| gtasamipc.blogspot.com.es/search/label/gtasanandreasgame.11.13.13 |  216.58.207.193 | 302 Found | 225 B |
URL User Request GET HTTP/2gtasamipc.blogspot.com.es/search/label/gtasanandreasgame.11.13.13 IP216.58.207.193:443
CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintE8:F4:4F:CE:D1:E0:7B:C8:CD:18:45:AA:90:5A:35:8B:D5:CF:66:6B ValidityMon, 18 Mar 2024 20:01:08 GMT - Mon, 10 Jun 2024 20:01:07 GMT
File typeHTML document, ASCII text Hashad0b3caa86032c2e2a851eef8913e8bb 847f3be666dccd4e9cc775a012a47a61887f9ac3 3fa2d3aa5d454ced569f294154ee7f1f391fd8125fa9c37541f84c46482b311e
GET /search/label/gtasanandreasgame.11.13.13 HTTP/1.1
Host: gtasamipc.blogspot.com.es
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: https://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Tue, 23 Apr 2024 21:50:24 GMT
expires: Tue, 23 Apr 2024 21:50:24 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 225
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 | 216.58.207.193 | 200 OK | 12 kB |
URL User Request GET HTTP/2gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 IP216.58.207.193:443
CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintE8:F4:4F:CE:D1:E0:7B:C8:CD:18:45:AA:90:5A:35:8B:D5:CF:66:6B ValidityMon, 18 Mar 2024 20:01:08 GMT - Mon, 10 Jun 2024 20:01:07 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (4701) Hash23d9df4365cb37ad746999f248a4e74d 995878f75030e9a831475d02f5c5e360335b401b b9f42d7fee121630e65a6c4c6e0557cbd96366afdcdbfa54af40398468aeb1da
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /search/label/gtasanandreasgame.11.13.13 HTTP/1.1
Host: gtasamipc.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Tue, 23 Apr 2024 21:50:24 GMT
date: Tue, 23 Apr 2024 21:50:24 GMT
cache-control: private, max-age=0
last-modified: Thu, 14 Mar 2024 08:45:23 GMT
etag: W/"95e6b5be741500b4da4e9bcb5a08675aaa008d6d150b245bb091b5759335f58d"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 12409
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| gtasamipc.blogspot.com/js/cookienotice.js | 216.58.207.193 | 200 OK | 2.0 kB |
URL GET HTTP/3gtasamipc.blogspot.com/js/cookienotice.js IP216.58.207.193:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintE8:F4:4F:CE:D1:E0:7B:C8:CD:18:45:AA:90:5A:35:8B:D5:CF:66:6B ValidityMon, 18 Mar 2024 20:01:08 GMT - Mon, 10 Jun 2024 20:01:07 GMT
File typeJavaScript source, ASCII text Hasha705132a2174f88e196ec3610d68faa8 3bad57a48d973a678fec600d45933010f6edc659 068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/cookienotice.js HTTP/1.1
Host: gtasamipc.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 18:28:06 GMT
expires: Tue, 30 Apr 2024 18:28:06 GMT
cache-control: public, max-age=604800
last-modified: Tue, 23 Apr 2024 16:54:20 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 12139
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| pagead2.googlesyndication.com/pagead/js/adsbygoogle.js | 142.250.74.2 | 200 OK | 51 kB |
URL GET HTTP/3pagead2.googlesyndication.com/pagead/js/adsbygoogle.js IP142.250.74.2:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subject*.g.doubleclick.net Fingerprint1B:FA:17:60:E2:34:D4:FA:D1:13:08:09:6E:8F:ED:E7:A8:8C:6E:7A ValidityMon, 18 Mar 2024 19:37:13 GMT - Mon, 10 Jun 2024 19:37:12 GMT
File typeJavaScript source, ASCII text, with very long lines (3920) Hash0050139747114fad111f8503da2a6158 9a8fc73876c46275e9f6ef77f8fb571e7b29634a 97ed530b5d0d31944f648b46298d2acb43e8355d6f56bf81a518075b5a5300c2
GET /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gtasamipc.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
link: <https://googleads.g.doubleclick.net>; rel="preconnect"; crossorigin
vary: Accept-Encoding
date: Tue, 23 Apr 2024 21:50:25 GMT
expires: Tue, 23 Apr 2024 21:50:25 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
content-type: text/javascript; charset=UTF-8
etag: 16264999404766098889
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 51060
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.blogger.com/static/v1/widgets/848617736-widgets.js | 216.58.207.233 | 200 OK | 52 kB |
URL GET HTTP/2www.blogger.com/static/v1/widgets/848617736-widgets.js IP216.58.207.233:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint17:41:C7:D0:1D:55:29:41:DB:6D:65:5F:4E:63:97:50:32:7D:E1:60 ValidityMon, 18 Mar 2024 19:33:57 GMT - Mon, 10 Jun 2024 19:33:56 GMT
File typeJavaScript source, ASCII text, with very long lines (1941) Hash70285871f1f1d8f776a0c04a61d21d68 2c140498af2f9a4a8088950d16f675745e556a14 5cc556f7a1301c1c932b1b1f696cbfbc5e131209812b9573204f69b305f05b6c
GET /static/v1/widgets/848617736-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gtasamipc.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 51485
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 22 Apr 2024 01:57:58 GMT
expires: Tue, 22 Apr 2025 01:57:58 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 00:50:18 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 157947
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css | 216.58.207.233 | 200 OK | 6.6 kB |
URL GET HTTP/2www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css IP216.58.207.233:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint17:41:C7:D0:1D:55:29:41:DB:6D:65:5F:4E:63:97:50:32:7D:E1:60 ValidityMon, 18 Mar 2024 19:33:57 GMT - Mon, 10 Jun 2024 19:33:56 GMT
File typeASCII text, with very long lines (30596) Hashe3f09df1bc175f411d1ec3dfb5afb17b 3994ec3efe3c2447e7bbfdd97bb7e190dd1658f9 1a2eca9e492e3a21e02dd77ad44d7af45c4091d35ede79e948b7a3f23e5b3617
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gtasamipc.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 04:06:37 GMT
expires: Wed, 23 Apr 2025 04:06:37 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 07:50:57 GMT
content-type: text/css
vary: Accept-Encoding
age: 63828
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pagead2.googlesyndication.com/pagead/js/adsbygoogle.js | 142.250.74.2 | 200 OK | 51 kB |
URL GET HTTP/3pagead2.googlesyndication.com/pagead/js/adsbygoogle.js IP142.250.74.2:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subject*.g.doubleclick.net Fingerprint1B:FA:17:60:E2:34:D4:FA:D1:13:08:09:6E:8F:ED:E7:A8:8C:6E:7A ValidityMon, 18 Mar 2024 19:37:13 GMT - Mon, 10 Jun 2024 19:37:12 GMT
File typeJavaScript source, ASCII text, with very long lines (3920) Hashcff73f8e63c9eae3d55f15e28fe13b7c 2c94efe8a85447c0971212353bb4d1b2d93a9472 8be7ea285654b8c5304c9725173718b4bc41a5cdb64277eaea74f616485e4a56
GET /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gtasamipc.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
link: <https://googleads.g.doubleclick.net>; rel="preconnect"; crossorigin
vary: Accept-Encoding
date: Tue, 23 Apr 2024 21:50:25 GMT
expires: Tue, 23 Apr 2024 21:50:25 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
content-type: text/javascript; charset=UTF-8
etag: 10492170913114525875
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 51060
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| pagead2.googlesyndication.com/pagead/js/adsbygoogle.js | 142.250.74.2 | 200 OK | 51 kB |
URL GET HTTP/3pagead2.googlesyndication.com/pagead/js/adsbygoogle.js IP142.250.74.2:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subject*.g.doubleclick.net Fingerprint1B:FA:17:60:E2:34:D4:FA:D1:13:08:09:6E:8F:ED:E7:A8:8C:6E:7A ValidityMon, 18 Mar 2024 19:37:13 GMT - Mon, 10 Jun 2024 19:37:12 GMT
File typeJavaScript source, ASCII text, with very long lines (3920) Hash616831571a52c4c490c8ea40425aa165 4bd6d8f1dbe0c857cae52a11770249e972973de3 5d2d9ecdbedbbe6e4b807e4df6830eb5dda9a48d629271634708f9c85e112880
GET /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gtasamipc.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
link: <https://googleads.g.doubleclick.net>; rel="preconnect"; crossorigin
vary: Accept-Encoding
date: Tue, 23 Apr 2024 21:50:25 GMT
expires: Tue, 23 Apr 2024 21:50:25 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
content-type: text/javascript; charset=UTF-8
etag: 443096277920888575
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 51060
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| lh3.googleusercontent.com/blogger_img_proxy/AEn0k_sMeD_cBiHSoTdkCgrguDsMrrOMDiKyJgDRC-sjcuYxvqzgNN1-zVmsO9AVB8ebBB4GpOfPyuFxVFTta56HCyd_nDBoXQ=s0-d | 142.250.74.97 | 404 Not Found | 1.7 kB |
