Overview

URL nretnawati.blogspot.com/2012/05/normal-0-false-false-false-en-us-x-none.html
IP172.217.22.161
ASNAS15169 Google Inc.
Location United States
Report completed2017-10-13 15:35:59 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2017-10-13 2 atat.ro/about.html Malware
2017-10-13 2 www.atat.ro/about.html Phishing
2017-10-13 2 www.atat.ro/p/about.html Phishing
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 172.217.22.161

Date UQ / IDS / BL URL IP
2017-12-11 22:00:18 +0100
0 - 0 - 2 lorelose1810.blogspot.de/search/label/floaty% (...) 172.217.22.161
2017-12-11 22:00:09 +0100
0 - 0 - 2 beatrice-borromeo-news.blogspot.de/search/lab (...) 172.217.22.161
2017-12-11 21:56:42 +0100
0 - 0 - 3 josh-morgan-subways-news.blogspot.de/2011/09/ (...) 172.217.22.161
2017-12-11 21:56:45 +0100
0 - 0 - 2 josh-morgan-subways-news.blogspot.de/2011/09/ (...) 172.217.22.161
2017-12-11 21:41:43 +0100
0 - 0 - 2 tokoaccretiaa.blogspot.com/2012/12/blog-post.htm 172.217.22.161
2017-12-11 21:41:43 +0100
0 - 0 - 2 tokoaccretiaa.blogspot.com/2012/12/toko-accre (...) 172.217.22.161
2017-12-11 21:41:42 +0100
0 - 0 - 2 tokoaccretiaa.blogspot.com/2012_12_01_archive.html 172.217.22.161
2017-12-11 21:37:57 +0100
0 - 0 - 4 lorelose1810.blogspot.ca/search/label/winter% (...) 172.217.22.161
2017-12-11 21:36:43 +0100
1 - 0 - 3 tektekdunk.blogspot.com.es/2013/03/efax-corpo (...) 172.217.22.161
2017-12-11 17:58:21 +0100
0 - 0 - 2 hakingandsecurity.blogspot.com/2013/11/make-b (...) 172.217.22.161

Last 10 reports on ASN: AS15169 Google Inc.

Date UQ / IDS / BL URL IP
2017-12-12 02:00:57 +0100
0 - 0 - 4 community.idealwebtech.com/index.php?s=b80544 (...) 146.148.45.143
2017-12-12 01:59:27 +0100
0 - 0 - 2 southsongz4all.blogspot.ru/p/dmca-link-remova (...) 216.58.211.129
2017-12-12 01:53:47 +0100
0 - 0 - 1 goo.gl/d2ztRM 216.58.211.142
2017-12-12 01:49:05 +0100
0 - 0 - 1 www2.stardollbedavalari.gen.tr/2012/08/stardo (...) 173.194.73.121
2017-12-12 01:43:10 +0100
0 - 0 - 1 1lira.blogspot.com/2007/11/sabun-nasl-yaplr.h (...) 216.58.211.129
2017-12-12 01:41:23 +0100
0 - 0 - 2 1lira.blogspot.in/2009/08/dunyada-en-fazla-se (...) 216.58.211.129
2017-12-12 01:39:12 +0100
0 - 0 - 0 michaelharden1978@gmail.com 216.58.211.133
2017-12-12 01:39:12 +0100
0 - 0 - 0 michaelharden1978@gmail.com 216.58.211.133
2017-12-12 01:37:15 +0100
0 - 0 - 1 thecreationfallacy.blogspot.de/2012/09/emily- (...) 216.58.211.129
2017-12-12 01:37:13 +0100
0 - 0 - 1 overloadoverlook2110.blogspot.de/2011/09/off- (...) 216.58.211.129

No other reports on domain: nretnawati.blogspot.com



JavaScript

Executed Scripts (61)


Executed Evals (0)


Executed Writes (53)

#1 JavaScript::Write (size: 0, repeated: 4) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                    

#2 JavaScript::Write (size: 1, repeated: 4) - SHA256: 36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068

                                        
                                    

#3 JavaScript::Write (size: 1, repeated: 1) - SHA256: 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b

                                        1
                                    

#4 JavaScript::Write (size: 2, repeated: 1) - SHA256: 4a44dc15364204a80fe80e9039455cc1608281820fe2b24f1e5233ade6af1dd5

                                        10
                                    

#5 JavaScript::Write (size: 2, repeated: 1) - SHA256: 4fc82b26aecb47d2868c4efbe3581732a3e7cbcc6c2efb32062c08170a05eeb8

                                        11
                                    

#6 JavaScript::Write (size: 2, repeated: 1) - SHA256: 6b51d431df5d7f141cbececcf79edf3dd861c3b4069f0b11661a3eefacbba918

                                        12
                                    

#7 JavaScript::Write (size: 2, repeated: 1) - SHA256: 3fdba35f04dc8c462986c992bcf875546257113072a909c162f7e470e581e278

                                        13
                                    

#8 JavaScript::Write (size: 2, repeated: 1) - SHA256: 8527a891e224136950ff32ca212b45bc93f69fbb801c3b1ebedac52775f99e61

                                        14
                                    

#9 JavaScript::Write (size: 2, repeated: 1) - SHA256: e629fa6598d732768f7c726b4b621285f9c3b85303900aa912017db7617d8bdb

                                        15
                                    

#10 JavaScript::Write (size: 2, repeated: 1) - SHA256: b17ef6d19c7a5b1ee83b907c595526dcb1eb06db8227d650d5dda0a9f4ce8cd9

                                        16
                                    

#11 JavaScript::Write (size: 2, repeated: 1) - SHA256: 4523540f1504cd17100c4835e85b7eefd49911580f8efff0599a8f283be6b9e3

                                        17
                                    

#12 JavaScript::Write (size: 2, repeated: 1) - SHA256: 4ec9599fc203d176a301536c2e091a19bc852759b255bd6818810a42c5fed14a

                                        18
                                    

#13 JavaScript::Write (size: 2, repeated: 1) - SHA256: 9400f1b21cb527d7fa3d3eabba93557a18ebe7a2ca4e471cfe5e4c5b4ca7f767

                                        19
                                    

#14 JavaScript::Write (size: 1, repeated: 1) - SHA256: d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35

                                        2
                                    

#15 JavaScript::Write (size: 2, repeated: 1) - SHA256: f5ca38f748a1d6eaf726b8a42fb575c3c71f1864a8143301782de13da2d9202b

                                        20
                                    

#16 JavaScript::Write (size: 2, repeated: 1) - SHA256: 6f4b6612125fb3a0daecd2799dfd6c9c299424fd920f9b308110a2c1fbd8f443

                                        21
                                    

#17 JavaScript::Write (size: 2, repeated: 1) - SHA256: 785f3ec7eb32f30b90cd0fcf3657d388b5ff4297f2f9716ff66e9b69c05ddd09

                                        22
                                    

#18 JavaScript::Write (size: 2, repeated: 1) - SHA256: 535fa30d7e25dd8a49f1536779734ec8286108d115da5045d77f3b4185d8f790

                                        23
                                    

#19 JavaScript::Write (size: 2, repeated: 1) - SHA256: c2356069e9d1e79ca924378153cfbbfb4d4416b1f99d41a2940bfdb66c5319db

                                        24
                                    

#20 JavaScript::Write (size: 2, repeated: 1) - SHA256: b7a56873cd771f2c446d369b649430b65a756ba278ff97ec81bb6f55b2e73569

                                        25
                                    

#21 JavaScript::Write (size: 2, repeated: 1) - SHA256: 5f9c4ab08cac7457e9111a30e4664920607ea2c115a1433d7be98e97e64244ca

                                        26
                                    

#22 JavaScript::Write (size: 2, repeated: 1) - SHA256: 670671cd97404156226e507973f2ab8330d3022ca96e0c93bdbdb320c41adcaf

                                        27
                                    

#23 JavaScript::Write (size: 2, repeated: 1) - SHA256: 59e19706d51d39f66711c2653cd7eb1291c94d9b55eb14bda74ce4dc636d015a

                                        28
                                    

#24 JavaScript::Write (size: 2, repeated: 1) - SHA256: 35135aaa6cc23891b40cb3f378c53a17a1127210ce60e125ccf03efcfdaec458

                                        29
                                    

#25 JavaScript::Write (size: 1, repeated: 1) - SHA256: 4e07408562bedb8b60ce05c1decfe3ad16b72230967de01f640b7e4729b49fce

                                        3
                                    

#26 JavaScript::Write (size: 2, repeated: 1) - SHA256: 624b60c58c9d8bfb6ff1886c2fd605d2adeb6ea4da576068201b6c6958ce93f4

                                        30
                                    

#27 JavaScript::Write (size: 2, repeated: 1) - SHA256: eb1e33e8a81b697b75855af6bfcdbcbf7cbbde9f94962ceaec1ed8af21f5a50f

                                        31
                                    

#28 JavaScript::Write (size: 1, repeated: 1) - SHA256: 4b227777d4dd1fc61c6f884f48641d02b4d121d3fd328cb08b5531fcacdabf8a

                                        4
                                    

#29 JavaScript::Write (size: 1, repeated: 1) - SHA256: ef2d127de37b942baad06145e54b0c619a1f22327b2ebbcfbec78f5564afe39d

                                        5
                                    

#30 JavaScript::Write (size: 1, repeated: 1) - SHA256: e7f6c011776e8db7cd330b54174fd76f7d0216b612387a5ffcfb81e6f0919683

                                        6
                                    

#31 JavaScript::Write (size: 1, repeated: 1) - SHA256: 7902699be42c8a8e46fbbb4501726517e86b22c56a189f7625a6da49081b2451

                                        7
                                    

#32 JavaScript::Write (size: 1, repeated: 1) - SHA256: 2c624232cdd221771294dfbb310aca000a0df6ac8b66b696d90ef06fdefb64a3

                                        8
                                    

#33 JavaScript::Write (size: 1, repeated: 1) - SHA256: 19581e27de7ced00ff1ce50b2047e7a567c76b1cbaebabe5ef03f7c3017bb5b7

                                        9
                                    

#34 JavaScript::Write (size: 16, repeated: 1) - SHA256: 179d2296541cc6cc3735dcefd744e76c893bdf22e340950093cb8c2a9dba219c

                                        < /strong></font >
                                    

#35 JavaScript::Write (size: 12, repeated: 1) - SHA256: 6383e3ab79831381d64fbfb9d0e0847628265a75c29eaf5d0500f4d2cc5ed940

