| 49celcius.blogspot.com/search/label/Shy?m=1 |  216.58.207.193 | 200 OK | 8.1 kB |
URL User Request GET HTTP/249celcius.blogspot.com/search/label/Shy?m=1 IP216.58.207.193:443
CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintE8:F4:4F:CE:D1:E0:7B:C8:CD:18:45:AA:90:5A:35:8B:D5:CF:66:6B ValidityMon, 18 Mar 2024 20:01:08 GMT - Mon, 10 Jun 2024 20:01:07 GMT
File typeHTML document, ASCII text, with very long lines (4296) Hashdf7b916cd30eb8212116d50ad769c05f b3f187ec5ac1b0879f32b3c8b03c296875fa1658 a8a95afe5645863bd25a18ea78e82827fae5483ef3d3f7f0ddaeee24c18c80f4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /search/label/Shy?m=1 HTTP/1.1
Host: 49celcius.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Wed, 24 Apr 2024 13:34:59 GMT
date: Wed, 24 Apr 2024 13:34:59 GMT
cache-control: private, max-age=0
last-modified: Thu, 14 Mar 2024 07:49:33 GMT
etag: W/"93c5c34f1c9311563f7279ffe360811d22e4b976be4398f266df93b341b5ee72"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 8089
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 49celcius.blogspot.com/js/cookienotice.js | 216.58.207.193 | 200 OK | 2.0 kB |
URL GET HTTP/349celcius.blogspot.com/js/cookienotice.js IP216.58.207.193:443
Requested byhttps://49celcius.blogspot.com/search/label/Shy?m=1 CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintE8:F4:4F:CE:D1:E0:7B:C8:CD:18:45:AA:90:5A:35:8B:D5:CF:66:6B ValidityMon, 18 Mar 2024 20:01:08 GMT - Mon, 10 Jun 2024 20:01:07 GMT
File typeJavaScript source, ASCII text Hasha705132a2174f88e196ec3610d68faa8 3bad57a48d973a678fec600d45933010f6edc659 068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/cookienotice.js HTTP/1.1
Host: 49celcius.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://49celcius.blogspot.com/search/label/Shy?m=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
date: Wed, 24 Apr 2024 13:35:00 GMT
expires: Wed, 01 May 2024 13:35:00 GMT
cache-control: public, max-age=604800
last-modified: Wed, 24 Apr 2024 11:53:54 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/help/hc/images/adsense_185665_adformat-text_728x90.png | 142.250.74.164 | 200 OK | 22 kB |
URL GET HTTP/2www.google.com/help/hc/images/adsense_185665_adformat-text_728x90.png IP142.250.74.164:443
Requested byhttps://49celcius.blogspot.com/search/label/Shy?m=1 CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintCD:48:2A:0C:60:1D:37:5A:D4:D5:A9:F7:DE:A0:2B:5E:2F:29:76:73 ValidityMon, 18 Mar 2024 20:38:49 GMT - Mon, 10 Jun 2024 20:38:48 GMT
File typePNG image data, 728 x 90, 8-bit/color RGB, non-interlaced Hash24fe40f0a76231aad5a9dcbffa313b43 6986053d8906ec6262c2a40b753fe09b4604981d eb71c9a3af0c036e67071cac62992e2ee7c6eab8aaf7a016da72c571341d05d4
GET /help/hc/images/adsense_185665_adformat-text_728x90.png HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://49celcius.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/www_google
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="uxe-owners-acl/www_google"
report-to: {"group":"uxe-owners-acl/www_google","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/uxe-owners-acl/www_google"}]}
content-length: 22354
date: Wed, 24 Apr 2024 13:35:00 GMT
expires: Wed, 24 Apr 2024 13:35:00 GMT
cache-control: private, max-age=3000
last-modified: Fri, 18 Oct 2019 02:00:00 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.com/help/hc/images/adsense/adsense_185665_adformat-text_336x280_en.png | 142.250.74.164 | 200 OK | 61 kB |
URL GET HTTP/2www.google.com/help/hc/images/adsense/adsense_185665_adformat-text_336x280_en.png IP142.250.74.164:443
Requested byhttps://49celcius.blogspot.com/search/label/Shy?m=1 CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintCD:48:2A:0C:60:1D:37:5A:D4:D5:A9:F7:DE:A0:2B:5E:2F:29:76:73 ValidityMon, 18 Mar 2024 20:38:49 GMT - Mon, 10 Jun 2024 20:38:48 GMT
