Overview

URL katwvolta.blogspot.com/search/label/Verona%20Pooth
IP216.58.207.193
ASNAS15169 Google Inc.
Location United States
Report completed2018-11-08 21:17:41 CET
StatusLoading report..
urlQuery Alerts Crypto currency mining script


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2018-11-08 21:17:07 CET 1  104.20.209.59 Client IP ETPRO CURRENT_EVENTS Observed Malicious SSL Cert (CoinHive Mining Domain)


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-11-08 2 katwvolta.blogspot.com/search/label/Verona%20Pooth Malware
2018-11-08 2 coinhive.com/lib/coinhive.min.js Malware
2018-11-08 2 katwvolta.blogspot.com/search/label/Verona%20Pooth Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 216.58.207.193

Date UQ / IDS / BL URL IP
2018-11-14 16:44:53 +0100
0 - 0 - 6 cybernationph.blogspot.com/2011/08/googlr-say (...) 216.58.207.193
2018-11-14 16:44:42 +0100
0 - 0 - 2 cryptominingcoin.blogspot.co.id/search/label/money 216.58.207.193
2018-11-14 16:44:41 +0100
0 - 0 - 2 cutecelebswallpaper.blogspot.kr/2012/09/horny (...) 216.58.207.193
2018-11-14 16:44:31 +0100
0 - 1 - 5 cyberhackgames.blogspot.com.es/2016/01/rilis- (...) 216.58.207.193
2018-11-14 16:44:30 +0100
0 - 0 - 1 cutecelebswallpaper.blogspot.com/2008_10_01_a (...) 216.58.207.193
2018-11-14 16:44:20 +0100
0 - 0 - 3 daiproblog.blogspot.com.es/search/label/khoa% (...) 216.58.207.193
2018-11-14 16:44:14 +0100
0 - 0 - 3 https://dainikjankari.blogspot.com/2016/12/no (...) 216.58.207.193
2018-11-14 16:43:49 +0100
0 - 0 - 2 cutecelebswallpaper.blogspot.mx/2007/07/dave- (...) 216.58.207.193
2018-11-14 16:43:48 +0100
0 - 0 - 2 cutecelebswallpaper.blogspot.mx/2008/09/isabe (...) 216.58.207.193
2018-11-14 16:43:37 +0100
0 - 0 - 2 cutecelebswallpaper.blogspot.mx/2007/11/iveta (...) 216.58.207.193

Last 10 reports on ASN: AS15169 Google Inc.

Date UQ / IDS / BL URL IP
2018-11-14 17:06:02 +0100
0 - 0 - 2 theamazing-worldz.blogspot.com/2014/01/neat-v (...) 172.217.22.161
2018-11-14 17:06:01 +0100
0 - 0 - 3 theamazing-worldz.blogspot.kr/2014/01/neat-vi (...) 172.217.22.161
2018-11-14 17:03:44 +0100
0 - 0 - 2 torchsadrain.blogspot.com/2014/09/avira-inter (...) 172.217.22.161
2018-11-14 17:03:24 +0100
0 - 0 - 2 torchsadrain.blogspot.com/2014/08/blog-post_3 (...) 172.217.22.161
2018-11-14 17:01:23 +0100
0 - 0 - 2 x-x-x-blog.blogspot.kr/search/label/i%20love% (...) 172.217.20.33
2018-11-14 17:01:14 +0100
0 - 0 - 2 x-x-x-blog.blogspot.kr/search/label/sania%20m (...) 172.217.20.33
2018-11-14 17:01:13 +0100
0 - 0 - 2 x-x-x-blog.blogspot.ru/search/label/ka'aba 172.217.20.33
2018-11-14 17:01:12 +0100
0 - 0 - 2 x-x-x-blog.blogspot.de/search/label/anime%20love 172.217.20.33
2018-11-14 17:00:51 +0100
0 - 0 - 1 x-x-x-blog.blogspot.com/search/label/sania%20 (...) 172.217.20.33
2018-11-14 17:00:51 +0100
0 - 0 - 1 x-x-x-blog.blogspot.com/search/label/ka'aba 172.217.20.33

Last 10 reports on domain: katwvolta.blogspot.com

Date UQ / IDS / BL URL IP
2018-11-14 02:42:51 +0100
2 - 1 - 3 katwvolta.blogspot.com/search/label/Julie%20H (...) 172.217.22.161
2018-11-13 03:41:40 +0100
2 - 1 - 4 katwvolta.blogspot.com/search/label/savita%20 (...) 216.58.207.225
2018-11-13 03:21:40 +0100
2 - 1 - 3 katwvolta.blogspot.com/2010/10/miranda-kerr-v (...) 216.58.207.225
2018-11-13 00:20:59 +0100
2 - 1 - 3 katwvolta.blogspot.com/search/label/Milk 172.217.20.33
2018-11-12 23:34:22 +0100
2 - 1 - 3 katwvolta.blogspot.com/2012/06/jeanette-biede (...) 172.217.20.33
2018-11-12 23:27:26 +0100
2 - 1 - 3 katwvolta.blogspot.com/2012/12/after-fucking- (...) 172.217.20.33
2018-11-12 23:24:12 +0100
2 - 1 - 3 katwvolta.blogspot.com/search/label/Selena%20 (...) 172.217.20.33
2018-11-12 18:23:39 +0100
2 - 1 - 3 katwvolta.blogspot.com/search/label/Footjob 172.217.20.33
2018-11-12 17:09:19 +0100
2 - 1 - 1 katwvolta.blogspot.com/search?q=mature 172.217.22.161
2018-11-12 17:02:16 +0100
2 - 1 - 3 katwvolta.blogspot.com/search/label/savita%20 (...) 172.217.21.129