                                        < /table></p >
                                    

#36 JavaScript::Write (size: 5, repeated: 35) - SHA256: b8073d8a2f01abcc6c6b69a83e3a57c34dc786f638df7da5c76b8e1197d16d13

                                        < /td>
                                    

#37 JavaScript::Write (size: 5, repeated: 6) - SHA256: 3ed7440ce0756928276fbc0d9c75b59a8e152f7121e8edda0730bbebe4b8604d

                                        < /tr>
                                    

#38 JavaScript::Write (size: 50, repeated: 1) - SHA256: 9919cbf41a991d115daf40c3b75f9bf15346fb2e6d82c7696bd3bd051f962072

                                        < a id = '580086'
style = 'display:none!important' > < /a>
                                    

#39 JavaScript::Write (size: 29, repeated: 1) - SHA256: f814e6ecd1ae504eb0585542aea300290d42f346b0b88e69189932e31db87e6b

                                        < font color = 'FF0000' > < strong >
                                    

#40 JavaScript::Write (size: 191, repeated: 1) - SHA256: c0ad3e7ca1c5cb005179a2233dc55dda3825e83de37cca5bb05539b659303592

                                        < script type = "text/javascript"
src = "//www-blogger-opensocial.googleusercontent.com/gadgets/js/rpc.js?container=blogger&nocache=0&debug=0&c=1&v=89e9ae02ef0b8b6c37aabbfe2eeac27f&sv=10" > < /script>
                                    

#41 JavaScript::Write (size: 76, repeated: 1) - SHA256: 51f28c42cd4e80a2dd5ec90a946f237ca5209ff28abde66bb40acdd72691a5f1

                                        < table width = '100%'
border = 1 bgcolor = white style = 'border-collapse: collapse'
                                    

#42 JavaScript::Write (size: 23, repeated: 1) - SHA256: 4e45888eabaa6b172986c30d5e15cbc6f4664093e8672647969ec175155fa43a

                                        < td align = center > F < /td>
                                    

#43 JavaScript::Write (size: 23, repeated: 1) - SHA256: 5ebe221bcecc0c83fe9193499d1b1227fd2c9f9a2dbf63886eeef763cf3aabe1

                                        < td align = center > M < /td>
                                    

#44 JavaScript::Write (size: 24, repeated: 1) - SHA256: c69fc2521a6c633f7f64b870a61e0545e04c46ce33af15ee82f034dee2062a12

                                        < td align = center > Sa < /td>
                                    

#45 JavaScript::Write (size: 24, repeated: 1) - SHA256: 572ffa9588101371c163f63de5c876626a3366199c3e7213163b2e54c6e28ba5

                                        < td align = center > Su < /td>
                                    

#46 JavaScript::Write (size: 24, repeated: 1) - SHA256: bc0fb78df272f5806e0a81a754f819b5127bc4988e53bdf930937faadae62fb5

                                        < td align = center > Th < /td>
                                    

#47 JavaScript::Write (size: 24, repeated: 1) - SHA256: 8dcb2c7a26d3530cad633cb3f4cec9db4201b43e8a695410047846e9c735e4ba

                                        < td align = center > Tu < /td>
                                    

#48 JavaScript::Write (size: 23, repeated: 1) - SHA256: 6c8f333a01fb16eced8da341aeb9baa69d985476ff944c7cf84a766ce09e2cb7

                                        < td align = center > W < /td>
                                    

#49 JavaScript::Write (size: 4, repeated: 35) - SHA256: ad76f84d9f135f96caeea833da7e9ecc375198cd0414bb5541fbe08c68295b19

                                        < td >
                                    

#50 JavaScript::Write (size: 4, repeated: 7) - SHA256: 9b84c614b473bf1d182e62ccb9eff4250f9977d5da975548052d5ead5c442815

                                        < tr >
                                    

#51 JavaScript::Write (size: 141, repeated: 1) - SHA256: 945270f73b9d59a6723ee9c8c60cf97d898fcf5fe1c3cf24bde20a55d275210e

                                        < tr > < td colspan = 7 > < center > < strong > < a href = 'http://atat.ro/'
style = 'text-decoration: none' > October 2017 < /a></strong > < /center></font > < /td></tr >
                                    

#52 JavaScript::Write (size: 24, repeated: 1) - SHA256: a3ba8250ebf2c8e28e99b0cbcb48488777fa3f512e83a7a56930803eb5d35e05

                                        < xmp style = display: none >
                                    

#53 JavaScript::Write (size: 36, repeated: 1) - SHA256: 7c1bf0096ea8317bf604a688479a4e21dcdaa699d788a0fb49cd87fc6c7e6b5f

                                        bordercolor = black > < font color = black >
                                    


HTTP Transactions (66)


Request Response
                                        
                                            GET /2012/05/normal-0-false-false-false-en-us-x-none.html HTTP/1.1 
Host: nretnawati.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.217.22.161
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
Location: http://nretnawati.blogspot.no/2012/05/normal-0-false-false-false-en-us-x-none.html
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 13:42:03 GMT
Expires: Fri, 13 Oct 2017 13:42:03 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 211
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   211
Md5:    796ee359bfcdc67075c3ab1e2fa65332
Sha1:   a9f880bd0f24cad8cca972a92707446a48ab205f
Sha256: 1d31cbb5293beab6590bb5b62c42dfd71a6e748bf8e991a80c4e230630d01b3d
                                        
                                            GET /2012/05/normal-0-false-false-false-en-us-x-none.html HTTP/1.1 
Host: nretnawati.blogspot.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Expires: Fri, 13 Oct 2017 13:42:03 GMT
Date: Fri, 13 Oct 2017 13:42:03 GMT
Cache-Control: private, max-age=0
Last-Modified: Thu, 29 Sep 2016 07:45:28 GMT
Etag: W/"7c82d2639848dc5ea935565a16faaf107f020940cd7fca75f85c8b7d63a9f7a7"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 13986
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   13986
Md5:    9262efbc094a5dceb2a9a471a1ded417
Sha1:   013c908045c376b14318651db7e0f66fe8ba3271
Sha256: bf48e35d634d7ea4701fd55abab19a390fc43aa38b112dd5f073a16f33c521d8
                                        
                                            GET /html/buttons/blogger-powerby-blue.gif HTTP/1.1 
Host: img1.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nretnawati.blogspot.no/2012/05/normal-0-false-false-false-en-us-x-none.html

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 1040
Date: Tue, 10 Oct 2017 18:52:44 GMT
Expires: Tue, 17 Oct 2017 18:52:44 GMT
Last-Modified: Tue, 10 Oct 2017 10:42:59 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 240560


--- Additional Info ---
Magic:  GIF image data, version 89a, 88 x 30
Size:   1040
Md5:    a9760f09d59ff6575e57cecc878c6ade
Sha1:   32fbb7823860c54ac2fb0639399ec7a42ae6bc32
Sha256: 29ac6786094ff0fb6e51d466cd1745d60e2ce3b3d3cf051edf1fd6ccc2ad69cd
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: nretnawati.blogspot.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/x-icon; charset=UTF-8
                                        
Expires: Fri, 13 Oct 2017 13:42:04 GMT
Date: Fri, 13 Oct 2017 13:42:04 GMT
Cache-Control: private, max-age=86400
Last-Modified: Thu, 29 Sep 2016 07:45:28 GMT
Etag: W/"7c82d2639848dc5ea935565a16faaf107f020940cd7fca75f85c8b7d63a9f7a7"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 412
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   412
Md5:    23e5eb1119a7f4d2ab629ccd77a5f84b
Sha1:   f7a5a792e41005ba918551e4416c4bf639ec80ec
Sha256: a0c8d4831f453c316840a502432719f7f7d833bea4a9b59f548e4a1bc2bf0c8a
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 13:42:14 GMT
Expires: Tue, 17 Oct 2017 13:42:14 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    c588b5e7f5749d9d056036ba1cfed2e3
Sha1:   9705100a2d064fd97528af037834bf03768ce199
Sha256: 3a24566634cdc1cc85455d337eca0f8d2b1ebe90deef8ed1b72effa37c5aaee1
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 13:42:14 GMT
Expires: Tue, 17 Oct 2017 13:42:14 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    6bf50ec404fb4a8b4a94be8390d11938
Sha1:   0caaab7704d6221abc5e0342909a4928cee50b1c
Sha256: 63b592179b1e9a528344ce1d430b9479fc55f43420a468ec35aaeaa9dff911cf
                                        
                                            GET /pagead/js/google_top_exp.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nretnawati.blogspot.no/2012/05/normal-0-false-false-false-en-us-x-none.html

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 12 Oct 2017 23:13:33 GMT
Expires: Thu, 26 Oct 2017 23:13:33 GMT
Etag: 13036835877489095579
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 52121


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   67
Md5:    9bbc3ca32ec951a484589ce0e6b4db73
Sha1:   753d6f6183b33b2dee5dde2208fca91c17f5bb13
Sha256: b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
                                        
                                            GET /image?id=1tuSLmdvZdiiBrOtC38yUQWSfJunI7Qt3U67AUD87m-R-DWwO8DPapDVqCHtwNCI9xbJ4&options=w1200 HTTP/1.1 
Host: themes.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nretnawati.blogspot.no/2012/05/normal-0-false-false-false-en-us-x-none.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v1"
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, max-age=86400, no-transform
Content-Disposition: inline;filename="unnamed.png"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 13:42:14 GMT
Server: fife
Content-Length: 98043
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  PNG image, 792 x 792, 8-bit colormap, non-interlaced
Size:   98043
Md5:    6ba66b14dc19c84cfde9e2bb190ef838
Sha1:   aa39e9518733bfb5fbe0aaa1cec2ed975fd36bb3
Sha256: c384279319433550e113fdbfe4637905bf2176ff767600a2b6b878075d914324
                                        
                                            GET /s/cherrycreamsoda/v8/OrD-AUnFcZeeKa6F_c0_WxqwWSV7TiEqKBI7h3gm4xc.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nretnawati.blogspot.no/2012/05/normal-0-false-false-false-en-us-x-none.html
Origin: http://nretnawati.blogspot.no

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 28456
Date: Wed, 11 Oct 2017 08:12:44 GMT
Expires: Thu, 11 Oct 2018 08:12:44 GMT
Last-Modified: Tue, 10 Oct 2017 20:53:35 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 192570


