Overview

URL www.certificationexamanswers.blogspot.com/
IP172.217.22.161
ASNAS15169 Google Inc.
Location United States
Report completed2017-10-13 04:04:18 CEST
StatusLoading report..
urlquery Alerts Crypto currency mining script


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2017-10-13 04:03:44 CEST 1  94.130.128.243 Client IP ET POLICY Request for Coinhive Browser Monero Miner M2


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2017-10-13 2 coin-hive.com/lib/coinhive.min.js Malware
2017-10-13 2 coinhive.com/lib/coinhive.min.js Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 172.217.22.161

Date UQ / IDS / BL URL IP
2017-12-11 21:41:43 +0100
0 - 0 - 2 tokoaccretiaa.blogspot.com/2012/12/blog-post.htm 172.217.22.161
2017-12-11 21:41:43 +0100
0 - 0 - 2 tokoaccretiaa.blogspot.com/2012/12/toko-accre (...) 172.217.22.161
2017-12-11 21:41:42 +0100
0 - 0 - 2 tokoaccretiaa.blogspot.com/2012_12_01_archive.html 172.217.22.161
2017-12-11 21:37:57 +0100
0 - 0 - 4 lorelose1810.blogspot.ca/search/label/winter% (...) 172.217.22.161
2017-12-11 21:36:43 +0100
1 - 0 - 3 tektekdunk.blogspot.com.es/2013/03/efax-corpo (...) 172.217.22.161
2017-12-11 17:58:21 +0100
0 - 0 - 2 hakingandsecurity.blogspot.com/2013/11/make-b (...) 172.217.22.161
2017-12-11 17:54:53 +0100
0 - 0 - 4 about-yourdreams.blogspot.com/ 172.217.22.161
2017-12-09 14:45:24 +0100
0 - 0 - 3 ferroviarioenaccion.blogspot.com/2012/09/loco (...) 172.217.22.161
2017-12-08 22:54:11 +0100
0 - 0 - 2 eroticoeprofano.blogspot.com.br/2013/12/putin (...) 172.217.22.161
2017-12-08 21:38:08 +0100
0 - 0 - 2 wedding-glasses-for-bride-and-1015.blogspot.c (...) 172.217.22.161

Last 10 reports on ASN: AS15169 Google Inc.

Date UQ / IDS / BL URL IP
2017-12-11 21:41:43 +0100
0 - 0 - 2 tokoaccretiaa.blogspot.com/2012/12/blog-post.htm 172.217.22.161
2017-12-11 21:41:43 +0100
0 - 0 - 2 tokoaccretiaa.blogspot.com/2012/12/toko-accre (...) 172.217.22.161
2017-12-11 21:41:42 +0100
0 - 0 - 2 tokoaccretiaa.blogspot.com/2012_12_01_archive.html 172.217.22.161
2017-12-11 21:37:57 +0100
0 - 0 - 4 lorelose1810.blogspot.ca/search/label/winter% (...) 172.217.22.161
2017-12-11 21:36:43 +0100
1 - 0 - 3 tektekdunk.blogspot.com.es/2013/03/efax-corpo (...) 172.217.22.161
2017-12-11 21:34:06 +0100
0 - 0 - 2 th56kyh567ryt.blogspot.com/ 209.85.233.132
2017-12-11 21:33:38 +0100
0 - 0 - 2 membangun-rumah8870.blogspot.com/2012/08/acce (...) 209.85.233.132
2017-12-11 21:33:11 +0100
0 - 0 - 2 napaquiltmaker.blogspot.com/2009/11/i-know-yo (...) 209.85.233.132
2017-12-11 21:30:02 +0100
0 - 0 - 0 https://drive.google.com/file/d/1zzLDz4-n4GGp (...) 216.58.211.142
2017-12-11 19:28:22 +0100
0 - 0 - 0 https://youtu.be/UcOY4X-Lzk4 216.58.211.142

No other reports on domain: certificationexamanswers.blogspot.com



JavaScript

Executed Scripts (68)


Executed Evals (85)

#1 JavaScript::Eval (size: 31, repeated: 4) - SHA256: 85a33a184e9eadf9dc6dabfe104856da45a4c55c2536b0ea153a3a32a5d683c2

                                        0,
function(u) {
    U(u, 1);
}
                                    

#2 JavaScript::Eval (size: 31, repeated: 4) - SHA256: 066e8bc11e97037094ce99305a026ee54800bca1a7ba5a25c8d1ce4ca4e5bcd0

                                        0,
function(u) {
    U(u, 2);
}
                                    

#3 JavaScript::Eval (size: 31, repeated: 4) - SHA256: 418606b3f8d6bf9b0696b0f107270386bff9a89f022ee3939336b54094839823

                                        0,
function(u) {
    U(u, 4);
}
                                    

#4 JavaScript::Eval (size: 31, repeated: 4) - SHA256: 46c99dc79e0b33ba13e4c4c20cea0b72f23c8d417b1ce28be13a765eb9d9800a

                                        0,
function(u) {
    c(u, 1);
}
                                    

#5 JavaScript::Eval (size: 31, repeated: 4) - SHA256: b1c8d30aa2fda70122c184afdc67b5b9aa8cab4d4f52f43ae6dba3f1e1684289

                                        0,
function(u) {
    c(u, 2);
}
                                    

#6 JavaScript::Eval (size: 31, repeated: 4) - SHA256: 4047c41177a9cd4fc9b00b6521946f94abb7f651f6154d85e0f4860751f7b9d9

                                        0,
function(u) {
    c(u, 4);
}
                                    

#7 JavaScript::Eval (size: 38, repeated: 4) - SHA256: 69286bb3a5633fad6dec0607d9a20cb703dad8eab587de3420cba6a6127bdd9f

                                        0,
function(u) {
    u.H && y(u, 0);
}
                                    

#8 JavaScript::Eval (size: 30, repeated: 4) - SHA256: de8b0b1f13c31627cd21c9dfd18151c81ae00f3336db5b0d405bc09e992df3bf

                                        0,
function(u) {
    u.c(0);
}
                                    

#9 JavaScript::Eval (size: 30, repeated: 4) - SHA256: b7c754279983a8fa20e4673fac93ca0124f1247336358ac75338fdd7ceb2e536

                                        0,
function(u) {
    u.c(3);
}
                                    

#10 JavaScript::Eval (size: 30, repeated: 4) - SHA256: 92a6be4f36cb79b9577135646d65fc38b9422bf5f546e6176d01a681ac523f64

                                        0,
function(u) {
    u.c(4);
}
                                    

#11 JavaScript::Eval (size: 30, repeated: 4) - SHA256: 9873c872eb8c2d5c5161c686c528a68a5375ac68580304743242dc552cd67e4a

                                        0,
function(u) {
    u.c(7);
}
                                    

#12 JavaScript::Eval (size: 187, repeated: 4) - SHA256: a13b777874155e618984a25d41e8f425c407d5ef78b4359dc89f85093227de86

                                        0,
function(u, G) {
    ((G.push(u[0] << 24 | u[1] << 16 | u[2] << 8 | u[3]), G).push(u[4] << 24 | u[5] << 16 | u[6] << 8 | u[7]), G).push(u[8] << 24 | u[9] << 16 | u[10] << 8 | u[11]);
}
                                    

#13 JavaScript::Eval (size: 51, repeated: 4) - SHA256: 875272be718dfe8884a1d2dba656c25128552139a8d551487d0928fe3e91dcf1

                                        0,
function(u, G) {
    (G = u.F(S(u)), B)(u, G);
}
                                    

#14 JavaScript::Eval (size: 92, repeated: 4) - SHA256: 768840437120e7a5224c6f0a8ac45ab37ecbeb95e983d7b971d8caadb5143383

                                        0,
function(u, G) {
    G = S(u), u = u.F(G), u[0].removeEventListener(u[1], u[2], false);
}
                                    

#15 JavaScript::Eval (size: 125, repeated: 4) - SHA256: 0e0d14e720862dc56f0b70ed40cf094bdb367958c5a89b316385096e5c5dae55

                                        0,
function(u, G) {
    if ((G = this.B[u], void 0) === G) {
        throw X(this, 30, 0, u), this.G;
    }
    return G();
}
                                    

#16 JavaScript::Eval (size: 83, repeated: 4) - SHA256: 16bfcfacaa23e01998efa3dcd402587f8c278af694f8f1c2d582c660072da30b

                                        0,
function(u, G) {
    w(u, 1, 5) || (G = z(u), T(u, G.i, G.g.apply(G.w, G.J)));
}
                                    

#17 JavaScript::Eval (size: 88, repeated: 4) - SHA256: 8bc9cabdfd273e01f211a301afdd47cd3ff98dc308bb71a0a05fdbf53d400a52

                                        0,
function(u, G, J) {
    (G = (J = (G = S(u), S(u)), u.B[G] && u.F(G)), T)(u, J, G);
}
                                    

#18 JavaScript::Eval (size: 72, repeated: 4) - SHA256: a6bb5b416a88274e59e1cc17a30d49e03fd86cc86f9dff9140b434eec0e92b0a

                                        0,
function(u, G, J) {
    (G = S(u), J = S(u), T)(u, J, "" + u.F(G));
}
                                    

#19 JavaScript::Eval (size: 76, repeated: 4) - SHA256: 582ab47a4dac00ebd6bacb0531ef835ea1ef675e18138a4277ac233ea459fee5

                                        0,
function(u, G, J) {
    (G = S(u), J = S(u), T)(u, J, u.F(J) % u.F(G));
}
                                    

#20 JavaScript::Eval (size: 76, repeated: 4) - SHA256: 9a3c18b543b4804357d74543b461d9b416bd2863de66874f25a81ce28f34158c

                                        0,
function(u, G, J) {
    (G = S(u), J = S(u), T)(u, J, u.F(J) * u.F(G));
}
                                    

#21 JavaScript::Eval (size: 76, repeated: 4) - SHA256: f0846b5dfee624cd73bed63a00d3fb1ddc2a0a01a587ff1bdd35b2f4a61bb158

                                        0,
function(u, G, J) {
    (G = S(u), J = S(u), T)(u, J, u.F(J) + u.F(G));
}
                                    

#22 JavaScript::Eval (size: 76, repeated: 4) - SHA256: 8fda1f1a86ee6b7847ae9a78dc0864ebcf202358c68ed4053729efd029ea3193

                                        0,
function(u, G, J) {
    (G = S(u), J = S(u), T)(u, J, u.F(J) - u.F(G));
}
                                    

#23 JavaScript::Eval (size: 85, repeated: 4) - SHA256: 58ae779512bd9887a47b835af1095d5c44854dfb3680304277a8a7d26b7ad07b

                                        0,
function(u, G, J) {
    (J = (G = S(u), S(u)), 0 != u.F(G)) && T(u, 37, u.F(J));
}
                                    

#24 JavaScript::Eval (size: 77, repeated: 4) - SHA256: 18092f5e0b497f20e7e1cb3a4691653a5b45bb58047cbb2245cc64b4693567b6

                                        0,
function(u, G, J) {
    G = (G = S(u), J = S(u), u).F(G), T(u, J, v(G));
}
                                    

#25 JavaScript::Eval (size: 242, repeated: 4) - SHA256: 32cd68a701aa114bf8081a0361130f374f27ff7e3ba154e101db8e3adca48fbc

                                        0,
function(u, G, J) {
    if (3 == u.length) {
        for (J = 0; 3 > J; J++) {
            G[J] += u[J];
        }
        for (J = 0, u = [13, 8, 13, 12, 16, 5, 3, 10, 15]; 9 > J; J++) {
            G[3](G, J % 3, u[J]);
        }
    }
}
                                    

#26 JavaScript::Eval (size: 137, repeated: 4) - SHA256: f5a474e19eba4537ec6f72e6f4f4c503e633889e6aac2f13cbdf8aec73460f83

                                        0,
function(u, G, J) {
    return (G = (J = function() {
        return u;
    }, function() {
        return J();
    }), G)[this.M] = function(A) {
        u = A;
    }, G;
}
                                    

#27 JavaScript::Eval (size: 121, repeated: 4) - SHA256: e2c149e95c0a082249d9aa24d1a9416d1e2acf38d19a75e0b0aeaa4b5b30658a

                                        0,
function(u, G, J) {
    w(u, 1, 5) ||
        (G = S(u), J = S(u), T(u, J, function(u) {
            return eval(u);
        }(u.F(G))));
}
                                    

#28 JavaScript::Eval (size: 210, repeated: 4) - SHA256: befbe26ffc7ea2908ef8ac224c20245858418545f6c3518b53117abce5a78230

                                        0,
function(u, G, J, I) {
    ((J = (J = (G = u & 4, u &= 3, S)(this), I = S(this), this).F(J), G) &&
        (J = Q(("" + J).replace(/\r\n/g, "\n"))), u) &&
    p(this, I, W(J.length, 2)), p(this, I, J);
}
                                    

#29 JavaScript::Eval (size: 108, repeated: 4) - SHA256: 6252ffc84013074faa543125e6adeaec247460e9a1a2a8156712f2a9bec01789

                                        0,
function(u, G, J, I) {
    (G = (I = (J = (G = S(u), S(u)), S)(u), J = u.F(J), u).F(G), T)(u, I, G[J]);
}
                                    

#30 JavaScript::Eval (size: 96, repeated: 4) - SHA256: 7608adcb00518348576498a4b0dcf22f17cd2a793fb348e44889fd2d658498b9

                                        0,
function(u, G, J, I) {
    (G = S(u), J = S(u), I = S(u), T)(u, I, (u.F(G) in u.F(J)) + 0);
}
                                    

#31 JavaScript::Eval (size: 87, repeated: 4) - SHA256: d0237fe2bb1845883b3e64a70edcb215efe26ca6fea7d4bfb4f8847009514645

                                        0,
function(u, G, J, I) {
    (I = (G = S(u), J = S(u), S)(u), T)(u, I, u.F(G) << J);
}
                                    

#32 JavaScript::Eval (size: 87, repeated: 4) - SHA256: 0183e66469bd3c246dcffce151337c170a9b099bf8c32b37c0a036437f324666

                                        0,
function(u, G, J, I) {
    (I = (G = S(u), J = S(u), S)(u), T)(u, I, u.F(G) >> J);
}
                                    

#33 JavaScript::Eval (size: 93, repeated: 4) - SHA256: 933b410872c88053657d82cf66215e58f46a95ce5f6b288fb1dcda0b1b368538

                                        0,
function(u, G, J, I) {
    (I = (J = (G = S(u), S(u)), S(u)), T)(u, I, u.F(G) | u.F(J));
}
                                    

#34 JavaScript::Eval (size: 94, repeated: 4) - SHA256: 8219844f752d37eefa46c5bdc44c900bb57bf932d0149156b5c3092f842b3064

                                        0,
function(u, G, J, I) {
    (I = (J = (G = S(u), S(u)), S(u)), T)(u, I, u.F(G) || u.F(J));
}
                                    

#35 JavaScript::Eval (size: 92, repeated: 4) - SHA256: ae2f2fdfd83863e0c289773d0079e033c948bd982d84af1294dc00ea5032dfdb

                                        0,
function(u, G, J, I) {
    (I = (J = (G = S(u), S(u)), S(u)), u.F(G))[u.F(J)] = u.F(I);
}
                                    

#36 JavaScript::Eval (size: 101, repeated: 4) - SHA256: 57243f670b035a3b4124202dcbabd02e5ae99a48192e7e4678a1522e14515454

                                        0,
function(u, G, J, I) {
    G = (I = (G = S(u), J = S(u), S(u)), u.F(G)) == u.F(J), T(u, I, +G);
}
                                    

#37 JavaScript::Eval (size: 100, repeated: 4) - SHA256: ebeaddd0b39b909d4031e6a70239d689d587478c68664a4d5b5361c342096db2

                                        0,
function(u, G, J, I) {
    G = (I = (G = S(u), J = S(u), S(u)), u.F(G)) > u.F(J), T(u, I, +G);
}
                                    

#38 JavaScript::Eval (size: 142, repeated: 4) - SHA256: 73d819813d811fada60919ffaba436aaaecf43cd95cebcdb964c58130e7861ae

                                        0,
function(u, G, J, I) {
    for (; J--;) {
        37 != J && 174 != J && G.B[J] && (G.B[J] = G[I](G[u](J), this));
    }
    G[u] = this;
}
                                    

#39 JavaScript::Eval (size: 244, repeated: 4) - SHA256: a3c9fa700bf8add046eb313c53b742a6cee9bbdf7f3713a9906c1475d15ed1d0