JavaScript

Executed Scripts (25)


Executed Evals (0)


Executed Writes (1)

#1 JavaScript::Write (size: 176, repeated: 1) - SHA256: 1d5864350ebd2d8aaeb133e5fc811c0e8554ec7a458566d20154d673d536518e

                                        < img src = "http://1.bp.blogspot.com/-W6KlwM4qIB4/TlN6B9o1_RI/AAAAAAAAB4g/JS4SRyaisoY/w260/VeronaPoothNudeSexyWendingLingerie.jpg"
alt = "Verona Pooth Nude Sexy Wending Lingerie" / >
                                    


HTTP Transactions (57)


Request Response
                                        
                                            GET /css?family=PT+Sans+Narrow HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://katwvolta.blogspot.com/search/label/Verona%20Pooth

                                         
                                         172.217.21.170
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Thu, 08 Nov 2018 20:17:06 GMT
Date: Thu, 08 Nov 2018 20:17:06 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   203
Md5:    7a31f6c0754ee2d17b9bdb3328720497
Sha1:   26b185e39027ce8614d687d29b36b42041c3a293
Sha256: 44b552076172da0cfca6edbc0daa6103ed341e535500fa5fecddcb1e0218fa20
                                        
                                            GET /css?family=Oswald HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://katwvolta.blogspot.com/search/label/Verona%20Pooth

                                         
                                         172.217.21.170
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Thu, 08 Nov 2018 20:17:06 GMT
Date: Thu, 08 Nov 2018 20:17:06 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   190
Md5:    29c6cb9691eba33ad930680d66313307
Sha1:   63eb8bfc15c24ead7df44a7a8582b931a1b4be6e
Sha256: a0cf8335cad6ef633f85ab1b4ad03d637c0b33559da1ac9e8f8d5062ca975970
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 08 Nov 2018 20:17:06 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    7a44dfba1f4a4fc5fe5a5483f98fd745
Sha1:   6e30574a08aa0972becb293b4637ffa34e78e9f1
Sha256: e0e40703144af0da9fe3af1f609314fef73a419bedf78a5b0fd116922e199df9
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 08 Nov 2018 20:17:07 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    d9d754520ae3340aa37cca6115eee05b
Sha1:   a0320372760d99c762cb2eb4b37f776625ef1b33
Sha256: 7dc8284c51c9a38dc1bf03bd28857ea5336e8f5c564eddbb1c9082ee43c93738
                                        
                                            GET /search/label/Verona%20Pooth HTTP/1.1 
Host: katwvolta.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         216.58.207.225
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Expires: Thu, 08 Nov 2018 20:17:06 GMT
Date: Thu, 08 Nov 2018 20:17:06 GMT
Cache-Control: private, max-age=0
Last-Modified: Mon, 17 Sep 2018 03:29:03 GMT
Etag: W/"26d2fdde0c23e9d4f7bda53f6417ed0eec18086c1d7d2a6c8a7611fe1eafacc4"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 49850
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   49850
Md5:    fe6dfcea33e62e8106c34c14e7413191
Sha1:   2940c3a2dba7fabaf412042d190ad4471f6e9463
Sha256: a148395351ac2703ebe34fde09c12b2f72e543a806d8caa353d5ebd1b37ddcc2

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /static/v1/widgets/254310735-widget_css_bundle.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://katwvolta.blogspot.com/search/label/Verona%20Pooth

                                         
                                         216.58.207.201
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7524
Date: Tue, 06 Nov 2018 16:36:51 GMT
Expires: Wed, 06 Nov 2019 16:36:51 GMT
Last-Modified: Tue, 06 Nov 2018 12:19:48 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 186016
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   7524
Md5:    5edaca0b90aa2022a9f8cdbdc49e6f4a
Sha1:   42fecf342d6ff79b5f8e206eecb6d54a513188af
Sha256: a8232fd6d263c26f195cb04abf7e127dd3829a510070baf64264314bb47da932
                                        
                                            GET /static/v1/v-css/2982899471-interstitial_bundle.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://katwvolta.blogspot.com/search/label/Verona%20Pooth

                                         
                                         216.58.207.201
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1037
Date: Tue, 06 Nov 2018 16:18:32 GMT
Expires: Wed, 06 Nov 2019 16:18:32 GMT
Last-Modified: Tue, 06 Nov 2018 08:21:38 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 187115
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   1037
Md5:    0f847241b227facee21bba9ff0ba163a
Sha1:   e225a1e10866dec6fbd6ed900c6a9f5ed60fda95
Sha256: 7fd8224fadbd58000c1957ce80d70a68f2498ebbbad8ca57fe05c0d89261b44f
                                        
                                            GET /-wqzYVSTa638/UQrc7C0UP3I/AAAAAAAABgU/TgbAOmzXLAs/s1600/home.gif HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://katwvolta.blogspot.com/search/label/Verona%20Pooth