--- Additional Info ---
Magic:  data
Size:   28456
Md5:    cd53f0b4b0e52577b034be9b2588bb74
Sha1:   923de7f6a8cd2249141a73e0f6345fd8360e26d4
Sha256: cc4e29dc147e0afb10b8692e7c0e55098577ca979f638691d90c3be687d77522
                                        
                                            GET /1kt/simple/gradients_light.png HTTP/1.1 
Host: www.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nretnawati.blogspot.no/2012/05/normal-0-false-false-false-en-us-x-none.html

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 403
Date: Tue, 10 Oct 2017 12:40:49 GMT
Expires: Tue, 17 Oct 2017 12:40:49 GMT
Last-Modified: Mon, 09 Oct 2017 16:50:48 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 262885


--- Additional Info ---
Magic:  PNG image, 20 x 1100, 8-bit/color RGBA, non-interlaced
Size:   403
Md5:    4f7de2e6afefb125b1f14fa5cda610ee
Sha1:   57a145f234b504a73f9d55cf39f2231a04719456
Sha256: ecb30886406e3f776ff7bc3834de849944471e626ff148bed2fa389d02866044
                                        
                                            GET /-pYLtjuMFvEs/ToRNfODHJSI/AAAAAAAAAAQ/-3V1Ra7VDlw/s1600/k-on-hearts1.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nretnawati.blogspot.no/2012/05/normal-0-false-false-false-en-us-x-none.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v4"
Expires: Sat, 14 Oct 2017 13:42:14 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="k-on-hearts1.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 13:42:14 GMT
Server: fife
Content-Length: 57374
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   57374
Md5:    7ac4c70a6b6039a99eb3e9362853b21b
Sha1:   dc1553eeb1b130b9c75772bfbd4c5983d8694a62
Sha256: 3828985c5b8b011d6c304a2594cb4d3a40b1a9da3eadf25b124e6925d1fcd05a
                                        
                                            GET /img/logo-16.png HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nretnawati.blogspot.no/2012/05/normal-0-false-false-false-en-us-x-none.html

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 279
Date: Tue, 10 Oct 2017 09:16:32 GMT
Expires: Tue, 17 Oct 2017 09:16:32 GMT
Last-Modified: Mon, 09 Oct 2017 16:50:48 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 275143


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   279
Md5:    5ffecab6c722bb0adc3fce8d83b27993
Sha1:   0e59b05d3da526e82bb4f5d47c5d94e2a318dafb
Sha256: cca664ca16fde285160e80eae6ba4501c27b1dd1ce09aec1e84caa74b5baff53
                                        
                                            GET /gadgets/js/rpc.js?container=blogger&nocache=0&debug=0&c=1&v=89e9ae02ef0b8b6c37aabbfe2eeac27f&sv=10 HTTP/1.1 
Host: www-blogger-opensocial.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nretnawati.blogspot.no/2012/05/normal-0-false-false-false-en-us-x-none.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Expires: Thu, 04 Oct 2018 19:16:33 GMT
Content-Encoding: gzip
Date: Wed, 04 Oct 2017 19:16:33 GMT
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 8501
Server: GSE
Cache-Control: public,max-age=31536000
Age: 757542


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   8501
Md5:    34023e66e57c35d8bb2fca4ab4884ece
Sha1:   9e4a5c784f61466897fde68a67fed0e4727ea01f
Sha256: 9928c4f14090d500786104cecf299445bdac3fd8f2a6fbb22bcdc003b8390505
                                        
                                            GET /-v5nIBr-yYvw/T6ewztX0tBI/AAAAAAAAABk/2lF6sBEU5lk/s80/CIMG1594.JPG HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nretnawati.blogspot.no/2012/05/normal-0-false-false-false-en-us-x-none.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v19"
Expires: Sat, 14 Oct 2017 13:42:15 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="CIMG1594.JPG"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 13:42:15 GMT
Server: fife
Content-Length: 3074
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   3074
Md5:    7b8da9958594303a25b62a05d7a41b50
Sha1:   3bbdf8e831a7953a8888e821bb0c6e49266aa009
Sha256: 7b59633b2fd811dd554acc5a7b1ff3e1e7eb127b102fab74810125acddd4ca69
                                        
                                            GET /gadgets/ifr?url=http://hosting.gmodules.com/ig/gadgets/file/111311123200664007084/calendar.xml&container=blogger&view=default&lang=in&country=ALL&sanitize=0&v=4b0c87b8da3b9f9e&libs=core&parent=nretnawati.blogspot.no/&mid=2 HTTP/1.1 
Host: www-blogger-opensocial.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nretnawati.blogspot.no/2012/05/normal-0-false-false-false-en-us-x-none.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: CP="CAO PSA OUR"
Expires: Sat, 13 Oct 2018 13:42:15 GMT
Cache-Control: private,max-age=31536000
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 13:42:15 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 3872
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   3872
Md5:    fdb59b0991febbdd26be0c0626570db2
Sha1:   5dd406e74e7410ba1bc9a807ab0514e389cb560e
Sha256: a1201033c506335f83f5ed536bfcea9c2cf17701ef006dfa9c813b7cbcb7b7da
                                        
                                            GET /static/v1/widgets/2682751544-widgets.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nretnawati.blogspot.no/2012/05/normal-0-false-false-false-en-us-x-none.html

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 46164
Date: Fri, 06 Oct 2017 01:50:20 GMT
Expires: Sat, 06 Oct 2018 01:50:20 GMT
Last-Modified: Thu, 05 Oct 2017 23:11:42 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 647515
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   46164
Md5:    7035c45baf033ca693de092b42a02000
Sha1:   ec2136e5613226a45279a0b3dfe79a3cf4d8f1a7
Sha256: 5cd86ef91ebf028d0c1673b662e640dbd682cb5f0732ab8998022c2599b591ed
                                        
                                            GET /gadgets/js/core.js?container=blogger&nocache=0&debug=0&c=0&v=b6f0905716eb3c75139b7aa3b49d0994&sv=10&jsload=0 HTTP/1.1 
Host: www-blogger-opensocial.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www-blogger-opensocial.googleusercontent.com/gadgets/ifr?url=http://hosting.gmodules.com/ig/gadgets/file/111311123200664007084/calendar.xml&container=blogger&view=default&lang=in&country=ALL&sanitize=0&v=4b0c87b8da3b9f9e&libs=core&parent=nretnawati.blogspot.no/&mid=2

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Expires: Wed, 26 Sep 2018 19:54:57 GMT
Content-Encoding: gzip
Date: Tue, 26 Sep 2017 19:54:57 GMT
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Cache-Control: public,max-age=31536000
Content-Length: 16191
Age: 1446438


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   16191
Md5:    cf4811cda68d05bbb30021d3ec0cbefe
Sha1:   8434e46e2432d498a9d5991fd15352d276625940
Sha256: 3f855694363ece14da1c27142b1b884fbbb076d6addca45e9e86b790044eab79
                                        
                                            GET /img/icon18_wrench_allbkg.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nretnawati.blogspot.no/2012/05/normal-0-false-false-false-en-us-x-none.html

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 475
Date: Tue, 10 Oct 2017 16:25:35 GMT
Expires: Tue, 17 Oct 2017 16:25:35 GMT
Last-Modified: Tue, 10 Oct 2017 11:46:04 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 249400
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 18 x 18, 8-bit colormap, non-interlaced
Size:   475
Md5:    f617effe6d96c15acfea8b2e8aae551f
Sha1:   6d676af11ad2e84b620cce4d5992b657cb2d8ab6
Sha256: d172d750493be64a7ed84dec1dd2a0d787ba42f78bc694b0858f152c52b6620b
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 13:42:15 GMT
Expires: Tue, 17 Oct 2017 13:42:15 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    63c0c42876b179e938da75d435caf455
Sha1:   2496362f8b1e77dfa75695dc7c63d02afd31ef67
Sha256: e186173a64acae1a86f9725f1f063c69dd7b05c9ffaacf03329212c6411a892a
                                        
                                            GET /about.html HTTP/1.1 
Host: atat.ro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www-blogger-opensocial.googleusercontent.com/gadgets/ifr?url=http://hosting.gmodules.com/ig/gadgets/file/111311123200664007084/calendar.xml&container=blogger&view=default&lang=in&country=ALL&sanitize=0&v=4b0c87b8da3b9f9e&libs=core&parent=nretnawati.blogspot.no/&mid=2

                                         
                                         216.239.38.21
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Location: http://www.atat.ro/about.html
Date: Fri, 13 Oct 2017 13:42:15 GMT
Server: ghs
Content-Length: 226
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  HTML document text
Size:   226
Md5:    3fef4966078fff9e3d2ed14526e9079f
Sha1:   73f5bf1fa28a0e04cee825cc3c9178c473a2a9b8
Sha256: 3cbfc185eecd8fbbd610090740c275d4aef3ca515f12bf00970100d5889351d8

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /js/plusone.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nretnawati.blogspot.no/2012/05/normal-0-false-false-false-en-us-x-none.html

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Timing-Allow-Origin: *
Etag: "29e21a32fd769dc01c0d94f2db17e7cf"
Expires: Fri, 13 Oct 2017 13:42:15 GMT
Date: Fri, 13 Oct 2017 13:42:15 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
Strict-Transport-Security: max-age=31536000
P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Set-Cookie: NID=114=KsRb0fO6x19Gr3QdYRRIXLS2NxDgI16JOhK1Y0dxs9M6Ixyax4r8M0g1mhKxR_eVbviS9975fTk2KYecpfI-71W6ClmmPg0VpSzmMYxIzObaM79fJW_DUAN4LX1itYLn;Domain=.google.com;Path=/;Expires=Sat, 14-Apr-2018 13:42:15 GMT;HttpOnly
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17427
Md5:    89d5f09a383bac73b465b1b0a8e1733a
Sha1:   0dcc58da11d5cda981ba67ca7fb7dc62fcf891ad
Sha256: e95d7a97808644150b98dfca46265228a793c544627416f5db637f49e1edbc95
                                        
                                            GET /about.html HTTP/1.1 
Host: www.atat.ro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www-blogger-opensocial.googleusercontent.com/gadgets/ifr?url=http://hosting.gmodules.com/ig/gadgets/file/111311123200664007084/calendar.xml&container=blogger&view=default&lang=in&country=ALL&sanitize=0&v=4b0c87b8da3b9f9e&libs=core&parent=nretnawati.blogspot.no/&mid=2

