Oct 2017 23:08:17 GMT
Expires: Thu, 19 Oct 2017 23:08:17 GMT
Last-Modified: Thu, 12 Oct 2017 01:54:12 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 53846
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 18 x 13
Size:   164
Md5:    36b9f993db1b953f3b9b08040aaf9af4
Sha1:   18248661b307586dc291fd2dff4bb59cf7579475
Sha256: 1258cbe1e2900ec3df11a83a6bb6008d7a833f783a6df80b0d5d45a052ac1466
                                        
                                            GET /blogblog/data/dots/bg_3dots.gif HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpcgtsecuritasnormandie.blogspot.no/2010/02/transaction-et-portee-du-proces-verbal.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 819
Date: Thu, 12 Oct 2017 23:13:47 GMT
Expires: Thu, 19 Oct 2017 23:13:47 GMT
Last-Modified: Thu, 12 Oct 2017 21:24:53 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 53515
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 150 x 50
Size:   819
Md5:    0c8c6310f9a54e994e9c88c9dde3358b
Sha1:   a46248833dae6f7bb4738a698d4cc6d2df363aee
Sha256: 23f0eb3dcac90a1b61c38fcef77ad0f2e1451542a15bf86453c06b31ad554c06
                                        
                                            GET /blogblog/data/dots/bg_dots2.gif HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpcgtsecuritasnormandie.blogspot.no/2010/02/transaction-et-portee-du-proces-verbal.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 5509
Date: Thu, 12 Oct 2017 23:13:47 GMT
Expires: Thu, 19 Oct 2017 23:13:47 GMT
Last-Modified: Thu, 12 Oct 2017 01:54:12 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 53515
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 400 x 300
Size:   5509
Md5:    2dc813a399739c58eef69e32351b03b3
Sha1:   492335b8386b5a8f23d1d79076ed36a6e03b9d55
Sha256: 1cd57d23d696ea9c1ac598b1f36b38f75b1241baed4c5fc8c1d9bc098d075353
                                        
                                            GET /js/platform:gapi.iframes.style.common.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=4639768403685124918&blogName=dp+cgt+securitas+normandie&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=http://dpcgtsecuritasnormandie.blogspot.com/search&blogLocale=fr&v=2&homepageUrl=http://dpcgtsecuritasnormandie.blogspot.com/&targetPostID=6070714219606191979&blogPostOrPageUrl=http://dpcgtsecuritasnormandie.blogspot.com/2010/02/transaction-et-portee-du-proces-verbal.html&vt=-8084742653241547344&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=W3adkjYEJ9G8qD8Yxx9X4mb6eAOltdehKBZt92aMPLWVmpux9dvI3hRJh_O1oikRwxRoRVJ_LM7p9pKwacSR7RrdGAXxp9osn8yResAcPBdok9CbWhMZj48HVxfaNBF8

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Timing-Allow-Origin: *
Etag: "04daa091e8f5885baefc06708bb31518"
Expires: Fri, 13 Oct 2017 14:05:43 GMT
Date: Fri, 13 Oct 2017 14:05:43 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17436
Md5:    c9b03a87f61296c0fe44650d60bf2853
Sha1:   17df04f5e1a769294fd4bbb1f540f58f8e18a3fb
Sha256: ccdf3c4c18c28c4c925aaef874b30ad8d512c8e8c4259bd7542c0eb7d257ec8f
                                        
                                            GET /blogblog/data/dots/bg_post_title_left.gif HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpcgtsecuritasnormandie.blogspot.no/2010/02/transaction-et-portee-du-proces-verbal.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 211
Date: Thu, 12 Oct 2017 23:59:55 GMT
Expires: Thu, 19 Oct 2017 23:59:55 GMT
Last-Modified: Thu, 12 Oct 2017 01:54:12 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 50747
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 40 x 10
Size:   211
Md5:    8c4d9fe995905222b92a28081b0a3e48
Sha1:   491cbd4409751f2dac1672168933dd7e8f84490c
Sha256: 349ff1cba7fcb4ba6b208bb2f7b1b4c217c44621e3a195c1a99a9d0e94867607
                                        
                                            GET /adsid/integrator.js?domain=dpcgtsecuritasnormandie.blogspot.no HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpcgtsecuritasnormandie.blogspot.no/2010/02/transaction-et-portee-du-proces-verbal.html
Cookie: NID=114=W3adkjYEJ9G8qD8Yxx9X4mb6eAOltdehKBZt92aMPLWVmpux9dvI3hRJh_O1oikRwxRoRVJ_LM7p9pKwacSR7RrdGAXxp9osn8yResAcPBdok9CbWhMZj48HVxfaNBF8

                                         
                                         216.58.201.162
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 14:05:43 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   107
Md5:    5432a558d422eaeaa6f7e8a15c0c1134
Sha1:   252ee6dbb502fd998fbdc5721da5986b877f1c73
Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
                                        
                                            GET /adsid/integrator.js?domain=dpcgtsecuritasnormandie.blogspot.no HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpcgtsecuritasnormandie.blogspot.no/2010/02/transaction-et-portee-du-proces-verbal.html

                                         
                                         216.58.201.162
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 14:05:43 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   107
Md5:    5432a558d422eaeaa6f7e8a15c0c1134
Sha1:   252ee6dbb502fd998fbdc5721da5986b877f1c73
Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
                                        
                                            GET /gadgets/ifr?url=http://hosting.gmodules.com/ig/gadgets/file/111311123200664007084/calendar.xml&container=blogger&view=default&lang=fr&country=ALL&sanitize=0&v=4b0c87b8da3b9f9e&libs=core&parent=dpcgtsecuritasnormandie.blogspot.fr/&mid=3 HTTP/1.1 
Host: www-blogger-opensocial.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpcgtsecuritasnormandie.blogspot.no/2010/02/transaction-et-portee-du-proces-verbal.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: CP="CAO PSA OUR"
Expires: Sat, 13 Oct 2018 14:05:43 GMT
Cache-Control: private,max-age=31536000
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 14:05:43 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 3789
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   3789
Md5:    3095daa78d83f4e059ebadb0e77da23a
Sha1:   f5243d506f6aa7fdabd1f131b0909d8f789d6739
Sha256: 13405a2709f0e4b4c6fcb009f6a537a1213c1adb483ed84c70d5c1fd93a22aaa
                                        
                                            GET /img/navbar/arrows-blue.png HTTP/1.1 
Host: img1.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=4639768403685124918&blogName=dp+cgt+securitas+normandie&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=http://dpcgtsecuritasnormandie.blogspot.com/search&blogLocale=fr&v=2&homepageUrl=http://dpcgtsecuritasnormandie.blogspot.com/&targetPostID=6070714219606191979&blogPostOrPageUrl=http://dpcgtsecuritasnormandie.blogspot.com/2010/02/transaction-et-portee-du-proces-verbal.html&vt=-8084742653241547344&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 104
Date: Thu, 12 Oct 2017 23:14:51 GMT
Expires: Thu, 19 Oct 2017 23:14:51 GMT
Last-Modified: Thu, 12 Oct 2017 17:03:45 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 53452
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 19 x 4, 8-bit/color RGBA, non-interlaced
Size:   104
Md5:    38c95719e05f4184a301768d8de91e09
Sha1:   d0ed1147d46f2cf592584239a5a101d6f2abb588
Sha256: 259ece79a45ad7ecbcf6fb0669de61aa6a01ebedaba47a7e88283435e0e6b1be
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=auth/exm=gapi_iframes_style_common,plusone/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_1 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=4639768403685124918&blogName=dp+cgt+securitas+normandie&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=http://dpcgtsecuritasnormandie.blogspot.com/search&blogLocale=fr&v=2&homepageUrl=http://dpcgtsecuritasnormandie.blogspot.com/&targetPostID=6070714219606191979&blogPostOrPageUrl=http://dpcgtsecuritasnormandie.blogspot.com/2010/02/transaction-et-portee-du-proces-verbal.html&vt=-8084742653241547344&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=W3adkjYEJ9G8qD8Yxx9X4mb6eAOltdehKBZt92aMPLWVmpux9dvI3hRJh_O1oikRwxRoRVJ_LM7p9pKwacSR7RrdGAXxp9osn8yResAcPBdok9CbWhMZj48HVxfaNBF8