URL GET HTTP/2lh3.googleusercontent.com/blogger_img_proxy/AEn0k_sMeD_cBiHSoTdkCgrguDsMrrOMDiKyJgDRC-sjcuYxvqzgNN1-zVmsO9AVB8ebBB4GpOfPyuFxVFTta56HCyd_nDBoXQ=s0-d IP142.250.74.97:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint6E:66:E1:45:85:5C:3A:EB:60:4A:8E:EF:62:B8:7C:E3:C7:1B:FA:47 ValidityMon, 18 Mar 2024 20:34:07 GMT - Mon, 10 Jun 2024 20:34:06 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1136) Hashf3a4b4bfea768944d5e0b907da455cf2 ee3c06c22707b258c24fe8677e8ba2fb343ddf4a eac245fb17623924b931620226b85089cda30daedb60cbb2d636e8aa048ac984
GET /blogger_img_proxy/AEn0k_sMeD_cBiHSoTdkCgrguDsMrrOMDiKyJgDRC-sjcuYxvqzgNN1-zVmsO9AVB8ebBB4GpOfPyuFxVFTta56HCyd_nDBoXQ=s0-d HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gtasamipc.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Tue, 23 Apr 2024 21:50:25 GMT
server: fife
content-length: 1682
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pagead2.googlesyndication.com/pagead/managed/js/adsense/m202404170101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-7937651764865180&plah=gtasamipc.blogspot.com&aplac=true | 142.250.74.2 | 200 OK | 143 kB |
URL GET HTTP/3pagead2.googlesyndication.com/pagead/managed/js/adsense/m202404170101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-7937651764865180&plah=gtasamipc.blogspot.com&aplac=true IP142.250.74.2:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subject*.g.doubleclick.net Fingerprint1B:FA:17:60:E2:34:D4:FA:D1:13:08:09:6E:8F:ED:E7:A8:8C:6E:7A ValidityMon, 18 Mar 2024 19:37:13 GMT - Mon, 10 Jun 2024 19:37:12 GMT
File typeJavaScript source, ASCII text, with very long lines (1838) Size143 kB (142957 bytes) Hashe402ae5608f79de918115a758206ea42 457d59cf22521fef9157c1f43718e9771aa5a451 36af744fbf29573923ef94dd4ee106a8c82acb60989cff10ba12eadbd55b6f0a
GET /pagead/managed/js/adsense/m202404170101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-7937651764865180&plah=gtasamipc.blogspot.com&aplac=true HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gtasamipc.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Tue, 23 Apr 2024 21:50:25 GMT
expires: Tue, 23 Apr 2024 21:50:25 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
content-type: text/javascript; charset=UTF-8
etag: 9261015095148891501
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 142957
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cdn.popcash.net/pop.js |  194.242.11.186 | 200 OK | 42 kB |
IP194.242.11.186:443 ASN#34989 ServeTheWorld AS
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerLet's Encrypt Subjectcdn.popcash.net Fingerprint72:AF:EB:EA:E5:AE:80:AD:4B:BA:87:C8:DB:6F:4E:AC:E6:67:FD:9E ValidityWed, 10 Apr 2024 13:11:33 GMT - Tue, 09 Jul 2024 13:11:32 GMT
File typeJavaScript source, ASCII text, with very long lines (65390) Hash4e52b7473fb5439a4a6ae8b48d7e1c38 f27853125646cd926bbfd9504e72aa98fdfdfdeb 36b44b4585f42fd4af7d626e6549bb0439ad8ce858803e1ff513c432a1580480
GET /pop.js HTTP/1.1
Host: cdn.popcash.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gtasamipc.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 21:50:25 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 1818418
cdn-uid: 81f0ee8a-6b19-463e-a8be-46c199377685
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
cache-control: public, max-age=2592000
etag: W/"661ce329-1f3df"
expires: Wed, 15 May 2024 08:47:34 GMT
last-modified: Mon, 15 Apr 2024 08:19:53 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=efakeoBgNHuIVAmKp7eqxDflsq1yfjlAsvznXjuB6YIJZYZQbkQFvcSk91d29Me5X9gGI0xLHOyR68hcq1fS3k8u6%2F1sN0uRNDD92x2nLdfBdGurWZwD13YRoB1m"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 874aabedcc62568a-OSL
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 04/15/2024 08:47:34
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 4629dc1125296ec2bea787a3a61e567e
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
|
|
| translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.rAQgPhmzeTE.O/am=AAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfpElKtW5uNqS2LmP6f0mFEPK7-RPw/m=el_main | 142.250.74.106 | 200 OK | 73 kB |
URL GET HTTP/2translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.rAQgPhmzeTE.O/am=AAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfpElKtW5uNqS2LmP6f0mFEPK7-RPw/m=el_main IP142.250.74.106:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File typeJavaScript source, ASCII text, with very long lines (2308) Hashb78a598053844b5ae2d3c1d98851d54a f75001b57e8d501345f9f6a24bb05b4da381022d c1e457211fafb84677e66e20fa411e5d6875dfced5e2e8727615589aa3434d02
GET /_/translate_http/_/js/k=translate_http.tr.no.rAQgPhmzeTE.O/am=AAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfpElKtW5uNqS2LmP6f0mFEPK7-RPw/m=el_main HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gtasamipc.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 73076
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 17:35:04 GMT
expires: Wed, 23 Apr 2025 17:35:04 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:10:01 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 15321
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=wA/d=0/rs=AN8SPfpVjmduEbJeaKDPJmqpx8swJVpW8A/m=el_main_css | 142.250.74.131 | | 4.0 kB |
URL GET www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=wA/d=0/rs=AN8SPfpVjmduEbJeaKDPJmqpx8swJVpW8A/m=el_main_css IP142.250.74.131:0
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeASCII text, with very long lines (20367), with no line terminators Hash72d3a735ccca1027f6b3afba2c93e3a7 67f8eff8d17334c59c28fc1753bf451527c7490d c8c845f55e2346b89894ce0df8185ee182359e096bf29987d5cf1f8a7391bef1
GET /_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=wA/d=0/rs=AN8SPfpVjmduEbJeaKDPJmqpx8swJVpW8A/m=el_main_css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gtasamipc.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 3960
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 09:56:49 GMT
expires: Wed, 23 Apr 2025 09:56:49 GMT
cache-control: public, max-age=31536000
age: 42816
last-modified: Sat, 15 Jul 2023 01:09:03 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| gtasamipc.blogspot.com/feeds/comments/default?alt=json&callback=helploggercomments&max-results=5 | 216.58.207.193 | 200 OK | 2.3 kB |
URL GET HTTP/3gtasamipc.blogspot.com/feeds/comments/default?alt=json&callback=helploggercomments&max-results=5 IP216.58.207.193:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintE8:F4:4F:CE:D1:E0:7B:C8:CD:18:45:AA:90:5A:35:8B:D5:CF:66:6B ValidityMon, 18 Mar 2024 20:01:08 GMT - Mon, 10 Jun 2024 20:01:07 GMT
File typeASCII text, with very long lines (11225) Hash112bd5c6f5c2388dce1fe3bb3b8c71d0 b34344f487924c13883e23dae4856dadda692523 58e499e9c14bc433fe235e7654f932f6278d7f5e58068785d6b5e13f6ea377c3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /feeds/comments/default?alt=json&callback=helploggercomments&max-results=5 HTTP/1.1
Host: gtasamipc.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
etag: W/"6438f8f236c6c937c9f2819f9287500fcf98b09e353f3add0403f20e11e13910"
date: Tue, 23 Apr 2024 21:50:25 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
expires: Tue, 23 Apr 2024 21:50:26 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Thu, 20 Jul 2023 10:29:52 GMT
content-encoding: gzip
content-length: 2311
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| lh3.googleusercontent.com/blogger_img_proxy/AEn0k_v2ogCibyrcriE_NMJjvxG1yprRljmXxBD7VGvJ29QahGJAAEPCujDqSAwUwoJVEDGRxUiCXBVNGjkn9WjJiwQJ1azgnTw=s0-d | 142.250.74.97 | 404 Not Found | 1.7 kB |
URL GET HTTP/2lh3.googleusercontent.com/blogger_img_proxy/AEn0k_v2ogCibyrcriE_NMJjvxG1yprRljmXxBD7VGvJ29QahGJAAEPCujDqSAwUwoJVEDGRxUiCXBVNGjkn9WjJiwQJ1azgnTw=s0-d IP142.250.74.97:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint6E:66:E1:45:85:5C:3A:EB:60:4A:8E:EF:62:B8:7C:E3:C7:1B:FA:47 ValidityMon, 18 Mar 2024 20:34:07 GMT - Mon, 10 Jun 2024 20:34:06 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1136) Hashb445a9581d9c970966d72240e788ce3d 7027d7985e9398564a51c67978954cd72ebd3118 c57feb63d87835b787a38f71858e6be62003f3806443b43bb429a7102f79f5ea
GET /blogger_img_proxy/AEn0k_v2ogCibyrcriE_NMJjvxG1yprRljmXxBD7VGvJ29QahGJAAEPCujDqSAwUwoJVEDGRxUiCXBVNGjkn9WjJiwQJ1azgnTw=s0-d HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gtasamipc.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Tue, 23 Apr 2024 21:50:26 GMT
server: fife
content-length: 1683