                                         
                                         173.194.220.121
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Location: /p/about.html
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 13:42:15 GMT
Expires: Fri, 13 Oct 2017 13:42:15 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 163
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   163
Md5:    883692b5c128ac16c2b102209a8f556c
Sha1:   2eaaafedfd3ccda67974601ca27e820e99e050bf
Sha256: 56bc96f7c8e2c73262c429ba233627737ecb17e9edd7c6391d48d8f8c33f734f

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=plusone,profile/rt=j/sv=1/d=1/ed=1/am=EQ/rs=AGLTcCNNbh8VF4WDJP3ezLfrP1GAkSC5pg/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nretnawati.blogspot.no/2012/05/normal-0-false-false-false-en-us-x-none.html
Cookie: NID=114=KsRb0fO6x19Gr3QdYRRIXLS2NxDgI16JOhK1Y0dxs9M6Ixyax4r8M0g1mhKxR_eVbviS9975fTk2KYecpfI-71W6ClmmPg0VpSzmMYxIzObaM79fJW_DUAN4LX1itYLn

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 65382
Date: Thu, 12 Oct 2017 20:47:32 GMT
Expires: Fri, 12 Oct 2018 20:47:32 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 60883
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   65382
Md5:    69f8905c338b7b1fa66e7ee839368984
Sha1:   32a4bb0bac50f4317abb218f53c16e333f9c5637
Sha256: ced3c1c93d197f2c6905f901f0fdc59a1428019bb3fba1c69dcc3628c3c2a479
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=gapi_iframes_style_slide_menu/exm=auth,gapi_iframes,plusone,profile/rt=j/sv=1/d=1/ed=1/am=EQ/rs=AGLTcCNNbh8VF4WDJP3ezLfrP1GAkSC5pg/cb=gapi.loaded_3 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nretnawati.blogspot.no/2012/05/normal-0-false-false-false-en-us-x-none.html
Cookie: NID=114=KsRb0fO6x19Gr3QdYRRIXLS2NxDgI16JOhK1Y0dxs9M6Ixyax4r8M0g1mhKxR_eVbviS9975fTk2KYecpfI-71W6ClmmPg0VpSzmMYxIzObaM79fJW_DUAN4LX1itYLn

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3568
Date: Fri, 13 Oct 2017 06:38:13 GMT
Expires: Sat, 13 Oct 2018 06:38:13 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 25443
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   3568
Md5:    fa73b05ab9165951610a052a020f89e9
Sha1:   d129fb8fd630dede41888934a4d22eece70572f1
Sha256: 4d53e695722f915df9e5d596449a0ea8bb0de45fb18e865180ff8ceb9f7bf571
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=gapi_iframes/exm=auth,plusone,profile/rt=j/sv=1/d=1/ed=1/am=EQ/rs=AGLTcCNNbh8VF4WDJP3ezLfrP1GAkSC5pg/cb=gapi.loaded_2 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nretnawati.blogspot.no/2012/05/normal-0-false-false-false-en-us-x-none.html
Cookie: NID=114=KsRb0fO6x19Gr3QdYRRIXLS2NxDgI16JOhK1Y0dxs9M6Ixyax4r8M0g1mhKxR_eVbviS9975fTk2KYecpfI-71W6ClmmPg0VpSzmMYxIzObaM79fJW_DUAN4LX1itYLn

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 903
Date: Fri, 13 Oct 2017 06:38:12 GMT
Expires: Sat, 13 Oct 2018 06:38:12 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 25444
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   903
Md5:    86eef041cfa118f615707b21f13dc01d
Sha1:   419a7e1c5a24df06218f48e143468355c87639e3
Sha256: b6fc531de134b544c4d4ff81876e31d2d87fd004f3dd11e54a42d18c9db47324
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=114=KsRb0fO6x19Gr3QdYRRIXLS2NxDgI16JOhK1Y0dxs9M6Ixyax4r8M0g1mhKxR_eVbviS9975fTk2KYecpfI-71W6ClmmPg0VpSzmMYxIzObaM79fJW_DUAN4LX1itYLn

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 13:42:16 GMT
Expires: Tue, 17 Oct 2017 13:42:16 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    0a14338a299b2c02742cd6f9e33596b0
Sha1:   a69501c94549c32d1b3b25358a2305e9d628ea16
Sha256: c3cc36c99da38011eda1ff5ddf24d8367eb22fd9668046f8c4857ddb55e7b82e
                                        
                                            POST / HTTP/1.1 
Host: g.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1390
Content-Transfer-Encoding: binary
Cache-Control: max-age=600118, public, no-transform, must-revalidate
Last-Modified: Fri, 13 Oct 2017 12:19:39 GMT
Expires: Fri, 20 Oct 2017 12:19:39 GMT
Date: Fri, 13 Oct 2017 13:42:16 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1390
Md5:    df996a75bf8bc1fac903d9c242fb0ab5
Sha1:   17022cd9eae9808bff16284ed63cbd895be5976f
Sha256: 1563ba4124e2c93a2f6cea42d53083fac0b22854a7a8b68b317e4e90a60df9c8
                                        
                                            GET /se/0/_/+1/fastbutton?usegapi=1&annotation=inline&width=300&size=medium&source=blogger%3Ablog%3Aplusone&hl=id&origin=http%3A%2F%2Fnretnawati.blogspot.no&url=http%3A%2F%2Fnretnawati.blogspot.com%2F2012%2F05%2Fnormal-0-false-false-false-en-us-x-none.html&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DEQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCNNbh8VF4WDJP3ezLfrP1GAkSC5pg HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nretnawati.blogspot.no/2012/05/normal-0-false-false-false-en-us-x-none.html
Cookie: NID=114=KsRb0fO6x19Gr3QdYRRIXLS2NxDgI16JOhK1Y0dxs9M6Ixyax4r8M0g1mhKxR_eVbviS9975fTk2KYecpfI-71W6ClmmPg0VpSzmMYxIzObaM79fJW_DUAN4LX1itYLn

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Vary: Accept-Encoding
Timing-Allow-Origin: *
Expires: Fri, 13 Oct 2017 13:42:16 GMT
Date: Fri, 13 Oct 2017 13:42:16 GMT
Cache-Control: private, max-age=3600
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4562
Md5:    fb0622bc1bc1edd8a190002be5d3576c
Sha1:   cbe74323bb943a17bae6fcb5d9410dda56986a96
Sha256: b159e18e09715754bb4c8734f4956fdf80255c096c0343b0a65c82f3a54317a1
                                        
                                            GET /feedback/js/help/prod/service/lazy.min.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nretnawati.blogspot.no/2012/05/normal-0-false-false-false-en-us-x-none.html

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 11836
Date: Thu, 12 Oct 2017 18:15:43 GMT
Expires: Thu, 19 Oct 2017 18:15:43 GMT
Last-Modified: Wed, 11 Oct 2017 00:10:28 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 69993
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   11836
Md5:    c5258804f66599a9b214665cebf5704f
Sha1:   7962a226cafb1c0fe74bcac746e0e05640d7dfbd
Sha256: 6fda3d09a7fb2440e36494cd97b5801b68325ce358972ff8e7c1e124b2d2bee1
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=googleapis_client,gapi_iframes_style_common,gapi_iframes_iframer/am=EQ/rt=j/d=1/rs=AGLTcCNNbh8VF4WDJP3ezLfrP1GAkSC5pg HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://apis.google.com/se/0/_/+1/fastbutton?usegapi=1&annotation=inline&width=300&size=medium&source=blogger%3Ablog%3Aplusone&hl=id&origin=http%3A%2F%2Fnretnawati.blogspot.no&url=http%3A%2F%2Fnretnawati.blogspot.com%2F2012%2F05%2Fnormal-0-false-false-false-en-us-x-none.html&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DEQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCNNbh8VF4WDJP3ezLfrP1GAkSC5pg
Cookie: NID=114=KsRb0fO6x19Gr3QdYRRIXLS2NxDgI16JOhK1Y0dxs9M6Ixyax4r8M0g1mhKxR_eVbviS9975fTk2KYecpfI-71W6ClmmPg0VpSzmMYxIzObaM79fJW_DUAN4LX1itYLn

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 44716
Date: Thu, 12 Oct 2017 19:30:47 GMT
Expires: Fri, 12 Oct 2018 19:30:47 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 65489
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   44716
Md5:    95050c9c51441ce7aedcb15c820b1b6f
Sha1:   069e96a92ce71a14833c53bd3516f5f8a2556d91
Sha256: 1da03bc638069e15274f8bcf41401e46837ceea995075934702afc3aa9e5a933
                                        
                                            GET /p/about.html HTTP/1.1 
Host: www.atat.ro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www-blogger-opensocial.googleusercontent.com/gadgets/ifr?url=http://hosting.gmodules.com/ig/gadgets/file/111311123200664007084/calendar.xml&container=blogger&view=default&lang=in&country=ALL&sanitize=0&v=4b0c87b8da3b9f9e&libs=core&parent=nretnawati.blogspot.no/&mid=2

                                         
                                         173.194.220.121
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Expires: Fri, 13 Oct 2017 13:42:16 GMT
Date: Fri, 13 Oct 2017 13:42:16 GMT
Cache-Control: private, max-age=0
Last-Modified: Fri, 13 Oct 2017 13:38:18 GMT
Etag: W/"e86a5903d81b04f32b7d297a1ba23802755d2562d529197ac4164e1ff93080b3"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 50241
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   50241
Md5:    8b975251fca49ffa1e2040d138aa2f69
Sha1:   315c4886299250f32f6313ad31a5ab7da9f4acb3
Sha256: f325f44bde03aae01835d01669da91f92a80f3ec2a1b299baf25f23cc42a5b29

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=auth/exm=plusone,profile/rt=j/sv=1/d=1/ed=1/am=EQ/rs=AGLTcCNNbh8VF4WDJP3ezLfrP1GAkSC5pg/cb=gapi.loaded_1 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nretnawati.blogspot.no/2012/05/normal-0-false-false-false-en-us-x-none.html
Cookie: NID=114=KsRb0fO6x19Gr3QdYRRIXLS2NxDgI16JOhK1Y0dxs9M6Ixyax4r8M0g1mhKxR_eVbviS9975fTk2KYecpfI-71W6ClmmPg0VpSzmMYxIzObaM79fJW_DUAN4LX1itYLn