                                        0,
function(u, G, J, I) {
    if ((G = u.$.pop())) {
        for (J = S(u); 0 < J; J--) {
            I = S(u), G[I] = u.B[I];
        }
        (G[192] = u.B[192], G[110] = u.B[110], u).B = G;
    } else {
        T(u, 37, u.R.length);
    }
}
                                    

#40 JavaScript::Eval (size: 170, repeated: 4) - SHA256: 313dedf37511f024d6d7d4ecb22be15dd595cd149d385982eb8272adb07864e6

                                        0,
function(u, G, J, I) {
    try {
        I = u[(G + 2) % 3], u[G] = u[G] - u[(G + 1) % 3] - I ^ (1 == G ? I << J : I >>> J);
    } catch (f) {
        throw f;
    }
}
                                    

#41 JavaScript::Eval (size: 130, repeated: 4) - SHA256: 8ecc5a7f35ee62f619c232d8cc88f1d4f96787464128e1e6b7c9ef98697027f7

                                        0,
function(u, G, J, I, f) {
    (J = (f = (I = (J = (G = S(u), S(u)), u.F(S(u))), u).F(S(u)), u.F(J)), T)(u, G, Y(u, J, I, f));
}
                                    

#42 JavaScript::Eval (size: 226, repeated: 4) - SHA256: 2a4543188cfbf4efaa47ee00eb8ee4c3733f87694a054c4b56309548647da1dd

                                        0,
function(u, G, J, I, f) {
    0 !== (I = (J = (f = (G = (I = (J = (G = S(u), S(u)), S)(u), u).F(G), u.F(S(u))), u).F(J), u).F(I), G) &&
        (I = Y(u, I, f, 1, G, J), G.addEventListener(J, I, M), T(u, 195, [G, J, I]));
}
                                    

#43 JavaScript::Eval (size: 240, repeated: 4) - SHA256: 2b798148084ad5aa750f205ca8017b28a3f546b44cb9f0960bff3019aa19c44f

                                        0,
function(u, G, J, I, f) {
    for (I = (J = (G = [], S(u)), 0); I < J; I++) {
        f = S(u), G.push(u.F(f));
    }
    J = S(u), T(u, J, function(u, J) {
        u.X++;
        try {
            for (J = 0; J < G.length; J++) {
                (0, G[J])(u);
            }
        } finally {
            u.X--;
        }
    });
}
                                    

#44 JavaScript::Eval (size: 134, repeated: 4) - SHA256: 441ae0ddf2f52a459d59e176c8aa90f8a178bcc9efb5353179917726d46c0536

                                        0,
function(u, G, J, I, f) {
    for (f = (G = S(u), J = k(u), 0), I = []; f < J; f++) {
        I.push(S(u));
    }
    T(u, G, I);
}
                                    

#45 JavaScript::Eval (size: 403, repeated: 4) - SHA256: 739662ec426680cd0cbfe992b5b973ccfec8d5db0eba87cef4c2a716d4487126

                                        0,
function(u, G, J, I, f, R) {
    if (!w(u, 1, 255)) {
        if ("object" == (u = (I = (J = (G = (f = (I = (G = S(u), J = S(u), S(u)), S)(u), u.F(G)), u).F(J), u.F(I)), u.F(f)), v(G))) {
            for (R in f = [], G) {
                f.push(R);
            }
            G = f;
        }
        for (R = (f = 0, G.length); f < R; f += I) {
            J(G.slice(f, f + I), u);
        }
    }
}
                                    

#46 JavaScript::Eval (size: 218, repeated: 4) - SHA256: 52d04bad00c45cd626e8d13d68712b258e668abb82116c212464fbd912b34ee7

                                        0,
function(u, G, J, I, f, R) {
    return u = (((R = (I = function() {
        return I[J.A + (f[J.h] === G) - !R[J.h]];
    }, f = function() {
        return I();
    }, J = this, J).v, f)[J.M] = function(u) {
        I[J.s] = u;
    }, f)[J.M](u), f);
}
                                    

#47 JavaScript::Eval (size: 339, repeated: 4) - SHA256: 634857dd6aec8645f547aa423526592167157d6eb5af23cba95fa2dbe187a8ec

                                        0,
function(u, G, J, I, f, R, b) {
    w(u, 1, 5) ||
        (G = z(u), I = G.w, f = G.g, J = G.J, b = J.length, 0 == b ? (R = new(I[f])) : 1 == b ? (R = new(I[f])(J[0])) : 2 == b ? (R = new(I[f])(J[0], J[1])) : 3 == b ? (R = new(I[f])(J[0], J[1], J[2])) : 4 == b ? (R = new(I[f])(J[0], J[1], J[2], J[3])) : X(u, 22), T(u, G.i, R));
}
                                    

#48 JavaScript::Eval (size: 292, repeated: 4) - SHA256: 5c8fd55fbe3c8de7f705ed231635066504ccbf9c21af0f09cce9f6a947bd886a

                                        0,
function(u, G, J, f, D, R, b) {
    if ((J = (G = S(u), k(u)), f = "", u.B)[74]) {
        for (D = u.F(74), b = D.length, R = 0; J--;) {
            R = (R + k(u)) % b, f += I[D[R]];
        }
    } else {
        for (; J--;) {
            f += I[S(u)];
        }
    }
    T(u, G, f);
}
                                    

#49 JavaScript::Eval (size: 39, repeated: 4) - SHA256: bb6753823aebc94f3cc0c4b3c3ed5b60753622b1198ec8abd45102911d59e131

                                        0,
function($, _) {
    _._ += !_.$[_[_._] = $[0]]
}
                                    

#50 JavaScript::Eval (size: 1, repeated: 4) - SHA256: df7e70e5021544f4834bbee64a9e3789febc4be81470df629cad6ddb03320a5c

                                        B
                                    

#51 JavaScript::Eval (size: 83, repeated: 4) - SHA256: 20f5626ae130665f06cffcb30f699b808c3ad484fa254ffc9173bf400a4a8325

                                        B = function(u, G) {
    ((u.$.push(u.B.slice()), u).B[37] = void 0, T)(u, 37, G);
}
                                    

#52 JavaScript::Eval (size: 1, repeated: 4) - SHA256: 86be9a55762d316a3026c2836d044f5fc76e34da10e1b45feee5f18be7edb177

                                        K
                                    

#53 JavaScript::Eval (size: 598, repeated: 4) - SHA256: cd9447cc2c0223b457225051c59d9318e1546e70c4579a3020953c2bfe88b2e0

                                        K = function(u, G, J, I, f, A, n) {
    u.X++;
    try {
        for (J = (I = (f = void 0, 5001), A = 0, u.R.length);
            (--I || u.Y) && (A = u.F(37)) < J;) {
            try {
                T(u, 174, A), n = S(u), (f = u.F(n)) && f.call ? f(u) : X(u, 21, 0, n), u.b = true, w(u, 0, 2);
            } catch (a) {
                a != u.G && (u.F(83) ? X(u, 22, a) : T(u, 83, a));
            }
        }
        I || X(u, 33);
    } catch (a) {
        try {
            X(u, 22, a);
        } catch (E) {
            h(u, E);
        }
    }
    return (J = u.F(160), G) && T(u, 37, G), u.X--, J;
}
                                    

#54 JavaScript::Eval (size: 1, repeated: 4) - SHA256: c4694f2e93d5c4e7d51f9c5deb75e6cc8be5e1114178c6a45b6fc2c566a0aa8c

                                        O
                                    

#55 JavaScript::Eval (size: 366, repeated: 4) - SHA256: 6ec2f41eb6bb55a4fbbfeb33948dd89ad2700cbab493f084f9d36c784da1e636

                                        O = function(u, G, J, I) {
    try {
        for (I = 0; 79669387488 != I;) {
            u += (G << 4 ^ G >>> 5) + G ^ I + J[I & 3], I += 2489668359, G += (u << 4 ^ u >>> 5) + u ^ I + J[I >>> 11 & 3];
        }
        return [u >>> 24, u >> 16 & 255, u >> 8 & 255, u & 255, G >>> 24, G >> 16 & 255, G >> 8 & 255, G & 255];
    } catch (f) {
        throw f;
    }
}
                                    

#56 JavaScript::Eval (size: 1, repeated: 4) - SHA256: 4ae81572f06e1b88fd5ced7a1a000945432e83e1551e6f721ee9c00b8cc33260

                                        Q
                                    

#57 JavaScript::Eval (size: 487, repeated: 4) - SHA256: 07d3a371041da0ee139964bccc86954d3995a61cfa7808eecec479c1af91635a

                                        Q = function(u, G, J, I, f) {
    for (I = J = (G = [], 0); I < u.length; I++) {
        f = u.charCodeAt(I), 128 > f ? (G[J++] = f) : (2048 > f ? (G[J++] = f >> 6 | 192) : (55296 == (f & 64512) &&
            I + 1 < u.length && 56320 == (u.charCodeAt(I + 1) & 64512) ? (f = 65536 + ((f & 1023) << 10) + (u.charCodeAt(++I) & 1023), G[J++] = f >> 18 | 240, G[J++] = f >> 12 & 63 | 128) : (G[J++] = f >> 12 | 224), G[J++] = f >> 6 & 63 | 128), G[J++] = f & 63 | 128);
    }
    return G;
}
                                    

#58 JavaScript::Eval (size: 1, repeated: 4) - SHA256: 8de0b3c47f112c59745f717a626932264c422a7563954872e237b223af4ad643

                                        S
                                    

#59 JavaScript::Eval (size: 289, repeated: 4) - SHA256: 0f14c151e55efc05d6b6dfd101052a52af86db4f4ec12a145918b7185fa2526e

                                        S = function(u, G, J) {
    if (G = u.F(37), !(G in u.R)) {
        throw X(u, 31), u.G;
    }
    return ((void 0 == u.f && (u.f = Z(u.R, G - 4), u.m = void 0), u).m != G >> 3 &&
        (u.m = G >> 3, J = [0, 0, 0, u.F(20)], u.W = O(u.f, u.m, J)), T(u, 37, G + 1), u.R)[G] ^ u.W[G % 8];
}
                                    

#60 JavaScript::Eval (size: 1, repeated: 4) - SHA256: e632b7095b0bf32c260fa4c539e9fd7b852d0de454e9be26f24d0d6f91d069d3

                                        T
                                    

#61 JavaScript::Eval (size: 322, repeated: 4) - SHA256: 21db507b7c39a107958863dfd01e27d148573425e6fbf87618a680db79a48861

                                        T = function(u, G, J) {
    if (37 == G || 174 == G) {
        if (u.B[G]) {
            u.B[G][u.M](J);
        } else {
            u.B[G] = u.K(J);
        }
    } else if (2 != G && 249 != G && 52 != G && 192 != G || !u.B[G]) {
        u.B[G] = u.Z(J, u.F);
    }
    20 == G && (u.f = void 0, T(u, 37, u.F(37) + 4));
}
                                    

#62 JavaScript::Eval (size: 1, repeated: 4) - SHA256: a25513c7e0f6eaa80a3337ee18081b9e2ed09e00af8531c8f7bb2542764027e7

                                        U
                                    

#63 JavaScript::Eval (size: 76, repeated: 4) - SHA256: 03bbe17d1603c10f2e83d2bc828029cddd508e534fed3ce337962fe1cc9f7a5f

                                        U = function(u, G, J, I) {
    (J = S(u), I = S(u), p)(u, I, W(u.F(J), G));
}
                                    

#64 JavaScript::Eval (size: 1, repeated: 4) - SHA256: 4b68ab3847feda7d6c62c1fbcbeebfa35eab7351ed5e78f4ddadea5df64b8015

                                        X
                                    

#65 JavaScript::Eval (size: 433, repeated: 4) - SHA256: 249ec97f6a08a830080cf0a04b1fabe53fb731ef012d9c457a48d406fd4a140a

                                        X = function(u, G, J, I, f) {
    (J = (I = ((G = [(f = u.F(174), G), f >> 8 & 255, f & 255], void 0 != I && G.push(I), 0 == u.F(192).length) &&
            (u.B[192] = void 0, T(u, 192, G)), ""), J &&
        (J.message && (I += J.message), J.stack && (I += ":" + J.stack)), u).F(110), 3 < J) &&
    (I = I.slice(0, J - 3), J -= I.length + 3, I = Q(I.replace(/\r\n/g, "\n")), p(u, 249, W(I.length, 2).concat(I), 12)), T(u, 110, J);
}
                                    

#66 JavaScript::Eval (size: 1, repeated: 4) - SHA256: 18f5384d58bcb1bba0bcd9e6a6781d1a6ac2cc280c330ecbab6cb7931b721552

                                        Y
                                    

#67 JavaScript::Eval (size: 272, repeated: 4) - SHA256: bd1936dce782bf4a6628f38f3398b55e0114b8c86a0b08950279bfe41fb9e235

                                        Y = function(u, G, J, I, f, A) {
    return function() {
        var n = I & 1,
            a = [6, G, J, void 0, f, A, arguments];
        if (I & 2) {
            var E = (m(u, a), x(u, true, false, false));
        } else {
            n && u.o.length ? m(u, a) : n ? (m(u, a), x(u, true, false, false)) : (E = C(u, a));
        }
        return E;
    };
}
                                    

#68 JavaScript::Eval (size: 1, repeated: 4) - SHA256: bbeebd879e1dff6918546dc0c179fdde505f2a21591c9a9c96e36b054ec5af83

                                        Z
                                    

#69 JavaScript::Eval (size: 88, repeated: 4) - SHA256: a49c76022c8cae4f4a15813834e3e8594a46f673fde11ea6d435513980f4ead5

                                        Z = function(u, G) {
    return u[G] << 24 | u[G + 1] << 16 | u[G + 2] << 8 | u[G + 3];
}
                                    

#70 JavaScript::Eval (size: 2, repeated: 44) - SHA256: 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                        []
                                    

#71 JavaScript::Eval (size: 1, repeated: 4) - SHA256: 2e7d2c03a9507ae265ecf5b5356885a53393a2029d241394997265a1a25aefc6

                                        c
                                    

#72 JavaScript::Eval (size: 116, repeated: 4) - SHA256: f7647d123a1e780762c184effa5b38c3d32e379dda4805849b8e7deac2b8bee4

                                        c = function(u, G, J, I) {
    for (J = S(u), I = 0; 0 < G; G--) {
        I = I << 8 | S(u);
    }
    T(u, J, I);
}
                                    

#73 JavaScript::Eval (size: 35, repeated: 3) - SHA256: 1e3606d95ce27d593157594820335681a9380f51a96147303cd8000e60a95e12

                                        document.createElement('div').style
                                    

#74 JavaScript::Eval (size: 29, repeated: 1) - SHA256: 53e5b7d706a350fe98d52499058624e15cddc1541f17370f94a899a386c50255

                                        document.createElement('img')
                                    

#75 JavaScript::Eval (size: 35, repeated: 3) - SHA256: f2a353ed5469812b863c5fbeb58b4d46b864ba4e20a49f57f9c44c7cda45f46b

                                        document.createEvent('MouseEvents')
                                    

#76 JavaScript::Eval (size: 1, repeated: 4) - SHA256: 8254c329a92850f6d539dd376f4816ee2764517da5e0235514af433164480d7a

                                        k
                                    

#77 JavaScript::Eval (size: 83, repeated: 4) - SHA256: b79ebc32e75bd298a68006022213b2b762eeb198b27073bae974e5614392c046

                                        k = function(u, G) {
    return G = S(u), G & 128 && (G = G & 127 | S(u) << 7), G;
}
                                    

#78 JavaScript::Eval (size: 1, repeated: 4) - SHA256: 148de9c5a7a44d19e56cd9ae1a554bf67847afb0c58f6e12fa29ac7ddfca9940

                                        p
                                    

#79 JavaScript::Eval (size: 417, repeated: 4) - SHA256: 50c14a20c0baa72a6f9418c3eb35bba90ce0922a0eaf32b48c093e320044626a

                                        p = function(u, G, J, I, f, A) {
    for (u = (I = (((f = u.F(G), 249) == G ? (G = function(u, G, J, I) {
                if ((J = (G = f.length, G - 4) >> 3, f).P != J) {
                    J = (((I = [0, 0, 0, A], f).P = J, J) << 3) - 4;
                    try {
                        f.T = O(Z(f, J), Z(f, J + 4), I);
                    } catch (R) {
                        throw R;
                    }
                }
                f.push(f.T[G & 7] ^ u);
            }, A = u.F(236)) : (G = function(u) {
                f.push(u);
            }), I) &&
            G(I & 255), 0), J.length); I < u; I++) {
        G(J[I]);
    }
}
                                    

#80 JavaScript::Eval (size: 1, repeated: 4) - SHA256: 8e35c2cd3bf6641bdb0e2050b76932cbb2e6034a0ddacc1d9bea82a6ba57f7cf