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pagead2.googlesyndication.com/pagead/ads?npa=1<d_cs=1&client=ca-pub-7937651764865180&output=html&adk=1812271804&adf=3025194257&lmt=1710405923&plat=8%3A4194304%2C9%3A134250504%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&plas=135x920_l%7C135x920_r&format=0x0&url=https%3A%2F%2Fgtasamipc.blogspot.com%2Fsearch%2Flabel%2Fgtasanandreasgame.11.13.13&host=ca-host-pub-1556223355139109&h_ch=L0006&pra=7&wgl=1&easpi=0&asro=0&dt=1713909026111&bpp=5&bdt=845&idt=5&shv=r20240422&mjsv=m202404170101&ptt=9&saldr=aa&abxe=1&eoidce=1&prev_fmts=201x600%2C201x600&nras=1&correlator=4131539219389&pv_h_ch=L0006&frm=20&pv=1&ga_vid=816004649.1713909026&ga_sid=1713909026&ga_hid=1906360125&ga_fc=0&u_tz=0&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_sd=1&adx=-12245933&ady=-12245933&biw=1280&bih=1024&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C44795921%2C95331036%2C95331043&oid=2&pvsid=3589810582211756&tmod=1800336391&nvt=1&fsapi=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C1024&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&ifi=4&uci=a!4&fsb=1&dtd=28 | 142.250.74.2 | 200 OK | 0 B |
URL GET HTTP/3pagead2.googlesyndication.com/pagead/ads?npa=1<d_cs=1&client=ca-pub-7937651764865180&output=html&adk=1812271804&adf=3025194257&lmt=1710405923&plat=8%3A4194304%2C9%3A134250504%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&plas=135x920_l%7C135x920_r&format=0x0&url=https%3A%2F%2Fgtasamipc.blogspot.com%2Fsearch%2Flabel%2Fgtasanandreasgame.11.13.13&host=ca-host-pub-1556223355139109&h_ch=L0006&pra=7&wgl=1&easpi=0&asro=0&dt=1713909026111&bpp=5&bdt=845&idt=5&shv=r20240422&mjsv=m202404170101&ptt=9&saldr=aa&abxe=1&eoidce=1&prev_fmts=201x600%2C201x600&nras=1&correlator=4131539219389&pv_h_ch=L0006&frm=20&pv=1&ga_vid=816004649.1713909026&ga_sid=1713909026&ga_hid=1906360125&ga_fc=0&u_tz=0&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_sd=1&adx=-12245933&ady=-12245933&biw=1280&bih=1024&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C44795921%2C95331036%2C95331043&oid=2&pvsid=3589810582211756&tmod=1800336391&nvt=1&fsapi=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C1024&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&ifi=4&uci=a!4&fsb=1&dtd=28 IP142.250.74.2:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subject*.g.doubleclick.net Fingerprint1B:FA:17:60:E2:34:D4:FA:D1:13:08:09:6E:8F:ED:E7:A8:8C:6E:7A ValidityMon, 18 Mar 2024 19:37:13 GMT - Mon, 10 Jun 2024 19:37:12 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/ads?npa=1<d_cs=1&client=ca-pub-7937651764865180&output=html&adk=1812271804&adf=3025194257&lmt=1710405923&plat=8%3A4194304%2C9%3A134250504%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&plas=135x920_l%7C135x920_r&format=0x0&url=https%3A%2F%2Fgtasamipc.blogspot.com%2Fsearch%2Flabel%2Fgtasanandreasgame.11.13.13&host=ca-host-pub-1556223355139109&h_ch=L0006&pra=7&wgl=1&easpi=0&asro=0&dt=1713909026111&bpp=5&bdt=845&idt=5&shv=r20240422&mjsv=m202404170101&ptt=9&saldr=aa&abxe=1&eoidce=1&prev_fmts=201x600%2C201x600&nras=1&correlator=4131539219389&pv_h_ch=L0006&frm=20&pv=1&ga_vid=816004649.1713909026&ga_sid=1713909026&ga_hid=1906360125&ga_fc=0&u_tz=0&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_sd=1&adx=-12245933&ady=-12245933&biw=1280&bih=1024&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C44795921%2C95331036%2C95331043&oid=2&pvsid=3589810582211756&tmod=1800336391&nvt=1&fsapi=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C1024&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&ifi=4&uci=a!4&fsb=1&dtd=28 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gtasamipc.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Tue, 23 Apr 2024 21:50:26 GMT
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 1.bp.blogspot.com/-7bkcAKdpGXI/UrbyQRqvSKI/AAAAAAAAFmI/oBv_yMeYnMQ/s40/blogger.png | 142.250.74.161 | 200 OK | 4.6 kB |
URL GET HTTP/31.bp.blogspot.com/-7bkcAKdpGXI/UrbyQRqvSKI/AAAAAAAAFmI/oBv_yMeYnMQ/s40/blogger.png IP142.250.74.161:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintE8:F4:4F:CE:D1:E0:7B:C8:CD:18:45:AA:90:5A:35:8B:D5:CF:66:6B ValidityMon, 18 Mar 2024 20:01:08 GMT - Mon, 10 Jun 2024 20:01:07 GMT
File typePNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced Hashbee772fda9c1bc4afdfa55c47fb2d392 1bd4adae916ef44b30ef52f1ae79595fcd10ca0e 40fb123f5cb817d1d2ff62fffcde4fcd2d646e6f7fad8c30af43c646cf933dfe
GET /-7bkcAKdpGXI/UrbyQRqvSKI/AAAAAAAAFmI/oBv_yMeYnMQ/s40/blogger.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="blogger.png"
x-content-type-options: nosniff
server: fife
content-length: 4569
x-xss-protection: 0
date: Tue, 23 Apr 2024 18:28:07 GMT
expires: Wed, 24 Apr 2024 18:28:07 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1663"
content-type: image/png
vary: Origin
age: 12139
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| pagead2.googlesyndication.com/pagead/ads?npa=1<d_cs=1&client=ca-pub-7937651764865180&output=html&h=600&slotname=1741543554&adk=3426791584&adf=2459519742&pi=t.ma~as.1741543554&w=201&fwrn=4&fwrnh=100&lmt=1710405923&rafmt=1&format=201x600&url=https%3A%2F%2Fgtasamipc.blogspot.com%2Fsearch%2Flabel%2Fgtasanandreasgame.11.13.13&host=ca-host-pub-1556223355139109&h_ch=L0006&fwr=0&rpe=1&resp_fmts=4&wgl=1&dt=1713909025727&bpp=7&bdt=460&idt=248&shv=r20240422&mjsv=m202404170101&ptt=9&saldr=aa&abxe=1&eoidce=1&correlator=4131539219389&frm=20&pv=2&ga_vid=816004649.1713909026&ga_sid=1713909026&ga_hid=1906360125&ga_fc=0&u_tz=0&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_sd=1&adx=153&ady=245&biw=1280&bih=1024&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C44795921%2C95331036%2C95331043&oid=2&pvsid=3589810582211756&tmod=1800336391&nvt=1&fc=640&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C1024&vis=1&rsz=%7C%7CoeE%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&ifi=1&uci=a!1&fsb=1&dtd=267 | 142.250.74.2 | 400 Bad Request | 46 B |
URL GET HTTP/3pagead2.googlesyndication.com/pagead/ads?npa=1<d_cs=1&client=ca-pub-7937651764865180&output=html&h=600&slotname=1741543554&adk=3426791584&adf=2459519742&pi=t.ma~as.1741543554&w=201&fwrn=4&fwrnh=100&lmt=1710405923&rafmt=1&format=201x600&url=https%3A%2F%2Fgtasamipc.blogspot.com%2Fsearch%2Flabel%2Fgtasanandreasgame.11.13.13&host=ca-host-pub-1556223355139109&h_ch=L0006&fwr=0&rpe=1&resp_fmts=4&wgl=1&dt=1713909025727&bpp=7&bdt=460&idt=248&shv=r20240422&mjsv=m202404170101&ptt=9&saldr=aa&abxe=1&eoidce=1&correlator=4131539219389&frm=20&pv=2&ga_vid=816004649.1713909026&ga_sid=1713909026&ga_hid=1906360125&ga_fc=0&u_tz=0&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_sd=1&adx=153&ady=245&biw=1280&bih=1024&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C44795921%2C95331036%2C95331043&oid=2&pvsid=3589810582211756&tmod=1800336391&nvt=1&fc=640&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C1024&vis=1&rsz=%7C%7CoeE%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&ifi=1&uci=a!1&fsb=1&dtd=267 IP142.250.74.2:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subject*.g.doubleclick.net Fingerprint1B:FA:17:60:E2:34:D4:FA:D1:13:08:09:6E:8F:ED:E7:A8:8C:6E:7A ValidityMon, 18 Mar 2024 19:37:13 GMT - Mon, 10 Jun 2024 19:37:12 GMT
File typeHTML document, ASCII text, with very long lines (603), with no line terminators Hash2c739853e3edfa26869416e3d4e5d369 c263dc1c36c954b252bc7e775e6e82865d9b29b8 00daef3b4a945d15f73efa05e0ce2ca51f2f8252e1da8fae5c2efb0f6dddacce
GET /pagead/ads?npa=1<d_cs=1&client=ca-pub-7937651764865180&output=html&h=600&slotname=1741543554&adk=3426791584&adf=2459519742&pi=t.ma~as.1741543554&w=201&fwrn=4&fwrnh=100&lmt=1710405923&rafmt=1&format=201x600&url=https%3A%2F%2Fgtasamipc.blogspot.com%2Fsearch%2Flabel%2Fgtasanandreasgame.11.13.13&host=ca-host-pub-1556223355139109&h_ch=L0006&fwr=0&rpe=1&resp_fmts=4&wgl=1&dt=1713909025727&bpp=7&bdt=460&idt=248&shv=r20240422&mjsv=m202404170101&ptt=9&saldr=aa&abxe=1&eoidce=1&correlator=4131539219389&frm=20&pv=2&ga_vid=816004649.1713909026&ga_sid=1713909026&ga_hid=1906360125&ga_fc=0&u_tz=0&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_sd=1&adx=153&ady=245&biw=1280&bih=1024&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C44795921%2C95331036%2C95331043&oid=2&pvsid=3589810582211756&tmod=1800336391&nvt=1&fc=640&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C1024&vis=1&rsz=%7C%7CoeE%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&ifi=1&uci=a!1&fsb=1&dtd=267 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gtasamipc.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 400 Bad Request