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 19422
Date: Thu, 12 Oct 2017 20:26:09 GMT
Expires: Fri, 12 Oct 2018 20:26:09 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 63574
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   19422
Md5:    ac80b1c4b4c427abb05209c3cd2e1b8b
Sha1:   3f0e766aa8942538b0b15ea6d3d7c998b7831fae
Sha256: 77f6eded601b1c7c62c6d89c21b359206819c5b7992420ac178362a4f07f3ad0
                                        
                                            GET /img/logo-16.png HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpcgtsecuritasnormandie.blogspot.no/2010/02/transaction-et-portee-du-proces-verbal.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 279
Date: Thu, 12 Oct 2017 23:03:39 GMT
Expires: Thu, 19 Oct 2017 23:03:39 GMT
Last-Modified: Thu, 12 Oct 2017 17:03:45 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 54124


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   279
Md5:    5ffecab6c722bb0adc3fce8d83b27993
Sha1:   0e59b05d3da526e82bb4f5d47c5d94e2a318dafb
Sha256: cca664ca16fde285160e80eae6ba4501c27b1dd1ce09aec1e84caa74b5baff53
                                        
                                            GET /gadgets/ifr?url=http://wms.assoc-amazon.com/GoogleGadgets/amzn_mp3_clips.xml&container=blogger&view=default&lang=fr&country=ALL&sanitize=0&v=50f1885104e5edfd&libs=core:dynamic-height:google.blog:locked-domain:rpc:setprefs:skins:views&parent=dpcgtsecuritasnormandie.blogspot.fr/&up_size=0&up_genre=324382011&mid=2 HTTP/1.1 
Host: dfgubl2g9ahmgfkabsjd7k921jq7ui6a-a-blogger-opensocial.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpcgtsecuritasnormandie.blogspot.no/2010/02/transaction-et-portee-du-proces-verbal.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: CP="CAO PSA OUR"
Expires: Sat, 13 Oct 2018 14:05:43 GMT
Cache-Control: private,max-age=31536000
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 14:05:43 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 7423
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   7423
Md5:    c18e9d64ef0cdf6517e1e84d140f4fc0
Sha1:   8544690a22a8abad008de83b28f27d513c6accbc
Sha256: 474575076abd1b27b33b7a1aa38882fbeb31a005392e568ea893d01cbfeeb479
                                        
                                            GET /gadgets/js/core.js?container=blogger&nocache=0&debug=0&c=0&v=b6f0905716eb3c75139b7aa3b49d0994&sv=10&jsload=0 HTTP/1.1 
Host: www-blogger-opensocial.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www-blogger-opensocial.googleusercontent.com/gadgets/ifr?url=http://hosting.gmodules.com/ig/gadgets/file/111311123200664007084/calendar.xml&container=blogger&view=default&lang=fr&country=ALL&sanitize=0&v=4b0c87b8da3b9f9e&libs=core&parent=dpcgtsecuritasnormandie.blogspot.fr/&mid=3

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Expires: Wed, 26 Sep 2018 19:54:57 GMT
Content-Encoding: gzip
Date: Tue, 26 Sep 2017 19:54:57 GMT
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Cache-Control: public,max-age=31536000
Content-Length: 16191
Age: 1447846


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   16191
Md5:    cf4811cda68d05bbb30021d3ec0cbefe
Sha1:   8434e46e2432d498a9d5991fd15352d276625940
Sha256: 3f855694363ece14da1c27142b1b884fbbb076d6addca45e9e86b790044eab79
                                        
                                            GET /se/0/_/+1/fastbutton?usegapi=1&source=blogger%3Anavbar%3Aplusone&size=medium&hl=no&origin=https%3A%2F%2Fwww.blogger.com&url=http%3A%2F%2Fdpcgtsecuritasnormandie.blogspot.com%2F2010%2F02%2Ftransaction-et-portee-du-proces-verbal.html&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=4639768403685124918&blogName=dp+cgt+securitas+normandie&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=http://dpcgtsecuritasnormandie.blogspot.com/search&blogLocale=fr&v=2&homepageUrl=http://dpcgtsecuritasnormandie.blogspot.com/&targetPostID=6070714219606191979&blogPostOrPageUrl=http://dpcgtsecuritasnormandie.blogspot.com/2010/02/transaction-et-portee-du-proces-verbal.html&vt=-8084742653241547344&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=W3adkjYEJ9G8qD8Yxx9X4mb6eAOltdehKBZt92aMPLWVmpux9dvI3hRJh_O1oikRwxRoRVJ_LM7p9pKwacSR7RrdGAXxp9osn8yResAcPBdok9CbWhMZj48HVxfaNBF8

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Vary: Accept-Encoding
Timing-Allow-Origin: *
Expires: Fri, 13 Oct 2017 14:05:43 GMT
Date: Fri, 13 Oct 2017 14:05:43 GMT
Cache-Control: private, max-age=3600
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4060
Md5:    b27d6ec00409ecba2507aeb3c2442dca
Sha1:   6c14f9b951b20598d41fbcb1e76867abef145c94
Sha256: 9c14335c819d7baff3e9796435fabc327f96e017b93badd2a520a3c424ac8063
                                        
                                            GET /yts/jsbin/www-widgetapi-vflK6YIUJ/www-widgetapi.js HTTP/1.1 
Host: s.ytimg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpcgtsecuritasnormandie.blogspot.no/2010/02/transaction-et-portee-du-proces-verbal.html

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding, Origin
Content-Encoding: gzip
Timing-Allow-Origin: https://www.youtube.com
Content-Length: 9110
Date: Wed, 11 Oct 2017 23:03:15 GMT
Expires: Thu, 19 Oct 2017 23:03:15 GMT
Last-Modified: Wed, 11 Oct 2017 08:23:08 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=691200
Age: 140548


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   9110
Md5:    9d14d0c2338d4e2d65612a5792d2cd41
Sha1:   d52f3233dd2df19e0505c310015825dace2c8e5b
Sha256: b899abffc3a32c497fb36667fdb15d826f6aebae01de7d54c84339354f20f826
                                        
                                            GET /gadgets/js/core:dynamic-height:google.blog:locked-domain:rpc:setprefs:skins:views.js?container=blogger&nocache=0&debug=0&c=0&v=79118557bc60153598bea4ad7a57cc58&sv=10&jsload=0 HTTP/1.1 
Host: www-blogger-opensocial.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dfgubl2g9ahmgfkabsjd7k921jq7ui6a-a-blogger-opensocial.googleusercontent.com/gadgets/ifr?url=http://wms.assoc-amazon.com/GoogleGadgets/amzn_mp3_clips.xml&container=blogger&view=default&lang=fr&country=ALL&sanitize=0&v=50f1885104e5edfd&libs=core:dynamic-height:google.blog:locked-domain:rpc:setprefs:skins:views&parent=dpcgtsecuritasnormandie.blogspot.fr/&up_size=0&up_genre=324382011&mid=2