File typePNG image data, 336 x 280, 8-bit/color RGB, non-interlaced Hash97f102923571f23de9092d01274dbfca b2f23d1715213e9e32d7cc3d1f62c555882eac3c 2c5650bc587a551be1cb2e3a75eb0c7789f793d3a4bd1954f445ef31d71d7c53
GET /help/hc/images/adsense/adsense_185665_adformat-text_336x280_en.png HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://49celcius.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/www_google
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="uxe-owners-acl/www_google"
report-to: {"group":"uxe-owners-acl/www_google","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/uxe-owners-acl/www_google"}]}
content-length: 60971
date: Wed, 24 Apr 2024 13:35:00 GMT
expires: Wed, 24 Apr 2024 13:35:00 GMT
cache-control: private, max-age=3000
last-modified: Fri, 18 Oct 2019 02:00:00 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.blogger.com/static/v1/widgets/848617736-widgets.js | 142.250.74.73 | 200 OK | 52 kB |
URL GET HTTP/2www.blogger.com/static/v1/widgets/848617736-widgets.js IP142.250.74.73:443
Requested byhttps://49celcius.blogspot.com/search/label/Shy?m=1 CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint17:41:C7:D0:1D:55:29:41:DB:6D:65:5F:4E:63:97:50:32:7D:E1:60 ValidityMon, 18 Mar 2024 19:33:57 GMT - Mon, 10 Jun 2024 19:33:56 GMT
File typeJavaScript source, ASCII text, with very long lines (1941) Hash70285871f1f1d8f776a0c04a61d21d68 2c140498af2f9a4a8088950d16f675745e556a14 5cc556f7a1301c1c932b1b1f696cbfbc5e131209812b9573204f69b305f05b6c
GET /static/v1/widgets/848617736-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://49celcius.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 51485
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 22 Apr 2024 01:57:58 GMT
expires: Tue, 22 Apr 2025 01:57:58 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 00:50:18 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 214622
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css | 142.250.74.73 | 200 OK | 6.6 kB |
URL GET HTTP/2www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css IP142.250.74.73:443
Requested byhttps://49celcius.blogspot.com/search/label/Shy?m=1 CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint17:41:C7:D0:1D:55:29:41:DB:6D:65:5F:4E:63:97:50:32:7D:E1:60 ValidityMon, 18 Mar 2024 19:33:57 GMT - Mon, 10 Jun 2024 19:33:56 GMT
File typeASCII text, with very long lines (30596) Hashe3f09df1bc175f411d1ec3dfb5afb17b 3994ec3efe3c2447e7bbfdd97bb7e190dd1658f9 1a2eca9e492e3a21e02dd77ad44d7af45c4091d35ede79e948b7a3f23e5b3617
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://49celcius.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 04:06:37 GMT
expires: Wed, 23 Apr 2025 04:06:37 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 07:50:57 GMT
content-type: text/css
vary: Accept-Encoding
age: 120503
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 3.bp.blogspot.com/_rLYhkzmU7RY/TDvdaQEQJhI/AAAAAAAAAAM/tQr4P8Rb7AQ/s1600/line.gif | 142.250.74.161 | 200 OK | 43 B |
URL GET HTTP/23.bp.blogspot.com/_rLYhkzmU7RY/TDvdaQEQJhI/AAAAAAAAAAM/tQr4P8Rb7AQ/s1600/line.gif IP142.250.74.161:443
Requested byhttps://49celcius.blogspot.com/search/label/Shy?m=1 CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintE8:F4:4F:CE:D1:E0:7B:C8:CD:18:45:AA:90:5A:35:8B:D5:CF:66:6B ValidityMon, 18 Mar 2024 20:01:08 GMT - Mon, 10 Jun 2024 20:01:07 GMT
File typeGIF image data, version 89a, 1 x 3 Hash275a41e651a37e9b08666e30446c66b2 3bea2ad31c09d90ace0953bcc8a9abdc72593925 a8f08113955fed16ed29d27c5d11a6dd00d47bb8487be127b22594b2171d6e7d
GET /_rLYhkzmU7RY/TDvdaQEQJhI/AAAAAAAAAAM/tQr4P8Rb7AQ/s1600/line.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://49celcius.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="line.gif"