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
date: Tue, 23 Apr 2024 21:50:26 GMT
server: cafe
content-length: 46
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 4.bp.blogspot.com/-SRSVCXNxbAc/UrbxxXd06YI/AAAAAAAAFl4/332qncR9pD4/s1600/default-avatar.jpg | 142.250.74.97 | 200 OK | 19 kB |
URL GET HTTP/34.bp.blogspot.com/-SRSVCXNxbAc/UrbxxXd06YI/AAAAAAAAFl4/332qncR9pD4/s1600/default-avatar.jpg IP142.250.74.97:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint6E:66:E1:45:85:5C:3A:EB:60:4A:8E:EF:62:B8:7C:E3:C7:1B:FA:47 ValidityMon, 18 Mar 2024 20:34:07 GMT - Mon, 10 Jun 2024 20:34:06 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 400x400, components 3 Hashad76d9ae1f8f7c8c4f9c83bfc73b774f f9053cafcf0d9a5f8acebd6a250e73a389757322 a23ffc354156d434d27a529a8f30cebdcc893ad60fa4612662cdace5db65169b
GET /-SRSVCXNxbAc/UrbxxXd06YI/AAAAAAAAFl4/332qncR9pD4/s1600/default-avatar.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="default-avatar.jpg"
x-content-type-options: nosniff
server: fife
content-length: 18923
x-xss-protection: 0
cross-origin-resource-policy: cross-origin
date: Tue, 23 Apr 2024 18:28:06 GMT
expires: Wed, 24 Apr 2024 18:28:06 GMT
cache-control: public, max-age=86400, no-transform
age: 12140
etag: "v328a"
content-type: image/jpeg
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| dcba.popcash.net/znWaa3gu | 52.4.224.78 | 204 No Content | 0 B |
URL GET HTTP/2dcba.popcash.net/znWaa3gu IP52.4.224.78:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGlobalSign nv-sa Subject*.popcash.net FingerprintA0:E4:6F:A1:1E:C7:11:C2:B8:32:AF:92:D9:B2:34:05:44:6C:13:AE ValiditySat, 17 Jun 2023 15:33:27 GMT - Thu, 18 Jul 2024 15:33:26 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /znWaa3gu HTTP/1.1
Host: dcba.popcash.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://gtasamipc.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://gtasamipc.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Tue, 23 Apr 2024 21:50:26 GMT
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
X-Firefox-Spdy: h2
|
|
| www.blogger.com/dyn-css/authorization.css?targetBlogID=7888484155783837368&zx=4a4e81e1-71ad-4796-921d-1c74e0d0f484 | 216.58.207.233 | 200 OK | 21 B |
URL GET HTTP/2www.blogger.com/dyn-css/authorization.css?targetBlogID=7888484155783837368&zx=4a4e81e1-71ad-4796-921d-1c74e0d0f484 IP216.58.207.233:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint17:41:C7:D0:1D:55:29:41:DB:6D:65:5F:4E:63:97:50:32:7D:E1:60 ValidityMon, 18 Mar 2024 19:33:57 GMT - Mon, 10 Jun 2024 19:33:56 GMT
File typevery short file (no magic) Hash68b329da9893e34099c7d8ad5cb9c940 adc83b19e793491b1c6ea0fd8b46cd9f32e592fc 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /dyn-css/authorization.css?targetBlogID=7888484155783837368&zx=4a4e81e1-71ad-4796-921d-1c74e0d0f484 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gtasamipc.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 23 Apr 2024 21:50:26 GMT
last-modified: Tue, 23 Apr 2024 21:50:26 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pagead2.googlesyndication.com/pagead/ads?npa=1<d_cs=1&client=ca-pub-7937651764865180&output=html&h=600&slotname=9264810359&adk=236543356&adf=1030087056&pi=t.ma~as.9264810359&w=201&fwrn=4&fwrnh=100&lmt=1710405923&rafmt=1&format=201x600&url=https%3A%2F%2Fgtasamipc.blogspot.com%2Fsearch%2Flabel%2Fgtasanandreasgame.11.13.13&host=ca-host-pub-1556223355139109&h_ch=L0006&fwr=0&rpe=1&resp_fmts=4&wgl=1&dt=1713909025734&bpp=2&bdt=466&idt=322&shv=r20240422&mjsv=m202404170101&ptt=9&saldr=aa&abxe=1&eoidce=1&prev_fmts=201x600&correlator=4131539219389&pv_h_ch=L0006&frm=20&pv=1&ga_vid=816004649.1713909026&ga_sid=1713909026&ga_hid=1906360125&ga_fc=0&u_tz=0&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_sd=1&adx=153&ady=861&biw=1280&bih=1024&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C44795921%2C95331036%2C95331043&oid=2&pvsid=3589810582211756&tmod=1800336391&nvt=1&fc=640&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C1024&vis=1&rsz=%7C%7CoeE%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&ifi=2&uci=a!2&fsb=1&dtd=331 | 142.250.74.2 | 400 Bad Request | 46 B |
URL GET HTTP/3pagead2.googlesyndication.com/pagead/ads?npa=1<d_cs=1&client=ca-pub-7937651764865180&output=html&h=600&slotname=9264810359&adk=236543356&adf=1030087056&pi=t.ma~as.9264810359&w=201&fwrn=4&fwrnh=100&lmt=1710405923&rafmt=1&format=201x600&url=https%3A%2F%2Fgtasamipc.blogspot.com%2Fsearch%2Flabel%2Fgtasanandreasgame.11.13.13&host=ca-host-pub-1556223355139109&h_ch=L0006&fwr=0&rpe=1&resp_fmts=4&wgl=1&dt=1713909025734&bpp=2&bdt=466&idt=322&shv=r20240422&mjsv=m202404170101&ptt=9&saldr=aa&abxe=1&eoidce=1&prev_fmts=201x600&correlator=4131539219389&pv_h_ch=L0006&frm=20&pv=1&ga_vid=816004649.1713909026&ga_sid=1713909026&ga_hid=1906360125&ga_fc=0&u_tz=0&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_sd=1&adx=153&ady=861&biw=1280&bih=1024&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C44795921%2C95331036%2C95331043&oid=2&pvsid=3589810582211756&tmod=1800336391&nvt=1&fc=640&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C1024&vis=1&rsz=%7C%7CoeE%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&ifi=2&uci=a!2&fsb=1&dtd=331 IP142.250.74.2:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subject*.g.doubleclick.net Fingerprint1B:FA:17:60:E2:34:D4:FA:D1:13:08:09:6E:8F:ED:E7:A8:8C:6E:7A ValidityMon, 18 Mar 2024 19:37:13 GMT - Mon, 10 Jun 2024 19:37:12 GMT
File typeHTML document, ASCII text, with very long lines (603), with no line terminators Hash2c739853e3edfa26869416e3d4e5d369 c263dc1c36c954b252bc7e775e6e82865d9b29b8 00daef3b4a945d15f73efa05e0ce2ca51f2f8252e1da8fae5c2efb0f6dddacce
GET /pagead/ads?npa=1<d_cs=1&client=ca-pub-7937651764865180&output=html&h=600&slotname=9264810359&adk=236543356&adf=1030087056&pi=t.ma~as.9264810359&w=201&fwrn=4&fwrnh=100&lmt=1710405923&rafmt=1&format=201x600&url=https%3A%2F%2Fgtasamipc.blogspot.com%2Fsearch%2Flabel%2Fgtasanandreasgame.11.13.13&host=ca-host-pub-1556223355139109&h_ch=L0006&fwr=0&rpe=1&resp_fmts=4&wgl=1&dt=1713909025734&bpp=2&bdt=466&idt=322&shv=r20240422&mjsv=m202404170101&ptt=9&saldr=aa&abxe=1&eoidce=1&prev_fmts=201x600&correlator=4131539219389&pv_h_ch=L0006&frm=20&pv=1&ga_vid=816004649.1713909026&ga_sid=1713909026&ga_hid=1906360125&ga_fc=0&u_tz=0&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_sd=1&adx=153&ady=861&biw=1280&bih=1024&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C44795921%2C95331036%2C95331043&oid=2&pvsid=3589810582211756&tmod=1800336391&nvt=1&fc=640&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C1024&vis=1&rsz=%7C%7CoeE%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&ifi=2&uci=a!2&fsb=1&dtd=331 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gtasamipc.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 400 Bad Request
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
date: Tue, 23 Apr 2024 21:50:26 GMT
server: cafe
content-length: 46
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| gtasamipc.blogspot.com/b/stats?style=BLACK_TRANSPARENT&timeRange=ALL_TIME&token=APq4FmB9TPr8Z5IBZA2_9OCpnfV_rTiUYnrLYtuy_Ht5KypXSj1iLFxUPijNZVKJxw-Gd3_vBDQc1ysG-DdMXROALGssryiFlw | 216.58.207.193 | 200 OK | 255 B |
URL GET HTTP/3gtasamipc.blogspot.com/b/stats?style=BLACK_TRANSPARENT&timeRange=ALL_TIME&token=APq4FmB9TPr8Z5IBZA2_9OCpnfV_rTiUYnrLYtuy_Ht5KypXSj1iLFxUPijNZVKJxw-Gd3_vBDQc1ysG-DdMXROALGssryiFlw IP216.58.207.193:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintE8:F4:4F:CE:D1:E0:7B:C8:CD:18:45:AA:90:5A:35:8B:D5:CF:66:6B ValidityMon, 18 Mar 2024 20:01:08 GMT - Mon, 10 Jun 2024 20:01:07 GMT
Hashfd1747e96b50071b349931bb2aa0628a 0367ad3a69dbd51ab667255a06dc69e944c522e8 3c27c2902b2a0c901056bdcb65feb3bc8e979a871ec6db74aa206d88ed7f0ab3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /b/stats?style=BLACK_TRANSPARENT&timeRange=ALL_TIME&token=APq4FmB9TPr8Z5IBZA2_9OCpnfV_rTiUYnrLYtuy_Ht5KypXSj1iLFxUPijNZVKJxw-Gd3_vBDQc1ysG-DdMXROALGssryiFlw HTTP/1.1
Host: gtasamipc.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Tue, 23 Apr 2024 21:50:26 GMT
expires: Tue, 23 Apr 2024 21:50:26 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 255