                                         
                                         172.217.21.161
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "va2f"
Expires: Thu, 08 Nov 2018 05:22:59 GMT
Content-Disposition: inline;filename="home.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 08 Nov 2018 17:48:30 GMT
Server: fife
Content-Length: 1157
X-XSS-Protection: 1; mode=block
Age: 8917
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  GIF image data, version 89a, 21 x 21
Size:   1157
Md5:    4c4d5a137d02ca4414dfe2e76084c7a0
Sha1:   f5b0e9627a211af31faeb95b74f85471c07cc8e5
Sha256: ff33e9e45ece6b5b9099f38e8e0a246865d21330f4f6300f2f9dc6498c7441d6
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.25
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Sun, 04 Nov 2018 01:21:36 GMT
Etag: 14629BFEF4E81BC9D5475FC6AAE4D8B9EF0116DB
X-OCSP-Responder-ID: rmdccaocsp23
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=190480
Expires: Sun, 11 Nov 2018 01:11:47 GMT
Date: Thu, 08 Nov 2018 20:17:07 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    3a20b7b46663972aff6dd2c0677d08e1
Sha1:   14629bfef4e81bc9d5475fc6aae4d8b9ef0116db
Sha256: 8c7b6a300f1ffe1835b4cdf5eefe3277aebee6f3ed24687cc1ffde6283528789
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.25
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Mon, 05 Nov 2018 09:27:34 GMT
Etag: F39B2270F941D5546998728E717E21E44102FDE7
X-OCSP-Responder-ID: rmdccaocsp24
Content-Length: 727
Cache-Control: public, no-transform, must-revalidate, max-age=306048
Expires: Mon, 12 Nov 2018 09:17:55 GMT
Date: Thu, 08 Nov 2018 20:17:07 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   727
Md5:    f33d11bb3516dfe9131b3f7b2ded93d9
Sha1:   f39b2270f941d5546998728e717e21e44102fde7
Sha256: 4724060b7fbbcd068c0c818ddcd1e5ed8b30b6d403d4893cc0e9fd43129f355c
                                        
                                            GET /-MX77OeSfdak/TpQp9aPlEFI/AAAAAAAACQg/Q6ZMy4GIyEw/s72-c/Catherine+Bell+nude+Playboy+Miss+October+big+boobs+spread+legs+hairy+pussy.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://katwvolta.blogspot.com/search/label/Verona%20Pooth

                                         
                                         172.217.21.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v212e"
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, max-age=86400, no-transform
Content-Disposition: inline;filename="Catherine Bell nude Playboy Miss October big boobs spread legs hairy pussy.jpg"
Vary: Origin
X-Content-Type-Options: nosniff
Date: Thu, 08 Nov 2018 20:17:07 GMT
Server: fife
Content-Length: 4236
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   4236
Md5:    ec7404dd260884501ac00d071cd994cf
Sha1:   68fe1a25cbf33c1281fca316371834e4c46e3b1c
Sha256: 06026fd6d0b474d8b434db2cb3641493b5de0cd526fe3446e1de6718d329eec3
                                        
                                            GET /-JMeVdi5PPrQ/To1Yj7F0aQI/AAAAAAAACOE/0fFny6VjnwY/s72-c/Kirsten+Dunst+topless+private+nude+photo+personal+naked+picture.jpg HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://katwvolta.blogspot.com/search/label/Verona%20Pooth

                                         
                                         172.217.21.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "va0a"
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, max-age=86400, no-transform
Content-Disposition: inline;filename="Kirsten Dunst topless private nude photo personal naked picture.jpg"
Vary: Origin
X-Content-Type-Options: nosniff
Date: Thu, 08 Nov 2018 20:17:07 GMT
Server: fife
Content-Length: 3783
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   3783
Md5:    247b30ff840e60db3a5aa3c0687323af
Sha1:   9810d323d24c892bbf026bcaedf479adddfb8200
Sha256: 9cb6ac7364ba2e778978b86430f0cb2e5538a400014a619be13fe38e234b034a
                                        
                                            GET /-Jqzkj4NtS4s/Tlh-oxYsRDI/AAAAAAAACBQ/T6fTQRuubac/s72-c/AliceEveNudePhotoshootNakedPhotosessionSpreadLegs1.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://katwvolta.blogspot.com/search/label/Verona%20Pooth

                                         
                                         172.217.21.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v19da"
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, max-age=86400, no-transform
Content-Disposition: inline;filename="AliceEveNudePhotoshootNakedPhotosessionSpreadLegs1.jpg"
Vary: Origin
X-Content-Type-Options: nosniff
Date: Thu, 08 Nov 2018 20:17:07 GMT
Server: fife
Content-Length: 3602
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   3602
Md5:    55dc03d9e22077db6ce24c52c78ba501
Sha1:   dfcb76cbb6fb41b7360b6e59a0540f93844fa9f4
Sha256: ca71c31390e60fd4976c9ab03c440cc3a7ddff90c5e1137f2d03d376d267cae3
                                        
                                            GET /-XzOeUSDOJoM/TqkVm_U7aCI/AAAAAAAACc0/0BhByjgukLg/s72-c/Paz+de+la+Huerta+by+Terry+Richardson+Nude+Photo+Shoot+1.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://katwvolta.blogspot.com/search/label/Verona%20Pooth

                                         
                                         172.217.21.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v9cd"
Expires: Mon, 05 Nov 2018 08:48:48 GMT
Content-Disposition: inline;filename="Paz de la Huerta by Terry Richardson Nude Photo Shoot 1.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 08 Nov 2018 16:55:33 GMT
Server: fife
Content-Length: 2769
X-XSS-Protection: 1; mode=block
Age: 12094
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   2769
Md5:    27ac6649baebdc493c3277dcb6a7c09a
Sha1:   fc5175a2ad56701091af853c9614628daf692730
Sha256: 2249cd26512c6cf79b847ed2c950f2bb311cd7b920ebb53ebca4a774262ca83e
                                        