x-content-type-options: nosniff
server: fife
content-length: 43
x-xss-protection: 0
date: Wed, 24 Apr 2024 13:15:17 GMT
expires: Thu, 25 Apr 2024 13:15:17 GMT
cache-control: public, max-age=86400, no-transform
age: 1183
etag: "v25"
content-type: image/gif
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.blogger.com/dyn-css/authorization.css?targetBlogID=3283747503113416314&zx=97665c7d-7e6f-4d3d-b32a-b5f91614959d | 142.250.74.73 | 200 OK | 21 B |
URL GET HTTP/2www.blogger.com/dyn-css/authorization.css?targetBlogID=3283747503113416314&zx=97665c7d-7e6f-4d3d-b32a-b5f91614959d IP142.250.74.73:443
Requested byhttps://49celcius.blogspot.com/search/label/Shy?m=1 CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint17:41:C7:D0:1D:55:29:41:DB:6D:65:5F:4E:63:97:50:32:7D:E1:60 ValidityMon, 18 Mar 2024 19:33:57 GMT - Mon, 10 Jun 2024 19:33:56 GMT
File typevery short file (no magic) Hash68b329da9893e34099c7d8ad5cb9c940 adc83b19e793491b1c6ea0fd8b46cd9f32e592fc 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /dyn-css/authorization.css?targetBlogID=3283747503113416314&zx=97665c7d-7e6f-4d3d-b32a-b5f91614959d HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://49celcius.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 24 Apr 2024 13:35:01 GMT
last-modified: Wed, 24 Apr 2024 13:35:01 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 49celcius.blogspot.com/favicon.ico | 216.58.207.193 | 200 OK | 412 B |
URL GET HTTP/349celcius.blogspot.com/favicon.ico IP216.58.207.193:443
Requested byhttps://49celcius.blogspot.com/search/label/Shy?m=1 CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintE8:F4:4F:CE:D1:E0:7B:C8:CD:18:45:AA:90:5A:35:8B:D5:CF:66:6B ValidityMon, 18 Mar 2024 20:01:08 GMT - Mon, 10 Jun 2024 20:01:07 GMT
File typeMS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel Hash59a0c7b6e4848ccdabcea0636efda02b 30ef5c54b8bbc3487ea2b4c45cd11ea2932e4340 a1495da3cf3db37bf105a12658636ff628fee7b73975b9200049af7747e60b1f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 49celcius.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://49celcius.blogspot.com/search/label/Shy?m=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/x-icon; charset=UTF-8
expires: Wed, 24 Apr 2024 13:35:01 GMT
date: Wed, 24 Apr 2024 13:35:01 GMT
cache-control: private, max-age=86400
last-modified: Thu, 14 Mar 2024 07:49:33 GMT
etag: W/"93c5c34f1c9311563f7279ffe360811d22e4b976be4398f266df93b341b5ee72"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 412
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/adsense/static/en_US/images/728x15.gif | 142.250.74.164 | 403 Forbidden | 0 B |
URL GET HTTP/3www.google.com/adsense/static/en_US/images/728x15.gif IP142.250.74.164:443
Requested byhttps://49celcius.blogspot.com/search/label/Shy?m=1 CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /adsense/static/en_US/images/728x15.gif HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://49celcius.blogspot.com/
Cookie: NID=513=RsMWxwsWnmEyYDiexyV-OWoaJGRgT1WUvVnH7VMmo3dwe2IUvku6siwClBhneQOOfCMGQf59gQ3ztwxh4RumlJSgCMaOi4_OJMURZoZlZIcwIh0eFMazk2trSRchlNUcm4rmOAf5CxkiioyTSzFSm5te3SmGXnZQ9cMPpnG3_x8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 24 Apr 2024 13:35:00 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
acx-server-start-time: 1713965700618
acx-server-time: 12
server-timing: server-processing;dur=12
x-trace-id: 7034146683285919396
cross-origin-opener-policy: same-origin-allow-popups; report-to="encsid_AdqZYNf7CGMFwwtPNESRwEV_d6UttHwVGrb7g77tDuzmlyOrJKTPtkM"
report-to: {"group":"encsid_AdqZYNf7CGMFwwtPNESRwEV_d6UttHwVGrb7g77tDuzmlyOrJKTPtkM","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/encsid_AdqZYNf7CGMFwwtPNESRwEV_d6UttHwVGrb7g77tDuzmlyOrJKTPtkM"}]}