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| pagead2.googlesyndication.com/pagead/ads?npa=1<d_cs=1&client=ca-pub-7937651764865180&output=html&h=600&slotname=3050153155&adk=3202221381&adf=946689579&pi=t.ma~as.3050153155&w=201&fwrn=4&fwrnh=100&lmt=1710405923&rafmt=1&format=201x600&url=https%3A%2F%2Fgtasamipc.blogspot.com%2Fsearch%2Flabel%2Fgtasanandreasgame.11.13.13&host=ca-host-pub-1556223355139109&h_ch=L0006&fwr=0&rpe=1&resp_fmts=4&wgl=1&dt=1713909025736&bpp=2&bdt=471&idt=459&shv=r20240422&mjsv=m202404170101&ptt=9&saldr=aa&abxe=1&eoidce=1&prev_fmts=201x600%2C201x600%2C0x0&nras=1&correlator=4131539219389&pv_h_ch=L0006&frm=20&pv=1&ga_vid=816004649.1713909026&ga_sid=1713909026&ga_hid=1906360125&ga_fc=0&u_tz=0&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_sd=1&adx=153&ady=1477&biw=1280&bih=1024&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C44795921%2C95331036%2C95331043&oid=2&pvsid=3589810582211756&tmod=1800336391&nvt=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C1024&vis=1&rsz=%7C%7CoeEbr%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&ifi=3&uci=a!3&btvi=1&fsb=1&dtd=466 | 142.250.74.2 | 400 Bad Request | 46 B |
URL GET HTTP/3pagead2.googlesyndication.com/pagead/ads?npa=1<d_cs=1&client=ca-pub-7937651764865180&output=html&h=600&slotname=3050153155&adk=3202221381&adf=946689579&pi=t.ma~as.3050153155&w=201&fwrn=4&fwrnh=100&lmt=1710405923&rafmt=1&format=201x600&url=https%3A%2F%2Fgtasamipc.blogspot.com%2Fsearch%2Flabel%2Fgtasanandreasgame.11.13.13&host=ca-host-pub-1556223355139109&h_ch=L0006&fwr=0&rpe=1&resp_fmts=4&wgl=1&dt=1713909025736&bpp=2&bdt=471&idt=459&shv=r20240422&mjsv=m202404170101&ptt=9&saldr=aa&abxe=1&eoidce=1&prev_fmts=201x600%2C201x600%2C0x0&nras=1&correlator=4131539219389&pv_h_ch=L0006&frm=20&pv=1&ga_vid=816004649.1713909026&ga_sid=1713909026&ga_hid=1906360125&ga_fc=0&u_tz=0&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_sd=1&adx=153&ady=1477&biw=1280&bih=1024&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C44795921%2C95331036%2C95331043&oid=2&pvsid=3589810582211756&tmod=1800336391&nvt=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C1024&vis=1&rsz=%7C%7CoeEbr%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&ifi=3&uci=a!3&btvi=1&fsb=1&dtd=466 IP142.250.74.2:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subject*.g.doubleclick.net Fingerprint1B:FA:17:60:E2:34:D4:FA:D1:13:08:09:6E:8F:ED:E7:A8:8C:6E:7A ValidityMon, 18 Mar 2024 19:37:13 GMT - Mon, 10 Jun 2024 19:37:12 GMT
File typeHTML document, ASCII text, with very long lines (603), with no line terminators Hash2c739853e3edfa26869416e3d4e5d369 c263dc1c36c954b252bc7e775e6e82865d9b29b8 00daef3b4a945d15f73efa05e0ce2ca51f2f8252e1da8fae5c2efb0f6dddacce
GET /pagead/ads?npa=1<d_cs=1&client=ca-pub-7937651764865180&output=html&h=600&slotname=3050153155&adk=3202221381&adf=946689579&pi=t.ma~as.3050153155&w=201&fwrn=4&fwrnh=100&lmt=1710405923&rafmt=1&format=201x600&url=https%3A%2F%2Fgtasamipc.blogspot.com%2Fsearch%2Flabel%2Fgtasanandreasgame.11.13.13&host=ca-host-pub-1556223355139109&h_ch=L0006&fwr=0&rpe=1&resp_fmts=4&wgl=1&dt=1713909025736&bpp=2&bdt=471&idt=459&shv=r20240422&mjsv=m202404170101&ptt=9&saldr=aa&abxe=1&eoidce=1&prev_fmts=201x600%2C201x600%2C0x0&nras=1&correlator=4131539219389&pv_h_ch=L0006&frm=20&pv=1&ga_vid=816004649.1713909026&ga_sid=1713909026&ga_hid=1906360125&ga_fc=0&u_tz=0&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_sd=1&adx=153&ady=1477&biw=1280&bih=1024&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C44795921%2C95331036%2C95331043&oid=2&pvsid=3589810582211756&tmod=1800336391&nvt=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C1024&vis=1&rsz=%7C%7CoeEbr%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&ifi=3&uci=a!3&btvi=1&fsb=1&dtd=466 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gtasamipc.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 400 Bad Request
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
date: Tue, 23 Apr 2024 21:50:26 GMT
server: cafe
content-length: 46
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png | 142.250.74.131 | 200 OK | 910 B |
URL GET HTTP/3www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png IP142.250.74.131:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typePNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced Hashefa6bb2bfe459bc6f4bdafa3db0383f6 52d15ce52fe50643e542c17812de43f4ed1b6ee0 6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2
GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gtasamipc.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 910
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 22 Apr 2024 08:01:17 GMT
expires: Tue, 22 Apr 2025 08:01:17 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/png
vary: Origin
age: 136149
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/images/branding/product/2x/translate_24dp.png | 142.250.74.131 | 200 OK | 1.8 kB |
URL GET HTTP/3www.gstatic.com/images/branding/product/2x/translate_24dp.png IP142.250.74.131:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Hashc69c796362406f9e11c7f4bf5bb628da e489ce95ab56208090868882113d7416abf46775 4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82
GET /images/branding/product/2x/translate_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=wA/d=0/rs=AN8SPfpVjmduEbJeaKDPJmqpx8swJVpW8A/m=el_main_css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 1842
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 17:08:02 GMT
expires: Wed, 23 Apr 2025 17:08:02 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
content-type: image/png
vary: Origin
age: 16944
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg | 216.58.207.227 | 200 OK | 3.3 kB |
URL GET HTTP/2fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg IP216.58.207.227:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeSVG Scalable Vector Graphics image Hash2bd5c073a88b83ed74db88282a56ddfb d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650 ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09
GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gtasamipc.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
content-length: 3340
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 21 Apr 2024 18:58:28 GMT
expires: Mon, 21 Apr 2025 18:58:28 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 20 Apr 2022 14:24:23 GMT
content-type: image/svg+xml
vary: Accept-Encoding
age: 183118
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lh3.googleusercontent.com/blogger_img_proxy/AEn0k_s6ME2zyR1bsQ1q2SzMuX0X7rMwYQ0ZdiHGXy97TcqYdOJFHnOijC__jJvhts0HurOK05PGTJUiz-NYGDvPkw2A1INYTkWI4IPi4IpwQOiwlKIkQlcUirk=s0-d | 142.250.74.97 | 404 Not Found | 1.7 kB |
URL GET HTTP/2lh3.googleusercontent.com/blogger_img_proxy/AEn0k_s6ME2zyR1bsQ1q2SzMuX0X7rMwYQ0ZdiHGXy97TcqYdOJFHnOijC__jJvhts0HurOK05PGTJUiz-NYGDvPkw2A1INYTkWI4IPi4IpwQOiwlKIkQlcUirk=s0-d IP142.250.74.97:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint6E:66:E1:45:85:5C:3A:EB:60:4A:8E:EF:62:B8:7C:E3:C7:1B:FA:47 ValidityMon, 18 Mar 2024 20:34:07 GMT - Mon, 10 Jun 2024 20:34:06 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1136) Hasha4c2fb7bb8a2cf2831e85ae6b3e020e7 315396061b89e8665b69d2e95106ca6d356c2875 235a870ed586dadfba085cde6f80b4fbb4a8a9cc35754ae0e7dcb5f06f599262
GET /blogger_img_proxy/AEn0k_s6ME2zyR1bsQ1q2SzMuX0X7rMwYQ0ZdiHGXy97TcqYdOJFHnOijC__jJvhts0HurOK05PGTJUiz-NYGDvPkw2A1INYTkWI4IPi4IpwQOiwlKIkQlcUirk=s0-d HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gtasamipc.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Tue, 23 Apr 2024 21:50:26 GMT
server: fife
content-length: 1707
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lh3.googleusercontent.com/blogger_img_proxy/AEn0k_tlE6LTo4qt_6oL0Nwc2eR2ZNHS8Y8flPHsI7zNZW5f2aNHdQaEzzmPuR_X4g5amIIws3XDn38rWMyPbcNXuS-AE-X3PzlMVjY0bp6sQlx86UXL_2Uq=s0-d | 142.250.74.97 | 404 Not Found | 1.7 kB |
URL GET HTTP/2lh3.googleusercontent.com/blogger_img_proxy/AEn0k_tlE6LTo4qt_6oL0Nwc2eR2ZNHS8Y8flPHsI7zNZW5f2aNHdQaEzzmPuR_X4g5amIIws3XDn38rWMyPbcNXuS-AE-X3PzlMVjY0bp6sQlx86UXL_2Uq=s0-d IP142.250.74.97:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint6E:66:E1:45:85:5C:3A:EB:60:4A:8E:EF:62:B8:7C:E3:C7:1B:FA:47 ValidityMon, 18 Mar 2024 20:34:07 GMT - Mon, 10 Jun 2024 20:34:06 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1136) Hashe7b5b7a79bded651acd941aa33334457 66e23032678464f764cd54d5c88885de4b3de50b 733cb19fc84273071db3af433f73e6b97a283dca995f3ef3bf293a518353c1f6