                                        q
                                    

#81 JavaScript::Eval (size: 1, repeated: 4) - SHA256: 454349e422f05297191ead13e21d3db520e5abef52055e4964b82fb213f593a1

                                        r
                                    

#82 JavaScript::Eval (size: 130, repeated: 4) - SHA256: 6d7e582508be102dd2bd20c7441d7fc9126b27c22704c18f1f32cfc3c5aef0f1

                                        r = function(u, G, J) {
    return (J = u.F(37), u.R && J < u.R.length ? (T(u, 37, u.R.length), B(u, G)) : T(u, 37, G), K)(u, J);
}
                                    

#83 JavaScript::Eval (size: 6, repeated: 1) - SHA256: 44ff7b02c80d38b26dd6aa31d9470aed81b32e10331a3c994fb1a9945fd847ba

                                        window
                                    

#84 JavaScript::Eval (size: 1, repeated: 4) - SHA256: 594e519ae499312b29433b7dd8a97ff068defcba9755b6d5d00e84c524d67b06

                                        z
                                    

#85 JavaScript::Eval (size: 256, repeated: 4) - SHA256: c19bfe0ed617b3261b22a276af4df0cc446d6fdfb0d336699ecfa771d5da1b28

                                        z = function(u, G, J, I, f, A) {
    for (I = ((G = {}, J = S(u), G).i = S(u), G.J = [], S(u)) - 1, f = S(u), A = 0; A < I; A++) {
        G.J.push(S(u));
    }
    for (G.g = u.F(J), G.w = u.F(f); I--;) {
        G.J[I] = u.F(G.J[I]);
    }
    return G;
}
                                    

Executed Writes (10)

#1 JavaScript::Write (size: 0, repeated: 12) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                    

#2 JavaScript::Write (size: 1849, repeated: 1) - SHA256: 72c6dff45bc9221766fc3272d297766e26a3e8f7ce1d2a694b7bebebd04ab491

                                        < !doctype html > < html > < body > < iframe style = "display:none"
data - ad - client = "ca-pub-3365192051533074"
id = "google_esf"
name = "google_esf"
src = "https://googleads.g.doubleclick.net/pagead/html/r20171011/r20170110/zrt_lookup.html#" > < /iframe><script>google_ad_slot="8372913748";google_ad_client="ca-pub-3365192051533074";google_adsbygoogle_status="done";google_ad_width=300;google_ad_height=250;google_available_width=880;google_ad_modifications={"plle":true,"eids":["156549044","156549044","21061122"],"loeids":["156549054"]};google_loader_used="aa";google_reactive_tag_first=false;google_ad_format="300x250";google_ad_unit_key="467145234";google_ad_dom_fingerprint="807048394";google_sailm=false;google_unique_id=1;google_async_iframe_id="aswift_0";google_start_time=1507860222440;google_pub_vars="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";google_bpp=26;google_async_rrc=0;google_iframe_start_time=new Date().getTime();</script > < script src = "https://pagead2.googlesyndication.com/pagead/js/r20171011/r20170110/show_ads_impl.js" > < /script></body > < /html>
                                    

#3 JavaScript::Write (size: 1646, repeated: 1) - SHA256: 4a1534cd5df29a645ddc56fe2c1d717ccd1994eee03c241e9df00f60cf3e8f21

                                        < !doctype html > < html > < body > < script > google_ad_slot = "8372913748";
google_ad_client = "ca-pub-3365192051533074";
google_adsbygoogle_status = "done";
google_ad_width = 300;
google_ad_height = 250;
google_available_width = 250;
google_ad_modifications = {
    "plle": true,
    "eids": ["156549044", "156549044", "21061122"],
    "loeids": ["156549054"]
};
google_loader_used = "aa";
google_reactive_tag_first = false;
google_ad_format = "300x250";
google_ad_unit_key = "304021748";
google_ad_dom_fingerprint = "807048394";
google_sailm = false;
google_unique_id = 3;
google_async_iframe_id = "aswift_2";
google_start_time = 1507860223295;
google_pub_vars = "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";
google_bpp = 100;
google_async_rrc = 0;
google_iframe_start_time = new Date().getTime(); < /script><script src="https:/ / pagead2.googlesyndication.com / pagead / js / r20171011 / r20170110 / show_ads_impl.js "></script></body></html>
                                    

#4 JavaScript::Write (size: 1645, repeated: 1) - SHA256: a6111ee646bd9ea34d8be0f8048164524bf9c88edd18e55419a1a2079195124f

                                        < !doctype html > < html > < body > < script > google_ad_slot = "8372913748";
google_ad_client = "ca-pub-3365192051533074";
google_adsbygoogle_status = "done";
google_ad_width = 300;
google_ad_height = 250;
google_available_width = 250;
google_ad_modifications = {
    "plle": true,
    "eids": ["156549044", "156549044", "21061122"],
    "loeids": ["156549054"]
};
google_loader_used = "aa";
google_reactive_tag_first = false;
google_ad_format = "300x250";
google_ad_unit_key = "500402437";
google_ad_dom_fingerprint = "807048394";
google_sailm = false;
google_unique_id = 2;
google_async_iframe_id = "aswift_1";
google_start_time = 1507860223208;
google_pub_vars = "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";
google_bpp = 77;
google_async_rrc = 0;
google_iframe_start_time = new Date().getTime(); < /script><script src="https:/ / pagead2.googlesyndication.com / pagead / js / r20171011 / r20170110 / show_ads_impl.js "></script></body></html>
                                    

#5 JavaScript::Write (size: 1572, repeated: 1) - SHA256: e3c7d00a55cc090eeff0572cb2fe1e21a5646c7e4cd0ba9130da9a5bf83b6f8e

                                        < !doctype html > < html > < body > < script > google_ad_slot = "9455629345";
google_ad_client = "ca-pub-3365192051533074";
google_adsbygoogle_status = "done";
google_ad_width = 336;
google_ad_height = 280;
google_ad_modifications = {
    "plle": true,
    "eids": ["156549044", "156549044", "21061122"],
    "loeids": ["156549054"]
};
google_loader_used = "aa";
google_reactive_tag_first = false;
google_ad_format = "336x280";
google_ad_unit_key = "3598545051";
google_ad_dom_fingerprint = "807048394";
google_sailm = false;
google_unique_id = 4;
google_async_iframe_id = "aswift_3";
google_start_time = 1507860224839;
google_pub_vars = "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";
google_bpp = 281;
google_async_rrc = 0;
google_iframe_start_time = new Date().getTime(); < /script><script src="https:/ / pagead2.googlesyndication.com / pagead / js / r20171011 / r20170110 / show_ads_impl.js "></script></body></html>
                                    

#6 JavaScript::Write (size: 54, repeated: 4) - SHA256: 166a4ec3cb90d525f7f744c7616c01b36bebd6dcecd486c8f5be14ccc0a7b3da

                                        < !doctype html > < html > < head > < /head><body></body > < /html>
                                    

#7 JavaScript::Write (size: 1317, repeated: 1) - SHA256: 413d9e01b6b6b2522464ad8253c181e87ea2e6815c5911ace98d08d823694052

                                        < iframe id = "google_ads_frame1"
name = "google_ads_frame1"
width = "300"
height = "250"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3365192051533074&amp;output=html&amp;h=250&amp;slotname=8372913748&amp;adk=467145234&amp;adf=807048394&amp;w=300&amp;lmt=1507855894&amp;loeid=156549054&amp;format=300x250&amp;url=https%3A%2F%2Fcertificationexamanswers.blogspot.no%2F&amp;ea=0&amp;flash=10.0.45&amp;avail_w=880&amp;wgl=0&amp;dt=1507860222440&amp;bpp=26&amp;fdt=38&amp;idt=1099&amp;shv=r20171011&amp;cbv=r20170110&amp;saldr=aa&amp;correlator=7222960463198&amp;frm=20&amp;ga_vid=661278695.1507860224&amp;ga_sid=1507860224&amp;ga_hid=1518172835&amp;ga_fc=0&amp;pv=2&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=120&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=140&amp;ady=254&amp;biw=1159&amp;bih=754&amp;abxe=1&amp;eid=156549044%2C21061122&amp;oid=3&amp;nmo=1&amp;zm=1.02&amp;rx=0&amp;eae=4&amp;fc=528&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7C%7C&amp;abl=CS&amp;ppjl=f&amp;pfx=0&amp;fu=16&amp;bc=1&amp;ifi=1&amp;dtd=1780"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#8 JavaScript::Write (size: 1341, repeated: 1) - SHA256: 3e8b927db36a45bff9045d681903ab18a5f1c448afd19c8fbd97b1cb2f70ade6

                                        < iframe id = "google_ads_frame2"
name = "google_ads_frame2"
width = "300"
height = "250"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3365192051533074&amp;output=html&amp;h=250&amp;slotname=8372913748&amp;adk=500402437&amp;adf=807048394&amp;w=300&amp;lmt=1507855894&amp;loeid=156549054&amp;format=300x250&amp;url=https%3A%2F%2Fcertificationexamanswers.blogspot.no%2F&amp;ea=0&amp;flash=10.0.45&amp;avail_w=250&amp;wgl=0&amp;dt=1507860223208&amp;bpp=77&amp;fdt=1058&amp;idt=1146&amp;shv=r20171011&amp;cbv=r20170110&amp;saldr=aa&amp;prev_fmts=300x250&amp;correlator=7222960463198&amp;frm=20&amp;ga_vid=661278695.1507860224&amp;ga_sid=1507860224&amp;ga_hid=1518172835&amp;ga_fc=0&amp;pv=1&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=120&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=770&amp;ady=617&amp;biw=1159&amp;bih=754&amp;abxe=1&amp;eid=156549044%2C21061122&amp;oid=3&amp;nmo=1&amp;zm=1.02&amp;rx=0&amp;eae=4&amp;fc=528&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7C%7C&amp;abl=CS&amp;ppjl=f&amp;pfx=0&amp;fu=16&amp;bc=1&amp;ifi=2&amp;dtd=1174"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#9 JavaScript::Write (size: 1355, repeated: 1) - SHA256: a5048be2d41d15e01497cad5e92dd058e29e295a98fe66b4a3c0a38f4f27adeb

                                        < iframe id = "google_ads_frame3"
name = "google_ads_frame3"
width = "300"
height = "250"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3365192051533074&amp;output=html&amp;h=250&amp;slotname=8372913748&amp;adk=304021748&amp;adf=807048394&amp;w=300&amp;lmt=1507855894&amp;loeid=156549054&amp;format=300x250&amp;url=https%3A%2F%2Fcertificationexamanswers.blogspot.no%2F&amp;ea=0&amp;flash=10.0.45&amp;avail_w=250&amp;wgl=0&amp;dt=1507860223295&amp;bpp=100&amp;fdt=1103&amp;idt=1197&amp;shv=r20171011&amp;cbv=r20170110&amp;saldr=aa&amp;prev_fmts=300x250%2C300x250&amp;correlator=7222960463198&amp;frm=20&amp;ga_vid=661278695.1507860224&amp;ga_sid=1507860224&amp;ga_hid=1518172835&amp;ga_fc=0&amp;pv=1&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=120&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=770&amp;ady=5130&amp;biw=1159&amp;bih=754&amp;abxe=1&amp;eid=156549044%2C21061122&amp;oid=3&amp;nmo=1&amp;zm=1.02&amp;rx=0&amp;eae=4&amp;fc=528&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cbr%7C&amp;abl=CS&amp;ppjl=f&amp;pfx=0&amp;fu=16&amp;bc=1&amp;ifi=3&amp;dtd=1221"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#10 JavaScript::Write (size: 1347, repeated: 1) - SHA256: ef2f8635188a6cc74e876f22a328b722a5b956701b42fe8e728cf73568bd3855

                                        < iframe id = "google_ads_frame4"
name = "google_ads_frame4"
width = "336"
height = "280"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3365192051533074&amp;output=html&amp;h=280&amp;slotname=9455629345&amp;adk=3598545051&amp;adf=807048394&amp;w=336&amp;lmt=1507855894&amp;loeid=156549054&amp;format=336x280&amp;url=https%3A%2F%2Fcertificationexamanswers.blogspot.no%2F&amp;ea=0&amp;flash=10.0.45&amp;wgl=0&amp;dt=1507860224839&amp;bpp=281&amp;fdt=437&amp;idt=575&amp;shv=r20171011&amp;cbv=r20170110&amp;saldr=aa&amp;prev_fmts=300x250%2C300x250%2C300x250&amp;correlator=7222960463198&amp;frm=20&amp;ga_vid=661278695.1507860224&amp;ga_sid=1507860224&amp;ga_hid=1518172835&amp;ga_fc=0&amp;pv=1&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=120&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=140&amp;ady=6645&amp;biw=1159&amp;bih=754&amp;abxe=1&amp;eid=156549044%2C21061122&amp;oid=3&amp;nmo=1&amp;zm=1.02&amp;rx=0&amp;eae=4&amp;fc=528&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cbr%7C&amp;abl=CS&amp;ppjl=f&amp;pfx=0&amp;fu=16&amp;bc=1&amp;ifi=4&amp;dtd=606"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    


HTTP Transactions (101)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: www.certificationexamanswers.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.217.22.161
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
Location: http://www.certificationexamanswers.blogspot.no/
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 02:03:40 GMT
Expires: Fri, 13 Oct 2017 02:03:40 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 191
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   191
Md5:    49cc30adea2e6b83b27bdd35fb295e07
Sha1:   e3e91b8dfd2289df11278867d0fce3ff27cdb429
Sha256: 75023e7d20f43d1ff64f43841a1e7d634de711b5fcaeb951a6824da4382ed677
                                        
                                            GET / HTTP/1.1 
Host: www.certificationexamanswers.blogspot.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.217.22.161
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Location: https://certificationexamanswers.blogspot.no/
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 02:03:40 GMT
Expires: Fri, 13 Oct 2017 02:03:40 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 188
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   188
Md5:    546659b79cea421e0a705b316a68fdd0
Sha1:   fa9344495496ff94dedced6256be51477e9c26e7
Sha256: c0eb61accf19afea3301065d1e1d0576a7625a69f2f892175082e44f491af263
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 02:03:41 GMT
Expires: Tue, 17 Oct 2017 02:03:41 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    c2ed9a2f710f071e11715d00fd8c1ea8
Sha1:   d3eed057b0c32af1a2115b9a2a77a20577d08fb5
Sha256: 8a237eb95120e02945dd663ed5423e8d03adaf1bc812a2774eb9022c62141cc8
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 02:03:41 GMT
Expires: Tue, 17 Oct 2017 02:03:41 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    6bf50ec404fb4a8b4a94be8390d11938
Sha1:   0caaab7704d6221abc5e0342909a4928cee50b1c
Sha256: 63b592179b1e9a528344ce1d430b9479fc55f43420a468ec35aaeaa9dff911cf
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 02:03:41 GMT
Expires: Tue, 17 Oct 2017 02:03:41 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    e211ec1035ad41bca30dfb48e48ba3e3
Sha1:   a9ed89b7ae6e702d516bfc5f185298e9c98b9fe7
Sha256: 956803a2d8cef76057b1ae1015fa52bb2b62916915b3659a4e5400ed079b3da1
                                        
                                            GET / HTTP/1.1 
Host: certificationexamanswers.blogspot.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Expires: Fri, 13 Oct 2017 02:03:41 GMT
Date: Fri, 13 Oct 2017 02:03:41 GMT
Cache-Control: private, max-age=0
Last-Modified: Fri, 13 Oct 2017 00:51:34 GMT
Etag: W/"5b4223b05e78b480fb22a0d8c39344d58b7959e0d44ea7fb718acfe6b781d75d"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   19259
Md5:    2bd7fac3722c3ad6724535f2f02c9a41
Sha1:   5e2b072a1ce6556078a89d183d2c4cf2f07d89dc
Sha256: af3e7d040afa5e9c1571c22a0514f31105d9afa17b0bf901406cbfcedc40bc50
                                        
                                            GET /static/v1/widgets/73244247-css_bundle_v2.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://certificationexamanswers.blogspot.no/

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 9609
Date: Tue, 03 Oct 2017 00:59:20 GMT
Expires: Wed, 03 Oct 2018 00:59:20 GMT
Last-Modified: Mon, 02 Oct 2017 22:05:25 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 867861
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   9609
Md5:    0f31846649ae2c2c0aaa43f1f2d45662
Sha1:   c4e46209ffa4052f6caa01c7c9408a42859a2e2f
Sha256: 5a95b901eba5846ebff70ffca4ba09c36a157cbc2222155850896da73218f841
                                        