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 18760
Date: Thu, 12 Oct 2017 21:00:00 GMT
Expires: Fri, 12 Oct 2018 21:00:00 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 60136
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   18760
Md5:    aaf77124f3f12f2e5fc6665f45c02428
Sha1:   32445929c85c15c4ca533ae406e5c82fd7138764
Sha256: f2babb70c2a36cbee1400413db864001ea303523855b01e0b19b126032f5b7bd
                                        
                                            GET /dyn-css/authorization.css?targetBlogID=4418609707762801235&zx=0414d237-2d13-4123-91a0-f490345a93fb HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/css; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: private, max-age=1800
Pragma: no-cache
Expires: Fri, 13 Oct 2017 13:42:16 GMT
Date: Fri, 13 Oct 2017 13:42:16 GMT
Last-Modified: Fri, 13 Oct 2017 13:42:16 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   21
Md5:    b9afc501fc43fbea335a2dc5d43263a1
Sha1:   7290a2dd6afbf39ecfc35b52dfb32a38fc222994
Sha256: d6e425ca7840c0ab6f26f5fc2822a47e26b4a8bbd104468a9c185bc132b8662f
                                        
                                            GET /external_hosted/clipboardjs/clipboard.min.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4096
Date: Fri, 13 Oct 2017 13:42:16 GMT
Expires: Fri, 13 Oct 2017 13:42:16 GMT
Cache-Control: public, max-age=0
Last-Modified: Fri, 12 May 2017 18:45:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4096
Md5:    6be7bb32519d4f901aef3cf3ebd48299
Sha1:   5fc67ff7b82dcea664ce13cdef7965554f51cd9f
Sha256: 83dd577df59e9c5fd07b37fcc5c56764503d480de1dd10b783fc8bceef5ade45
                                        
                                            GET /ae-game/thirdparty/show-window/index.js HTTP/1.1 
Host: i.alicdn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         104.123.141.37
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Last-Modified: Thu, 06 Apr 2017 02:42:41 GMT
SERVED-FROM: 80.239.159.71
Server: Tengine
Content-Security-Policy-Report-Only: style-src 'self' 'unsafe-inline' *.alibaba.com *.alisoft.com *.aliyun.com *.alipay.com *.aliexpress.com *.taobao.com *.taobao.net https://assets.alicdn.com https://login.alibaba.com *.alicdn.com *.tbcdn.com *.tbcdn.cn *.aliimg.com *.aliunicorn.com *.1688.com https://*.1688.com *.taobaocdn.com *.taobaocdn.cn *.mmstat.com *.alimama.com *.alimama.cn *.amap.com *.meitipu.com yui.yahooapis.com *.amap.com http://localhost.wwbizsrv.alibaba.com:4012 http://localhost.wwbizsrv.alibaba.com:4812 https://localhost.wwbizsrv.alibaba.com:4013 https://localhost.wwbizsrv.alibaba.com:4813 *.cnzz.com *.cnzz.net www.google.com apis.google.com translate.googleapis.com translate.google.com widgets.twimg.com platform.twitter.com twitter.com;img-src 'self' data: *.alibaba.com *.alisoft.com *.aliyun.com *.alipay.com *.aliexpress.com *.taobao.com *.taobao.net https://assets.alicdn.com https://login.alibaba.com *.alicdn.com *.tbcdn.com *.tbcdn.cn *.aliimg.com *.aliunicorn.com *.1688.com https://*.1688.com *.taobaocdn.com *.taobaocdn.cn *.mmstat.com *.alimama.com *.alimama.cn *.amap.com *.meitipu.com yui.yahooapis.com *.amap.com http://localhost.wwbizsrv.alibaba.com:4012 http://localhost.wwbizsrv.alibaba.com:4812 https://localhost.wwbizsrv.alibaba.com:4013 https://localhost.wwbizsrv.alibaba.com:4813 *.cnzz.com *.cnzz.net www.google.com apis.google.com translate.googleapis.com translate.google.com widgets.twimg.com platform.twitter.com twitter.com www.google-analytics.com www.googleadservices.com googleads.g.doubleclick.net stats.g.doubleclick.net;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.alibaba.com *.alisoft.com *.aliyun.com *.alipay.com *.aliexpress.com *.taobao.com *.taobao.net https://assets.alicdn.com https://login.alibaba.com *.alicdn.com *.tbcdn.com *.tbcdn.cn *.aliimg.com *.aliunicorn.com *.1688.com https://*.1688.com *.taobaocdn.com *.taobaocdn.cn *.mmstat.com *.alimama.com *.alimama.cn *.amap.com *.meitipu.com yui.yahooapis.com *.amap.com http://localhost.wwbizsrv.alibaba.com:4012 http://localhost.wwbizsrv.alibaba.com:4812 https://localhost.wwbizsrv.alibaba.com:4013 https://localhost.wwbizsrv.alibaba.com:4813 *.cnzz.com *.cnzz.net www.google.com apis.google.com translate.googleapis.com translate.google.com widgets.twimg.com platform.twitter.com twitter.com www.google-analytics.com www.googleadservices.com googleads.g.doubleclick.net stats.g.doubleclick.net;;report-uri //pointman.alibaba.com/csp?app=default
Content-Length: 45306
Content-Encoding: gzip
Cache-Control: max-age=104
Expires: Fri, 13 Oct 2017 13:44:00 GMT
Date: Fri, 13 Oct 2017 13:42:16 GMT
Connection: keep-alive
Vary: Accept-Encoding
Network_Info: NO_OSLO_5381
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: FW_IP
FW_IP: 104.123.141.37


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   45306
Md5:    fa3d7a2d1c82f90c904ab5459140a03c
Sha1:   b6005695b93b6543db9da30414f776fa491405f7
Sha256: 93a22f68d870a7b8bc9bc2d6d1595184866e632ff3b3382109b7ea775120614d
                                        
                                            GET /s/lora/v11/4A-myfZX6oDr9CtSTkTGig.ttf HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html
Origin: http://www.atat.ro

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: font/ttf
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 32820
Date: Wed, 11 Oct 2017 18:50:38 GMT
Expires: Thu, 11 Oct 2018 18:50:38 GMT
Last-Modified: Wed, 11 Oct 2017 18:25:02 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 154298


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   32820
Md5:    1e949c1bcc6d19d2a17963cc71c9e020
Sha1:   c6899f6602dd0055769507281d9c5bc431b43dfb
Sha256: bdf2208b9221dbad92fad3f05a8e932d4e2ecef0025b10f2e1365e2e5043f44a
                                        
                                            GET /s/opensans/v15/PRmiXeptR36kaC0GEAetxi8cqLH4MEiSE0ROcU-qHOA.ttf HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html
Origin: http://www.atat.ro

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: font/ttf
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 17308
Date: Wed, 11 Oct 2017 21:53:06 GMT
Expires: Thu, 11 Oct 2018 21:53:06 GMT
Last-Modified: Wed, 11 Oct 2017 21:49:51 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 143350


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17308
Md5:    9d34e4aa2a37c8388ddcd59b31eb2735
Sha1:   c5da1a7f1fd2ddfdbf20d27d1c514e2a59bfd06c
Sha256: 3e996416e2906feb5e4dcdf1e0e5798efcabca864790b72d3493a15f4709de52
                                        
                                            GET /s/opensans/v15/MTP_ySUJH_bn48VBG8sNSonF5uFdDttMLvmWuJdhhgs.ttf HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html
Origin: http://www.atat.ro

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: font/ttf
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 18442
Date: Wed, 11 Oct 2017 21:53:06 GMT
Expires: Thu, 11 Oct 2018 21:53:06 GMT
Last-Modified: Wed, 11 Oct 2017 21:49:51 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 143350


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   18442
Md5:    e48885ccd8f641f3fdbe08b235a71780
Sha1:   3ee38a988b067234ee971da4e232c8af29333fdf
Sha256: 1c1efc12fb54ef0c3632bf56045006029bd04e05c615dbff2322d8eafc4be055
                                        
                                            GET /ajax/libs/jquery/3.2.1/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         64.233.161.95
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 30306
Date: Thu, 12 Oct 2017 03:01:52 GMT
Expires: Fri, 12 Oct 2018 03:01:52 GMT
Last-Modified: Fri, 24 Mar 2017 20:55:54 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 124825


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   30306
Md5:    fc3fc31e5e7c0933dc18e562c1c071bf
Sha1:   a44c31323f6bd29e583cc585036e6eb39f7014a6
Sha256: ddad766fb94b23efeb5574cdedc5e8446d496fb91bd0b08cd80be212e001055d
                                        
                                            GET /s/opensans/v15/k3k702ZOKiLJc3WVjuplzInF5uFdDttMLvmWuJdhhgs.ttf HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html
Origin: http://www.atat.ro

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: font/ttf
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 18670
Date: Wed, 11 Oct 2017 21:53:06 GMT
Expires: Thu, 11 Oct 2018 21:53:06 GMT
Last-Modified: Wed, 11 Oct 2017 21:49:43 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 143351


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   18670
Md5:    b9ebbca69dfcb94dd85e370c54de6403
Sha1:   d8da7728fb8441c9613b3bb9069b13a6650aa037
Sha256: c75a888229ad2a7583f66d3489400b302d05e0fa7248d8195c9cceebe25b1d3d
                                        
                                            GET /s/opensans/v15/cJZKeOuBrn4kERxqtaUH3aCWcynf_cDxXwCLxiixG1c.ttf HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html
Origin: http://www.atat.ro

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: font/ttf
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 17857
Date: Wed, 11 Oct 2017 21:53:06 GMT
Expires: Thu, 11 Oct 2018 21:53:06 GMT
Last-Modified: Sat, 07 Oct 2017 03:46:26 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 143351


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17857
Md5:    5a3d8c6b3a13e96eca413685de0b0478
Sha1:   3cb1e827b14625e1e3469c694c758718c3a0e058
Sha256: 57f3aa4e0a629160d5ab710a4e87f4d499b3291111ef958701051f971225e36e
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=114=KsRb0fO6x19Gr3QdYRRIXLS2NxDgI16JOhK1Y0dxs9M6Ixyax4r8M0g1mhKxR_eVbviS9975fTk2KYecpfI-71W6ClmmPg0VpSzmMYxIzObaM79fJW_DUAN4LX1itYLn

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 13:42:17 GMT
Expires: Tue, 17 Oct 2017 13:42:17 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    a352c8963f53bbddb3c2ee43ae62b276
Sha1:   8553e71b2e4c06afea3bf11df2ae53b03e24cc8b
Sha256: 0957480062e48be7163da3a9ec8f5598b368cede5b8822753f40ae78c03b5c9a
                                        