GET /blogger_img_proxy/AEn0k_tlE6LTo4qt_6oL0Nwc2eR2ZNHS8Y8flPHsI7zNZW5f2aNHdQaEzzmPuR_X4g5amIIws3XDn38rWMyPbcNXuS-AE-X3PzlMVjY0bp6sQlx86UXL_2Uq=s0-d HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gtasamipc.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Tue, 23 Apr 2024 21:50:26 GMT
server: fife
content-length: 1704
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| translate-pa.googleapis.com/v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback | 142.250.74.106 | | 1.4 kB |
URL translate-pa.googleapis.com/v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback IP142.250.74.106:0
Hasha3eefe14b1b4698460d992bd1673a26b a2fca6ebb00b8bdcca3eda88654d02d2c165b9c4 87514750a90cd70dd22c8673cfa80d804ef55840bd0755950af2118d8d218067
GET /v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback HTTP/1.1
Host: translate-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gtasamipc.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-type: text/javascript; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 23 Apr 2024 21:50:26 GMT
server: ESF
cache-control: private
content-length: 1392
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: NID=513=E5-6Xc6nXXdMmQlJVDOc_u5BxdfNAVeERoAqY8DcbiEMJkudY83JrpgSTZp7g2-xnW1pimU0zwXLYY_noxg5qpEyrZ2P_B8Mbqf6yzr8ClmufPNviRLapa62PlywSdp_ybimnx-vYBWSE2q3gs7YwQJeMLno7xwONU4yZO4VKQQ; expires=Wed, 23-Oct-2024 21:50:26 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly
expires: Tue, 23 Apr 2024 21:50:26 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| translate.google.com/gen204?sl=en&nca=te_ap&client=te&logld=vTE_20240422 | 216.58.211.14 | 204 No Content | 0 B |
URL GET HTTP/3translate.google.com/gen204?sl=en&nca=te_ap&client=te&logld=vTE_20240422 IP216.58.211.14:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gen204?sl=en&nca=te_ap&client=te&logld=vTE_20240422 HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gtasamipc.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: image/gif; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 23 Apr 2024 21:50:26 GMT
cross-origin-resource-policy: cross-origin
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: script-src 'nonce-XryU3mCy1QT7y3aKjoxIlw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self', require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport
cross-origin-opener-policy: same-origin
reporting-endpoints: default="/_/TranslateApiHttp/web-reports?context=eJzjEtDikmJw1JBicEqfwRoExEI8HItuLdjIJnCj8d9RJgBx0gmv"
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: __Secure-ENID=19.SE=NqvnKO991d9GI_tRa0YtAlIRNr75yQpV2PZCV3tbbqTn5BHWrg1GzsaQbImKpTfXj3dqgH1slBm1qLCN4sFQEXQrQaHJJe2ef8vRSFh-N4el77EFHL9sNUyRcMQtKt5Fhwq6VH6VUNz-2UzyvMj3HEfOpAyGfsgWUKif14ObMFA; expires=Sat, 24-May-2025 14:08:44 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 4e324e82-a-62cb3a1a-s-sites.googlegroups.com/site/gtasamipc/header.png | 173.194.222.137 | 302 Found | 241 B |
URL GET HTTP/24e324e82-a-62cb3a1a-s-sites.googlegroups.com/site/gtasamipc/header.png IP173.194.222.137:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subject*.googlegroups.com FingerprintE9:63:3E:83:44:6D:36:37:57:6D:A4:7F:A0:B6:F1:3F:21:D5:15:5D ValidityMon, 18 Mar 2024 20:32:33 GMT - Mon, 10 Jun 2024 20:32:32 GMT
File typeHTML document, ASCII text Hash7ca7362f2f412d53f691f8bfccb72952 d36afee07b7a96bd80fe9ecb11dbb1b43034b6ce 180cb757299d3526d695ff32a46a492a3a141411a47ed26506a1872bc9bed12e
GET /site/gtasamipc/header.png HTTP/1.1
Host: 4e324e82-a-62cb3a1a-s-sites.googlegroups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gtasamipc.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
location: https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path=%2Fgtasamipc%2Fheader.png
content-encoding: gzip
date: Tue, 23 Apr 2024 21:50:26 GMT
expires: Tue, 23 Apr 2024 21:50:26 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 241
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| gtasamipc.blogspot.com/favicon.ico | 216.58.207.193 | 200 OK | 642 B |
URL GET HTTP/3gtasamipc.blogspot.com/favicon.ico IP216.58.207.193:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintE8:F4:4F:CE:D1:E0:7B:C8:CD:18:45:AA:90:5A:35:8B:D5:CF:66:6B ValidityMon, 18 Mar 2024 20:01:08 GMT - Mon, 10 Jun 2024 20:01:07 GMT
File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel Hashdcf0721347266a50b602eb660997522d 0be9a6f392c0e2314934a9657bcd8d894a611883 71767bce3eb57819687f550dd96cc760b9a43e8861b174252290ee315a4a3ced
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: gtasamipc.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/x-icon; charset=UTF-8
expires: Tue, 23 Apr 2024 21:50:26 GMT
date: Tue, 23 Apr 2024 21:50:26 GMT
cache-control: private, max-age=86400
last-modified: Thu, 14 Mar 2024 08:45:23 GMT
etag: W/"95e6b5be741500b4da4e9bcb5a08675aaa008d6d150b245bb091b5759335f58d"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 642
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| sites.google.com/site/sites/system/errors/WebspaceNotFound?path=%2Fgtasamipc%2Fheader.png | 142.250.74.78 | 302 Found | 307 B |
URL GET HTTP/2sites.google.com/site/sites/system/errors/WebspaceNotFound?path=%2Fgtasamipc%2Fheader.png IP142.250.74.78:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeHTML document, ASCII text, with very long lines (337) Hashf23a2fc939c2bfce30ccf2d09411061a 4436ee4c1f383f107ddd57a07222039c7589643b e8f3696654b732d55ea47c71a3fb6f4177d228830b225386837f634e3f167efe
GET /site/sites/system/errors/WebspaceNotFound?path=%2Fgtasamipc%2Fheader.png HTTP/1.1
Host: sites.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gtasamipc.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
x-frame-options: DENY
last-modified: Wed, 10 Apr 2024 21:51:50 GMT
etag: "1712785910000|#public|0|en|||0|-632309409|627326477"
location: https://accounts.google.com/ServiceLogin?service=jotspot&passive=1209600&continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/gtasamipc/header.png&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/gtasamipc/header.png
content-encoding: gzip
date: Tue, 23 Apr 2024 21:50:26 GMT
expires: Tue, 23 Apr 2024 21:50:26 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 307
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| accounts.google.com/ServiceLogin?service=jotspot&passive=1209600&continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/gtasamipc/header.png&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/gtasamipc/header.png | 64.233.162.84 | 302 Found | 0 B |
URL GET HTTP/2accounts.google.com/ServiceLogin?service=jotspot&passive=1209600&continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/gtasamipc/header.png&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/gtasamipc/header.png IP64.233.162.84:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subjectaccounts.google.com FingerprintCC:CB:DD:14:30:B0:75:6A:EE:1D:20:F1:9E:C5:DD:5F:DD:68:4F:7B ValidityMon, 18 Mar 2024 20:38:53 GMT - Mon, 10 Jun 2024 20:38:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?service=jotspot&passive=1209600&continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/gtasamipc/header.png&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/gtasamipc/header.png HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gtasamipc.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:UIszrvNBITmDQP4TYXUe85wJH54x2w:aEj8BowmGbMHP2pw; Expires=Thu, 23-Apr-2026 21:50:27 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 23 Apr 2024 21:50:27 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/gtasamipc/header.png&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/gtasamipc/header.png&passive=1209600&service=jotspot&ifkv=AaSxoQyTHu-zyLoQFrEUTKCPxbvj-HK-kWiXItHDrJEpRrJwYS16wvn-101u9s46FHMzmFGSAzju
strict-transport-security: max-age=31536000; includeSubDomains
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: script-src 'nonce-kv2RM8pU2pK9Sa7wAkqCfg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy: unsafe-none
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| accounts.google.com/InteractiveLogin?continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/gtasamipc/header.png&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/gtasamipc/header.png&passive=1209600&service=jotspot&ifkv=AaSxoQyTHu-zyLoQFrEUTKCPxbvj-HK-kWiXItHDrJEpRrJwYS16wvn-101u9s46FHMzmFGSAzju | 64.233.162.84 | 302 Found | 469 B |