                                            GET /static/v1/widgets/2682751544-widgets.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://certificationexamanswers.blogspot.no/

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 46164
Date: Fri, 06 Oct 2017 01:50:20 GMT
Expires: Sat, 06 Oct 2018 01:50:20 GMT
Last-Modified: Thu, 05 Oct 2017 23:11:42 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 605601
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   46164
Md5:    7035c45baf033ca693de092b42a02000
Sha1:   ec2136e5613226a45279a0b3dfe79a3cf4d8f1a7
Sha256: 5cd86ef91ebf028d0c1673b662e640dbd682cb5f0732ab8998022c2599b591ed
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 02:03:41 GMT
Expires: Tue, 17 Oct 2017 02:03:41 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    1e917a2c562b40f676a195df0c96aa66
Sha1:   383f0d8ba5960c30bed63b0e38419ef7d89093b8
Sha256: 8589379d76c8773a5bcb28188006e5afc6831bc1f1a5b20efcf00c025d4aec4f
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 02:03:41 GMT
Expires: Tue, 17 Oct 2017 02:03:41 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    bf3a797fd8ccfbdc1571effab646bc60
Sha1:   bfb32601e6f80f5e2e7cabd736b9849257bbd773
Sha256: 6df55bd83a5cffba04ea22100ff18eaa2e0c53fd945b7f30fd5108598869fe0d
                                        
                                            GET /js/plusone.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://certificationexamanswers.blogspot.no/

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Timing-Allow-Origin: *
Etag: "ff43a59f940b9e31a0283d768b2237d6"
Expires: Fri, 13 Oct 2017 02:03:41 GMT
Date: Fri, 13 Oct 2017 02:03:41 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
Strict-Transport-Security: max-age=31536000
P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Set-Cookie: NID=114=ztLinOVx3nuIrP15lMP-MnJMrwnG4twXFotpZHWPbBVKUJwhL_ZMY6OKltdoaQ3v8cg4AJAjvnH3X6k99PxQSgl5dvq7rFNC6AMXjZ7fb-WG8lwZCiJAhUPr21qD42hq;Domain=.google.com;Path=/;Expires=Sat, 14-Apr-2018 02:03:41 GMT;HttpOnly
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17422
Md5:    55ec928073d654d0096eae22b36eb937
Sha1:   09761def4d1ae443c8a72041d182f68f7117a341
Sha256: c564fe1f5fbd3837fd83f3c61a614465c969486d9ef4cda157c0719b360d674f
                                        
                                            GET /pagead/js/adsbygoogle.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://certificationexamanswers.blogspot.no/

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Fri, 13 Oct 2017 02:03:41 GMT
Expires: Fri, 13 Oct 2017 02:03:41 GMT
Cache-Control: private, max-age=3600
Etag: 17258135619533068437
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   26138
Md5:    de58973d89896cfe2f829d886bf55505
Sha1:   6bf14e2883704dfe78803d8016d470e8d798144c
Sha256: 04cef437ec65565e3d46c6c96327df74784a067056780c532b3a4d11406af5d0
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 02:03:42 GMT
Server: Apache
Last-Modified: Thu, 12 Oct 2017 02:37:27 GMT
Expires: Thu, 19 Oct 2017 02:37:27 GMT
Etag: 292C2063459CCB3B96C64C38C6D66B8F40D3A107
Cache-Control: max-age=519824,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp21
Content-Length: 471
Connection: close


--- Additional Info ---
Magic:  data
Size:   471
Md5:    9d88f26331e119729143a69a5784f35e
Sha1:   292c2063459ccb3b96c64c38c6d66b8f40d3a107
Sha256: 3cc5663d1b2585765c120ee259fceb92c32bf63b1a9fa21b27cf8d6624d726f1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 02:03:42 GMT
Server: Apache
Last-Modified: Wed, 11 Oct 2017 09:42:49 GMT
Expires: Wed, 18 Oct 2017 09:42:49 GMT
Etag: CAE2D4E36B01556EB5A7DFCAC91643A06697B94B
Cache-Control: max-age=458946,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp21
Content-Length: 727
Connection: close


--- Additional Info ---
Magic:  data
Size:   727
Md5:    b1e50e73281d4487d8b1cf3cdaf74bd5
Sha1:   cae2d4e36b01556eb5a7dfcac91643a06697b94b
Sha256: ba282a3cc79d8121086cb931af7199775bd48fef7699ba80e61d794c382b880c
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 02:03:42 GMT
Server: Apache
Last-Modified: Wed, 11 Oct 2017 09:42:49 GMT
Expires: Wed, 18 Oct 2017 09:42:49 GMT
Etag: 8A7BC9885D9FFAFD7270D5324F22275F2B2C0D13
Cache-Control: max-age=458946,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp30
Content-Length: 471
Connection: close


--- Additional Info ---
Magic:  data
Size:   471
Md5:    d7daaf5088b1b8633e7e0d6600507656
Sha1:   8a7bc9885d9ffafd7270d5324f22275f2b2c0d13
Sha256: 9ea32e88334ce42853f79b00abaff0d4ee00214175cd3e1d189a0aa1b4a4ceba
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: certificationexamanswers.blogspot.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/x-icon; charset=UTF-8
                                        
Expires: Fri, 13 Oct 2017 02:03:41 GMT
Date: Fri, 13 Oct 2017 02:03:41 GMT
Cache-Control: private, max-age=86400
Last-Modified: Fri, 13 Oct 2017 00:51:34 GMT
Etag: W/"5b4223b05e78b480fb22a0d8c39344d58b7959e0d44ea7fb718acfe6b781d75d"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   412
Md5:    23e5eb1119a7f4d2ab629ccd77a5f84b
Sha1:   f7a5a792e41005ba918551e4416c4bf639ec80ec
Sha256: a0c8d4831f453c316840a502432719f7f7d833bea4a9b59f548e4a1bc2bf0c8a
                                        
                                            GET /demo-to-prevent-copy-paste-on-blogger_files/googleapis.js HTTP/1.1 
Host: certificationexamanswers.blogspot.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://certificationexamanswers.blogspot.no/

                                         
                                         172.217.22.161
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 13 Oct 2017 02:03:41 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   15143
Md5:    2e7023feef6dd454fcc2ab5ba18a90bb
Sha1:   0227e9ecc8770923198a388197bb81ce4aa42d15
Sha256: 37bcc65a7031b28df652d20215f3a30330728608ccc8363f2f62ff99ffc07d10
                                        
                                            GET /img/icon18_edit_allbkg.gif HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://certificationexamanswers.blogspot.no/

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 162
Date: Tue, 10 Oct 2017 15:35:01 GMT
Expires: Tue, 17 Oct 2017 15:35:01 GMT
Last-Modified: Mon, 09 Oct 2017 21:49:36 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 210520
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 18 x 18
Size:   162
Md5:    c991641178ff05adf0d004298b5eafa9
Sha1:   d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
Sha256: ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
                                        
                                            GET /dyn-css/authorization.css?targetBlogID=1822719399448039786&zx=7dae9794-26cd-45fa-bf72-eef4abbce10b HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://certificationexamanswers.blogspot.no/

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/css; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: private, max-age=1800
Pragma: no-cache
Expires: Fri, 13 Oct 2017 02:03:42 GMT
Date: Fri, 13 Oct 2017 02:03:42 GMT
Last-Modified: Fri, 13 Oct 2017 02:03:42 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   21
Md5:    b9afc501fc43fbea335a2dc5d43263a1
Sha1:   7290a2dd6afbf39ecfc35b52dfb32a38fc222994
Sha256: d6e425ca7840c0ab6f26f5fc2822a47e26b4a8bbd104468a9c185bc132b8662f
                                        
                                            GET /img/icon18_wrench_allbkg.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://certificationexamanswers.blogspot.no/

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 475
Date: Tue, 10 Oct 2017 16:25:35 GMT
Expires: Tue, 17 Oct 2017 16:25:35 GMT
Last-Modified: Tue, 10 Oct 2017 11:46:04 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 207487
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 18 x 18, 8-bit colormap, non-interlaced
Size:   475
Md5:    f617effe6d96c15acfea8b2e8aae551f
Sha1:   6d676af11ad2e84b620cce4d5992b657cb2d8ab6
Sha256: d172d750493be64a7ed84dec1dd2a0d787ba42f78bc694b0858f152c52b6620b
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=114=ztLinOVx3nuIrP15lMP-MnJMrwnG4twXFotpZHWPbBVKUJwhL_ZMY6OKltdoaQ3v8cg4AJAjvnH3X6k99PxQSgl5dvq7rFNC6AMXjZ7fb-WG8lwZCiJAhUPr21qD42hq

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 02:03:42 GMT
Expires: Tue, 17 Oct 2017 02:03:42 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    00c53ce7aff5a785b677068b7cc8a741
Sha1:   6f33c2f4dc6324126f89a279b631f4a38320cc67
Sha256: 5242b0843cb5b8705251e7af36ba30113032d64f774edbb396939f70bc05f314
                                        
                                            POST / HTTP/1.1 
Host: g.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1390
Content-Transfer-Encoding: binary
Cache-Control: max-age=340420, public, no-transform, must-revalidate
Last-Modified: Tue, 10 Oct 2017 00:34:08 GMT
Expires: Tue, 17 Oct 2017 00:34:08 GMT
Date: Fri, 13 Oct 2017 02:03:42 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1390
Md5:    fccd40351d25d6f5eecda73fdef9b3d8
Sha1:   0d2d2f37814bb53b7dca796acc9ee278ef6297ba
Sha256: 23e276d6aa20791de9110019cb7992bae490040d4cc3a06678449d1b3f2063e4
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 02:03:42 GMT
Expires: Tue, 17 Oct 2017 02:03:42 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    dc3da34cf6dbde9b53140d312532afe2
Sha1:   46e14ae1b3d135a225c608122c478b3b638bb7c8
Sha256: 4165fc54c815bdd5de54672fa261ef9d271cefecdbacadb0a548c5c4130a79c7
                                        
                                            GET /blogblog/data/1kt/simple/gradients_light.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://certificationexamanswers.blogspot.no/

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 403
Date: Thu, 12 Oct 2017 13:38:43 GMT
Expires: Thu, 19 Oct 2017 13:38:43 GMT
Last-Modified: Wed, 11 Oct 2017 17:41:18 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 44699
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 20 x 1100, 8-bit/color RGBA, non-interlaced
Size:   403
Md5:    4f7de2e6afefb125b1f14fa5cda610ee
Sha1:   57a145f234b504a73f9d55cf39f2231a04719456
Sha256: ecb30886406e3f776ff7bc3834de849944471e626ff148bed2fa389d02866044
                                        
                                            GET /img/share_buttons_20_3.png HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/static/v1/widgets/73244247-css_bundle_v2.css

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 5080
Date: Tue, 10 Oct 2017 13:48:12 GMT
Expires: Tue, 17 Oct 2017 13:48:12 GMT
Last-Modified: Tue, 10 Oct 2017 05:05:55 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 216930
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 120 x 60, 8-bit/color RGBA, non-interlaced
Size:   5080
Md5:    ad9999106d5f550920b586e8e1704e5a
Sha1:   93fd02c51166402a41f96509cd0ca3fb917877dd
Sha256: 3829a5b2ade7cfc416c80b8f3df71e49e68672875f025d525223978f5cee3fd3
                                        
                                            GET /blogblog/data/1kt/simple/body_gradient_tile_light.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://certificationexamanswers.blogspot.no/

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 95
Date: Tue, 10 Oct 2017 10:50:39 GMT
Expires: Tue, 17 Oct 2017 10:50:39 GMT
Last-Modified: Mon, 09 Oct 2017 21:49:36 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 227583
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 10 x 10, 1-bit colormap, non-interlaced
Size:   95
Md5:    3b2a20d5b0ba4ca0c5dd90865ad6b9c4
Sha1:   a90928a16d11d21e112b45b60990a9d7d19cc1d5
Sha256: 0fdcb4746995f0d5240e5ec11370cb950722a894f3cff4118aa68ccc92010edd
                                        
                                            GET /adsid/integrator.js?domain=certificationexamanswers.blogspot.no HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://certificationexamanswers.blogspot.no/
Cookie: NID=114=ztLinOVx3nuIrP15lMP-MnJMrwnG4twXFotpZHWPbBVKUJwhL_ZMY6OKltdoaQ3v8cg4AJAjvnH3X6k99PxQSgl5dvq7rFNC6AMXjZ7fb-WG8lwZCiJAhUPr21qD42hq

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 02:03:42 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   107
Md5:    5432a558d422eaeaa6f7e8a15c0c1134
Sha1:   252ee6dbb502fd998fbdc5721da5986b877f1c73
Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
                                        
                                            GET /pub-config/r20160913/ca-pub-3365192051533074.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://certificationexamanswers.blogspot.no/

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Length: 125
Date: Fri, 13 Oct 2017 02:03:42 GMT
Expires: Fri, 13 Oct 2017 14:03:42 GMT
Last-Modified: Wed, 11 Oct 2017 21:45:05 GMT
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=43200
Age: 0
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   125
Md5:    21aea2dae0239adff4f9f063cdacfc76
Sha1:   ce64c497ac1dd86393da79e8cea239de113c1de7
Sha256: a59ee78166b8467dd7dd8c7acb03d8df7d16cf4a04f45c8558366df1c33b868f
                                        
                                            GET /adsid/integrator.js?domain=certificationexamanswers.blogspot.no HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://certificationexamanswers.blogspot.no/

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 02:03:42 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   107
Md5:    5432a558d422eaeaa6f7e8a15c0c1134
Sha1:   252ee6dbb502fd998fbdc5721da5986b877f1c73
Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
                                        
                                            GET /lib/coinhive.min.js HTTP/1.1 
Host: coin-hive.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://certificationexamanswers.blogspot.no/

                                         
                                         94.130.102.124
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx
Date: Fri, 13 Oct 2017 02:03:42 GMT
Content-Length: 178
Connection: keep-alive
Location: https://coinhive.com/lib/coinhive.min.js


--- Additional Info ---
Magic:  HTML document text
Size:   178
Md5:    cd2e0e43980a00fb6a2742d3afd803b8
Sha1:   81ffbd1712afe8cdf138b570c0fc9934742c33c1
Sha256: bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d

Alerts:
  urlquery:
    - Crypto currency mining script
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /pagead/html/r20171011/r20170110/zrt_lookup.html HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://certificationexamanswers.blogspot.no/

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Wed, 11 Oct 2017 20:34:40 GMT
Expires: Wed, 25 Oct 2017 20:34:40 GMT
Etag: 4405804728715842184
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
Content-Length: 6876
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 106143
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   6876
Md5:    be7c2f915fac8b85beacc3dc31b5edf9
Sha1:   d55bd2323fc911dab3a13f3b4eb29cf0340c763c
Sha256: c4288729e52b6c7f622d484d68f8bcbe3961b637450cfd2fb7e6cf166c5b526a
                                        
                                            GET /pagead/js/r20171011/r20170110/show_ads_impl.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://certificationexamanswers.blogspot.no/

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Fri, 13 Oct 2017 02:03:43 GMT
Expires: Fri, 13 Oct 2017 02:03:43 GMT
Cache-Control: private, max-age=1209600
Etag: 17760511778124297932
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   66909
Md5:    3b41db7154c5ee70ab1e71a28c8c7232
Sha1:   827e2cc405bc5c89791eee022f5cddfddedde73b
Sha256: 0bdd0e1b73ab03c70adaf804fb4d036dc964796f70cdc02f36743b6536f9352f
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 02:03:44 GMT
Server: Apache
Last-Modified: Tue, 10 Oct 2017 19:05:30 GMT
Expires: Tue, 17 Oct 2017 19:05:30 GMT
Etag: 22CF3E09B330CC08E46EACB09D9F431009E68AA5
Cache-Control: max-age=406305,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp21
Content-Length: 471
Connection: close


--- Additional Info ---
Magic:  data
Size:   471
Md5:    27596f2d321a6d695bb7c397fee419a9
Sha1:   22cf3e09b330cc08e46eacb09d9f431009e68aa5
Sha256: 79ecd8020211bc0d2b0e3901da1be4ca91bc5b79c0740627ffc71909bd1fa83b
                                        
                                            GET /pagead/js/r20171011/r20170110/osd.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://certificationexamanswers.blogspot.no/

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Wed, 11 Oct 2017 20:34:41 GMT
Expires: Wed, 25 Oct 2017 20:34:41 GMT
Etag: 10282765528497536317
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 29984
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 106143
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   29984
Md5:    0b811cda7ba7007d161c0c3ae48bb01e
Sha1:   2f66db67bb9be244cdebd02e5f7ec371baf64d40
Sha256: 3cffc0e04894be43bc3ff872d93d025af9efeede4a7e700d2d7946f3d1ec1226
                                        