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Expires: Thu, 04 Oct 2018 15:38:30 GMT
Content-Encoding: gzip
Date: Wed, 04 Oct 2017 15:38:30 GMT
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Cache-Control: public,max-age=31536000
Content-Length: 23558
Age: 772033


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   23558
Md5:    3004989ba8f3e00bfead665f59ca9296
Sha1:   3d1d96b489450364dcd119b220ddf20ea65664d0
Sha256: bad2585e5800e54cf1b0f67f13675dc5230f93284fd8ea9a034d96d2ef83b6f8
                                        
                                            GET /about.html HTTP/1.1 
Host: atat.ro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www-blogger-opensocial.googleusercontent.com/gadgets/ifr?url=http://hosting.gmodules.com/ig/gadgets/file/111311123200664007084/calendar.xml&container=blogger&view=default&lang=fr&country=ALL&sanitize=0&v=4b0c87b8da3b9f9e&libs=core&parent=dpcgtsecuritasnormandie.blogspot.fr/&mid=3

                                         
                                         216.239.36.21
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Location: http://www.atat.ro/about.html
Date: Fri, 13 Oct 2017 14:05:43 GMT
Server: ghs
Content-Length: 226
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  HTML document text
Size:   226
Md5:    3fef4966078fff9e3d2ed14526e9079f
Sha1:   73f5bf1fa28a0e04cee825cc3c9178c473a2a9b8
Sha256: 3cbfc185eecd8fbbd610090740c275d4aef3ca515f12bf00970100d5889351d8

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /img/navbar/icons_orange.png HTTP/1.1 
Host: img1.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=4639768403685124918&blogName=dp+cgt+securitas+normandie&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=http://dpcgtsecuritasnormandie.blogspot.com/search&blogLocale=fr&v=2&homepageUrl=http://dpcgtsecuritasnormandie.blogspot.com/&targetPostID=6070714219606191979&blogPostOrPageUrl=http://dpcgtsecuritasnormandie.blogspot.com/2010/02/transaction-et-portee-du-proces-verbal.html&vt=-8084742653241547344&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 915
Date: Thu, 12 Oct 2017 23:21:23 GMT
Expires: Thu, 19 Oct 2017 23:21:23 GMT
Last-Modified: Thu, 12 Oct 2017 17:52:12 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 53060
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 46 x 20, 8-bit colormap, non-interlaced
Size:   915
Md5:    87f25844d23ac1ee03604e668f5c1797
Sha1:   85d440947d70a78672740ff7e8062f68ce9d99a3
Sha256: d70c36f2f61b735573caa3dd5a1602e19916701bb88d99ff4527cd2c89fa8b72
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=gapi_iframes_style_common,plusone/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=4639768403685124918&blogName=dp+cgt+securitas+normandie&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=http://dpcgtsecuritasnormandie.blogspot.com/search&blogLocale=fr&v=2&homepageUrl=http://dpcgtsecuritasnormandie.blogspot.com/&targetPostID=6070714219606191979&blogPostOrPageUrl=http://dpcgtsecuritasnormandie.blogspot.com/2010/02/transaction-et-portee-du-proces-verbal.html&vt=-8084742653241547344&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=W3adkjYEJ9G8qD8Yxx9X4mb6eAOltdehKBZt92aMPLWVmpux9dvI3hRJh_O1oikRwxRoRVJ_LM7p9pKwacSR7RrdGAXxp9osn8yResAcPBdok9CbWhMZj48HVxfaNBF8

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 58976
Date: Thu, 12 Oct 2017 20:13:59 GMT
Expires: Fri, 12 Oct 2018 20:13:59 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 64304
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   58976
Md5:    19c76688d8c32cad0bc39aa1ebd2de70
Sha1:   7d4321f4521b894dafdcbaaf3b396cf93a00b334
Sha256: 6cf6e0443b0d9b73af2eacfd2910e417875dd16594487563f5596fd230f9dd61
                                        
                                            GET /csi?v=3&s=opensocial-gadgets&action=blogger_default&gadget=http%3A%2F%2Fwms.assoc-amazon.com%2FGoogleGadgets%2Famzn_mp3_clips.xml&container=blogger&view=default&e=&rt=dl.267,ol.270,prt.270 HTTP/1.1 
Host: csi.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dfgubl2g9ahmgfkabsjd7k921jq7ui6a-a-blogger-opensocial.googleusercontent.com/gadgets/ifr?url=http://wms.assoc-amazon.com/GoogleGadgets/amzn_mp3_clips.xml&container=blogger&view=default&lang=fr&country=ALL&sanitize=0&v=50f1885104e5edfd&libs=core:dynamic-height:google.blog:locked-domain:rpc:setprefs:skins:views&parent=dpcgtsecuritasnormandie.blogspot.fr/&up_size=0&up_genre=324382011&mid=2

                                         
                                         216.58.209.131
HTTP/1.1 204 No Content
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Fri, 13 Oct 2017 14:05:43 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT
Server: Golfe2
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=profile/exm=gapi_iframes,gapi_iframes_style_bubble,plusone/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_2 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpcgtsecuritasnormandie.blogspot.no/2010/02/transaction-et-portee-du-proces-verbal.html
Cookie: NID=114=W3adkjYEJ9G8qD8Yxx9X4mb6eAOltdehKBZt92aMPLWVmpux9dvI3hRJh_O1oikRwxRoRVJ_LM7p9pKwacSR7RrdGAXxp9osn8yResAcPBdok9CbWhMZj48HVxfaNBF8

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8191
Date: Thu, 12 Oct 2017 19:31:42 GMT
Expires: Fri, 12 Oct 2018 19:31:42 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 66841
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   8191
Md5:    b0bd9e3d50772d490411c2ca7da0507b
Sha1:   7ac7ef7c35d0939da2b9324f1b6d4517dfe1ac11
Sha256: be8fc68d1c599657b90baa2b8e29e2f4f03d0113315c19aa1e16792df373cd9c
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=googleapis_client,gapi_iframes_style_common,gapi_iframes_iframer/am=AQ/rt=j/d=1/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://apis.google.com/se/0/_/+1/fastbutton?usegapi=1&source=blogger%3Anavbar%3Aplusone&size=medium&hl=no&origin=https%3A%2F%2Fwww.blogger.com&url=http%3A%2F%2Fdpcgtsecuritasnormandie.blogspot.com%2F2010%2F02%2Ftransaction-et-portee-du-proces-verbal.html&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=W3adkjYEJ9G8qD8Yxx9X4mb6eAOltdehKBZt92aMPLWVmpux9dvI3hRJh_O1oikRwxRoRVJ_LM7p9pKwacSR7RrdGAXxp9osn8yResAcPBdok9CbWhMZj48HVxfaNBF8

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 44716
Date: Thu, 12 Oct 2017 18:17:58 GMT
Expires: Fri, 12 Oct 2018 18:17:58 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 71265
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   44716
Md5:    95050c9c51441ce7aedcb15c820b1b6f
Sha1:   069e96a92ce71a14833c53bd3516f5f8a2556d91
Sha256: 1da03bc638069e15274f8bcf41401e46837ceea995075934702afc3aa9e5a933
                                        
                                            GET /about.html HTTP/1.1 
Host: www.atat.ro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www-blogger-opensocial.googleusercontent.com/gadgets/ifr?url=http://hosting.gmodules.com/ig/gadgets/file/111311123200664007084/calendar.xml&container=blogger&view=default&lang=fr&country=ALL&sanitize=0&v=4b0c87b8da3b9f9e&libs=core&parent=dpcgtsecuritasnormandie.blogspot.fr/&mid=3