                                            GET /js/cookiechoices.js HTTP/1.1 
Host: www.atat.ro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         173.194.220.121
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1949
Date: Tue, 10 Oct 2017 04:51:35 GMT
Expires: Tue, 17 Oct 2017 04:51:35 GMT
Last-Modified: Tue, 21 Mar 2017 02:50:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 291042


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   1949
Md5:    55617d5777b77daabe42b9ba8f79cf89
Sha1:   583546c7106a17b990de20c5a571dc773919150c
Sha256: 0b64080ab3c3e668b191e288dda405b7c4fdf6819d87a499daec75093dccef6e
                                        
                                            GET /js/300/addthis_widget.js HTTP/1.1 
Host: s7.addthis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         104.16.23.35
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Date: Fri, 13 Oct 2017 13:42:17 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 25 Sep 2017 19:48:20 GMT
Etag: "570d3-55a08d72f6900"
Vary: Accept-Encoding
Content-Encoding: gzip
Timing-Allow-Origin: *
Surrogate-Key: client_dist
Edge-Cache-Tag: client_dist
Cache-Control: public, no-check, max-age=600
CF-Cache-Status: HIT
X-Host: s7.addthis.com
X-Distribution: 99
Server: cloudflare-nginx
CF-RAY: 3ad2b8a792344261-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   113848
Md5:    6035f3674af9bb2dbad6f7f1c6375ebc
Sha1:   3aa29295e4216995f86dab2254bb76cfa19de6e5
Sha256: 783963a701ad4e463f4eacd4befca7c81b831ad2aec2bb6d8eeaf921625c4901
                                        
                                            GET /exp/blank.html HTTP/1.1 
Host: adservice.aliexpress.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         198.11.132.250
HTTP/1.1 200
Content-Type: text/html
                                        
Date: Fri, 13 Oct 2017 13:42:17 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: ali_apache_id=11.227.117.28.1507902137611.199422.6; path=/; domain=.aliexpress.com; expires=Wed, 30-Nov-2084 01:01:01 GMT xman_us_f=x_l=0; Domain=.aliexpress.com; Expires=Wed, 31-Oct-2085 16:56:24 GMT; Path=/ acs_usuc_t=x_csrf=159qo3ezos3w6&acs_rt=b3d4249a2c044b509e4e0a54984a497a; Domain=.aliexpress.com; Path=/ xman_t=l+yvXZQ+LaRnJSEyzbInzzp0fHMDtr5i9/WbO5idUVDrBB8IKc/dlEIIyFlRlAV5; Domain=.aliexpress.com; Path=/; HttpOnly xman_f=WbNRa8IQ7UI08/RmOlKtJXvsGEV4/fJmaJbBN0QNhk0maG3zfHZWKmd+Jc5riIh4oSUdNfjocGSPlIB3Buvs5uVBKkJwqMsOoI8KKFfU8FQk+WXW2s1n2w==; Domain=.aliexpress.com; Expires=Wed, 31-Oct-2085 16:56:24 GMT; Path=/; HttpOnly XSRF-TOKEN=110e5c9f-c49c-44ac-91d8-9b8845145365;path=/;HttpOnly
P3P: CP="CAO PSA OUR"
X-Application-Context: affiliatedynamicwindow:prod:7001
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Content-Encoding: gzip
Server: Tengine/Aserver
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   404
Md5:    9ae7f08890d61f1d7310ead792a272ca
Sha1:   fee7e79b669b705d4596c9429cc6ed43a030e360
Sha256: 783f075f56c835dd47900297c8d1bf9d1d6ce2ad04cc690177cf96225fd38845
                                        
                                            GET /o/oauth2/postmessageRelay?parent=http%3A%2F%2Fnretnawati.blogspot.no&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DEQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCNNbh8VF4WDJP3ezLfrP1GAkSC5pg HTTP/1.1 
Host: accounts.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nretnawati.blogspot.no/2012/05/normal-0-false-false-false-en-us-x-none.html
Cookie: NID=114=KsRb0fO6x19Gr3QdYRRIXLS2NxDgI16JOhK1Y0dxs9M6Ixyax4r8M0g1mhKxR_eVbviS9975fTk2KYecpfI-71W6ClmmPg0VpSzmMYxIzObaM79fJW_DUAN4LX1itYLn

                                         
                                         172.217.22.173
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Expires: Sat, 14 Oct 2017 13:42:17 GMT
Date: Fri, 13 Oct 2017 13:42:17 GMT
Cache-Control: public, max-age=86400
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   364
Md5:    190bb798a698c31ef86c071ebdccceca
Sha1:   b581bbb73876669119947ae82d3e38c9743f63d2
Sha256: 2e996d4c928bb33d80b29fbac7b13420fb4d95db0280cb86563f683cea358a9d
                                        
                                            GET /obtain_ads.do?callback=jQuery1113036717569482707535_1507902137072&proxyurl=&publisherid=&memberid=&wid=580086&size=468x60&shortkey=JeqJ2bMvN&lang=en-US&ip=&url=http%3A%2F%2Fwww.atat.ro%2Fp%2Fabout.html&ref=http%3A%2F%2Fwww-blogger-opensocial.googleusercontent.com%2Fgadgets%2Fifr%3Furl%3Dhttp%3A%2F%2Fhosting.gmodules.com%2Fig%2Fgadgets%2Ffile%2F111311123200664007084%2Fcalendar.xml%26container%3Dblogger%26view%3Ddefault%26lang%3Din%26country%3DALL%26sanitize%3D0%26v%3D4b0c87b8da3b9f9e%26libs%3Dcore%26parent%3Dnretnawati.blogspot.no%2F%26mid%3D2&custom=&browser=firefox+3.6.13&screen=234x60&cookieid=&version=1&ct=Disclaimer&_=1507902137073 HTTP/1.1 
Host: adservice.aliexpress.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         198.11.132.250
HTTP/1.1 200
Content-Type: application/javascript;charset=UTF-8
                                        
Date: Fri, 13 Oct 2017 13:42:17 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: ali_apache_id=10.182.250.178.1507902137608.214564.9; path=/; domain=.aliexpress.com; expires=Wed, 30-Nov-2084 01:01:01 GMT xman_us_f=x_l=0; Domain=.aliexpress.com; Expires=Wed, 31-Oct-2085 16:56:24 GMT; Path=/ acs_usuc_t=x_csrf=1brwkjjuvx6_z&acs_rt=fcc56336c0904f719cd851184b208e16; Domain=.aliexpress.com; Path=/ xman_t=kffjZgzex5lXU/fIiQfWCeB425pISi0wYLapds29I2sDjouIO+rOJpF1U2qlyLgc; Domain=.aliexpress.com; Path=/; HttpOnly xman_f=/kuB760Ke73DlWZJlOE+reacu0Twt2DZOdpkfZP4MXqwOL0vbvKOTl9kkwMITAQ+MzrN38sNO09UQCa1LVR/YlCm49GbECa2AaHBq+RNLIY4qscrD9K+Kw==; Domain=.aliexpress.com; Expires=Wed, 31-Oct-2085 16:56:24 GMT; Path=/; HttpOnly XSRF-TOKEN=c01443b9-420e-4314-85da-1d9fa8bd5b03;path=/;HttpOnly
P3P: CP="CAO PSA OUR"
X-Application-Context: affiliatedynamicwindow:prod:7001
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Content-Encoding: gzip
Server: Tengine/Aserver
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2281
Md5:    2a394408fd21b47095f6bb10e9adfd73
Sha1:   6a2d2c12549c822a968ff1b67df88a906807d8ff
Sha256: c0ce139ceab7ab7a63bb51ec48949be8cd5f30b73e2a2b567283d9101620d9ea
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 108
Content-Type: application/ocsp-request

                                         
                                         72.167.239.239
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 13:42:17 GMT
Server: Apache
Content-Transfer-Encoding: Binary
Cache-Control: max-age=120899, public, no-transform, must-revalidate
Last-Modified: Fri, 13 Oct 2017 13:03:20 GMT
Expires: Sun, 15 Oct 2017 01:03:20 GMT
Etag: "1129fa8d4373bd17ff3e6bcfb590f0fdcde4feaf"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
Content-Length: 1777
Connection: close


--- Additional Info ---
Magic:  data
Size:   1777
Md5:    a1f46dc68e8d3bf36faac4ba8350ef9c
Sha1:   1129fa8d4373bd17ff3e6bcfb590f0fdcde4feaf
Sha256: fa5c1caaccab31e9015aa93870748840e486e71b9f95a498571eba45af1ad466
                                        
                                            GET /blogblog/data/res/1782006661-rockpool_compiled.js HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 45717
Date: Tue, 10 Oct 2017 05:37:30 GMT
Expires: Tue, 17 Oct 2017 05:37:30 GMT
Last-Modified: Tue, 10 Oct 2017 05:05:55 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 288287
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   45717
Md5:    6ec8997cc9a610abc45b3b97081a825c
Sha1:   f03afb1257eaf326d5a5f8644775fa61e64081d3
Sha256: 207ab1419f8d8c7d8f38db38bbc875a04e74d9a824237d571a5f4467e614d075
                                        
                                            GET /js/rpc:shindig_random.js?onload=init HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://accounts.google.com/o/oauth2/postmessageRelay?parent=http%3A%2F%2Fnretnawati.blogspot.no&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DEQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCNNbh8VF4WDJP3ezLfrP1GAkSC5pg
Cookie: NID=114=KsRb0fO6x19Gr3QdYRRIXLS2NxDgI16JOhK1Y0dxs9M6Ixyax4r8M0g1mhKxR_eVbviS9975fTk2KYecpfI-71W6ClmmPg0VpSzmMYxIzObaM79fJW_DUAN4LX1itYLn

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Timing-Allow-Origin: *
Etag: "2130ed1a4b123bcbd69f1c0c328e1545"
Expires: Fri, 13 Oct 2017 13:42:17 GMT
Date: Fri, 13 Oct 2017 13:42:17 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   5458
Md5:    193399319d35a3a8c2b5b3d7d30725f6
Sha1:   93b88a6a1145ac145cdcf199f56716b8a68482c0
Sha256: e3e820d42249c32ed840cd8013fbb634ab3638de4e38eb1c1f36c364ff88201a
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=114=KsRb0fO6x19Gr3QdYRRIXLS2NxDgI16JOhK1Y0dxs9M6Ixyax4r8M0g1mhKxR_eVbviS9975fTk2KYecpfI-71W6ClmmPg0VpSzmMYxIzObaM79fJW_DUAN4LX1itYLn