                                            GET /lib/coinhive.min.js HTTP/1.1 
Host: coinhive.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://certificationexamanswers.blogspot.no/

                                         
                                         94.130.128.243
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Server: nginx
Date: Fri, 13 Oct 2017 02:03:44 GMT
Last-Modified: Mon, 02 Oct 2017 14:15:47 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"59d24a13-21e45"
Expires: Fri, 13 Oct 2017 10:03:44 GMT
Cache-Control: max-age=28800
Access-Control-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   43383
Md5:    fe144c72a53ead8a0b0960680f396821
Sha1:   dd8415779b4f07aff98c3c3cf9d8d9e5a2dbc0ae
Sha256: c5c84e973e49b5919fd11bcab34ae5a7cbc68acc717f9ddb6f1f122f35d72269

Alerts:
  urlquery:
    - Crypto currency mining script
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /pagead/ads?client=ca-pub-3365192051533074&output=html&h=250&slotname=8372913748&adk=467145234&adf=807048394&w=300&lmt=1507855894&loeid=156549054&format=300x250&url=https%3A%2F%2Fcertificationexamanswers.blogspot.no%2F&ea=0&flash=10.0.45&avail_w=880&wgl=0&dt=1507860222440&bpp=26&fdt=38&idt=1099&shv=r20171011&cbv=r20170110&saldr=aa&correlator=7222960463198&frm=20&ga_vid=661278695.1507860224&ga_sid=1507860224&ga_hid=1518172835&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=140&ady=254&biw=1159&bih=754&abxe=1&eid=156549044%2C21061122&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=f&pfx=0&fu=16&bc=1&ifi=1&dtd=1780 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://certificationexamanswers.blogspot.no/

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 02:03:44 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 13-Oct-2017 02:18:44 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"
Expires: Fri, 13 Oct 2017 02:03:44 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   14319
Md5:    d568c144057231d6eedf845bbfe0fdfa
Sha1:   be3586766185905e65a31a824b8b514ccb35a534
Sha256: 48110254ff28cdeb7e1b371239f7b1084f69bb2c4d44b87ba830813dc1917933
                                        
                                            GET /demo-to-prevent-copy-paste-on-blogger_files/googleapis.js HTTP/1.1 
Host: certificationexamanswers.blogspot.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://certificationexamanswers.blogspot.no/

                                         
                                         172.217.22.161
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 13 Oct 2017 02:03:44 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   15143
Md5:    cc2cbf8eaa9944e93825473ae2087c70
Sha1:   2e70dec85b4a5a59de0411288a6f7b27c3f3d3fe
Sha256: 7f8b4bb7b34d0af29da5458e1f964fbacba2a3c9ce806f7f5b7696fdf373f5a4
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 02:03:45 GMT
Expires: Tue, 17 Oct 2017 02:03:45 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    c9b1871bad12975258e10e92662b196d
Sha1:   717008fdec1476ceb9de46f8bc6cd2ac0d277c67
Sha256: 53b7e5be94643bdaab407ba91a0d5e6cc7ff84433120e97d5ea34a8678eb983d
                                        
                                            GET /pagead/ads?client=ca-pub-3365192051533074&output=html&h=250&slotname=8372913748&adk=500402437&adf=807048394&w=300&lmt=1507855894&loeid=156549054&format=300x250&url=https%3A%2F%2Fcertificationexamanswers.blogspot.no%2F&ea=0&flash=10.0.45&avail_w=250&wgl=0&dt=1507860223208&bpp=77&fdt=1058&idt=1146&shv=r20171011&cbv=r20170110&saldr=aa&prev_fmts=300x250&correlator=7222960463198&frm=20&ga_vid=661278695.1507860224&ga_sid=1507860224&ga_hid=1518172835&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=770&ady=617&biw=1159&bih=754&abxe=1&eid=156549044%2C21061122&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=f&pfx=0&fu=16&bc=1&ifi=2&dtd=1174 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://certificationexamanswers.blogspot.no/

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 02:03:44 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 13-Oct-2017 02:18:44 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"
Expires: Fri, 13 Oct 2017 02:03:44 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   14291
Md5:    da6d4ca629f26f436655d9298715dc03
Sha1:   33320e1ea1c47ccbecd9a60490b64aca2c723b0b
Sha256: d1f00a2c56b9c23bb6aa779e893645b341804d4eb85d4a91db6b1e14515a9f01
                                        
                                            GET /pagead/ads?client=ca-pub-3365192051533074&output=html&h=250&slotname=8372913748&adk=304021748&adf=807048394&w=300&lmt=1507855894&loeid=156549054&format=300x250&url=https%3A%2F%2Fcertificationexamanswers.blogspot.no%2F&ea=0&flash=10.0.45&avail_w=250&wgl=0&dt=1507860223295&bpp=100&fdt=1103&idt=1197&shv=r20171011&cbv=r20170110&saldr=aa&prev_fmts=300x250%2C300x250&correlator=7222960463198&frm=20&ga_vid=661278695.1507860224&ga_sid=1507860224&ga_hid=1518172835&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=770&ady=5130&biw=1159&bih=754&abxe=1&eid=156549044%2C21061122&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=16&bc=1&ifi=3&dtd=1221 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://certificationexamanswers.blogspot.no/

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 02:03:44 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 13-Oct-2017 02:18:44 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"
Expires: Fri, 13 Oct 2017 02:03:44 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   14339
Md5:    38bc82b0c0e48537ada261fc9b074788
Sha1:   1f1b169ebe2d64fdd5540728a47f3ec43a481744
Sha256: 04c48561319ee3d7652725efddb1bbdd6afef89da6e3d83a69e518b1fbc0945f
                                        
                                            GET /pagead/js/r20171011/r20110914/client/ext/m_js_controller.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3365192051533074&output=html&h=250&slotname=8372913748&adk=467145234&adf=807048394&w=300&lmt=1507855894&loeid=156549054&format=300x250&url=https%3A%2F%2Fcertificationexamanswers.blogspot.no%2F&ea=0&flash=10.0.45&avail_w=880&wgl=0&dt=1507860222440&bpp=26&fdt=38&idt=1099&shv=r20171011&cbv=r20170110&saldr=aa&correlator=7222960463198&frm=20&ga_vid=661278695.1507860224&ga_sid=1507860224&ga_hid=1518172835&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=140&ady=254&biw=1159&bih=754&abxe=1&eid=156549044%2C21061122&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=f&pfx=0&fu=16&bc=1&ifi=1&dtd=1780

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Wed, 11 Oct 2017 14:55:38 GMT
Expires: Wed, 25 Oct 2017 14:55:38 GMT
Etag: 13725795390477713467
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 18257
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 126488
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   18257
Md5:    751c81bce3836dbddb0df120186b7a5a
Sha1:   d5dd4486d68d766e9837721711af0ed67abfad2c
Sha256: 94543bbd9be264bdabac69b62f17cbc25a43d6416aebbd6df402ea285c372d9b
                                        
                                            GET /pagead/images/x_button_blue2.png HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3365192051533074&output=html&h=250&slotname=8372913748&adk=467145234&adf=807048394&w=300&lmt=1507855894&loeid=156549054&format=300x250&url=https%3A%2F%2Fcertificationexamanswers.blogspot.no%2F&ea=0&flash=10.0.45&avail_w=880&wgl=0&dt=1507860222440&bpp=26&fdt=38&idt=1099&shv=r20171011&cbv=r20170110&saldr=aa&correlator=7222960463198&frm=20&ga_vid=661278695.1507860224&ga_sid=1507860224&ga_hid=1518172835&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=140&ady=254&biw=1159&bih=754&abxe=1&eid=156549044%2C21061122&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=f&pfx=0&fu=16&bc=1&ifi=1&dtd=1780

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 12 Oct 2017 15:01:07 GMT
Expires: Fri, 13 Oct 2017 15:01:07 GMT
Etag: 291775052866240956
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 145
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400
Age: 39759
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 16 x 15, 8-bit/color RGB, non-interlaced
Size:   145
Md5:    60b7612b7cde75ce329db6a6b0415b23
Sha1:   66c106bf496bb1ca11ecd7dda5816b36e7165a0e
Sha256: bc8347bb6ce7622050ab41f67dda0513db000d96158eceab4cfc01963d27fa58
                                        
                                            GET /se/0/_/+1/fastbutton?usegapi=1&annotation=inline&width=300&size=medium&source=blogger%3Ablog%3Aplusone&hl=en&origin=https%3A%2F%2Fcertificationexamanswers.blogspot.no&url=http%3A%2F%2Fcertificationexamanswers.blogspot.com%2F2017%2F10%2Fpuede-utilizar-el-planificador-para-la.html&gsrc=3p&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://certificationexamanswers.blogspot.no/
Cookie: NID=114=ztLinOVx3nuIrP15lMP-MnJMrwnG4twXFotpZHWPbBVKUJwhL_ZMY6OKltdoaQ3v8cg4AJAjvnH3X6k99PxQSgl5dvq7rFNC6AMXjZ7fb-WG8lwZCiJAhUPr21qD42hq

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Vary: Accept-Encoding
Timing-Allow-Origin: *
Expires: Fri, 13 Oct 2017 02:03:46 GMT
Date: Fri, 13 Oct 2017 02:03:46 GMT
Cache-Control: private, max-age=3600
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4061
Md5:    bcfeff0522b5ef226abb0703d95a56e1
Sha1:   498980ba202cbc9d1b6882afe5e6e22a86b8518f
Sha256: b7cb18e4f14d8bf6209a37e8908bee123f2cad9ef57a889892b364f29f3e1227
                                        
                                            GET /pagead/js/r20171011/r20110914/activeview/osd_listener.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3365192051533074&output=html&h=250&slotname=8372913748&adk=500402437&adf=807048394&w=300&lmt=1507855894&loeid=156549054&format=300x250&url=https%3A%2F%2Fcertificationexamanswers.blogspot.no%2F&ea=0&flash=10.0.45&avail_w=250&wgl=0&dt=1507860223208&bpp=77&fdt=1058&idt=1146&shv=r20171011&cbv=r20170110&saldr=aa&prev_fmts=300x250&correlator=7222960463198&frm=20&ga_vid=661278695.1507860224&ga_sid=1507860224&ga_hid=1518172835&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=770&ady=617&biw=1159&bih=754&abxe=1&eid=156549044%2C21061122&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=f&pfx=0&fu=16&bc=1&ifi=2&dtd=1174

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Wed, 11 Oct 2017 14:55:38 GMT
Expires: Wed, 25 Oct 2017 14:55:38 GMT
Etag: 8793262466672836579
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 13057
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 126488
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   13057
Md5:    e494187b2ec57182d9f8d356c3c5be0c
Sha1:   6c5bace75d4b8549db1aa9254fb6a4380e09b83f
Sha256: 05f7d53ad13376c6a6bde1ba2faa0e15e88d7b8b84d412a48bce236cb13c4010
                                        
                                            GET /pagead/js/r20171011/r20110914/client/ext/m_qs_click_protection.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3365192051533074&output=html&h=250&slotname=8372913748&adk=500402437&adf=807048394&w=300&lmt=1507855894&loeid=156549054&format=300x250&url=https%3A%2F%2Fcertificationexamanswers.blogspot.no%2F&ea=0&flash=10.0.45&avail_w=250&wgl=0&dt=1507860223208&bpp=77&fdt=1058&idt=1146&shv=r20171011&cbv=r20170110&saldr=aa&prev_fmts=300x250&correlator=7222960463198&frm=20&ga_vid=661278695.1507860224&ga_sid=1507860224&ga_hid=1518172835&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=770&ady=617&biw=1159&bih=754&abxe=1&eid=156549044%2C21061122&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=f&pfx=0&fu=16&bc=1&ifi=2&dtd=1174

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Wed, 11 Oct 2017 21:56:31 GMT
Expires: Wed, 25 Oct 2017 21:56:31 GMT
Etag: 9566754754863973915
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 3648
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 101235
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   3648
Md5:    ae83c6831051fa005b0183ed93561065
Sha1:   a456bc8023b55f1972d00f9b8515d7a6ec157109
Sha256: f23a56e02c8a4ba7f9a735326ed5a2cfb12c41524c4d5b3ba9713530d6cb0302
                                        
                                            GET /pagead/js/r20171011/r20110914/client/ext/m_window_focus_non_hydra.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3365192051533074&output=html&h=250&slotname=8372913748&adk=500402437&adf=807048394&w=300&lmt=1507855894&loeid=156549054&format=300x250&url=https%3A%2F%2Fcertificationexamanswers.blogspot.no%2F&ea=0&flash=10.0.45&avail_w=250&wgl=0&dt=1507860223208&bpp=77&fdt=1058&idt=1146&shv=r20171011&cbv=r20170110&saldr=aa&prev_fmts=300x250&correlator=7222960463198&frm=20&ga_vid=661278695.1507860224&ga_sid=1507860224&ga_hid=1518172835&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=770&ady=617&biw=1159&bih=754&abxe=1&eid=156549044%2C21061122&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=f&pfx=0&fu=16&bc=1&ifi=2&dtd=1174

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Wed, 11 Oct 2017 14:55:38 GMT
Expires: Wed, 25 Oct 2017 14:55:38 GMT
Etag: 11176212102450413199
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 1218
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 126488
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   1218
Md5:    3e1fe1160846d42504041240ac99abe1
Sha1:   02ec6880848b4f1926bf63676be67f24c15be952
Sha256: 14d566db627806fc4353b915bab1ac3c5b2737cede5cd0b4a3a9a673a92ea183
                                        
                                            GET /simgad/14289093665610449276 HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3365192051533074&output=html&h=250&slotname=8372913748&adk=467145234&adf=807048394&w=300&lmt=1507855894&loeid=156549054&format=300x250&url=https%3A%2F%2Fcertificationexamanswers.blogspot.no%2F&ea=0&flash=10.0.45&avail_w=880&wgl=0&dt=1507860222440&bpp=26&fdt=38&idt=1099&shv=r20171011&cbv=r20170110&saldr=aa&correlator=7222960463198&frm=20&ga_vid=661278695.1507860224&ga_sid=1507860224&ga_hid=1518172835&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=140&ady=254&biw=1159&bih=754&abxe=1&eid=156549044%2C21061122&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=f&pfx=0&fu=16&bc=1&ifi=1&dtd=1780

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 40437
Date: Mon, 11 Sep 2017 07:00:01 GMT
Expires: Tue, 11 Sep 2018 07:00:01 GMT
Last-Modified: Wed, 30 Nov 2016 20:04:50 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 2747025
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   40437
Md5:    d16a2005e3bd1e8d79bd6d3df20fdd57
Sha1:   a9a343bf4354dd11c9d6dbdcc5bcba95d4dff242
Sha256: b317a8bd4de522f296c456fac6a7e2ed9224035bd5b81951e8e00fc5665eee5e
                                        
                                            GET /se/0/_/+1/fastbutton?usegapi=1&annotation=inline&width=300&size=medium&source=blogger%3Ablog%3Aplusone&hl=en&origin=https%3A%2F%2Fcertificationexamanswers.blogspot.no&url=http%3A%2F%2Fcertificationexamanswers.blogspot.com%2F2017%2F10%2Fla-investigacion-para-un-cliente.html&gsrc=3p&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://certificationexamanswers.blogspot.no/
Cookie: NID=114=ztLinOVx3nuIrP15lMP-MnJMrwnG4twXFotpZHWPbBVKUJwhL_ZMY6OKltdoaQ3v8cg4AJAjvnH3X6k99PxQSgl5dvq7rFNC6AMXjZ7fb-WG8lwZCiJAhUPr21qD42hq

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Vary: Accept-Encoding
Timing-Allow-Origin: *
Expires: Fri, 13 Oct 2017 02:03:46 GMT
Date: Fri, 13 Oct 2017 02:03:46 GMT
Cache-Control: private, max-age=3600
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4054
Md5:    da8a68c5f8db6932415de7aa05612f09
Sha1:   14b72252c195658e9dafb1abc4e4ce54c18b0a65
Sha256: 4ebdd6ac9d189dcca02a06dc974686ca68035ccd054ce9b0344baad7bad41356
                                        