                                            GET /_NRGPIrDtEg8/TTV6ULfJ5wI/AAAAAAAAAtE/y36_Mhz8r3k/s72-c/Mariah_Carey_naked_private_nude_busty_1.jpg HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://katwvolta.blogspot.com/search/label/Verona%20Pooth

                                         
                                         172.217.21.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v1896"
Expires: Wed, 07 Nov 2018 18:08:04 GMT
Content-Disposition: inline;filename="Mariah_Carey_naked_private_nude_busty_1.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 08 Nov 2018 16:55:33 GMT
Server: fife
Content-Length: 2990
X-XSS-Protection: 1; mode=block
Age: 12094
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   2990
Md5:    2effbb903897f5dc6c4c0dde1b7aef19
Sha1:   5d35241984c9ba1ee9bc3f8a850a4445a90e8472
Sha256: 9be773860bbf1b2abf54910a48bf55d1b9ae29d2a8f05f31ffc4c7980ee7cdea
                                        
                                            GET /-9ds5ofvu6Zs/TlOd695TFyI/AAAAAAAAB5U/4fSWo1nRwRs/s72-c/LeaSeydouxNudeSpreadLegsBustyShavedPussy.jpg HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://katwvolta.blogspot.com/search/label/Verona%20Pooth

                                         
                                         172.217.21.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v2122"
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, max-age=86400, no-transform
Content-Disposition: inline;filename="LeaSeydouxNudeSpreadLegsBustyShavedPussy.jpg"
Vary: Origin
X-Content-Type-Options: nosniff
Date: Thu, 08 Nov 2018 20:17:07 GMT
Server: fife
Content-Length: 3112
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   3112
Md5:    7ddee4bdaa96af1d8ef3da25c919fe40
Sha1:   efcd37ec0c6f7513df43afb7b4885e0292106309
Sha256: ff547ac25222f6086b09ae42afa3afc983afed8d00a9e39f990caafd6a78e64e
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.11
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Mon, 05 Nov 2018 09:27:34 GMT
Etag: E996CA4E8F395CBDD143B7F450F12B5C2577A315
X-OCSP-Responder-ID: rmdccaocsp28
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=306060
Expires: Mon, 12 Nov 2018 09:18:07 GMT
Date: Thu, 08 Nov 2018 20:17:07 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    d5ad0cdca1daf4ee01f26fac9656846a
Sha1:   e996ca4e8f395cbdd143b7f450f12b5c2577a315
Sha256: 122ba43fb270c723f54d40877fa7bde5bbe7ae02fccda8f0295f7984bd457a21
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Sun, 04 Nov 2018 15:43:45 GMT
Etag: 9179D4148EB47AEB31C120DFD181FEA426427336
X-OCSP-Responder-ID: rmdccaocsp17
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=242213
Expires: Sun, 11 Nov 2018 15:34:00 GMT
Date: Thu, 08 Nov 2018 20:17:07 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    720dbf71ef8de1a58914d8b015c7e25f
Sha1:   9179d4148eb47aeb31c120dfd181fea426427336
Sha256: 95cc5e511d20132cbada7fe43efb16e3a8684a24f371f9e0cf76739e512d10bf
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Mon, 05 Nov 2018 09:27:34 GMT
Etag: DDF3290C7B7E2A2C4325D99E8AE5AFB7DF4F76D6
X-OCSP-Responder-ID: rmdccaocsp26
Content-Length: 727
Cache-Control: public, no-transform, must-revalidate, max-age=306040
Expires: Mon, 12 Nov 2018 09:17:47 GMT
Date: Thu, 08 Nov 2018 20:17:07 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   727
Md5:    77c748838b09ae9cfd392334f9e1f009
Sha1:   ddf3290c7b7e2a2c4325d99e8ae5afb7df4f76d6
Sha256: 456d7b7b2412ac6704faf92634bd6bf91cb4ef84f4f4c5b206d9617732818350
                                        
                                            GET /_oco-y64qmT8/TBhhUU6jIiI/AAAAAAAACoE/cK5XTq_A2so/s72-c/Jessica-Alba-nude-1.jpg HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://katwvolta.blogspot.com/search/label/Verona%20Pooth

                                         
                                         172.217.21.161
HTTP/1.1 404 Not Found
Content-Type: image/png
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 08 Nov 2018 20:17:07 GMT
Server: fife
Content-Length: 1492
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  PNG image, 72 x 72, 8-bit colormap, non-interlaced
Size:   1492
Md5:    0ab7003470d2d94819e2753862179908
Sha1:   f06883e25c7c46a951bcce527fcb590dde1154c2
Sha256: ad6d3a7546fb711e4d1574d37cd922b7a5b875d61cd23e0f10326172fdcb5413
                                        
                                            GET /lib/coinhive.min.js HTTP/1.1 
Host: coinhive.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://katwvolta.blogspot.com/search/label/Verona%20Pooth

                                         
                                         104.20.209.59
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Thu, 08 Nov 2018 20:17:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d787d8d85986472ad16cff326870e86fd1541708227; expires=Fri, 08-Nov-19 20:17:07 GMT; path=/; domain=.coinhive.com; HttpOnly
Last-Modified: Mon, 15 Oct 2018 11:58:24 GMT
Etag: W/"5bc480e0-423b4"
Expires: Fri, 09 Nov 2018 04:17:07 GMT
Cache-Control: public, max-age=28800
Access-Control-Allow-Origin: *
Content-Encoding: gzip
CF-Cache-Status: HIT
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 476ab8a44c9f42c1-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   70162
Md5:    b6bb44f95a22a27e8b92d2ccbc591524
Sha1:   b5f4bf87301fb5291d70f392758d9c56ae374cc3
Sha256: e32b7829c99619bfa2c1de9e1ed9e9e515863b2d094e86c629c67c7350e8c96d