                                         
                                         173.194.220.121
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Location: /p/about.html
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 14:05:43 GMT
Expires: Fri, 13 Oct 2017 14:05:43 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 163
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   163
Md5:    883692b5c128ac16c2b102209a8f556c
Sha1:   2eaaafedfd3ccda67974601ca27e820e99e050bf
Sha256: 56bc96f7c8e2c73262c429ba233627737ecb17e9edd7c6391d48d8f8c33f734f

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=114=W3adkjYEJ9G8qD8Yxx9X4mb6eAOltdehKBZt92aMPLWVmpux9dvI3hRJh_O1oikRwxRoRVJ_LM7p9pKwacSR7RrdGAXxp9osn8yResAcPBdok9CbWhMZj48HVxfaNBF8

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 14:05:44 GMT
Expires: Tue, 17 Oct 2017 14:05:44 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    a352c8963f53bbddb3c2ee43ae62b276
Sha1:   8553e71b2e4c06afea3bf11df2ae53b03e24cc8b
Sha256: 0957480062e48be7163da3a9ec8f5598b368cede5b8822753f40ae78c03b5c9a
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=gapi_iframes_style_slide_menu/exm=gapi_iframes,gapi_iframes_style_bubble,plusone,profile/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_3 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpcgtsecuritasnormandie.blogspot.no/2010/02/transaction-et-portee-du-proces-verbal.html
Cookie: NID=114=W3adkjYEJ9G8qD8Yxx9X4mb6eAOltdehKBZt92aMPLWVmpux9dvI3hRJh_O1oikRwxRoRVJ_LM7p9pKwacSR7RrdGAXxp9osn8yResAcPBdok9CbWhMZj48HVxfaNBF8

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3070
Date: Thu, 12 Oct 2017 20:18:36 GMT
Expires: Fri, 12 Oct 2018 20:18:36 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 64028
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   3070
Md5:    b2e475463a9f7b6fd2822d30840d9c0b
Sha1:   bedefaeb34f6992cd2b18cd2e889146c2251d779
Sha256: 716dc847a50e72d6e04e45d7bc96484c06027b4daad0a4ca4cd5b619b29fabce
                                        
                                            GET /o/oauth2/postmessageRelay?parent=https%3A%2F%2Fwww.blogger.com&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: accounts.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=4639768403685124918&blogName=dp+cgt+securitas+normandie&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=http://dpcgtsecuritasnormandie.blogspot.com/search&blogLocale=fr&v=2&homepageUrl=http://dpcgtsecuritasnormandie.blogspot.com/&targetPostID=6070714219606191979&blogPostOrPageUrl=http://dpcgtsecuritasnormandie.blogspot.com/2010/02/transaction-et-portee-du-proces-verbal.html&vt=-8084742653241547344&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=W3adkjYEJ9G8qD8Yxx9X4mb6eAOltdehKBZt92aMPLWVmpux9dvI3hRJh_O1oikRwxRoRVJ_LM7p9pKwacSR7RrdGAXxp9osn8yResAcPBdok9CbWhMZj48HVxfaNBF8

                                         
                                         172.217.22.173
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Expires: Sat, 14 Oct 2017 14:05:44 GMT
Date: Fri, 13 Oct 2017 14:05:44 GMT
Cache-Control: public, max-age=86400
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   364
Md5:    8bb2697d41dd8e6f992c35a1821dfb0d
Sha1:   7db974e298f7a8bf953434ad6625ea4029e3bae3
Sha256: 971f9c81f6935eabd5bdeda9c2cb852d8a00baf50ac4d7f4876c622b20dd3949
                                        
                                            GET /feedback/js/help/prod/service/lazy.min.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpcgtsecuritasnormandie.blogspot.no/2010/02/transaction-et-portee-du-proces-verbal.html

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 11836
Date: Thu, 12 Oct 2017 18:15:43 GMT
Expires: Thu, 19 Oct 2017 18:15:43 GMT
Last-Modified: Wed, 11 Oct 2017 00:10:28 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 71401
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   11836
Md5:    c5258804f66599a9b214665cebf5704f
Sha1:   7962a226cafb1c0fe74bcac746e0e05640d7dfbd
Sha256: 6fda3d09a7fb2440e36494cd97b5801b68325ce358972ff8e7c1e124b2d2bee1
                                        
                                            GET /js/rpc:shindig_random.js?onload=init HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fwww.blogger.com&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=W3adkjYEJ9G8qD8Yxx9X4mb6eAOltdehKBZt92aMPLWVmpux9dvI3hRJh_O1oikRwxRoRVJ_LM7p9pKwacSR7RrdGAXxp9osn8yResAcPBdok9CbWhMZj48HVxfaNBF8

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Timing-Allow-Origin: *
Etag: "862447553fc7f21eefa0f5321e562c86"
Expires: Fri, 13 Oct 2017 14:05:44 GMT
Date: Fri, 13 Oct 2017 14:05:44 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   5456
Md5:    ac397d26c01a6b9c4c4d6abbf610a356
Sha1:   1a8c65bc3c48432c46b2310760c418447d2c3a2a
Sha256: 06d9001b61ee40837e6221e22b1b50401463180d73d293a96418bdebd935fa1d
                                        
                                            GET /accounts/o/971028622-postmessagerelay.js HTTP/1.1 
Host: ssl.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fwww.blogger.com&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4512
Date: Thu, 12 Oct 2017 18:15:26 GMT
Expires: Fri, 12 Oct 2018 18:15:26 GMT
Last-Modified: Wed, 11 Oct 2017 22:34:08 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 71418
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4512
Md5:    c41dc9da703c13b923ba04f7f4dd9137
Sha1:   0c4fc1bdf44857be1104d9eb4c87fcfa88b6a066
Sha256: b0161a7902e960e4de936ed83bfcc4af8b6063d5503ca13edd7eea8f86af03a9
                                        
                                            GET /p/about.html HTTP/1.1 
Host: www.atat.ro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www-blogger-opensocial.googleusercontent.com/gadgets/ifr?url=http://hosting.gmodules.com/ig/gadgets/file/111311123200664007084/calendar.xml&container=blogger&view=default&lang=fr&country=ALL&sanitize=0&v=4b0c87b8da3b9f9e&libs=core&parent=dpcgtsecuritasnormandie.blogspot.fr/&mid=3

                                         
                                         173.194.220.121
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Expires: Fri, 13 Oct 2017 14:05:44 GMT
Date: Fri, 13 Oct 2017 14:05:44 GMT
Cache-Control: private, max-age=0
Last-Modified: Fri, 13 Oct 2017 13:59:22 GMT
Etag: W/"c7ba816f9793691d33dfcdc62ec619e0739b28ecff2d8b42cfdf810e412d38f4"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 50253
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   50253
Md5:    39782688762bc689dd2bdf966d0a48ed
Sha1:   74ebed5dd7ae3c52a22ca5fddc8533cf00ed1e0a
Sha256: a2254d356e9526c7a2cc6f869aff102fb6245c97b520a30c7ed8ffad228ed593

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=rpc,shindig_random/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fwww.blogger.com&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=W3adkjYEJ9G8qD8Yxx9X4mb6eAOltdehKBZt92aMPLWVmpux9dvI3hRJh_O1oikRwxRoRVJ_LM7p9pKwacSR7RrdGAXxp9osn8yResAcPBdok9CbWhMZj48HVxfaNBF8