                                            GET /simgad/4045387196429232013 HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3365192051533074&output=html&h=250&slotname=8372913748&adk=500402437&adf=807048394&w=300&lmt=1507855894&loeid=156549054&format=300x250&url=https%3A%2F%2Fcertificationexamanswers.blogspot.no%2F&ea=0&flash=10.0.45&avail_w=250&wgl=0&dt=1507860223208&bpp=77&fdt=1058&idt=1146&shv=r20171011&cbv=r20170110&saldr=aa&prev_fmts=300x250&correlator=7222960463198&frm=20&ga_vid=661278695.1507860224&ga_sid=1507860224&ga_hid=1518172835&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=770&ady=617&biw=1159&bih=754&abxe=1&eid=156549044%2C21061122&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=f&pfx=0&fu=16&bc=1&ifi=2&dtd=1174

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 39727
Date: Mon, 18 Sep 2017 07:00:03 GMT
Expires: Tue, 18 Sep 2018 07:00:03 GMT
Last-Modified: Wed, 30 Nov 2016 20:04:59 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 2142223
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   39727
Md5:    fc03d9828e8e0b1d61445e9fb2a9cbfa
Sha1:   54d6773ecba9ef692e2bc163289720d9d7a9fa44
Sha256: 09d019fdf9d7da57cae9f1038c0c3bb5a01b9833e5c33e877b3382aee5c8c8bb
                                        
                                            GET /se/0/_/+1/fastbutton?usegapi=1&annotation=inline&width=300&size=medium&source=blogger%3Ablog%3Aplusone&hl=en&origin=https%3A%2F%2Fcertificationexamanswers.blogspot.no&url=http%3A%2F%2Fcertificationexamanswers.blogspot.com%2F2017%2F10%2Fcomo-puede-lograr-una-posicion-del.html&gsrc=3p&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://certificationexamanswers.blogspot.no/
Cookie: NID=114=ztLinOVx3nuIrP15lMP-MnJMrwnG4twXFotpZHWPbBVKUJwhL_ZMY6OKltdoaQ3v8cg4AJAjvnH3X6k99PxQSgl5dvq7rFNC6AMXjZ7fb-WG8lwZCiJAhUPr21qD42hq

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Vary: Accept-Encoding
Timing-Allow-Origin: *
Expires: Fri, 13 Oct 2017 02:03:46 GMT
Date: Fri, 13 Oct 2017 02:03:46 GMT
Cache-Control: private, max-age=3600
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4059
Md5:    93a1c2fe59e2a44a149f51f0e15a963a
Sha1:   521b32f275fe77a5c7573a00c6004ca4a46636da
Sha256: 7bd6c40d4614a8842fbdd53d15b55c94bba9068ce1c29e234735bbbea9dc3413
                                        
                                            GET /se/0/_/+1/fastbutton?usegapi=1&annotation=inline&width=300&size=medium&source=blogger%3Ablog%3Aplusone&hl=en&origin=https%3A%2F%2Fcertificationexamanswers.blogspot.no&url=http%3A%2F%2Fcertificationexamanswers.blogspot.com%2F2017%2F10%2Fla-cuenta-de-adwords-de-su-nuevo.html&gsrc=3p&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://certificationexamanswers.blogspot.no/
Cookie: NID=114=ztLinOVx3nuIrP15lMP-MnJMrwnG4twXFotpZHWPbBVKUJwhL_ZMY6OKltdoaQ3v8cg4AJAjvnH3X6k99PxQSgl5dvq7rFNC6AMXjZ7fb-WG8lwZCiJAhUPr21qD42hq

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Vary: Accept-Encoding
Timing-Allow-Origin: *
Expires: Fri, 13 Oct 2017 02:03:46 GMT
Date: Fri, 13 Oct 2017 02:03:46 GMT
Cache-Control: private, max-age=3600
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4058
Md5:    15b1626959953bfc1daa6cc4809e5363
Sha1:   3057e2ed436e0ea1ca8911e735ab5c7ff9e25068
Sha256: 7b7a5e45b8542557e86b42f31fde549ef98b77ef7ceafa1e7df80957da21596a
                                        
                                            GET /se/0/_/+1/fastbutton?usegapi=1&annotation=inline&width=300&size=medium&source=blogger%3Ablog%3Aplusone&hl=en&origin=https%3A%2F%2Fcertificationexamanswers.blogspot.no&url=http%3A%2F%2Fcertificationexamanswers.blogspot.com%2F2017%2F10%2Fcual-es-una-de-las-ventajas-de-crear.html&gsrc=3p&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://certificationexamanswers.blogspot.no/
Cookie: NID=114=ztLinOVx3nuIrP15lMP-MnJMrwnG4twXFotpZHWPbBVKUJwhL_ZMY6OKltdoaQ3v8cg4AJAjvnH3X6k99PxQSgl5dvq7rFNC6AMXjZ7fb-WG8lwZCiJAhUPr21qD42hq

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Vary: Accept-Encoding
Timing-Allow-Origin: *
Expires: Fri, 13 Oct 2017 02:03:46 GMT
Date: Fri, 13 Oct 2017 02:03:46 GMT
Cache-Control: private, max-age=3600
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4061
Md5:    c6245002f2088f2b393219bdb2f882a3
Sha1:   a3a951e5e0e179a57fe4840fce62f7ce66277ac4
Sha256: c7f7114efea7c12b5fd751a3abc476682a31c3af1f59c50b01b2cf1ab7a56108
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://certificationexamanswers.blogspot.no/
Cookie: NID=114=ztLinOVx3nuIrP15lMP-MnJMrwnG4twXFotpZHWPbBVKUJwhL_ZMY6OKltdoaQ3v8cg4AJAjvnH3X6k99PxQSgl5dvq7rFNC6AMXjZ7fb-WG8lwZCiJAhUPr21qD42hq

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 46907
Date: Thu, 12 Oct 2017 19:31:29 GMT
Expires: Fri, 12 Oct 2018 19:31:29 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 23537
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   46907
Md5:    663da4522821133a5116f57abe7d6a86
Sha1:   1b157f22c825d5bee65867d2709bfcbb4c04a086
Sha256: 8010ae2811b2cf468d24a4e896dcdcd1457c10af769525ad1928c502b56550fb
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=auth/exm=plusone/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_1 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://certificationexamanswers.blogspot.no/
Cookie: NID=114=ztLinOVx3nuIrP15lMP-MnJMrwnG4twXFotpZHWPbBVKUJwhL_ZMY6OKltdoaQ3v8cg4AJAjvnH3X6k99PxQSgl5dvq7rFNC6AMXjZ7fb-WG8lwZCiJAhUPr21qD42hq

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 25913
Date: Thu, 12 Oct 2017 19:31:33 GMT
Expires: Fri, 12 Oct 2018 19:31:33 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 23533
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   25913
Md5:    fd21efbec11b2c67b8f0854cbf4311a8
Sha1:   9aa980fab60d633d2f06f6f87886897d736e3347
Sha256: dfff7a03b55ac90c8634260f6386ca821b39cc5dcbf3209d672f6fac6544e293
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=googleapis_client,gapi_iframes_style_common,gapi_iframes_iframer/am=AQ/rt=j/d=1/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://apis.google.com/se/0/_/+1/fastbutton?usegapi=1&annotation=inline&width=300&size=medium&source=blogger%3Ablog%3Aplusone&hl=en&origin=https%3A%2F%2Fcertificationexamanswers.blogspot.no&url=http%3A%2F%2Fcertificationexamanswers.blogspot.com%2F2017%2F10%2Fpuede-utilizar-el-planificador-para-la.html&gsrc=3p&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=ztLinOVx3nuIrP15lMP-MnJMrwnG4twXFotpZHWPbBVKUJwhL_ZMY6OKltdoaQ3v8cg4AJAjvnH3X6k99PxQSgl5dvq7rFNC6AMXjZ7fb-WG8lwZCiJAhUPr21qD42hq

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 44716
Date: Thu, 12 Oct 2017 18:17:58 GMT
Expires: Fri, 12 Oct 2018 18:17:58 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 27948
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   44716
Md5:    95050c9c51441ce7aedcb15c820b1b6f
Sha1:   069e96a92ce71a14833c53bd3516f5f8a2556d91
Sha256: 1da03bc638069e15274f8bcf41401e46837ceea995075934702afc3aa9e5a933
                                        
                                            GET /pagead/ads?client=ca-pub-3365192051533074&output=html&h=280&slotname=9455629345&adk=3598545051&adf=807048394&w=336&lmt=1507855894&loeid=156549054&format=336x280&url=https%3A%2F%2Fcertificationexamanswers.blogspot.no%2F&ea=0&flash=10.0.45&wgl=0&dt=1507860224839&bpp=281&fdt=437&idt=575&shv=r20171011&cbv=r20170110&saldr=aa&prev_fmts=300x250%2C300x250%2C300x250&correlator=7222960463198&frm=20&ga_vid=661278695.1507860224&ga_sid=1507860224&ga_hid=1518172835&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=140&ady=6645&biw=1159&bih=754&abxe=1&eid=156549044%2C21061122&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=16&bc=1&ifi=4&dtd=606 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://certificationexamanswers.blogspot.no/
Cookie: test_cookie=CheckForPermission

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 02:03:46 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: IDE=AHWqTUkyYU4l3-JAOnwE7yxffQWxM_3l8neNyUnu_fuNQB5e7CLKtZrWKE5KHCzz; expires=Sun, 13-Oct-2019 02:03:46 GMT; path=/; domain=.doubleclick.net; HttpOnly test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"
Expires: Fri, 13 Oct 2017 02:03:46 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   13722
Md5:    bc043bcc7483eede6953ef381fc99993
Sha1:   a4172bdbe4974839adf89c29dcf5a6c6af0a83e7
Sha256: 1fc3cfc34d8d93483515d41b4aee7c56309f6842b31826603da86c851a6f3aa3
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 02:03:47 GMT
Expires: Tue, 17 Oct 2017 02:03:47 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    92dbc24ab6be8fe2229f565bbaaa5239
Sha1:   3fc703d7c12e25364fc1a28ddd805de62e99483b
Sha256: 8a7451683d04862490c4d6af4681228cfe100407c6a2572c4d60814def8f43be
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=114=ztLinOVx3nuIrP15lMP-MnJMrwnG4twXFotpZHWPbBVKUJwhL_ZMY6OKltdoaQ3v8cg4AJAjvnH3X6k99PxQSgl5dvq7rFNC6AMXjZ7fb-WG8lwZCiJAhUPr21qD42hq

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 02:03:47 GMT
Expires: Tue, 17 Oct 2017 02:03:47 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    65bf0ed4b0957ee8e1e8736075f55f49
Sha1:   54c294acd3ebcf4ea1c6a988433c88f36ede15f8
Sha256: 77e863bf91b6c43b88d18985f1310e776ae8a062c6bf7a9b3705b1894449ae3f
                                        
                                            GET /pagead/js/r20171011/r20110914/abg.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3365192051533074&output=html&h=250&slotname=8372913748&adk=467145234&adf=807048394&w=300&lmt=1507855894&loeid=156549054&format=300x250&url=https%3A%2F%2Fcertificationexamanswers.blogspot.no%2F&ea=0&flash=10.0.45&avail_w=880&wgl=0&dt=1507860222440&bpp=26&fdt=38&idt=1099&shv=r20171011&cbv=r20170110&saldr=aa&correlator=7222960463198&frm=20&ga_vid=661278695.1507860224&ga_sid=1507860224&ga_hid=1518172835&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=140&ady=254&biw=1159&bih=754&abxe=1&eid=156549044%2C21061122&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=f&pfx=0&fu=16&bc=1&ifi=1&dtd=1780

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Wed, 11 Oct 2017 14:55:38 GMT
Expires: Wed, 25 Oct 2017 14:55:38 GMT
Etag: 16015504446091943127
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 25075
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 126489
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   25075
Md5:    a03d88a9e456417644032fa19b791050
Sha1:   cf2e160c03fec960af338b9f95aa32f86d30e88c
Sha256: b12f58217d43100ef41209523e5e4eb8562b5c33ce4a4e00f698036faf575b07
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://certificationexamanswers.blogspot.no/

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Fri, 13 Oct 2017 01:50:39 GMT
Expires: Fri, 13 Oct 2017 03:50:39 GMT
Last-Modified: Thu, 28 Sep 2017 22:31:34 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 14089
Cache-Control: public, max-age=7200
Age: 788
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   14089
Md5:    7b1f226d2f5f01597e62889513d4bc8c
Sha1:   ff78ed289a65fa3c91b0ff470fb0c6536bcab745
Sha256: 80eeeea7639a7b6a6205b8862b9060a7c60da47855e8dd9c74e64b0a0fce8b9a
                                        
                                            GET /se/0/_/+1/fastbutton?usegapi=1&annotation=inline&width=300&size=medium&source=blogger%3Ablog%3Aplusone&hl=en&origin=https%3A%2F%2Fcertificationexamanswers.blogspot.no&url=http%3A%2F%2Fcertificationexamanswers.blogspot.com%2F2017%2F10%2Fel-objetivo-comercial-de-ana-maria-es.html&gsrc=3p&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://certificationexamanswers.blogspot.no/
Cookie: NID=114=ztLinOVx3nuIrP15lMP-MnJMrwnG4twXFotpZHWPbBVKUJwhL_ZMY6OKltdoaQ3v8cg4AJAjvnH3X6k99PxQSgl5dvq7rFNC6AMXjZ7fb-WG8lwZCiJAhUPr21qD42hq

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Vary: Accept-Encoding
Timing-Allow-Origin: *
Expires: Fri, 13 Oct 2017 02:03:46 GMT
Date: Fri, 13 Oct 2017 02:03:46 GMT
Cache-Control: private, max-age=3600
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4062
Md5:    2a7d6099448f26bd891226fa61d18f8a
Sha1:   7bb2f7912a5c954df4bd9fc2f294744f0bb90663
Sha256: 48f717862e68cf2934345024880fbd6927e258069de3d73c3d5fcc972113650f
                                        
                                            GET /o/oauth2/postmessageRelay?parent=https%3A%2F%2Fcertificationexamanswers.blogspot.no&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: accounts.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://certificationexamanswers.blogspot.no/
Cookie: NID=114=ztLinOVx3nuIrP15lMP-MnJMrwnG4twXFotpZHWPbBVKUJwhL_ZMY6OKltdoaQ3v8cg4AJAjvnH3X6k99PxQSgl5dvq7rFNC6AMXjZ7fb-WG8lwZCiJAhUPr21qD42hq

                                         
                                         172.217.22.173
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Expires: Sat, 14 Oct 2017 02:03:47 GMT
Date: Fri, 13 Oct 2017 02:03:47 GMT
Cache-Control: public, max-age=86400
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   362
Md5:    eb14e00b20b14932506c65c49d4c6bbb
Sha1:   a8d83f33b629cce4f89f838ff1eb42db9b5f6d1e
Sha256: 974ae3e53c341df4cbabb69c56636d780a8e6d2850eb85e915e24a856b2fb99b
                                        
                                            GET /se/0/_/+1/fastbutton?usegapi=1&annotation=inline&width=300&size=medium&source=blogger%3Ablog%3Aplusone&hl=en&origin=https%3A%2F%2Fcertificationexamanswers.blogspot.no&url=http%3A%2F%2Fcertificationexamanswers.blogspot.com%2F2017%2F10%2Fcual-de-los-siguientes-elementos-no-es_12.html&gsrc=3p&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://certificationexamanswers.blogspot.no/
Cookie: NID=114=ztLinOVx3nuIrP15lMP-MnJMrwnG4twXFotpZHWPbBVKUJwhL_ZMY6OKltdoaQ3v8cg4AJAjvnH3X6k99PxQSgl5dvq7rFNC6AMXjZ7fb-WG8lwZCiJAhUPr21qD42hq

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Vary: Accept-Encoding
Timing-Allow-Origin: *
Expires: Fri, 13 Oct 2017 02:03:48 GMT
Date: Fri, 13 Oct 2017 02:03:48 GMT
Cache-Control: private, max-age=3600
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4064
Md5:    11b2aa032760bcb1166dcc2b8172843b
Sha1:   2f0ffb6630c7d408085359c7366b8ad222d9ced0
Sha256: 178b27bfaf4ecb1a00364028abbbd571f33f69c9845bf61a98b92fb108b8644d
                                        
                                            GET /activeview?avi=B4McYAB_gWf7DJIqeYe_Zk_ADAJWSpr3NBQAAEAE4AcgBAsgDyQSgBgLSCAUIgGEQAcITBhjv9Y7bAw&id=osdim&ti=1&uc=0&tgt=nf&cl=0&r=pv&v=r20171011 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3365192051533074&output=html&h=250&slotname=8372913748&adk=467145234&adf=807048394&w=300&lmt=1507855894&loeid=156549054&format=300x250&url=https%3A%2F%2Fcertificationexamanswers.blogspot.no%2F&ea=0&flash=10.0.45&avail_w=880&wgl=0&dt=1507860222440&bpp=26&fdt=38&idt=1099&shv=r20171011&cbv=r20170110&saldr=aa&correlator=7222960463198&frm=20&ga_vid=661278695.1507860224&ga_sid=1507860224&ga_hid=1518172835&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=140&ady=254&biw=1159&bih=754&abxe=1&eid=156549044%2C21061122&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=f&pfx=0&fu=16&bc=1&ifi=1&dtd=1780