Alerts:
  urlquery:
    - Crypto currency mining script
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /-Es4rPAZpSEA/VO-9j025emI/AAAAAAAAAA8/v0-_VsrrI3I/s930/sun%2Blogo.png HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.217.21.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v10"
Expires: Wed, 07 Nov 2018 17:09:55 GMT
Content-Disposition: inline;filename="sun logo.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 08 Nov 2018 18:07:10 GMT
Server: fife
Content-Length: 5023
X-XSS-Protection: 1; mode=block
Age: 7797
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  PNG image, 50 x 50, 8-bit/color RGBA, non-interlaced
Size:   5023
Md5:    274bc928779def1365610c0e51789195
Sha1:   8d1b2e05bba12b0ac52b46cfa7e37e95cd6a02b5
Sha256: 998e30a5e683847ca81cb1063fd8465f6d2dd3a0473979d830c9f73165a5ac3f
                                        
                                            GET /img/icon18_wrench_allbkg.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://katwvolta.blogspot.com/search/label/Verona%20Pooth

                                         
                                         216.58.207.201
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 475
Date: Thu, 08 Nov 2018 09:12:16 GMT
Expires: Thu, 15 Nov 2018 09:12:16 GMT
Last-Modified: Wed, 07 Nov 2018 16:27:46 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 39891
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  PNG image, 18 x 18, 8-bit colormap, non-interlaced
Size:   475
Md5:    f617effe6d96c15acfea8b2e8aae551f
Sha1:   6d676af11ad2e84b620cce4d5992b657cb2d8ab6
Sha256: d172d750493be64a7ed84dec1dd2a0d787ba42f78bc694b0858f152c52b6620b
                                        
                                            GET /jquery-3.3.1.min.js HTTP/1.1 
Host: code.jquery.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://katwvolta.blogspot.com/search/label/Verona%20Pooth

                                         
                                         205.185.208.52
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Thu, 08 Nov 2018 20:17:07 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 30288
Last-Modified: Sat, 20 Jan 2018 17:26:44 GMT
Server: nginx
Etag: W/"5a637bd4-1538f"
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
X-HW: 1541708227.dop005.sk1.t,1541708227.cds040.sk1.shn,1541708227.cds040.sk1.c


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   30288
Md5:    d549b312f7a7d228b4ec229a6547dfdc
Sha1:   0766794582ad530ec0f8c2595f741086afffa312
Sha256: f6488b2915e0ceee723f4320492511d46c6ba1860d5975d085e6da8913f55f44
                                        
                                            GET /dyn-css/authorization.css?targetBlogID=5038195513771974585&zx=2edf7c91-dc1b-426b-ad77-e95a9e92c7ae HTTP/1.1 
Host: draft.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://katwvolta.blogspot.com/search/label/Verona%20Pooth

                                         
                                         216.58.207.201
HTTP/1.1 200 OK
Content-Type: text/css; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 08 Nov 2018 20:17:08 GMT
Last-Modified: Thu, 08 Nov 2018 20:17:08 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   21
Md5:    b9afc501fc43fbea335a2dc5d43263a1
Sha1:   7290a2dd6afbf39ecfc35b52dfb32a38fc222994
Sha256: d6e425ca7840c0ab6f26f5fc2822a47e26b4a8bbd104468a9c185bc132b8662f
                                        
                                            GET /-UzQSVqe350A/URJhGaHsGqI/AAAAAAAAB7s/UVJaEnVxtc8/s1600/body.gif HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://katwvolta.blogspot.com/search/label/Verona%20Pooth

                                         
                                         172.217.21.161
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "va1c"
Expires: Wed, 07 Nov 2018 16:53:03 GMT
Content-Disposition: inline;filename="body.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 08 Nov 2018 17:49:18 GMT
Server: fife
Content-Length: 23343
X-XSS-Protection: 1; mode=block
Age: 8870
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  GIF image data, version 89a, 200 x 200
Size:   23343
Md5:    6f52f16e0c8869759029f92150fac68f
Sha1:   d7171b0111ecbc51953fb6a6a0fcb639c9aacdb2
Sha256: 0ba65009d2629977348e7cc30414a518b21b8fe7f50351fcead70764219b9bb2
                                        
                                            GET /-AIW512aa4Ms/URJ2uXZh45I/AAAAAAAAB9c/QMul0JdxpNs/s1600/outerpic.png HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://katwvolta.blogspot.com/search/label/Verona%20Pooth

                                         
                                         172.217.21.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v7d7"
Expires: Sun, 04 Nov 2018 09:08:16 GMT
Content-Disposition: inline;filename="outerpic.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 08 Nov 2018 18:07:11 GMT
Server: fife
Content-Length: 340
X-XSS-Protection: 1; mode=block
Age: 7797
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  PNG image, 3 x 360, 8-bit/color RGB, non-interlaced
Size:   340
Md5:    80668175cbb798c380dd6b82f67db3c3
Sha1:   938f47d35c8f01aa839fb0f292dcba9f09a0aa31
Sha256: a6aea32e729e6d2b4f39f96e813d2841148a5f03badc23ccffe304cfde547c12
                                        
                                            GET /-K4hNJ9YcB7I/URKRQe-RbaI/AAAAAAAAB_c/bGaB_wyqaoA/s1600/dotted.png HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://katwvolta.blogspot.com/search/label/Verona%20Pooth