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 16477
Date: Thu, 12 Oct 2017 18:17:59 GMT
Expires: Fri, 12 Oct 2018 18:17:59 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 71265
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   16477
Md5:    456c107e71e6baabd35161f27bac6414
Sha1:   260083dd624f008fc37e8b3b450e01408e3c16b5
Sha256: e686866e5db4c98de53f2fe74970d3146da36eb3a0ce4b14ba2f6e583cbbe5cc
                                        
                                            GET /external_hosted/clipboardjs/clipboard.min.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4096
Date: Fri, 13 Oct 2017 14:05:44 GMT
Expires: Fri, 13 Oct 2017 14:05:44 GMT
Cache-Control: public, max-age=0
Last-Modified: Fri, 12 May 2017 18:45:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4096
Md5:    6be7bb32519d4f901aef3cf3ebd48299
Sha1:   5fc67ff7b82dcea664ce13cdef7965554f51cd9f
Sha256: 83dd577df59e9c5fd07b37fcc5c56764503d480de1dd10b783fc8bceef5ade45
                                        
                                            GET /dyn-css/authorization.css?targetBlogID=4418609707762801235&zx=01e2471a-55bc-4311-9a42-8e98d815536b HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/css; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: private, max-age=1800
Pragma: no-cache
Expires: Fri, 13 Oct 2017 14:05:44 GMT
Date: Fri, 13 Oct 2017 14:05:44 GMT
Last-Modified: Fri, 13 Oct 2017 14:05:44 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   21
Md5:    b9afc501fc43fbea335a2dc5d43263a1
Sha1:   7290a2dd6afbf39ecfc35b52dfb32a38fc222994
Sha256: d6e425ca7840c0ab6f26f5fc2822a47e26b4a8bbd104468a9c185bc132b8662f
                                        
                                            GET /s/lora/v11/4A-myfZX6oDr9CtSTkTGig.ttf HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html
Origin: http://www.atat.ro

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: font/ttf
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 32820
Date: Wed, 11 Oct 2017 18:50:38 GMT
Expires: Thu, 11 Oct 2018 18:50:38 GMT
Last-Modified: Wed, 11 Oct 2017 18:25:02 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 155706


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   32820
Md5:    1e949c1bcc6d19d2a17963cc71c9e020
Sha1:   c6899f6602dd0055769507281d9c5bc431b43dfb
Sha256: bdf2208b9221dbad92fad3f05a8e932d4e2ecef0025b10f2e1365e2e5043f44a
                                        
                                            GET /s/opensans/v15/PRmiXeptR36kaC0GEAetxi8cqLH4MEiSE0ROcU-qHOA.ttf HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html
Origin: http://www.atat.ro

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: font/ttf
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 17308
Date: Wed, 11 Oct 2017 21:53:06 GMT
Expires: Thu, 11 Oct 2018 21:53:06 GMT
Last-Modified: Wed, 11 Oct 2017 21:49:51 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 144758


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17308
Md5:    9d34e4aa2a37c8388ddcd59b31eb2735
Sha1:   c5da1a7f1fd2ddfdbf20d27d1c514e2a59bfd06c
Sha256: 3e996416e2906feb5e4dcdf1e0e5798efcabca864790b72d3493a15f4709de52
                                        
                                            GET /s/opensans/v15/MTP_ySUJH_bn48VBG8sNSonF5uFdDttMLvmWuJdhhgs.ttf HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html
Origin: http://www.atat.ro

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: font/ttf
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 18442
Date: Wed, 11 Oct 2017 21:53:06 GMT
Expires: Thu, 11 Oct 2018 21:53:06 GMT
Last-Modified: Wed, 11 Oct 2017 21:49:51 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 144758


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   18442
Md5:    e48885ccd8f641f3fdbe08b235a71780
Sha1:   3ee38a988b067234ee971da4e232c8af29333fdf
Sha256: 1c1efc12fb54ef0c3632bf56045006029bd04e05c615dbff2322d8eafc4be055
                                        
                                            GET /ae-game/thirdparty/show-window/index.js HTTP/1.1 
Host: i.alicdn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         104.123.141.37
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Last-Modified: Thu, 06 Apr 2017 02:42:41 GMT
SERVED-FROM: 80.239.159.70
Server: Tengine
Content-Security-Policy-Report-Only: style-src 'self' 'unsafe-inline' *.alibaba.com *.alisoft.com *.aliyun.com *.alipay.com *.aliexpress.com *.taobao.com *.taobao.net https://assets.alicdn.com https://login.alibaba.com *.alicdn.com *.tbcdn.com *.tbcdn.cn *.aliimg.com *.aliunicorn.com *.1688.com https://*.1688.com *.taobaocdn.com *.taobaocdn.cn *.mmstat.com *.alimama.com *.alimama.cn *.amap.com *.meitipu.com yui.yahooapis.com *.amap.com http://localhost.wwbizsrv.alibaba.com:4012 http://localhost.wwbizsrv.alibaba.com:4812 https://localhost.wwbizsrv.alibaba.com:4013 https://localhost.wwbizsrv.alibaba.com:4813 *.cnzz.com *.cnzz.net www.google.com apis.google.com translate.googleapis.com translate.google.com widgets.twimg.com platform.twitter.com twitter.com;img-src 'self' data: *.alibaba.com *.alisoft.com *.aliyun.com *.alipay.com *.aliexpress.com *.taobao.com *.taobao.net https://assets.alicdn.com https://login.alibaba.com *.alicdn.com *.tbcdn.com *.tbcdn.cn *.aliimg.com *.aliunicorn.com *.1688.com https://*.1688.com *.taobaocdn.com *.taobaocdn.cn *.mmstat.com *.alimama.com *.alimama.cn *.amap.com *.meitipu.com yui.yahooapis.com *.amap.com http://localhost.wwbizsrv.alibaba.com:4012 http://localhost.wwbizsrv.alibaba.com:4812 https://localhost.wwbizsrv.alibaba.com:4013 https://localhost.wwbizsrv.alibaba.com:4813 *.cnzz.com *.cnzz.net www.google.com apis.google.com translate.googleapis.com translate.google.com widgets.twimg.com platform.twitter.com twitter.com www.google-analytics.com www.googleadservices.com googleads.g.doubleclick.net stats.g.doubleclick.net;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.alibaba.com *.alisoft.com *.aliyun.com *.alipay.com *.aliexpress.com *.taobao.com *.taobao.net https://assets.alicdn.com https://login.alibaba.com *.alicdn.com *.tbcdn.com *.tbcdn.cn *.aliimg.com *.aliunicorn.com *.1688.com https://*.1688.com *.taobaocdn.com *.taobaocdn.cn *.mmstat.com *.alimama.com *.alimama.cn *.amap.com *.meitipu.com yui.yahooapis.com *.amap.com http://localhost.wwbizsrv.alibaba.com:4012 http://localhost.wwbizsrv.alibaba.com:4812 https://localhost.wwbizsrv.alibaba.com:4013 https://localhost.wwbizsrv.alibaba.com:4813 *.cnzz.com *.cnzz.net www.google.com apis.google.com translate.googleapis.com translate.google.com widgets.twimg.com platform.twitter.com twitter.com www.google-analytics.com www.googleadservices.com googleads.g.doubleclick.net stats.g.doubleclick.net;;report-uri //pointman.alibaba.com/csp?app=default
Content-Length: 45306
Content-Encoding: gzip
Cache-Control: max-age=441
Expires: Fri, 13 Oct 2017 14:13:06 GMT
Date: Fri, 13 Oct 2017 14:05:45 GMT
Connection: keep-alive
Vary: Accept-Encoding
Network_Info: NO_OSLO_5381
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: FW_IP
FW_IP: 104.123.141.37