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 13:42:18 GMT
Expires: Tue, 17 Oct 2017 13:42:18 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    4a36c3a0f62e5090abbee327b6c5a777
Sha1:   37a0315fbdf892194cc735b14d8f024a0b196de5
Sha256: d5012467277681fb71e08741691463135ac7d35f532f412c680cd7a031658b2a
                                        
                                            GET /js/link-converter.js HTTP/1.1 
Host: cdn.adf.ly
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         104.20.0.4
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Fri, 13 Oct 2017 13:42:18 GMT
Content-Length: 11963
Connection: keep-alive
Set-Cookie: __cfduid=d8cb488ba030a0a2d4afe1245b50569ba1507902138; expires=Sat, 13-Oct-18 13:42:18 GMT; path=/; domain=.adf.ly; HttpOnly
Cache-Control: public, max-age=604800
Expires: Fri, 20 Oct 2017 13:42:18 GMT
Etag: "7b8e-59cb9e8c-67066fa7126fe724"
Last-Modified: Wed, 27 Sep 2017 12:50:20 GMT
Content-Encoding: gzip
Vary: Accept-Encoding
X-Turbo-Charged-By: LiteSpeed
CF-Cache-Status: HIT
Accept-Ranges: bytes
Server: cloudflare-nginx
CF-RAY: 3ad2b8ab0ee342b5-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   11963
Md5:    2af395b0d51f4c8caf65e100035706e7
Sha1:   f440f35a825f8e54be1fb7e5b9798f93175df75d
Sha256: 8868abbcc0b9780471640a599a9aae6383355fd297cd2cd4aad278f394191975
                                        
                                            GET /ServiceLogin?continue=https://www.blogger.com/followers.g?blogID%3D3693781067608487807%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM1NjU2NTYiByNjYjAwYjMqByNmZmY0ZmEyByMwMDAwMDA6ByM1NjU2NTZCByNjYjAwYjNKByNhMWExYTFSByNjYjAwYjNaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D7501697523718783921%26origin%3Dhttp://nretnawati.blogspot.no/%26usegapi%3D1%26jsh%3Dm;/_/scs/apps-static/_/js/k%253Doz.gapi.no.m2rCJFJyJGQ.O/m%253D__features__/am%253DEQ/rt%253Dj/d%253D1/rs%253DAGLTcCNNbh8VF4WDJP3ezLfrP1GAkSC5pg%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D3693781067608487807%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM1NjU2NTYiByNjYjAwYjMqByNmZmY0ZmEyByMwMDAwMDA6ByM1NjU2NTZCByNjYjAwYjNKByNhMWExYTFSByNjYjAwYjNaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D7501697523718783921%26origin%3Dhttp://nretnawati.blogspot.no/%26usegapi%3D1%26jsh%3Dm;/_/scs/apps-static/_/js/k%253Doz.gapi.no.m2rCJFJyJGQ.O/m%253D__features__/am%253DEQ/rt%253Dj/d%253D1/rs%253DAGLTcCNNbh8VF4WDJP3ezLfrP1GAkSC5pg%26bpli%3D1&passive=true&go=true HTTP/1.1 
Host: accounts.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nretnawati.blogspot.no/2012/05/normal-0-false-false-false-en-us-x-none.html
Cookie: NID=114=KsRb0fO6x19Gr3QdYRRIXLS2NxDgI16JOhK1Y0dxs9M6Ixyax4r8M0g1mhKxR_eVbviS9975fTk2KYecpfI-71W6ClmmPg0VpSzmMYxIzObaM79fJW_DUAN4LX1itYLn

                                         
                                         172.217.22.173
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
X-Frame-Options: DENY
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 13 Oct 2017 13:42:18 GMT
Location: https://www.blogger.com/followers.g?blogID=3693781067608487807&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM1NjU2NTYiByNjYjAwYjMqByNmZmY0ZmEyByMwMDAwMDA6ByM1NjU2NTZCByNjYjAwYjNKByNhMWExYTFSByNjYjAwYjNaC3RyYW5zcGFyZW50&pageSize=21&postID=7501697523718783921&origin=http%3A%2F%2Fnretnawati.blogspot.no%2F&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DEQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCNNbh8VF4WDJP3ezLfrP1GAkSC5pg&bpli=1
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Security-Policy: script-src 'unsafe-inline' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Set-Cookie: GAPS=1:Ge1e6ROuHpi6RYnviuUqXhfAkT9Qeg:sOEHWnIyQFgmLQIe;Path=/;Expires=Sun, 13-Oct-2019 13:42:18 GMT;Secure;HttpOnly;Priority=HIGH
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   504
Md5:    33c4b95dc88d3f3c7d780e114a60fcf4
Sha1:   95b903c82186b9248ea020a55675a16a811362e0
Sha256: 989de1a070c52fdcdc166f122123a63d4bb06fb6c8d61a269597a83fd29478ba
                                        
                                            GET /-0-nPO9NAgyw/WQLqmqQ3S7I/AAAAAAAAfZc/76QjD42E_tkoJBXB56Tptg3I5M_QSODXQCLcB/w600-h400-p-k-no-nu/likes.png HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v7d98"
Expires: Sat, 14 Oct 2017 05:45:44 GMT
Content-Disposition: inline;filename="likes.png"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 12:42:46 GMT
Server: fife
Content-Length: 56554
X-XSS-Protection: 1; mode=block
Age: 3572
Cache-Control: public, max-age=86400, no-transform
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 400 x 266, 8-bit/color RGB, non-interlaced
Size:   56554
Md5:    7183ee09b2bcd14dcd3a2dd405bd8db7
Sha1:   3526011f5bd7f805ab56652195c5f90d8a861875
Sha256: 0e369647d27daa83eb0995cba679fcb4660981c29998d457f08e82b7c5548307
                                        
                                            GET /accounts/o/971028622-postmessagerelay.js HTTP/1.1 
Host: ssl.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://accounts.google.com/o/oauth2/postmessageRelay?parent=http%3A%2F%2Fnretnawati.blogspot.no&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DEQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCNNbh8VF4WDJP3ezLfrP1GAkSC5pg

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4512
Date: Thu, 12 Oct 2017 18:15:26 GMT
Expires: Fri, 12 Oct 2018 18:15:26 GMT
Last-Modified: Wed, 11 Oct 2017 22:34:08 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 70013
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4512
Md5:    c41dc9da703c13b923ba04f7f4dd9137
Sha1:   0c4fc1bdf44857be1104d9eb4c87fcfa88b6a066
Sha256: b0161a7902e960e4de936ed83bfcc4af8b6063d5503ca13edd7eea8f86af03a9
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=rpc,shindig_random/rt=j/sv=1/d=1/ed=1/am=EQ/rs=AGLTcCNNbh8VF4WDJP3ezLfrP1GAkSC5pg/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://accounts.google.com/o/oauth2/postmessageRelay?parent=http%3A%2F%2Fnretnawati.blogspot.no&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DEQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCNNbh8VF4WDJP3ezLfrP1GAkSC5pg
Cookie: NID=114=KsRb0fO6x19Gr3QdYRRIXLS2NxDgI16JOhK1Y0dxs9M6Ixyax4r8M0g1mhKxR_eVbviS9975fTk2KYecpfI-71W6ClmmPg0VpSzmMYxIzObaM79fJW_DUAN4LX1itYLn

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 16477
Date: Thu, 12 Oct 2017 19:30:48 GMT
Expires: Fri, 12 Oct 2018 19:30:48 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 65491
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   16477
Md5:    456c107e71e6baabd35161f27bac6414
Sha1:   260083dd624f008fc37e8b3b450e01408e3c16b5
Sha256: e686866e5db4c98de53f2fe74970d3146da36eb3a0ce4b14ba2f6e583cbbe5cc
                                        
                                            GET /zFdxGE77vvD2w5xHy6jkVuElKv-U9_9qLkRYK8OnbDeJPtjSZ82UPq5w6hJ-SA=w35 HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v1"
Expires: Sat, 14 Oct 2017 12:46:00 GMT
Content-Disposition: inline;filename="unnamed.png"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 12:46:00 GMT
Server: fife
Content-Length: 1758
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 3379
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 35 x 35, 8-bit/color RGBA, non-interlaced
Size:   1758
Md5:    1399cebd5450ed86eb2e3ece87ec8233
Sha1:   8b9ae975e930640a47cd39f9495c41810eb34abd
Sha256: 9249f958fddd3a64459c5422d64f6bcbc967a8007fa6b40566c93ed05dc7fb86
                                        
                                            GET /cpm.jpg?t=1507902139160&Short_key=JeqJ2bMvN&scm=1007.12506.84939.0&Exp_ID=580086150790213778604838&Object_type=item&Object_id=32716265317,32702383727,32785164603,32812986903,32825854006,32737559733,32731569451,32819138937,32790326857,32596327081,32795257894,32796999788&memberId=null&cookieId=&country=NO&language=en&verison=1&windowSize=468x60&isCaCompositor=N&isComple=N&isCookieCart=N&isCookie=N&isRealTimeCookie=N&isCountry=N&isMem=Y&isMemCart=N&isSite=N&isPage=N HTTP/1.1 
Host: adservice.aliexpress.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html
Cookie: ali_apache_id=10.182.250.178.1507902137608.214564.9; xman_us_f=x_l=0; acs_usuc_t=x_csrf=1brwkjjuvx6_z&acs_rt=fcc56336c0904f719cd851184b208e16; xman_t=kffjZgzex5lXU/fIiQfWCeB425pISi0wYLapds29I2sDjouIO+rOJpF1U2qlyLgc; xman_f=/kuB760Ke73DlWZJlOE+reacu0Twt2DZOdpkfZP4MXqwOL0vbvKOTl9kkwMITAQ+MzrN38sNO09UQCa1LVR/YlCm49GbECa2AaHBq+RNLIY4qscrD9K+Kw==; XSRF-TOKEN=c01443b9-420e-4314-85da-1d9fa8bd5b03