                                         
                                         172.217.21.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v7f7"
Expires: Thu, 08 Nov 2018 19:07:57 GMT
Content-Disposition: inline;filename="dotted.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 08 Nov 2018 17:07:43 GMT
Server: fife
Content-Length: 196
X-XSS-Protection: 1; mode=block
Age: 11365
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  PNG image, 3 x 3, 8-bit/color RGBA, non-interlaced
Size:   196
Md5:    b22e8d3271b6ef77912ce1d52e3a75e2
Sha1:   18c57d175904e093e46622cf11d40a032b5da366
Sha256: bf06b15d3e82be3040e11d303834b7102e3f2c1c737cea9b1fee4f097d537772
                                        
                                            GET /s/oswald/v16/TK3iWkUHHAIjg752GT8A.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fonts.googleapis.com/css?family=Oswald
Origin: http://katwvolta.blogspot.com

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 18936
Date: Thu, 01 Nov 2018 10:38:01 GMT
Expires: Fri, 01 Nov 2019 10:38:01 GMT
Last-Modified: Tue, 07 Nov 2017 15:18:46 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 639547


--- Additional Info ---
Magic:  data
Size:   18936
Md5:    ca70f49a133f08485bd05d5cb28ef8b7
Sha1:   9029570f276ed6b7d2895ced7175f958fb6c1c5f
Sha256: a7a4038c6fbb19ba522819188aed0ff204d80e19223b1cab388a290a8d5e47fe
                                        
                                            GET /blogin.g?blogspotURL=http://katwvolta.blogspot.com/search/label/Verona%2520Pooth HTTP/1.1 
Host: draft.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://katwvolta.blogspot.com/search/label/Verona%20Pooth

                                         
                                         216.58.207.201
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Location: https://accounts.google.com/ServiceLogin?continue=https://draft.blogger.com/blogin.g?blogspotURL%3Dhttp://katwvolta.blogspot.com/search/label/Verona%252520Pooth%26bpli%3D1&followup=https://draft.blogger.com/blogin.g?blogspotURL%3Dhttp://katwvolta.blogspot.com/search/label/Verona%252520Pooth%26bpli%3D1&passive=true&go=true
Content-Encoding: gzip
Date: Thu, 08 Nov 2018 20:17:08 GMT
Expires: Thu, 08 Nov 2018 20:17:08 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   296
Md5:    44abf34bb00b1075dfb43bbfd99de647
Sha1:   f26563e122e3ccab8906ff6257ba0c835a59ed54
Sha256: 1c9f6d78cfd8b3d8da3bab4a29a3110033b8666996d04a4b02f500b9b9ef13ff
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 08 Nov 2018 20:17:08 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    8159ba0b85c4130660fd60fde3c780ba
Sha1:   5db3967736a2e5b8da1ecdade3d27f539f2882b6
Sha256: 3fb1a88ecab1f50754d928d11108b860c29735a4b36ad79036b5298b49b40ab2
                                        
                                            GET /static/v1/v-css/281434096-static_pages.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://draft.blogger.com/blogin.g?blogspotURL=http%3A%2F%2Fkatwvolta.blogspot.com%2Fsearch%2Flabel%2FVerona%2520Pooth&bpli=1

                                         
                                         216.58.207.201
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1374
Date: Sat, 03 Nov 2018 08:42:51 GMT
Expires: Sun, 03 Nov 2019 08:42:51 GMT
Last-Modified: Fri, 02 Nov 2018 00:33:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 473658
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   1374
Md5:    49fea0412dd2b3a36f11f28335b1acbc
Sha1:   061e4fc40c4a98e1d350ee4699fd7f8df92f3d17
Sha256: ad9029fcd2bc7cfdd8fca53e1316793b7693274cb6e502f3abbae411d7a78648
                                        
                                            GET /search/label/Verona%20Pooth HTTP/1.1 
Host: katwvolta.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://katwvolta.blogspot.com/search/label/Verona%20Pooth
If-Modified-Since: Mon, 17 Sep 2018 03:29:03 GMT
If-None-Match: W/"26d2fdde0c23e9d4f7bda53f6417ed0eec18086c1d7d2a6c8a7611fe1eafacc4"

                                         
                                         216.58.207.225
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Expires: Thu, 08 Nov 2018 20:17:09 GMT
Date: Thu, 08 Nov 2018 20:17:09 GMT
Cache-Control: private, max-age=0
Last-Modified: Mon, 17 Sep 2018 03:29:03 GMT
Etag: W/"26d2fdde0c23e9d4f7bda53f6417ed0eec18086c1d7d2a6c8a7611fe1eafacc4"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 49848
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   49848
Md5:    07d5e4c31c965d0c4be2a6b0cd78bde2
Sha1:   1d187c08a3821b9249f0ef0419d2e44d4834e07d
Sha256: 1034adf265980ef0996b3eec622801c08ac6d3c00cfa65e5879a5b8e3d440e74

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 08 Nov 2018 20:17:09 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    82fba9907486349b3e163d0ea5061b1e
Sha1:   2d8cffd5a331b638fa61e1fc58d3d944cdfb4a6b
Sha256: 688fe6e6f0a71bb45bbabb445300e0001f41c813e9ebe5cca9875fbecf88f1fa
                                        
                                            GET /-6p_AqXL70hQ/UQWPHMObw9I/AAAAAAAABZ0/f2UWIvjFkSQ/s1600/footerli.png HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://katwvolta.blogspot.com/search/label/Verona%20Pooth