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Fri, 13 Oct 2017 02:03:48 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/drt/s?v=r20120211 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3365192051533074&output=html&h=250&slotname=8372913748&adk=467145234&adf=807048394&w=300&lmt=1507855894&loeid=156549054&format=300x250&url=https%3A%2F%2Fcertificationexamanswers.blogspot.no%2F&ea=0&flash=10.0.45&avail_w=880&wgl=0&dt=1507860222440&bpp=26&fdt=38&idt=1099&shv=r20171011&cbv=r20170110&saldr=aa&correlator=7222960463198&frm=20&ga_vid=661278695.1507860224&ga_sid=1507860224&ga_hid=1518172835&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=140&ady=254&biw=1159&bih=754&abxe=1&eid=156549044%2C21061122&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=f&pfx=0&fu=16&bc=1&ifi=1&dtd=1780
Cookie: IDE=AHWqTUkyYU4l3-JAOnwE7yxffQWxM_3l8neNyUnu_fuNQB5e7CLKtZrWKE5KHCzz

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 01:50:42 GMT
Server: safe
Content-Length: 145
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=3600
Age: 786
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   145
Md5:    92235b51835ea17fa6d313a73f3c2b8f
Sha1:   1e310139fd2be77b54f39c7c64e1616fd35785ad
Sha256: 2cf3e738572a24733a96c3be1d798e95e2bff434d37d6f28cde31ce53df8e333
                                        
                                            GET /pagead/images/transparent.png HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3365192051533074&output=html&h=250&slotname=8372913748&adk=467145234&adf=807048394&w=300&lmt=1507855894&loeid=156549054&format=300x250&url=https%3A%2F%2Fcertificationexamanswers.blogspot.no%2F&ea=0&flash=10.0.45&avail_w=880&wgl=0&dt=1507860222440&bpp=26&fdt=38&idt=1099&shv=r20171011&cbv=r20170110&saldr=aa&correlator=7222960463198&frm=20&ga_vid=661278695.1507860224&ga_sid=1507860224&ga_hid=1518172835&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=140&ady=254&biw=1159&bih=754&abxe=1&eid=156549044%2C21061122&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=f&pfx=0&fu=16&bc=1&ifi=1&dtd=1780

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 12 Oct 2017 11:20:49 GMT
Expires: Fri, 13 Oct 2017 11:20:49 GMT
Etag: 2462972746714251406
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 67
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400
Age: 52979
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 1 x 1, 8-bit/color RGBA, non-interlaced
Size:   67
Md5:    3f318b569cc43578a73d1c38270b6857
Sha1:   244717a495885a727dc67313ebb1ef7b447dfe7d
Sha256: bdf72009ad226c17f1954ba602292902a780b80af07dbcbab1322bdf5c32be66
                                        
                                            GET /daca_images/simgad/13028247163045026419 HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3365192051533074&output=html&h=280&slotname=9455629345&adk=3598545051&adf=807048394&w=336&lmt=1507855894&loeid=156549054&format=336x280&url=https%3A%2F%2Fcertificationexamanswers.blogspot.no%2F&ea=0&flash=10.0.45&wgl=0&dt=1507860224839&bpp=281&fdt=437&idt=575&shv=r20171011&cbv=r20170110&saldr=aa&prev_fmts=300x250%2C300x250%2C300x250&correlator=7222960463198&frm=20&ga_vid=661278695.1507860224&ga_sid=1507860224&ga_hid=1518172835&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=140&ady=6645&biw=1159&bih=754&abxe=1&eid=156549044%2C21061122&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=16&bc=1&ifi=4&dtd=606

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 93660
Date: Sun, 08 Oct 2017 22:01:20 GMT
Expires: Mon, 08 Oct 2018 22:01:20 GMT
Last-Modified: Fri, 11 Aug 2017 09:02:33 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 360147
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 336 x 280, 8-bit/color RGB, non-interlaced
Size:   93660
Md5:    1567cf207bd47ddef2572badd2db7290
Sha1:   1c5d71afdf2bafbede2d5bf2839ccfd84f03eca3
Sha256: ee82d67a2777b35bc655e8de5edc39056b9954514cf273db5b8273cd341a749d
                                        
                                            GET /pagead/images/adchoices/iconx2-000000.png HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3365192051533074&output=html&h=250&slotname=8372913748&adk=467145234&adf=807048394&w=300&lmt=1507855894&loeid=156549054&format=300x250&url=https%3A%2F%2Fcertificationexamanswers.blogspot.no%2F&ea=0&flash=10.0.45&avail_w=880&wgl=0&dt=1507860222440&bpp=26&fdt=38&idt=1099&shv=r20171011&cbv=r20170110&saldr=aa&correlator=7222960463198&frm=20&ga_vid=661278695.1507860224&ga_sid=1507860224&ga_hid=1518172835&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=140&ady=254&biw=1159&bih=754&abxe=1&eid=156549044%2C21061122&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=f&pfx=0&fu=16&bc=1&ifi=1&dtd=1780
Cookie: IDE=AHWqTUkyYU4l3-JAOnwE7yxffQWxM_3l8neNyUnu_fuNQB5e7CLKtZrWKE5KHCzz

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: image/png
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Thu, 12 Oct 2017 18:31:58 GMT
Expires: Fri, 13 Oct 2017 18:31:58 GMT
Etag: 7710300208861385503
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 557
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400
Age: 27110
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 30 x 30, 8-bit/color RGBA, non-interlaced
Size:   557
Md5:    c359423d4fa28db149f53fb24731f3d1
Sha1:   8ca7259698e7139f90c54376066cdd1f3ae2e578
Sha256: 43d42ce3a326d3e4ea65c77ba91b1e9d39a8c8fa3da09aa17deb046b27113d68
                                        
                                            GET /r/collect?v=1&_v=j64&a=1518172835&t=pageview&_s=1&dl=https%3A%2F%2Fcertificationexamanswers.blogspot.no%2F&ul=en-us&de=UTF-8&dt=Certification%20Exam%20Answers&sd=24-bit&sr=1176x885&vp=1159x754&je=1&fl=10.0%20r45&_u=IAhAAEQAI~&jid=2071336141&gjid=1413819800&cid=661278695.1507860224&tid=UA-102024475-1&_gid=116679916.1507860228&_r=1&z=1655446933 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://certificationexamanswers.blogspot.no/

                                         
                                         172.217.22.174
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-102024475-1&cid=661278695.1507860224&jid=2071336141&_gid=116679916.1507860228&gjid=1413819800&_v=j64&z=1655446933
Access-Control-Allow-Origin: *
Date: Fri, 13 Oct 2017 02:03:48 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Server: Golfe2
Content-Length: 419
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  HTML document text
Size:   419
Md5:    a2fb5d2fc694fa5bc04c16893e493c37
Sha1:   002e3e24f929f71654e47a5a128777b1231ff363
Sha256: fd5668defc18386d9bf244d85e40d6e7ac463a317c394ad581dcbe0ba0a5e36a
                                        
                                            GET /images/branding/googlelogo/2x/googlelogo_dark_color_84x28dp.png HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3365192051533074&output=html&h=250&slotname=8372913748&adk=467145234&adf=807048394&w=300&lmt=1507855894&loeid=156549054&format=300x250&url=https%3A%2F%2Fcertificationexamanswers.blogspot.no%2F&ea=0&flash=10.0.45&avail_w=880&wgl=0&dt=1507860222440&bpp=26&fdt=38&idt=1099&shv=r20171011&cbv=r20170110&saldr=aa&correlator=7222960463198&frm=20&ga_vid=661278695.1507860224&ga_sid=1507860224&ga_hid=1518172835&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=140&ady=254&biw=1159&bih=754&abxe=1&eid=156549044%2C21061122&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=f&pfx=0&fu=16&bc=1&ifi=1&dtd=1780

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 1796
Date: Thu, 12 Oct 2017 18:15:22 GMT
Expires: Fri, 12 Oct 2018 18:15:22 GMT
Last-Modified: Wed, 04 Jan 2017 15:45:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 28107
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 168 x 56, 8-bit gray+alpha, non-interlaced
Size:   1796
Md5:    2f9aeeb8a52a48b0a82d2c9553e25e0e
Sha1:   f70f7af90f3d368822d17d6805ea9de47371450e
Sha256: e5c2769cc0c017cdf5046fc91cf37255c139a06ddfd50c7814bd5921e0e30c29
                                        
                                            GET /activeview?avi=B4eHFAB_gWduOKouPZrCQi7AMAOWXpr3NBQAAEAE4AcgBAsgDyQSgBgLSCAUIgGEQAcITBhjv9Y7bAw&id=osdim&ti=1&uc=0&tgt=nf&cl=0&r=pv&v=r20171011 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3365192051533074&output=html&h=250&slotname=8372913748&adk=500402437&adf=807048394&w=300&lmt=1507855894&loeid=156549054&format=300x250&url=https%3A%2F%2Fcertificationexamanswers.blogspot.no%2F&ea=0&flash=10.0.45&avail_w=250&wgl=0&dt=1507860223208&bpp=77&fdt=1058&idt=1146&shv=r20171011&cbv=r20170110&saldr=aa&prev_fmts=300x250&correlator=7222960463198&frm=20&ga_vid=661278695.1507860224&ga_sid=1507860224&ga_hid=1518172835&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=770&ady=617&biw=1159&bih=754&abxe=1&eid=156549044%2C21061122&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=f&pfx=0&fu=16&bc=1&ifi=2&dtd=1174

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Fri, 13 Oct 2017 02:03:49 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=114=ztLinOVx3nuIrP15lMP-MnJMrwnG4twXFotpZHWPbBVKUJwhL_ZMY6OKltdoaQ3v8cg4AJAjvnH3X6k99PxQSgl5dvq7rFNC6AMXjZ7fb-WG8lwZCiJAhUPr21qD42hq

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 02:03:49 GMT
Expires: Tue, 17 Oct 2017 02:03:49 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    3d8a495b74c7e4f064054e25fa981bbb
Sha1:   967568074161c120ae20fce669433f561c4360b5
Sha256: 3bb1a9acb7ad7cb6fbf7e13e4673125c602994c91ae6c7dfb3a0fcf302266daa
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=114=ztLinOVx3nuIrP15lMP-MnJMrwnG4twXFotpZHWPbBVKUJwhL_ZMY6OKltdoaQ3v8cg4AJAjvnH3X6k99PxQSgl5dvq7rFNC6AMXjZ7fb-WG8lwZCiJAhUPr21qD42hq

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 02:03:49 GMT
Expires: Tue, 17 Oct 2017 02:03:49 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    119b8311b68429439f2c844523b4111f
Sha1:   09a05f77b21a16cecd71af3adc6bde801b23cc3f
Sha256: 26284e070967ca03b67908a38bbee4fadfcde4efe19dff61e125cd3794df02d0
                                        
                                            GET /r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-102024475-1&cid=661278695.1507860224&jid=2071336141&_gid=116679916.1507860228&gjid=1413819800&_v=j64&z=1655446933 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://certificationexamanswers.blogspot.no/
Cookie: IDE=AHWqTUkyYU4l3-JAOnwE7yxffQWxM_3l8neNyUnu_fuNQB5e7CLKtZrWKE5KHCzz

                                         
                                         173.194.220.154
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Date: Fri, 13 Oct 2017 02:03:49 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /v6exp3/redir.html HTTP/1.1 
Host: p4-hjicyvhb3uhk4-4ai2r44mdb6ogazc-if-v6exp3-v4.metric.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3365192051533074&output=html&h=250&slotname=8372913748&adk=304021748&adf=807048394&w=300&lmt=1507855894&loeid=156549054&format=300x250&url=https%3A%2F%2Fcertificationexamanswers.blogspot.no%2F&ea=0&flash=10.0.45&avail_w=250&wgl=0&dt=1507860223295&bpp=100&fdt=1103&idt=1197&shv=r20171011&cbv=r20170110&saldr=aa&prev_fmts=300x250%2C300x250&correlator=7222960463198&frm=20&ga_vid=661278695.1507860224&ga_sid=1507860224&ga_hid=1518172835&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=770&ady=5130&biw=1159&bih=754&abxe=1&eid=156549044%2C21061122&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=16&bc=1&ifi=3&dtd=1221

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Length: 175
Date: Fri, 13 Oct 2017 02:03:49 GMT
Expires: Fri, 13 Oct 2017 02:03:49 GMT
Cache-Control: public, max-age=0
Last-Modified: Thu, 21 Apr 2016 03:17:22 GMT
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: sffe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   175
Md5:    9a4929ef57c1b5a14e6bdb5da0816d79
Sha1:   9f3a587dd6d6a55fafe4dc535beaf68c25d1f2d0
Sha256: 44ed996596167976716da2dbb25bc59d60914848f161d5fa799af84bce4e517d
                                        
                                            GET /pagead/drt/ui HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: NID=114=ztLinOVx3nuIrP15lMP-MnJMrwnG4twXFotpZHWPbBVKUJwhL_ZMY6OKltdoaQ3v8cg4AJAjvnH3X6k99PxQSgl5dvq7rFNC6AMXjZ7fb-WG8lwZCiJAhUPr21qD42hq

                                         
                                         172.217.22.164
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://googleads.g.doubleclick.net/pagead/drt/si
Cache-Control: private
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 02:03:49 GMT
Server: safe
Content-Length: 246
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  HTML document text
Size:   246
Md5:    12d3bb478cfbdfd43b2451e457c7e45c
Sha1:   311750b25d944af1375dd12d32f8f842f13514a9
Sha256: eb9b81fa102425307404e896040d2b2c3dbbc913dfc5315e97a2b4bfc321c7c8
                                        
                                            GET /activeview?avi=Bgs0-AB_gWd6cKpGJZoOVheANAPukxe7hBQAAEAE4AcgBAsgDyQSgBgLSCAUIgGEQAcITBhjv9Y7bAw&id=osdim&ti=1&uc=0&tgt=nf&cl=0&r=pv&v=r20171011 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3365192051533074&output=html&h=250&slotname=8372913748&adk=304021748&adf=807048394&w=300&lmt=1507855894&loeid=156549054&format=300x250&url=https%3A%2F%2Fcertificationexamanswers.blogspot.no%2F&ea=0&flash=10.0.45&avail_w=250&wgl=0&dt=1507860223295&bpp=100&fdt=1103&idt=1197&shv=r20171011&cbv=r20170110&saldr=aa&prev_fmts=300x250%2C300x250&correlator=7222960463198&frm=20&ga_vid=661278695.1507860224&ga_sid=1507860224&ga_hid=1518172835&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=770&ady=5130&biw=1159&bih=754&abxe=1&eid=156549044%2C21061122&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=16&bc=1&ifi=3&dtd=1221

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Fri, 13 Oct 2017 02:03:49 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /accounts/o/971028622-postmessagerelay.js HTTP/1.1 
Host: ssl.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fcertificationexamanswers.blogspot.no&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4512
Date: Thu, 12 Oct 2017 18:15:26 GMT
Expires: Fri, 12 Oct 2018 18:15:26 GMT
Last-Modified: Wed, 11 Oct 2017 22:34:08 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 28103
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4512
Md5:    c41dc9da703c13b923ba04f7f4dd9137
Sha1:   0c4fc1bdf44857be1104d9eb4c87fcfa88b6a066
Sha256: b0161a7902e960e4de936ed83bfcc4af8b6063d5503ca13edd7eea8f86af03a9
                                        
                                            GET /js/rpc:shindig_random.js?onload=init HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fcertificationexamanswers.blogspot.no&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=ztLinOVx3nuIrP15lMP-MnJMrwnG4twXFotpZHWPbBVKUJwhL_ZMY6OKltdoaQ3v8cg4AJAjvnH3X6k99PxQSgl5dvq7rFNC6AMXjZ7fb-WG8lwZCiJAhUPr21qD42hq

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Timing-Allow-Origin: *
Etag: "862447553fc7f21eefa0f5321e562c86"
Expires: Fri, 13 Oct 2017 02:03:50 GMT
Date: Fri, 13 Oct 2017 02:03:50 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   5456
Md5:    ac397d26c01a6b9c4c4d6abbf610a356
Sha1:   1a8c65bc3c48432c46b2310760c418447d2c3a2a
Sha256: 06d9001b61ee40837e6221e22b1b50401463180d73d293a96418bdebd935fa1d
                                        