URL GET HTTP/2accounts.google.com/InteractiveLogin?continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/gtasamipc/header.png&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/gtasamipc/header.png&passive=1209600&service=jotspot&ifkv=AaSxoQyTHu-zyLoQFrEUTKCPxbvj-HK-kWiXItHDrJEpRrJwYS16wvn-101u9s46FHMzmFGSAzju IP64.233.162.84:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subjectaccounts.google.com FingerprintCC:CB:DD:14:30:B0:75:6A:EE:1D:20:F1:9E:C5:DD:5F:DD:68:4F:7B ValidityMon, 18 Mar 2024 20:38:53 GMT - Mon, 10 Jun 2024 20:38:52 GMT
File typeHTML document, ASCII text, with very long lines (590) Hash639203d88e2b15357db08643344f189e d00c74c5d5b35af6d8cded14df7ff1ebdc275535 fa364927eb3ee1ab8dbb2387384a200b4eb9fd0cdc2d57858366532b94aaee7d
GET /InteractiveLogin?continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/gtasamipc/header.png&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/gtasamipc/header.png&passive=1209600&service=jotspot&ifkv=AaSxoQyTHu-zyLoQFrEUTKCPxbvj-HK-kWiXItHDrJEpRrJwYS16wvn-101u9s46FHMzmFGSAzju HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gtasamipc.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:hOfzvygH-6KHyRyxsFDR606-2wbBVQ:RwqHmbW5Zzsy8q8O;Path=/;Expires=Thu, 23-Apr-2026 21:50:27 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 23 Apr 2024 21:50:27 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fgtasamipc%2Fheader.png&followup=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fgtasamipc%2Fheader.png&ifkv=AaSxoQwz6WyAL8GMpMKnvJZKQ2BLXyBLGLqE5u01hQ84Efn-V6rDzdfDJJIyJklLAhfwLJvaDcG3&passive=1209600&service=jotspot&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S570669802%3A1713909027220696&theme=mn&ddm=0
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-eoLGm_cAYW6mVwStmlB-eQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 469
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fgtasamipc%2Fheader.png&followup=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fgtasamipc%2Fheader.png&ifkv=AaSxoQwz6WyAL8GMpMKnvJZKQ2BLXyBLGLqE5u01hQ84Efn-V6rDzdfDJJIyJklLAhfwLJvaDcG3&passive=1209600&service=jotspot&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S570669802%3A1713909027220696&theme=mn&ddm=0 | 64.233.162.84 | 403 Forbidden | 13 kB |
URL GET HTTP/3accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fgtasamipc%2Fheader.png&followup=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fgtasamipc%2Fheader.png&ifkv=AaSxoQwz6WyAL8GMpMKnvJZKQ2BLXyBLGLqE5u01hQ84Efn-V6rDzdfDJJIyJklLAhfwLJvaDcG3&passive=1209600&service=jotspot&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S570669802%3A1713909027220696&theme=mn&ddm=0 IP64.233.162.84:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typegzip compressed data, max compression Hash68a1a4d0472ce6f351f0897e0d0d5596 53670bb7f8c25e0cf7cb50f4e6bd27723574822c 93bf0ba2b122857f75801a1346e6e3123cd3448bf82548e5884dc9b0466bb1a9
GET /v3/signin/identifier?continue=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fgtasamipc%2Fheader.png&followup=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fgtasamipc%2Fheader.png&ifkv=AaSxoQwz6WyAL8GMpMKnvJZKQ2BLXyBLGLqE5u01hQ84Efn-V6rDzdfDJJIyJklLAhfwLJvaDcG3&passive=1209600&service=jotspot&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S570669802%3A1713909027220696&theme=mn&ddm=0 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gtasamipc.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 23 Apr 2024 21:50:27 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-myQ7e2OjTTVJBaP-S1KMUA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| tpc.googlesyndication.com/sodar/sodar2.js | 216.58.207.193 | 200 OK | 6.4 kB |
URL GET HTTP/2tpc.googlesyndication.com/sodar/sodar2.js IP216.58.207.193:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subjecttpc.googlesyndication.com Fingerprint26:0A:D2:26:CC:CA:77:A9:66:3C:10:C3:76:3D:EA:C0:C4:10:87:8B ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeJavaScript source, ASCII text, with very long lines (1321) Hash2cc87e9764aebcbbf36ff2061e6a2793 b4f2ffdf4c695aa79f0e63651c18a88729c2407b 61c32059a5e94075a7ecff678b33907966fc9cfa384daa01aa057f872da14dbb
GET /sodar/sodar2.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gtasamipc.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 6386
date: Tue, 23 Apr 2024 21:50:27 GMT
expires: Tue, 23 Apr 2024 21:50:27 GMT
cache-control: private, max-age=3000
etag: "1637097310169751"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| tpc.googlesyndication.com/sodar/sodar2/225/runner.html | 216.58.207.193 | 200 OK | 5.0 kB |
URL GET HTTP/2tpc.googlesyndication.com/sodar/sodar2/225/runner.html IP216.58.207.193:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subjecttpc.googlesyndication.com Fingerprint26:0A:D2:26:CC:CA:77:A9:66:3C:10:C3:76:3D:EA:C0:C4:10:87:8B ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeHTML document, ASCII text, with very long lines (2020) Hash1d3d22df067f5219073f9c0fabb74fdd d5c226022639323d93946df3571404116041e588 55a119c0394f901a8a297e109c17b5e5402689708b999ab10691c16179f32a4a
GET /sodar/sodar2/225/runner.html HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gtasamipc.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 5046
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 04:11:49 GMT
expires: Fri, 18 Apr 2025 04:11:49 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 21 Jun 2021 20:47:05 GMT
content-type: text/html
vary: Accept-Encoding
age: 495518
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pagead2.googlesyndication.com/bg/tXhR5WxKMkfxhPR3Ieicu84_GDeFDNUHyibK8QhzoCs.js | 142.250.74.2 | | 16 kB |
URL pagead2.googlesyndication.com/bg/tXhR5WxKMkfxhPR3Ieicu84_GDeFDNUHyibK8QhzoCs.js IP142.250.74.2:0
CertificateIssuerGoogle Trust Services LLC Subject*.g.doubleclick.net Fingerprint1B:FA:17:60:E2:34:D4:FA:D1:13:08:09:6E:8F:ED:E7:A8:8C:6E:7A ValidityMon, 18 Mar 2024 19:37:13 GMT - Mon, 10 Jun 2024 19:37:12 GMT
File typeJavaScript source, ASCII text, with very long lines (39769) Hash059e5b5148820182e80ec2850f06ee03 91dc5ae373e3c6fe06e01b1d856ebf948bc7021d b57851e56c4a3247f184f47721e89cbbce3f1837850cd507ca26caf10873a02b
GET /bg/tXhR5WxKMkfxhPR3Ieicu84_GDeFDNUHyibK8QhzoCs.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tpc.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 15738
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 20:22:51 GMT
expires: Fri, 18 Apr 2025 20:22:51 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 16 Apr 2024 13:58:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 437256
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| tpc.googlesyndication.com/generate_204?TKwqbA | 216.58.207.193 | | 0 B |
URL tpc.googlesyndication.com/generate_204?TKwqbA IP216.58.207.193:0
CertificateIssuerGoogle Trust Services LLC Subjecttpc.googlesyndication.com Fingerprint26:0A:D2:26:CC:CA:77:A9:66:3C:10:C3:76:3D:EA:C0:C4:10:87:8B ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?TKwqbA HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Tue, 23 Apr 2024 21:50:27 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&t=2&li=gda_r20240422&jk=3589810582211756&bg=!ysmlyYbNAAZ55ZTXWeU7ADQBe5WfOLbbyJs19TsBHmJ13gTRo5Wifvkg4MXf9MLAo8HOMUdlLkplSO8SIPJt6zlDDsPyAgAAAMpSAAAABmgBB34ANCV2A-dMKBVkcaPSA4ZXJScPmJCDxb-acf1CKDVAHewUKuNwVQws6JqZOCChzOmV1mECLOUKAPDZAejZiyFC8Edua4VPAxEM3HXWuvaILUCN8mPqDw_-BUJPhS6r0S9Ey8zy3ipVUFudYjxCwPGp8tqxKR7r1uWQURn5s9A2YSdhx-49jEC3jqKXfhkjlxySl3tkuW73vvbIcaNWH03VsYzgaxY_Yn19w57HQdcSR6LZMBXuRU9JrMXC2sovSMgkPZGIXCk2rESzVJzpDaEBIaHUcN5yuGAcp5Y0vMj71CIAeFQdfeQnZwkKEwTeZEf3Mm65hL8dli8Ls6tmBq4i7DwUjFVY5ms00h8u8f1iS-oTPH_f5I7biZ1qgDji0ZROjhaIMaDFVeCZAiHaVcLtNzvvpF5oM5zvXE8ulEfFIBVpuPuZsJalgohTs4g6Ug22rSsFmOq1Ra_DKE8NH4RsxDzpnLzw_8EMOztDQYT94J7c3661X-vXU5KHx3dbOAzRbLO-RCBfHJDBADA1G4FyLT1cCZHR3rEnyrdbQH5KETyisRTsq5LDQA7dGeLJ2JoJLFA-JGQu8ie_h5BpNjc6I4hS0eo-vJzj4Tmva3-AdfK74zsNDNNMPgKuJHPCJGvxbAb8PUUz3i42q6u0zR80QqbfAJBBHfug67G12tQxh7KIY3X7uN8HGz0STDR9n6l_nt087oS8uXbs-5jtJNUOMeghnfSaGbA8cRnG8yWn8vZau4v5WJBVvDS0aqPDBhEkFrAkU8_OAI8a3lyCCZb4mKdT0dCYDQIAONa5ZSin2tlTElT3C5AfefG4sNQwW9u7Yms-BIAIrhWYaKtYHLVLgVoXYewjMJPO5JsI433NuoKUZ4xAM1oHduq2OZ_p0lxEQCWoEylDSY5Rdk2mj5jzwWkI95aeCKC3xYcki-v5b7MCeITUm-9JImPf9bZvEKSf5N_C5eY0CqDCE4l80lkrZkhnYBYn334PpatcPgy0hVioEDm-pO_tSicEyqN6bTd3qC_HcikokTBcYOJfpXLT-WldxiCJgf_yirANiKNgJq5k5b-g30BKZow7ct2br5EHJ0cqDXK5UUu3qHASLAF_aOWLyzwkmgz78N1Ksw | 142.250.74.2 | 204 No Content | 0 B |