content-security-policy: base-uri 'self';object-src 'none';report-uri https://csp.withgoogle.com/csp/adsense/1;script-src 'nonce-H3m-fBq1RUWURtaJQDzRDg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';worker-src 'self' blob:
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/adsense/static/en_US/images/banner.gif | 142.250.74.164 | 403 Forbidden | 0 B |
URL GET HTTP/2www.google.com/adsense/static/en_US/images/banner.gif IP142.250.74.164:443
Requested byhttps://49celcius.blogspot.com/search/label/Shy?m=1 CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintCD:48:2A:0C:60:1D:37:5A:D4:D5:A9:F7:DE:A0:2B:5E:2F:29:76:73 ValidityMon, 18 Mar 2024 20:38:49 GMT - Mon, 10 Jun 2024 20:38:48 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /adsense/static/en_US/images/banner.gif HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://49celcius.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 24 Apr 2024 13:35:00 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
acx-server-start-time: 1713965700458
acx-server-time: 9
server-timing: server-processing;dur=9
x-trace-id: 8148348449558235616
report-to: {"group":"encsid_AdqZYNf7CGMFwwtPNESRwEV_d6UttHwVGrb7g77tDuzmlyOrJKTPtkM","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/encsid_AdqZYNf7CGMFwwtPNESRwEV_d6UttHwVGrb7g77tDuzmlyOrJKTPtkM"}]}
content-security-policy: base-uri 'self';object-src 'none';report-uri https://csp.withgoogle.com/csp/adsense/1;script-src 'nonce-Ou4ECoOtkNmbDMP6jucWBg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';worker-src 'self' blob:
cross-origin-opener-policy: same-origin-allow-popups; report-to="encsid_AdqZYNf7CGMFwwtPNESRwEV_d6UttHwVGrb7g77tDuzmlyOrJKTPtkM"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
set-cookie: NID=513=GIsaiKPZ7u74qbUEVyFeqZjl7NgRN6raCuacZhfXX4WV4c9prodkL5G3o7TnljVprxHiYVRVD7C5aDlEVpSPB7Ayhsb7URSWt9SvjPufo1Fit-Ni_X4sBotxOO5E3lMdl5fbLpKYDiHgHF8PcHdhiqLUF_Re7GcNbCEQtzWgiOk; expires=Thu, 24-Oct-2024 13:35:00 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.com/adsense/static/en_US/images/728x15.gif | 142.250.74.164 | 403 Forbidden | 0 B |
URL GET HTTP/2www.google.com/adsense/static/en_US/images/728x15.gif IP142.250.74.164:443
Requested byhttps://49celcius.blogspot.com/search/label/Shy?m=1 CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintCD:48:2A:0C:60:1D:37:5A:D4:D5:A9:F7:DE:A0:2B:5E:2F:29:76:73 ValidityMon, 18 Mar 2024 20:38:49 GMT - Mon, 10 Jun 2024 20:38:48 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /adsense/static/en_US/images/728x15.gif HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://49celcius.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 24 Apr 2024 13:35:00 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
acx-server-start-time: 1713965700309
acx-server-time: 10
server-timing: server-processing;dur=10
x-trace-id: 6817468626885376763
cross-origin-opener-policy: same-origin-allow-popups; report-to="encsid_AdqZYNf7CGMFwwtPNESRwEV_d6UttHwVGrb7g77tDuzmlyOrJKTPtkM"
content-security-policy: base-uri 'self';object-src 'none';report-uri https://csp.withgoogle.com/csp/adsense/1;script-src 'nonce-KHz5WkQyiSiibxDVYxqg0g' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';worker-src 'self' blob:
report-to: {"group":"encsid_AdqZYNf7CGMFwwtPNESRwEV_d6UttHwVGrb7g77tDuzmlyOrJKTPtkM","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/encsid_AdqZYNf7CGMFwwtPNESRwEV_d6UttHwVGrb7g77tDuzmlyOrJKTPtkM"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
set-cookie: NID=513=RsMWxwsWnmEyYDiexyV-OWoaJGRgT1WUvVnH7VMmo3dwe2IUvku6siwClBhneQOOfCMGQf59gQ3ztwxh4RumlJSgCMaOi4_OJMURZoZlZIcwIh0eFMazk2trSRchlNUcm4rmOAf5CxkiioyTSzFSm5te3SmGXnZQ9cMPpnG3_x8; expires=Thu, 24-Oct-2024 13:35:00 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|