                                         
                                         172.217.21.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v59d"
Expires: Wed, 07 Nov 2018 17:50:02 GMT
Content-Disposition: inline;filename="footerli.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 08 Nov 2018 17:37:01 GMT
Server: fife
Content-Length: 223
X-XSS-Protection: 1; mode=block
Age: 9608
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  PNG image, 4 x 7, 8-bit/color RGBA, non-interlaced
Size:   223
Md5:    04b7dfa97e05f4622e2d9a08719a7b07
Sha1:   a15042ab03db6f3d5e822ec3de37dde74c96f920
Sha256: 3e5a716afd9759cd1759126af6e50af605f0e135fedfed0a3c39ceba7c653ffc
                                        
                                            GET /s/ptsansnarrow/v9/BngRUXNadjH0qYEzV7ab-oWlsbCGwRs.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fonts.googleapis.com/css?family=PT+Sans+Narrow
Origin: http://katwvolta.blogspot.com

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 43724
Date: Sun, 04 Nov 2018 07:52:14 GMT
Expires: Mon, 04 Nov 2019 07:52:14 GMT
Last-Modified: Mon, 08 Oct 2018 20:49:22 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 390296


--- Additional Info ---
Magic:  data
Size:   43724
Md5:    b7ed38087559d9362d906b1a18330dfc
Sha1:   f2dd0afd08a4b405e72c6ecab85e9338e4617441
Sha256: 0798171a4c2f57e9ba49e415b15d02db6df7807a6043066344f30806a8ad9fb4
                                        
                                            GET /-W6KlwM4qIB4/TlN6B9o1_RI/AAAAAAAAB4g/JS4SRyaisoY/w260/VeronaPoothNudeSexyWendingLingerie.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://katwvolta.blogspot.com/search/label/Verona%20Pooth

                                         
                                         172.217.21.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v2122"
Expires: Fri, 09 Nov 2018 20:17:10 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="VeronaPoothNudeSexyWendingLingerie.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 08 Nov 2018 20:17:10 GMT
Server: fife
Content-Length: 22541
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   22541
Md5:    d3fcacc797412943d1137658db3e2bfa
Sha1:   70a26a6f710919205ddacb5553a239c0ba40a31e
Sha256: 43399a508cda3b26213767df77e6065189cb4f0dd98bab51aba6ce780d588ab3
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 08 Nov 2018 20:17:10 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    b53ff4dd6c657fcd281a4258434a533a
Sha1:   c1b2effc8a7df1dd0d67743e4b757107ac41900d
Sha256: bd98a9c631af5a512f2eb8e9edd8b6c52833059fb9c0a293e56b4b8a2b87d745
                                        
                                            GET /blogin.g?blogspotURL=http%3A%2F%2Fkatwvolta.blogspot.com%2Fsearch%2Flabel%2FVerona%2520Pooth&bpli=1 HTTP/1.1 
Host: draft.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://katwvolta.blogspot.com/search/label/Verona%20Pooth

                                         
                                         216.58.207.201
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 08 Nov 2018 20:17:09 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   41270
Md5:    d4f959433f66e576fbc7585f32dbbb47
Sha1:   2fa359cdc0683ccb33e1acf5722fc52e803970f8
Sha256: 9c21ea9ee58e724b909aa2cd15faf8aefa3a258d48513ff9eca4cc77be00a8d4
                                        
                                            GET /static/v1/jsbin/3101730221-analytics_autotrack.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://draft.blogger.com/blogin.g?blogspotURL=http%3A%2F%2Fkatwvolta.blogspot.com%2Fsearch%2Flabel%2FVerona%2520Pooth&bpli=1

                                         
                                         216.58.207.201
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8412
Date: Thu, 01 Nov 2018 10:35:50 GMT
Expires: Fri, 01 Nov 2019 10:35:50 GMT
Last-Modified: Thu, 01 Nov 2018 07:15:45 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 639682
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   8412
Md5:    739f1b15eee23787051d56b33e822c8b
Sha1:   711bac2e42885c5944e2fc672b6d3e2677b58e1f
Sha256: 1321e6c3f622d3cf3b98c8553308ecbd5be2b234e6c50c1271b90a6e8de6d300
                                        
                                            GET /css?family=Open+Sans:300 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://draft.blogger.com/blogin.g?blogspotURL=http%3A%2F%2Fkatwvolta.blogspot.com%2Fsearch%2Flabel%2FVerona%2520Pooth&bpli=1

                                         
                                         172.217.21.170
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Thu, 08 Nov 2018 20:17:12 GMT
Date: Thu, 08 Nov 2018 20:17:12 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   201
Md5:    15cf80a4e8f280f780a0fdc257dd3950
Sha1:   957113e52dc8fc0bbd849d39d8e243e3abd68bb1
Sha256: 1cb7c017ab0b138bf945f4f1f12f4cbbcc29ec319d5b19a9ca6feba433702cd5
                                        
                                            GET /css/maia.css HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://draft.blogger.com/blogin.g?blogspotURL=http%3A%2F%2Fkatwvolta.blogspot.com%2Fsearch%2Flabel%2FVerona%2520Pooth&bpli=1

                                         
                                         216.58.209.132
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Thu, 08 Nov 2018 20:17:12 GMT
Expires: Thu, 08 Nov 2018 20:17:12 GMT
Cache-Control: private, max-age=0
Last-Modified: Mon, 26 Feb 2018 16:30:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   12181
Md5:    bbb96f1e62e3f84502664d603d4ecbfc
Sha1:   684db7b7626d997e41d11716107d25824f322983
Sha256: fcb969338fcac7f4d33a5f51945c6756d58881b82572604863fd8c0f3b1840c7
                                        