URL GET HTTP/3pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&t=2&li=gda_r20240422&jk=3589810582211756&bg=!ysmlyYbNAAZ55ZTXWeU7ADQBe5WfOLbbyJs19TsBHmJ13gTRo5Wifvkg4MXf9MLAo8HOMUdlLkplSO8SIPJt6zlDDsPyAgAAAMpSAAAABmgBB34ANCV2A-dMKBVkcaPSA4ZXJScPmJCDxb-acf1CKDVAHewUKuNwVQws6JqZOCChzOmV1mECLOUKAPDZAejZiyFC8Edua4VPAxEM3HXWuvaILUCN8mPqDw_-BUJPhS6r0S9Ey8zy3ipVUFudYjxCwPGp8tqxKR7r1uWQURn5s9A2YSdhx-49jEC3jqKXfhkjlxySl3tkuW73vvbIcaNWH03VsYzgaxY_Yn19w57HQdcSR6LZMBXuRU9JrMXC2sovSMgkPZGIXCk2rESzVJzpDaEBIaHUcN5yuGAcp5Y0vMj71CIAeFQdfeQnZwkKEwTeZEf3Mm65hL8dli8Ls6tmBq4i7DwUjFVY5ms00h8u8f1iS-oTPH_f5I7biZ1qgDji0ZROjhaIMaDFVeCZAiHaVcLtNzvvpF5oM5zvXE8ulEfFIBVpuPuZsJalgohTs4g6Ug22rSsFmOq1Ra_DKE8NH4RsxDzpnLzw_8EMOztDQYT94J7c3661X-vXU5KHx3dbOAzRbLO-RCBfHJDBADA1G4FyLT1cCZHR3rEnyrdbQH5KETyisRTsq5LDQA7dGeLJ2JoJLFA-JGQu8ie_h5BpNjc6I4hS0eo-vJzj4Tmva3-AdfK74zsNDNNMPgKuJHPCJGvxbAb8PUUz3i42q6u0zR80QqbfAJBBHfug67G12tQxh7KIY3X7uN8HGz0STDR9n6l_nt087oS8uXbs-5jtJNUOMeghnfSaGbA8cRnG8yWn8vZau4v5WJBVvDS0aqPDBhEkFrAkU8_OAI8a3lyCCZb4mKdT0dCYDQIAONa5ZSin2tlTElT3C5AfefG4sNQwW9u7Yms-BIAIrhWYaKtYHLVLgVoXYewjMJPO5JsI433NuoKUZ4xAM1oHduq2OZ_p0lxEQCWoEylDSY5Rdk2mj5jzwWkI95aeCKC3xYcki-v5b7MCeITUm-9JImPf9bZvEKSf5N_C5eY0CqDCE4l80lkrZkhnYBYn334PpatcPgy0hVioEDm-pO_tSicEyqN6bTd3qC_HcikokTBcYOJfpXLT-WldxiCJgf_yirANiKNgJq5k5b-g30BKZow7ct2br5EHJ0cqDXK5UUu3qHASLAF_aOWLyzwkmgz78N1Ksw IP142.250.74.2:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subject*.g.doubleclick.net Fingerprint1B:FA:17:60:E2:34:D4:FA:D1:13:08:09:6E:8F:ED:E7:A8:8C:6E:7A ValidityMon, 18 Mar 2024 19:37:13 GMT - Mon, 10 Jun 2024 19:37:12 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/sodar?id=sodar2&v=225&t=2&li=gda_r20240422&jk=3589810582211756&bg=!ysmlyYbNAAZ55ZTXWeU7ADQBe5WfOLbbyJs19TsBHmJ13gTRo5Wifvkg4MXf9MLAo8HOMUdlLkplSO8SIPJt6zlDDsPyAgAAAMpSAAAABmgBB34ANCV2A-dMKBVkcaPSA4ZXJScPmJCDxb-acf1CKDVAHewUKuNwVQws6JqZOCChzOmV1mECLOUKAPDZAejZiyFC8Edua4VPAxEM3HXWuvaILUCN8mPqDw_-BUJPhS6r0S9Ey8zy3ipVUFudYjxCwPGp8tqxKR7r1uWQURn5s9A2YSdhx-49jEC3jqKXfhkjlxySl3tkuW73vvbIcaNWH03VsYzgaxY_Yn19w57HQdcSR6LZMBXuRU9JrMXC2sovSMgkPZGIXCk2rESzVJzpDaEBIaHUcN5yuGAcp5Y0vMj71CIAeFQdfeQnZwkKEwTeZEf3Mm65hL8dli8Ls6tmBq4i7DwUjFVY5ms00h8u8f1iS-oTPH_f5I7biZ1qgDji0ZROjhaIMaDFVeCZAiHaVcLtNzvvpF5oM5zvXE8ulEfFIBVpuPuZsJalgohTs4g6Ug22rSsFmOq1Ra_DKE8NH4RsxDzpnLzw_8EMOztDQYT94J7c3661X-vXU5KHx3dbOAzRbLO-RCBfHJDBADA1G4FyLT1cCZHR3rEnyrdbQH5KETyisRTsq5LDQA7dGeLJ2JoJLFA-JGQu8ie_h5BpNjc6I4hS0eo-vJzj4Tmva3-AdfK74zsNDNNMPgKuJHPCJGvxbAb8PUUz3i42q6u0zR80QqbfAJBBHfug67G12tQxh7KIY3X7uN8HGz0STDR9n6l_nt087oS8uXbs-5jtJNUOMeghnfSaGbA8cRnG8yWn8vZau4v5WJBVvDS0aqPDBhEkFrAkU8_OAI8a3lyCCZb4mKdT0dCYDQIAONa5ZSin2tlTElT3C5AfefG4sNQwW9u7Yms-BIAIrhWYaKtYHLVLgVoXYewjMJPO5JsI433NuoKUZ4xAM1oHduq2OZ_p0lxEQCWoEylDSY5Rdk2mj5jzwWkI95aeCKC3xYcki-v5b7MCeITUm-9JImPf9bZvEKSf5N_C5eY0CqDCE4l80lkrZkhnYBYn334PpatcPgy0hVioEDm-pO_tSicEyqN6bTd3qC_HcikokTBcYOJfpXLT-WldxiCJgf_yirANiKNgJq5k5b-g30BKZow7ct2br5EHJ0cqDXK5UUu3qHASLAF_aOWLyzwkmgz78N1Ksw HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gtasamipc.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Tue, 23 Apr 2024 21:50:28 GMT
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0 | 142.250.74.106 | 200 OK | 0 B |
URL OPTIONS HTTP/3translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0 IP142.250.74.106:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /element/log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://gtasamipc.blogspot.com/
Origin: https://gtasamipc.blogspot.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://gtasamipc.blogspot.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Tue, 23 Apr 2024 21:50:36 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0 | 142.250.74.106 | 200 OK | 131 B |
URL OPTIONS HTTP/3translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0 IP142.250.74.106:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
Hashca0b7e866005f6774d284b9f438ebfd2 53644f5ee3640189bdb223473ba6a2d46606c556 502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /element/log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gtasamipc.blogspot.com/
X-Goog-AuthUser: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 1195
Origin: https://gtasamipc.blogspot.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://gtasamipc.blogspot.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Tue, 23 Apr 2024 21:50:36 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/images/cleardot.gif |  0.0.0.0 | | 0 B |
URL GET www.google.com/images/cleardot.gif IP0.0.0.0:0
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/cleardot.gif HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gtasamipc.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| translate.googleapis.com/translate_static/img/loading.gif | 0.0.0.0 | | 0 B |
URL GET translate.googleapis.com/translate_static/img/loading.gif IP0.0.0.0:0
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /translate_static/img/loading.gif HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gtasamipc.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20240422&st=env | 142.250.74.2 | 200 OK | 16 kB |
URL GET HTTP/3pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20240422&st=env IP142.250.74.2:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subject*.g.doubleclick.net Fingerprint1B:FA:17:60:E2:34:D4:FA:D1:13:08:09:6E:8F:ED:E7:A8:8C:6E:7A ValidityMon, 18 Mar 2024 19:37:13 GMT - Mon, 10 Jun 2024 19:37:12 GMT
Hash2b19f4f98a3a57ceb2663f50bec61209 ffed7be9cd91e3fe5baca0714b071b11ac3a61fe 22c5359d2af16fa067b2e0d5624455b3eee92e8d2d3c37bfc528f64a22761910
GET /getconfig/sodar?sv=200&tid=gda&tv=r20240422&st=env HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://gtasamipc.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://gtasamipc.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: application/json; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
date: Tue, 23 Apr 2024 21:50:27 GMT
server: cafe
content-length: 12346
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| translate.google.com/translate_a/element.js?cb=googleTranslateElementInit | 216.58.211.14 | 200 OK | 90 kB |
URL GET HTTP/2translate.google.com/translate_a/element.js?cb=googleTranslateElementInit IP216.58.211.14:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeJavaScript source, ASCII text, with very long lines (2064) Hash2e436b9925a805b8616ce611c2aafc0f e07a0c2d5b163ed67764848b01d7be5bf6ab149e 86b8bb3c08617ccf8f3dffa2bbce5d2ff4b048b58b2a71a870eb3d309a120d7d
GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gtasamipc.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 23 Apr 2024 21:50:25 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png | 0.0.0.0 | | 0 B |
URL GET www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png IP0.0.0.0:0
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/branding/googlelogo/1x/googlelogo_color_68x28dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gtasamipc.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| 1.bp.blogspot.com/_uW7vQWFtStk/TLBoHToBsTI/AAAAAAAACnw/JobkkpowSvg/s1600/h2bg-right.png | 142.250.74.161 | 200 OK | 320 B |
URL GET HTTP/21.bp.blogspot.com/_uW7vQWFtStk/TLBoHToBsTI/AAAAAAAACnw/JobkkpowSvg/s1600/h2bg-right.png IP142.250.74.161:443
Requested byhttps://gtasamipc.blogspot.com/search/label/gtasanandreasgame.11.13.13 CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintE8:F4:4F:CE:D1:E0:7B:C8:CD:18:45:AA:90:5A:35:8B:D5:CF:66:6B ValidityMon, 18 Mar 2024 20:01:08 GMT - Mon, 10 Jun 2024 20:01:07 GMT
File typePNG image data, 208 x 33, 8-bit/color RGB, non-interlaced Hash83933ea1935214f34897fbe940820ba1 1e504b3810507cf9dc7987d53fdc28e16022a2b1 cbbe92ed532764a79f4cf091c4e4e0876cb17baf13af8a5e9d3fec982ff4d61c
GET /_uW7vQWFtStk/TLBoHToBsTI/AAAAAAAACnw/JobkkpowSvg/s1600/h2bg-right.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gtasamipc.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="h2bg-right.png"
x-content-type-options: nosniff
server: fife
content-length: 320
x-xss-protection: 0
date: Tue, 23 Apr 2024 18:28:06 GMT
expires: Wed, 24 Apr 2024 18:28:06 GMT
cache-control: public, max-age=86400, no-transform
etag: "va7c"
content-type: image/png
vary: Origin
age: 12139
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
0.0.0.0