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   45306
Md5:    fa3d7a2d1c82f90c904ab5459140a03c
Sha1:   b6005695b93b6543db9da30414f776fa491405f7
Sha256: 93a22f68d870a7b8bc9bc2d6d1595184866e632ff3b3382109b7ea775120614d
                                        
                                            GET /s/opensans/v15/k3k702ZOKiLJc3WVjuplzInF5uFdDttMLvmWuJdhhgs.ttf HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html
Origin: http://www.atat.ro

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: font/ttf
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 18670
Date: Wed, 11 Oct 2017 21:53:06 GMT
Expires: Thu, 11 Oct 2018 21:53:06 GMT
Last-Modified: Wed, 11 Oct 2017 21:49:43 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 144760


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   18670
Md5:    b9ebbca69dfcb94dd85e370c54de6403
Sha1:   d8da7728fb8441c9613b3bb9069b13a6650aa037
Sha256: c75a888229ad2a7583f66d3489400b302d05e0fa7248d8195c9cceebe25b1d3d
                                        
                                            GET /s/opensans/v15/cJZKeOuBrn4kERxqtaUH3aCWcynf_cDxXwCLxiixG1c.ttf HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html
Origin: http://www.atat.ro

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: font/ttf
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 17857
Date: Wed, 11 Oct 2017 21:53:06 GMT
Expires: Thu, 11 Oct 2018 21:53:06 GMT
Last-Modified: Sat, 07 Oct 2017 03:46:26 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 144760


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17857
Md5:    5a3d8c6b3a13e96eca413685de0b0478
Sha1:   3cb1e827b14625e1e3469c694c758718c3a0e058
Sha256: 57f3aa4e0a629160d5ab710a4e87f4d499b3291111ef958701051f971225e36e
                                        
                                            GET /exp/blank.html HTTP/1.1 
Host: adservice.aliexpress.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         198.11.132.250
HTTP/1.1 200
Content-Type: text/html
                                        
Date: Fri, 13 Oct 2017 14:05:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: ali_apache_id=11.227.116.59.1507903546914.214208.9; path=/; domain=.aliexpress.com; expires=Wed, 30-Nov-2084 01:01:01 GMT xman_us_f=x_l=0; Domain=.aliexpress.com; Expires=Wed, 31-Oct-2085 17:19:53 GMT; Path=/ acs_usuc_t=x_csrf=gjnuwseo7j77&acs_rt=87015aa56e914348966df9abf814d20d; Domain=.aliexpress.com; Path=/ xman_t=Xu03w/hFeHFfMaX+A8atN9+Tv9sE5CRwAE8WbZRjJYVjwzlOa+slka2QJvMNAQp8; Domain=.aliexpress.com; Path=/; HttpOnly xman_f=6QfLiNDkeXvvUjT5I1xmBQrBICD21QQpkxVmHpnOGuxwOxlq2OPLALHH5RILpHX65f0n7ii8Z/pP7ce21bBESDMhZa2FtS90pV1VjhFTL7s0Q00eYIJKww==; Domain=.aliexpress.com; Expires=Wed, 31-Oct-2085 17:19:53 GMT; Path=/; HttpOnly XSRF-TOKEN=9f609548-da8a-4553-b604-3a3fdfd62a27;path=/;HttpOnly
P3P: CP="CAO PSA OUR"
X-Application-Context: affiliatedynamicwindow:prod:7001
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Content-Encoding: gzip
Server: Tengine/Aserver
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   404
Md5:    3c0aa95730b8f57ce9a21ccefda73508
Sha1:   c78de48bca710c69921b81ab9b2f4b4d2a9cefbe
Sha256: 8892bccc360050cc7efaf73ea2b8c4519adf1750cd6e1b62f168caac29c0850f
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=114=W3adkjYEJ9G8qD8Yxx9X4mb6eAOltdehKBZt92aMPLWVmpux9dvI3hRJh_O1oikRwxRoRVJ_LM7p9pKwacSR7RrdGAXxp9osn8yResAcPBdok9CbWhMZj48HVxfaNBF8

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 14:05:47 GMT
Expires: Tue, 17 Oct 2017 14:05:47 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    4a36c3a0f62e5090abbee327b6c5a777
Sha1:   37a0315fbdf892194cc735b14d8f024a0b196de5
Sha256: d5012467277681fb71e08741691463135ac7d35f532f412c680cd7a031658b2a
                                        
                                            GET /ajax/libs/jquery/3.2.1/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         173.194.222.95
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 30306
Date: Thu, 12 Oct 2017 15:50:53 GMT
Expires: Fri, 12 Oct 2018 15:50:53 GMT
Last-Modified: Fri, 24 Mar 2017 20:55:54 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 80094


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   30306
Md5:    fc3fc31e5e7c0933dc18e562c1c071bf
Sha1:   a44c31323f6bd29e583cc585036e6eb39f7014a6
Sha256: ddad766fb94b23efeb5574cdedc5e8446d496fb91bd0b08cd80be212e001055d
                                        
                                            GET /js/cookiechoices.js HTTP/1.1 
Host: www.atat.ro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         173.194.220.121
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1949
Date: Tue, 10 Oct 2017 04:51:35 GMT
Expires: Tue, 17 Oct 2017 04:51:35 GMT
Last-Modified: Tue, 21 Mar 2017 02:50:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 292452


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   1949
Md5:    55617d5777b77daabe42b9ba8f79cf89
Sha1:   583546c7106a17b990de20c5a571dc773919150c
Sha256: 0b64080ab3c3e668b191e288dda405b7c4fdf6819d87a499daec75093dccef6e
                                        
                                            GET /obtain_ads.do?callback=jQuery111307046273447484069_1507903546220&proxyurl=&publisherid=&memberid=&wid=580086&size=468x60&shortkey=JeqJ2bMvN&lang=en-US&ip=&url=http%3A%2F%2Fwww.atat.ro%2Fp%2Fabout.html&ref=http%3A%2F%2Fwww-blogger-opensocial.googleusercontent.com%2Fgadgets%2Fifr%3Furl%3Dhttp%3A%2F%2Fhosting.gmodules.com%2Fig%2Fgadgets%2Ffile%2F111311123200664007084%2Fcalendar.xml%26container%3Dblogger%26view%3Ddefault%26lang%3Dfr%26country%3DALL%26sanitize%3D0%26v%3D4b0c87b8da3b9f9e%26libs%3Dcore%26parent%3Ddpcgtsecuritasnormandie.blogspot.fr%2F%26mid%3D3&custom=&browser=firefox+3.6.13&screen=234x60&cookieid=&version=1&ct=Disclaimer&_=1507903546221 HTTP/1.1 
Host: adservice.aliexpress.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         198.11.132.250
HTTP/1.1 200
Content-Type: application/javascript;charset=UTF-8
                                        