                                            GET /pagead/drt/si HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: IDE=AHWqTUkyYU4l3-JAOnwE7yxffQWxM_3l8neNyUnu_fuNQB5e7CLKtZrWKE5KHCzz

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 02:03:50 GMT
Server: safe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Set-Cookie: DSID=NO_DATA; expires=Fri, 13-Oct-2017 03:03:50 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"
Expires: Fri, 13 Oct 2017 02:03:50 GMT
Cache-Control: private


--- Additional Info ---
                                        
                                            GET /v6exp3/iframe.html HTTP/1.1 
Host: p4-hjicyvhb3uhk4-4ai2r44mdb6ogazc-if-v6exp3-v4.metric.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://p4-hjicyvhb3uhk4-4ai2r44mdb6ogazc-if-v6exp3-v4.metric.gstatic.com/v6exp3/redir.html

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2186
Date: Fri, 13 Oct 2017 02:03:50 GMT
Expires: Fri, 13 Oct 2017 02:03:50 GMT
Cache-Control: public, max-age=0
Last-Modified: Mon, 15 May 2017 18:15:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   2186
Md5:    77e77db563692b1313eaa4706aa1ec3e
Sha1:   3589fe3e44b20cb3186a4633dfe8ac848420eb6c
Sha256: dca2b770dfe677aabfabdf427848fa17f705b4b598ccfafd3be47355389e0879
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=rpc,shindig_random/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fcertificationexamanswers.blogspot.no&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=ztLinOVx3nuIrP15lMP-MnJMrwnG4twXFotpZHWPbBVKUJwhL_ZMY6OKltdoaQ3v8cg4AJAjvnH3X6k99PxQSgl5dvq7rFNC6AMXjZ7fb-WG8lwZCiJAhUPr21qD42hq

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 16477
Date: Thu, 12 Oct 2017 18:17:59 GMT
Expires: Fri, 12 Oct 2018 18:17:59 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 27951
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   16477
Md5:    456c107e71e6baabd35161f27bac6414
Sha1:   260083dd624f008fc37e8b3b450e01408e3c16b5
Sha256: e686866e5db4c98de53f2fe74970d3146da36eb3a0ce4b14ba2f6e583cbbe5cc
                                        
                                            GET /pagead/s/cookie_push.html HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3365192051533074&output=html&h=280&slotname=9455629345&adk=3598545051&adf=807048394&w=336&lmt=1507855894&loeid=156549054&format=336x280&url=https%3A%2F%2Fcertificationexamanswers.blogspot.no%2F&ea=0&flash=10.0.45&wgl=0&dt=1507860224839&bpp=281&fdt=437&idt=575&shv=r20171011&cbv=r20170110&saldr=aa&prev_fmts=300x250%2C300x250%2C300x250&correlator=7222960463198&frm=20&ga_vid=661278695.1507860224&ga_sid=1507860224&ga_hid=1518172835&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=140&ady=6645&biw=1159&bih=754&abxe=1&eid=156549044%2C21061122&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=16&bc=1&ifi=4&dtd=606

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 12 Oct 2017 17:04:55 GMT
Expires: Fri, 13 Oct 2017 17:04:55 GMT
Etag: 13472698117776506427
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
Content-Length: 742
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400
Age: 32334
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   742
Md5:    e550a33cfee69dfae0dcf3dc9a16b617
Sha1:   db917798fdba57df233396ef0fd93e97745783bb
Sha256: 648c26f5eb64f36e58cb24e08293274a5be34c4aaba8a1578588dad911e7c8a8
                                        
                                            GET /pagead/drt/ui HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: NID=114=ztLinOVx3nuIrP15lMP-MnJMrwnG4twXFotpZHWPbBVKUJwhL_ZMY6OKltdoaQ3v8cg4AJAjvnH3X6k99PxQSgl5dvq7rFNC6AMXjZ7fb-WG8lwZCiJAhUPr21qD42hq

                                         
                                         172.217.22.164
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://googleads.g.doubleclick.net/pagead/drt/si
Cache-Control: private
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 02:03:50 GMT
Server: safe
Content-Length: 246
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  HTML document text
Size:   246
Md5:    12d3bb478cfbdfd43b2451e457c7e45c
Sha1:   311750b25d944af1375dd12d32f8f842f13514a9
Sha256: eb9b81fa102425307404e896040d2b2c3dbbc913dfc5315e97a2b4bfc321c7c8
                                        
                                            GET /bg/CI_hqThbQjBwoUSK10cIsovHByRI4InaU0wolTzGCLU.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3365192051533074&output=html&h=250&slotname=8372913748&adk=467145234&adf=807048394&w=300&lmt=1507855894&loeid=156549054&format=300x250&url=https%3A%2F%2Fcertificationexamanswers.blogspot.no%2F&ea=0&flash=10.0.45&avail_w=880&wgl=0&dt=1507860222440&bpp=26&fdt=38&idt=1099&shv=r20171011&cbv=r20170110&saldr=aa&correlator=7222960463198&frm=20&ga_vid=661278695.1507860224&ga_sid=1507860224&ga_hid=1518172835&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=140&ady=254&biw=1159&bih=754&abxe=1&eid=156549044%2C21061122&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=f&pfx=0&fu=16&bc=1&ifi=1&dtd=1780

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4704
Date: Thu, 12 Oct 2017 01:20:29 GMT
Expires: Fri, 12 Oct 2018 01:20:29 GMT
Last-Modified: Mon, 09 Oct 2017 08:45:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 89001
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4704
Md5:    bc521259e306c64da951051e6fc8156c
Sha1:   acda8864f8692b9869066c9b1fc2c7b1fd032153
Sha256: 88f0bf3f9944812e62992fa118b7bd3874a1a897d18cd601811847e7500fda42
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Fri, 13 Oct 2017 02:03:50 GMT
Etag: "59dfc2bf-1d7"
Expires: Sun, 15 Oct 2017 02:03:50 GMT
Last-Modified: Thu, 12 Oct 2017 19:30:07 GMT
Server: ECS (arn/459B)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    4af8f3f26a37700e9e360986f686de37
Sha1:   770dd8f88469bbed0717e46cde7ac1f11bdb8d45
Sha256: d98aba0219e7e95655efcf754000c72fb049c79e0eda182c440b143cf9f4bead
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Fri, 13 Oct 2017 02:03:50 GMT
Etag: "59dfb4ca-1d7"
Expires: Sun, 15 Oct 2017 02:03:50 GMT
Last-Modified: Thu, 12 Oct 2017 18:30:34 GMT
Server: ECS (arn/45E2)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    26777dedbd9a32bbf79a4503e22f42f2
Sha1:   862e70a5fade0f66b18010b89c4c62096f15fbd9
Sha256: da7c469f04559126d3b3a48778f85b33367c191d5af8deb09e8024a189d798fb
                                        
                                            GET /pagead/drt/ui HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: NID=114=ztLinOVx3nuIrP15lMP-MnJMrwnG4twXFotpZHWPbBVKUJwhL_ZMY6OKltdoaQ3v8cg4AJAjvnH3X6k99PxQSgl5dvq7rFNC6AMXjZ7fb-WG8lwZCiJAhUPr21qD42hq

                                         
                                         172.217.22.164
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://googleads.g.doubleclick.net/pagead/drt/si
Cache-Control: private
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 02:03:50 GMT
Server: safe
Content-Length: 246
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  HTML document text
Size:   246
Md5:    12d3bb478cfbdfd43b2451e457c7e45c
Sha1:   311750b25d944af1375dd12d32f8f842f13514a9
Sha256: eb9b81fa102425307404e896040d2b2c3dbbc913dfc5315e97a2b4bfc321c7c8
                                        
                                            GET /pagead/drt/si HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: IDE=AHWqTUkyYU4l3-JAOnwE7yxffQWxM_3l8neNyUnu_fuNQB5e7CLKtZrWKE5KHCzz; DSID=NO_DATA

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 02:03:50 GMT
Server: safe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Set-Cookie: DSID=NO_DATA; expires=Fri, 13-Oct-2017 03:03:50 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"
Expires: Fri, 13 Oct 2017 02:03:50 GMT
Cache-Control: private


--- Additional Info ---
                                        
                                            GET /exchange/sync.php?p=dfp&google_gid=CAESEL3RhEaIE6No3nzWLm-iueQ&google_cver=1&google_push=AHNF13KJLiHfCB9FMhYVSJHJIlMVhSNvzu9UXVch0A0 HTTP/1.1 
Host: pixel.rubiconproject.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://pagead2.googlesyndication.com/pagead/s/cookie_push.html

                                         
                                         213.19.162.80
HTTP/1.1 307 Temporary Redirect
                                        
Set-Cookie: c=1; Path=/
Location: /sync.php?cookie_redirect=1&p=dfp&google_gid=CAESEL3RhEaIE6No3nzWLm-iueQ&google_cver=1&google_push=AHNF13KJLiHfCB9FMhYVSJHJIlMVhSNvzu9UXVch0A0
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Content-Length: 0
Date: Fri, 13 Oct 2017 02:03:49 GMT
Server: Rubicon Project


--- Additional Info ---
                                        
                                            GET /activeview?avi=B28CnAh_gWYGUJc-yYcH-kiAArvjr98EFAAAQATgByAECyAPJBKAGAtIIBQiAYRABwhMZChEQn52e0qgBIggIAhABGAEgABignpDcAw&cid=CAASFeRoQUgcszvFaEogAZoPYIFlrLLOjA&id=osdim&ti=1&uc=0&tgt=nf&cl=0&r=pv&v=r20171011 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3365192051533074&output=html&h=280&slotname=9455629345&adk=3598545051&adf=807048394&w=336&lmt=1507855894&loeid=156549054&format=336x280&url=https%3A%2F%2Fcertificationexamanswers.blogspot.no%2F&ea=0&flash=10.0.45&wgl=0&dt=1507860224839&bpp=281&fdt=437&idt=575&shv=r20171011&cbv=r20170110&saldr=aa&prev_fmts=300x250%2C300x250%2C300x250&correlator=7222960463198&frm=20&ga_vid=661278695.1507860224&ga_sid=1507860224&ga_hid=1518172835&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=140&ady=6645&biw=1159&bih=754&abxe=1&eid=156549044%2C21061122&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=16&bc=1&ifi=4&dtd=606

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Fri, 13 Oct 2017 02:03:50 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/drt/ui HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: NID=114=ztLinOVx3nuIrP15lMP-MnJMrwnG4twXFotpZHWPbBVKUJwhL_ZMY6OKltdoaQ3v8cg4AJAjvnH3X6k99PxQSgl5dvq7rFNC6AMXjZ7fb-WG8lwZCiJAhUPr21qD42hq

                                         
                                         172.217.22.164
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://googleads.g.doubleclick.net/pagead/drt/si
Cache-Control: private
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 02:03:50 GMT
Server: safe
Content-Length: 246
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  HTML document text
Size:   246
Md5:    12d3bb478cfbdfd43b2451e457c7e45c
Sha1:   311750b25d944af1375dd12d32f8f842f13514a9
Sha256: eb9b81fa102425307404e896040d2b2c3dbbc913dfc5315e97a2b4bfc321c7c8
                                        
                                            GET /sync.php?cookie_redirect=1&p=dfp&google_gid=CAESEL3RhEaIE6No3nzWLm-iueQ&google_cver=1&google_push=AHNF13KJLiHfCB9FMhYVSJHJIlMVhSNvzu9UXVch0A0 HTTP/1.1 
Host: pixel.rubiconproject.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://pagead2.googlesyndication.com/pagead/s/cookie_push.html
Cookie: c=1

                                         
                                         213.19.162.80
HTTP/1.1 307 Temporary Redirect
                                        
X-RPHost: fRChl1zBA5HZgHBoJy-6zw
Location: https://cm.g.doubleclick.net/pixel?google_nid=rp&google_hm=SjhQOTFTNUEtQi0yRVYw&google_push=AHNF13KJLiHfCB9FMhYVSJHJIlMVhSNvzu9UXVch0A0
Connection: keep-alive
Set-Cookie: khaos=J8P91S5A-B-2EV0; Domain=.rubiconproject.com; Expires=Fri, 13-Apr-2018 14:03:50 GMT; Path=/
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Content-Length: 0
Date: Fri, 13 Oct 2017 02:03:49 GMT
Server: Rubicon Project


--- Additional Info ---
                                        
                                            GET /pixel/attr?d=AHNF13KOcHZP1zMMgNnt3ImRixkFu-R46R6c HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://pagead2.googlesyndication.com/pagead/s/cookie_push.html
Cookie: IDE=AHWqTUkyYU4l3-JAOnwE7yxffQWxM_3l8neNyUnu_fuNQB5e7CLKtZrWKE5KHCzz; DSID=NO_DATA

                                         
                                         172.217.22.162
HTTP/1.1 204 No Content
Content-Type: text/html
                                        
Date: Fri, 13 Oct 2017 02:03:50 GMT
Server: HTTP server (unknown)
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
                                        
                                            GET /pagead/drt/si HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: IDE=AHWqTUkyYU4l3-JAOnwE7yxffQWxM_3l8neNyUnu_fuNQB5e7CLKtZrWKE5KHCzz; DSID=NO_DATA

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 02:03:50 GMT
Server: safe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Set-Cookie: DSID=NO_DATA; expires=Fri, 13-Oct-2017 03:03:50 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"
Expires: Fri, 13 Oct 2017 02:03:50 GMT
Cache-Control: private


--- Additional Info ---
                                        
                                            GET /pixel?google_nid=rp&google_hm=SjhQOTFTNUEtQi0yRVYw&google_push=AHNF13KJLiHfCB9FMhYVSJHJIlMVhSNvzu9UXVch0A0 HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://pagead2.googlesyndication.com/pagead/s/cookie_push.html
Cookie: IDE=AHWqTUkyYU4l3-JAOnwE7yxffQWxM_3l8neNyUnu_fuNQB5e7CLKtZrWKE5KHCzz; DSID=NO_DATA

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 13 Oct 2017 02:03:51 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 170
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 1 x 1, 8-bit/color RGBA, non-interlaced
Size:   170
Md5:    e7673c60af825466f83d46da72ca1635
Sha1:   fc0fcbee0835709ba2d28798a612bfd687903fb5
Sha256: 0b8a20373c6dd04e091902226d922b3688143a8938afb9d283d889de7b55ceb5
                                        
                                            GET /pagead/drt/si HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: IDE=AHWqTUkyYU4l3-JAOnwE7yxffQWxM_3l8neNyUnu_fuNQB5e7CLKtZrWKE5KHCzz; DSID=NO_DATA

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 02:03:51 GMT
Server: safe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Set-Cookie: DSID=NO_DATA; expires=Fri, 13-Oct-2017 03:03:51 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"
Expires: Fri, 13 Oct 2017 02:03:51 GMT
Cache-Control: private


--- Additional Info ---
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 02:04:00 GMT
Expires: Tue, 17 Oct 2017 02:04:00 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    914a335de81451bb4a6322a0de341d71
Sha1:   f9596699bf8f8804cc5da9c980e4105b9062c455
Sha256: f34a66624b5770bb5f0751bbea3e832cd9c733da1dcf32b0676da77887987252
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 02:04:00 GMT
Expires: Tue, 17 Oct 2017 02:04:00 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    cb8e3e53376bcd2d9d2324a6daa08411
Sha1:   aa3ed9e8ef8037baa3992216f4d52706e1640834
Sha256: 38a70828116149116ad1ebffc1f9a06fc6071a23bb1b1420572c62365e2a1298
                                        
                                            GET /v6exp3/6.gif HTTP/1.1 
Host: p4-hjicyvhb3uhk4-4ai2r44mdb6ogazc-514219-i1-v6exp3.v4.metric.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://p4-hjicyvhb3uhk4-4ai2r44mdb6ogazc-if-v6exp3-v4.metric.gstatic.com/v6exp3/iframe.html

                                         
                                         172.217.22.178
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 35
Date: Fri, 13 Oct 2017 02:04:00 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Last-Modified: Thu, 21 Apr 2016 03:17:22 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /v6exp3/6.gif HTTP/1.1 
Host: p4-hjicyvhb3uhk4-4ai2r44mdb6ogazc-514219-i2-v6exp3.ds.metric.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://p4-hjicyvhb3uhk4-4ai2r44mdb6ogazc-if-v6exp3-v4.metric.gstatic.com/v6exp3/iframe.html

                                         
                                         172.217.22.178
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 35
Date: Fri, 13 Oct 2017 02:04:00 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Last-Modified: Thu, 21 Apr 2016 03:17:22 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015