                                         
                                         198.11.132.250
HTTP/1.1 200
Content-Type: image/jpeg;charset=UTF-8
                                        
Date: Fri, 13 Oct 2017 13:42:19 GMT
Content-Length: 7
Connection: keep-alive
Set-Cookie: acs_usuc_t=x_csrf=1brwkjjuvx6_z&acs_rt=fcc56336c0904f719cd851184b208e16; Domain=.aliexpress.com; Path=/
P3P: CP="CAO PSA OUR"
X-Application-Context: affiliatedynamicwindow:prod:7001
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Server: Tengine/Aserver
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   7
Md5:    260ca9dd8a4577fc00b7bd5810298076
Sha1:   53a5687cb26dc41f2ab4033e97e13adefd3740d6
Sha256: aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27
                                        
                                            GET /post_ads_position.do?cmpParams=Short_key%3DJeqJ2bMvN%26scm%3D1007.12506.84939.0%26Exp_ID%3D580086150790213778604838%26Object_type%3Ditem%26Object_id%3D32716265317%2C32702383727%2C32785164603%2C32812986903%2C32825854006%2C32737559733%2C32731569451%2C32819138937%2C32790326857%2C32596327081%2C32795257894%2C32796999788%26memberId%3Dnull%26cookieId%3D%26country%3DNO%26language%3Den%26verison%3D1%26windowSize%3D468x60%26isCaCompositor%3DN%26isComple%3DN%26isCookieCart%3DN%26isCookie%3DN%26isRealTimeCookie%3DN%26isCountry%3DN%26isMem%3DY%26isMemCart%3DN%26isSite%3DN%26isPage%3DN&exposureId=580086150790213778604838&shortkey=JeqJ2bMvN&dwidth=254&dheight=4021&pleft=0&ptop=1498&t=1507902139158 HTTP/1.1 
Host: adservice.aliexpress.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.atat.ro/p/about.html
Cookie: ali_apache_id=10.182.250.178.1507902137608.214564.9; xman_us_f=x_l=0; acs_usuc_t=x_csrf=1brwkjjuvx6_z&acs_rt=fcc56336c0904f719cd851184b208e16; xman_t=kffjZgzex5lXU/fIiQfWCeB425pISi0wYLapds29I2sDjouIO+rOJpF1U2qlyLgc; xman_f=/kuB760Ke73DlWZJlOE+reacu0Twt2DZOdpkfZP4MXqwOL0vbvKOTl9kkwMITAQ+MzrN38sNO09UQCa1LVR/YlCm49GbECa2AaHBq+RNLIY4qscrD9K+Kw==; XSRF-TOKEN=c01443b9-420e-4314-85da-1d9fa8bd5b03

                                         
                                         198.11.132.250
HTTP/1.1 200
Content-Type: application/javascript;charset=UTF-8
                                        
Date: Fri, 13 Oct 2017 13:42:19 GMT
Content-Length: 36
Connection: keep-alive
Set-Cookie: acs_usuc_t=x_csrf=1brwkjjuvx6_z&acs_rt=fcc56336c0904f719cd851184b208e16; Domain=.aliexpress.com; Path=/
P3P: CP="CAO PSA OUR"
X-Application-Context: affiliatedynamicwindow:prod:7001
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Server: Tengine/Aserver
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   36
Md5:    952d6ef9c2d0bc2e86c32d4e463a23a1
Sha1:   3af1032ebdd224d3409fd816fa9826b833e78ef9
Sha256: 4073d690ab3aea580ebf5720df9ae1c716aeefecd82bd3137f933fb22ebca7e2
                                        
                                            GET /followers.g?blogID=3693781067608487807&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM1NjU2NTYiByNjYjAwYjMqByNmZmY0ZmEyByMwMDAwMDA6ByM1NjU2NTZCByNjYjAwYjNKByNhMWExYTFSByNjYjAwYjNaC3RyYW5zcGFyZW50&pageSize=21&postID=7501697523718783921&origin=http%3A%2F%2Fnretnawati.blogspot.no%2F&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DEQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCNNbh8VF4WDJP3ezLfrP1GAkSC5pg&bpli=1 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nretnawati.blogspot.no/2012/05/normal-0-false-false-false-en-us-x-none.html

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 13 Oct 2017 13:42:19 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   1555
Md5:    7882a93609090cd71c646c9fdc689503
Sha1:   559c5b5b2642479d759232fa229e47c97532340f
Sha256: 9d136546ce951e88542a9c862399ebc92f5364b5512a5d55a4976b9b93ff8e96
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=gapi_iframes,gapi_iframes_style_common/exm=plusone/rt=j/sv=1/d=1/ed=1/am=EQ/rs=AGLTcCNNbh8VF4WDJP3ezLfrP1GAkSC5pg/cb=gapi.loaded_1 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/followers.g?blogID=3693781067608487807&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM1NjU2NTYiByNjYjAwYjMqByNmZmY0ZmEyByMwMDAwMDA6ByM1NjU2NTZCByNjYjAwYjNKByNhMWExYTFSByNjYjAwYjNaC3RyYW5zcGFyZW50&pageSize=21&postID=7501697523718783921&origin=http%3A%2F%2Fnretnawati.blogspot.no%2F&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DEQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCNNbh8VF4WDJP3ezLfrP1GAkSC5pg&bpli=1
Cookie: NID=114=KsRb0fO6x19Gr3QdYRRIXLS2NxDgI16JOhK1Y0dxs9M6Ixyax4r8M0g1mhKxR_eVbviS9975fTk2KYecpfI-71W6ClmmPg0VpSzmMYxIzObaM79fJW_DUAN4LX1itYLn

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 11948
Date: Thu, 12 Oct 2017 20:25:49 GMT
Expires: Fri, 12 Oct 2018 20:25:49 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 62190
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   11948
Md5:    5ca1cd29340f8544674d24f43a2ff1af
Sha1:   04ee51e42082e6dc6a57f1dfb956c146558bacd3
Sha256: 71968e4e038b647337419d10331b220ea02963d4d785f1cf870e2c49293187c8
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=EQ/rs=AGLTcCNNbh8VF4WDJP3ezLfrP1GAkSC5pg/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/followers.g?blogID=3693781067608487807&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM1NjU2NTYiByNjYjAwYjMqByNmZmY0ZmEyByMwMDAwMDA6ByM1NjU2NTZCByNjYjAwYjNKByNhMWExYTFSByNjYjAwYjNaC3RyYW5zcGFyZW50&pageSize=21&postID=7501697523718783921&origin=http%3A%2F%2Fnretnawati.blogspot.no%2F&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DEQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCNNbh8VF4WDJP3ezLfrP1GAkSC5pg&bpli=1
Cookie: NID=114=KsRb0fO6x19Gr3QdYRRIXLS2NxDgI16JOhK1Y0dxs9M6Ixyax4r8M0g1mhKxR_eVbviS9975fTk2KYecpfI-71W6ClmmPg0VpSzmMYxIzObaM79fJW_DUAN4LX1itYLn

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 47203
Date: Thu, 12 Oct 2017 19:30:47 GMT
Expires: Fri, 12 Oct 2018 19:30:47 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 65492
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   47203
Md5:    08ec62af8663f832b98d4af03e1390bf
Sha1:   dc2b8bb315b28a0bd094b8a67e07e638a9a48568
Sha256: 6de0f532ccb61bc0e87c6b010e9f5119c2b71bfcb6ce7074a084b35685b28872
                                        
                                            GET /csi?v=3&s=opensocial-gadgets&action=blogger_default&gadget=http%3A%2F%2Fhosting.gmodules.com%2Fig%2Fgadgets%2Ffile%2F111311123200664007084%2Fcalendar.xml&container=blogger&view=default&e=&rt=dl.66,ol.4000,prt.4000 HTTP/1.1 
Host: csi.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www-blogger-opensocial.googleusercontent.com/gadgets/ifr?url=http://hosting.gmodules.com/ig/gadgets/file/111311123200664007084/calendar.xml&container=blogger&view=default&lang=in&country=ALL&sanitize=0&v=4b0c87b8da3b9f9e&libs=core&parent=nretnawati.blogspot.no/&mid=2

                                         
                                         172.217.20.99
HTTP/1.1 204 No Content
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Fri, 13 Oct 2017 13:42:19 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT
Server: Golfe2
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /static/v1/jsbin/3223910711-comment_from_post_iframe.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nretnawati.blogspot.no/2012/05/normal-0-false-false-false-en-us-x-none.html

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /followers.g?blogID=3693781067608487807&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM1NjU2NTYiByNjYjAwYjMqByNmZmY0ZmEyByMwMDAwMDA6ByM1NjU2NTZCByNjYjAwYjNKByNhMWExYTFSByNjYjAwYjNaC3RyYW5zcGFyZW50&pageSize=21&postID=7501697523718783921&origin=http://nretnawati.blogspot.no/&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DEQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCNNbh8VF4WDJP3ezLfrP1GAkSC5pg HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nretnawati.blogspot.no/2012/05/normal-0-false-false-false-en-us-x-none.html

                                         
                                         172.217.22.169
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Location: https://accounts.google.com/ServiceLogin?continue=https://www.blogger.com/followers.g?blogID%3D3693781067608487807%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM1NjU2NTYiByNjYjAwYjMqByNmZmY0ZmEyByMwMDAwMDA6ByM1NjU2NTZCByNjYjAwYjNKByNhMWExYTFSByNjYjAwYjNaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D7501697523718783921%26origin%3Dhttp://nretnawati.blogspot.no/%26usegapi%3D1%26jsh%3Dm;/_/scs/apps-static/_/js/k%253Doz.gapi.no.m2rCJFJyJGQ.O/m%253D__features__/am%253DEQ/rt%253Dj/d%253D1/rs%253DAGLTcCNNbh8VF4WDJP3ezLfrP1GAkSC5pg%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D3693781067608487807%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM1NjU2NTYiByNjYjAwYjMqByNmZmY0ZmEyByMwMDAwMDA6ByM1NjU2NTZCByNjYjAwYjNKByNhMWExYTFSByNjYjAwYjNaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D7501697523718783921%26origin%3Dhttp://nretnawati.blogspot.no/%26usegapi%3D1%26jsh%3Dm;/_/scs/apps-static/_/js/k%253Doz.gapi.no.m2rCJFJyJGQ.O/m%253D__features__/am%253DEQ/rt%253Dj/d%253D1/rs%253DAGLTcCNNbh8VF4WDJP3ezLfrP1GAkSC5pg%26bpli%3D1&passive=true&go=true
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 13:42:16 GMT
Expires: Fri, 13 Oct 2017 13:42:16 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---