Date: Fri, 13 Oct 2017 14:05:47 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: ali_apache_id=10.182.213.153.1507903546914.214206.9; path=/; domain=.aliexpress.com; expires=Wed, 30-Nov-2084 01:01:01 GMT xman_us_f=x_l=0; Domain=.aliexpress.com; Expires=Wed, 31-Oct-2085 17:19:53 GMT; Path=/ acs_usuc_t=x_csrf=xjkrvgl89giv&acs_rt=2c3e90a9b573494ab88f6c6007e4680c; Domain=.aliexpress.com; Path=/ xman_t=ElZD/MdAZpfvZjm35nS64g1a82wPE2HhWWKuLHSVhsmZqFGF5LfzyVkKuU1q+ek1; Domain=.aliexpress.com; Path=/; HttpOnly xman_f=Zl00YJsHNKOpp9gqYQa/01A1K9qfX0ealA9jjWAhcRDnko/F/h7e/Ep4zavg1uwVZSlxiIBl/pVT0faDd4Pquie35/shwabPPaRj4L7/TT58NMI/0h9PSg==; Domain=.aliexpress.com; Expires=Wed, 31-Oct-2085 17:19:53 GMT; Path=/; HttpOnly XSRF-TOKEN=f3a5cad1-a400-4a17-bead-c193fbaaaf45;path=/;HttpOnly
P3P: CP="CAO PSA OUR"
X-Application-Context: affiliatedynamicwindow:prod:7001
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Content-Encoding: gzip
Server: Tengine/Aserver
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2281
Md5:    ea5cc0eadf306056a7c1d575de479391
Sha1:   1bdd8fa42b5a704124fed19e8e47da9946a97f9c
Sha256: 22f62e2d1de7a5434d81a58c4b958b3917843dd03882bcadd8d1cda94e797004
                                        
                                            GET /js/300/addthis_widget.js HTTP/1.1 
Host: s7.addthis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         104.16.18.35
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Date: Fri, 13 Oct 2017 14:05:47 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 25 Sep 2017 19:48:20 GMT
Etag: "570d3-55a08d72f6900"
Vary: Accept-Encoding
Content-Encoding: gzip
Timing-Allow-Origin: *
Surrogate-Key: client_dist
Edge-Cache-Tag: client_dist
Cache-Control: public, no-check, max-age=600
CF-Cache-Status: HIT
X-Host: s7.addthis.com
X-Distribution: 99
Server: cloudflare-nginx
CF-RAY: 3ad2db12d22342c1-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   113848
Md5:    6035f3674af9bb2dbad6f7f1c6375ebc
Sha1:   3aa29295e4216995f86dab2254bb76cfa19de6e5
Sha256: 783963a701ad4e463f4eacd4befca7c81b831ad2aec2bb6d8eeaf921625c4901
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 108
Content-Type: application/ocsp-request

                                         
                                         72.167.239.239
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 14:05:47 GMT
Server: Apache
Content-Transfer-Encoding: Binary
Cache-Control: max-age=119560, public, no-transform, must-revalidate
Last-Modified: Fri, 13 Oct 2017 13:03:20 GMT
Expires: Sun, 15 Oct 2017 01:03:20 GMT
Etag: "1129fa8d4373bd17ff3e6bcfb590f0fdcde4feaf"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
Content-Length: 1777
Connection: close


--- Additional Info ---
Magic:  data
Size:   1777
Md5:    a1f46dc68e8d3bf36faac4ba8350ef9c
Sha1:   1129fa8d4373bd17ff3e6bcfb590f0fdcde4feaf
Sha256: fa5c1caaccab31e9015aa93870748840e486e71b9f95a498571eba45af1ad466
                                        
                                            GET /-0-nPO9NAgyw/WQLqmqQ3S7I/AAAAAAAAfZc/76QjD42E_tkoJBXB56Tptg3I5M_QSODXQCLcB/w600-h400-p-k-no-nu/likes.png HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v7d98"
Expires: Sat, 14 Oct 2017 05:45:44 GMT
Content-Disposition: inline;filename="likes.png"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 13:45:12 GMT
Server: fife
Content-Length: 56554
X-XSS-Protection: 1; mode=block
Age: 1235
Cache-Control: public, max-age=86400, no-transform
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 400 x 266, 8-bit/color RGB, non-interlaced
Size:   56554
Md5:    7183ee09b2bcd14dcd3a2dd405bd8db7
Sha1:   3526011f5bd7f805ab56652195c5f90d8a861875
Sha256: 0e369647d27daa83eb0995cba679fcb4660981c29998d457f08e82b7c5548307
                                        
                                            GET /blogblog/data/res/1782006661-rockpool_compiled.js HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 45717
Date: Thu, 12 Oct 2017 23:04:59 GMT
Expires: Thu, 19 Oct 2017 23:04:59 GMT
Last-Modified: Wed, 11 Oct 2017 20:56:15 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 54048
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   45717
Md5:    6ec8997cc9a610abc45b3b97081a825c
Sha1:   f03afb1257eaf326d5a5f8644775fa61e64081d3
Sha256: 207ab1419f8d8c7d8f38db38bbc875a04e74d9a824237d571a5f4467e614d075
                                        
                                            GET /js/link-converter.js HTTP/1.1 
Host: cdn.adf.ly
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         104.20.1.4
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Fri, 13 Oct 2017 14:05:47 GMT
Content-Length: 11963
Connection: keep-alive
Set-Cookie: __cfduid=d6b7f6286b27b5e50fc7e6255da53b23c1507903547; expires=Sat, 13-Oct-18 14:05:47 GMT; path=/; domain=.adf.ly; HttpOnly
Cache-Control: public, max-age=604800
Expires: Fri, 20 Oct 2017 14:05:47 GMT
Etag: "7b8e-59cb9e8c-67066fa7126fe724"
Last-Modified: Wed, 27 Sep 2017 12:50:20 GMT
Content-Encoding: gzip
Vary: Accept-Encoding
X-Turbo-Charged-By: LiteSpeed
CF-Cache-Status: HIT
Accept-Ranges: bytes
Server: cloudflare-nginx
CF-RAY: 3ad2db14ef034261-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   11963
Md5:    2af395b0d51f4c8caf65e100035706e7
Sha1:   f440f35a825f8e54be1fb7e5b9798f93175df75d
Sha256: 8868abbcc0b9780471640a599a9aae6383355fd297cd2cd4aad278f394191975
                                        
                                            GET /zFdxGE77vvD2w5xHy6jkVuElKv-U9_9qLkRYK8OnbDeJPtjSZ82UPq5w6hJ-SA=w35 HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v1"
Expires: Sat, 14 Oct 2017 12:46:00 GMT
Content-Disposition: inline;filename="unnamed.png"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 13:46:01 GMT
Server: fife
Content-Length: 1758
X-XSS-Protection: 1; mode=block
Age: 1188
Cache-Control: public, max-age=86400, no-transform
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 35 x 35, 8-bit/color RGBA, non-interlaced
Size:   1758
Md5:    1399cebd5450ed86eb2e3ece87ec8233
Sha1:   8b9ae975e930640a47cd39f9495c41810eb34abd
Sha256: 9249f958fddd3a64459c5422d64f6bcbc967a8007fa6b40566c93ed05dc7fb86
                                        
                                            GET /post_ads_position.do?cmpParams=Short_key%3DJeqJ2bMvN%26scm%3D1007.12506.84939.0%26Exp_ID%3D580086150790354709000662%26Object_type%3Ditem%26Object_id%3D32716265317%2C32702383727%2C32785164603%2C32812986903%2C32825854006%2C32737559733%2C32731569451%2C32819138937%2C32790326857%2C32596327081%2C32795257894%2C32796999788%26memberId%3Dnull%26cookieId%3D%26country%3DNO%26language%3Den%26verison%3D1%26windowSize%3D468x60%26isCaCompositor%3DN%26isComple%3DN%26isCookieCart%3DN%26isCookie%3DN%26isRealTimeCookie%3DN%26isCountry%3DN%26isMem%3DY%26isMemCart%3DN%26isSite%3DN%26isPage%3DN&exposureId=580086150790354709000662&shortkey=JeqJ2bMvN&dwidth=254&dheight=4021&pleft=0&ptop=1498&t=1507903549084 HTTP/1.1 
Host: adservice.aliexpress.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html
Cookie: ali_apache_id=10.182.213.153.1507903546914.214206.9; xman_us_f=x_l=0; acs_usuc_t=x_csrf=xjkrvgl89giv&acs_rt=2c3e90a9b573494ab88f6c6007e4680c; xman_t=ElZD/MdAZpfvZjm35nS64g1a82wPE2HhWWKuLHSVhsmZqFGF5LfzyVkKuU1q+ek1; xman_f=Zl00YJsHNKOpp9gqYQa/01A1K9qfX0ealA9jjWAhcRDnko/F/h7e/Ep4zavg1uwVZSlxiIBl/pVT0faDd4Pquie35/shwabPPaRj4L7/TT58NMI/0h9PSg==; XSRF-TOKEN=f3a5cad1-a400-4a17-bead-c193fbaaaf45

                                         
                                         198.11.132.250
HTTP/1.1 200
Content-Type: application/javascript;charset=UTF-8
                                        
Date: Fri, 13 Oct 2017 14:05:49 GMT
Content-Length: 36
Connection: keep-alive
Set-Cookie: acs_usuc_t=x_csrf=xjkrvgl89giv&acs_rt=2c3e90a9b573494ab88f6c6007e4680c; Domain=.aliexpress.com; Path=/
P3P: CP="CAO PSA OUR"
X-Application-Context: affiliatedynamicwindow:prod:7001
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Server: Tengine/Aserver
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   36
Md5:    952d6ef9c2d0bc2e86c32d4e463a23a1
Sha1:   3af1032ebdd224d3409fd816fa9826b833e78ef9
Sha256: 4073d690ab3aea580ebf5720df9ae1c716aeefecd82bd3137f933fb22ebca7e2
                                        
                                            GET /cpm.jpg?t=1507903549087&Short_key=JeqJ2bMvN&scm=1007.12506.84939.0&Exp_ID=580086150790354709000662&Object_type=item&Object_id=32716265317,32702383727,32785164603,32812986903,32825854006,32737559733,32731569451,32819138937,32790326857,32596327081,32795257894,32796999788&memberId=null&cookieId=&country=NO&language=en&verison=1&windowSize=468x60&isCaCompositor=N&isComple=N&isCookieCart=N&isCookie=N&isRealTimeCookie=N&isCountry=N&isMem=Y&isMemCart=N&isSite=N&isPage=N HTTP/1.1 
Host: adservice.aliexpress.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html
Cookie: ali_apache_id=10.182.213.153.1507903546914.214206.9; xman_us_f=x_l=0; acs_usuc_t=x_csrf=xjkrvgl89giv&acs_rt=2c3e90a9b573494ab88f6c6007e4680c; xman_t=ElZD/MdAZpfvZjm35nS64g1a82wPE2HhWWKuLHSVhsmZqFGF5LfzyVkKuU1q+ek1; xman_f=Zl00YJsHNKOpp9gqYQa/01A1K9qfX0ealA9jjWAhcRDnko/F/h7e/Ep4zavg1uwVZSlxiIBl/pVT0faDd4Pquie35/shwabPPaRj4L7/TT58NMI/0h9PSg==; XSRF-TOKEN=f3a5cad1-a400-4a17-bead-c193fbaaaf45

                                         
                                         198.11.132.250
HTTP/1.1 200
Content-Type: image/jpeg;charset=UTF-8
                                        
Date: Fri, 13 Oct 2017 14:05:49 GMT
Content-Length: 7
Connection: keep-alive
Set-Cookie: acs_usuc_t=x_csrf=xjkrvgl89giv&acs_rt=2c3e90a9b573494ab88f6c6007e4680c; Domain=.aliexpress.com; Path=/
P3P: CP="CAO PSA OUR"
X-Application-Context: affiliatedynamicwindow:prod:7001
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Server: Tengine/Aserver
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   7
Md5:    260ca9dd8a4577fc00b7bd5810298076
Sha1:   53a5687cb26dc41f2ab4033e97e13adefd3740d6
Sha256: aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27
                                        
                                            GET /cpm.jpg?t=1507903549088&Short_key=JeqJ2bMvN&scm=1007.12506.84939.0&Exp_ID=580086150790354709000662&Object_type=item&Object_id=32716265317,32702383727,32785164603,32812986903,32825854006,32737559733,32731569451,32819138937,32790326857,32596327081,32795257894,32796999788&memberId=null&cookieId=&country=NO&language=en&verison=1&windowSize=468x60&isCaCompositor=N&isComple=N&isCookieCart=N&isCookie=N&isRealTimeCookie=N&isCountry=N&isMem=Y&isMemCart=N&isSite=N&isPage=N HTTP/1.1 
Host: adservice.aliexpress.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html
Cookie: ali_apache_id=10.182.213.153.1507903546914.214206.9; xman_us_f=x_l=0; acs_usuc_t=x_csrf=xjkrvgl89giv&acs_rt=2c3e90a9b573494ab88f6c6007e4680c; xman_t=ElZD/MdAZpfvZjm35nS64g1a82wPE2HhWWKuLHSVhsmZqFGF5LfzyVkKuU1q+ek1; xman_f=Zl00YJsHNKOpp9gqYQa/01A1K9qfX0ealA9jjWAhcRDnko/F/h7e/Ep4zavg1uwVZSlxiIBl/pVT0faDd4Pquie35/shwabPPaRj4L7/TT58NMI/0h9PSg==; XSRF-TOKEN=f3a5cad1-a400-4a17-bead-c193fbaaaf45

                                         
                                         198.11.132.250
HTTP/1.1 200
Content-Type: image/jpeg;charset=UTF-8
                                        
Date: Fri, 13 Oct 2017 14:05:49 GMT
Content-Length: 7
Connection: keep-alive
Set-Cookie: acs_usuc_t=x_csrf=xjkrvgl89giv&acs_rt=2c3e90a9b573494ab88f6c6007e4680c; Domain=.aliexpress.com; Path=/
P3P: CP="CAO PSA OUR"
X-Application-Context: affiliatedynamicwindow:prod:7001
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Server: Tengine/Aserver
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   7
Md5:    260ca9dd8a4577fc00b7bd5810298076
Sha1:   53a5687cb26dc41f2ab4033e97e13adefd3740d6
Sha256: aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27
                                        
                                            GET /csi?v=3&s=opensocial-gadgets&action=blogger_default&gadget=http%3A%2F%2Fhosting.gmodules.com%2Fig%2Fgadgets%2Ffile%2F111311123200664007084%2Fcalendar.xml&container=blogger&view=default&e=&rt=dl.179,ol.6116,prt.6117 HTTP/1.1 
Host: csi.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www-blogger-opensocial.googleusercontent.com/gadgets/ifr?url=http://hosting.gmodules.com/ig/gadgets/file/111311123200664007084/calendar.xml&container=blogger&view=default&lang=fr&country=ALL&sanitize=0&v=4b0c87b8da3b9f9e&libs=core&parent=dpcgtsecuritasnormandie.blogspot.fr/&mid=3

                                         
                                         216.58.209.131
HTTP/1.1 204 No Content
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Fri, 13 Oct 2017 14:05:49 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT
Server: Golfe2
Content-Length: 0


--- Additional Info ---