                                            GET /css?lang=no&family=Product+Sans|Roboto:400,700 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://draft.blogger.com/blogin.g?blogspotURL=http%3A%2F%2Fkatwvolta.blogspot.com%2Fsearch%2Flabel%2FVerona%2520Pooth&bpli=1

                                         
                                         172.217.21.170
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Thu, 08 Nov 2018 20:17:12 GMT
Date: Thu, 08 Nov 2018 20:17:12 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   311
Md5:    6c5e587b4f70c3630a164196a8241bb7
Sha1:   431b05bb16693facbbe516b0ae25b6aff764e7a0
Sha256: a490453de5343c8fd36053e2b0990f509b0d3b88d6f7c5ab4b59cb0ab1c9b7dc
                                        
                                            GET /img/blogger-logotype-color-black-1x.png HTTP/1.1 
Host: draft.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://draft.blogger.com/blogin.g?blogspotURL=http%3A%2F%2Fkatwvolta.blogspot.com%2Fsearch%2Flabel%2FVerona%2520Pooth&bpli=1

                                         
                                         216.58.207.201
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 1155
Date: Sun, 04 Nov 2018 08:22:21 GMT
Expires: Sun, 11 Nov 2018 08:22:21 GMT
Last-Modified: Sat, 03 Nov 2018 20:15:52 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 388491
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  PNG image, 112 x 27, 8-bit colormap, non-interlaced
Size:   1155
Md5:    a9d652846aeacdf8da5401f6e4d4a409
Sha1:   6127321cafe0be999bc0c9d952715ede2b9dd83d
Sha256: cbad27c35fbc84e2da4280476adeb197566db2750b8b4a79eb7e872db8d8acb7
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 08 Nov 2018 20:17:12 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    72cc79347235c124145bb78b69569cdf
Sha1:   b0d27ab43a80f8ae3419e5897a6a2487fcb7cf13
Sha256: a1594ae4b145d9482cc7bcf0e41d943dd78c268ac0ccfdf7bf4cffd93cd927e8
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 08 Nov 2018 20:17:12 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    b2311f0f3d6fbbb871c825339c553c8f
Sha1:   c011150cd3e9610ee2aeb23e1c1d747062442f45
Sha256: 31021267a5979432db3b30beb9203cc958027f142de419f3a7d1c202f0b8af83
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://draft.blogger.com/blogin.g?blogspotURL=http%3A%2F%2Fkatwvolta.blogspot.com%2Fsearch%2Flabel%2FVerona%2520Pooth&bpli=1

                                         
                                         172.217.20.46
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Thu, 08 Nov 2018 19:23:13 GMT
Expires: Thu, 08 Nov 2018 21:23:13 GMT
Last-Modified: Mon, 05 Nov 2018 21:10:09 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 17404
Cache-Control: public, max-age=7200
Age: 3239
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17404
Md5:    33586531225d561faadda61de818c510
Sha1:   9a3b5ffbdc4071557def3d9609eee6ad3c52d1e1
Sha256: 521d2fb506ca60463e914fd138e092f935579d31436dcff3cc6a1d216d06ef82
                                        
                                            GET /images/branding/googlelogo/svg/googlelogo_clr_74x24px.svg HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://draft.blogger.com/blogin.g?blogspotURL=http%3A%2F%2Fkatwvolta.blogspot.com%2Fsearch%2Flabel%2FVerona%2520Pooth&bpli=1

                                         
                                         216.58.211.131
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding, Origin
Content-Encoding: gzip
Content-Length: 738
Date: Wed, 07 Nov 2018 06:09:05 GMT
Expires: Thu, 07 Nov 2019 06:09:05 GMT
Last-Modified: Thu, 21 Apr 2016 03:17:22 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 137288
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   738
Md5:    d28c52ab9d8055c95c3cdeb36cc2f0c8
Sha1:   5d504625b0d7e828ff158191fc652013191a7f94
Sha256: 1dfae9e473f50336f37866b279547919bb22db2122cca954af55fe6b24edb17d
                                        
                                            GET /s/opensans/v15/mem5YaGs126MiZpBA-UN_r8OUuhv.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Open+Sans:300
Origin: https://draft.blogger.com

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 18280
Date: Thu, 01 Nov 2018 15:57:41 GMT
Expires: Fri, 01 Nov 2019 15:57:41 GMT
Last-Modified: Wed, 11 Oct 2017 21:49:35 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 620372
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  data
Size:   18280
Md5:    521d17bc9f3526c690e8ada6eee55bec
Sha1:   0c74bab4a4ebdafe080c8a35bd61d38f1b692358
Sha256: 624b3c987e1731e2871567be1451a257be8ebcaa2abebaa45651d3d95fa99492
                                        
                                            GET /og/_/ss/k=og.qtm.onahii5aksvz.L.F4.O/m=q_d,qawd,qmd/excm=qaaw,qabr,qadd,qaid,qalo,qano,qebr,qein,qhaw,qhbr,qhch,qhga,qhid,qhin,qhlo,qhmn,qhno,qhpc,qhpr,qhsf,qhtb,qhtt/d=1/ed=1/rs=AA2YrTvYvQ2eKJWWZx0sywmImAVATuM0aQ HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://draft.blogger.com/blogin.g?blogspotURL=http%3A%2F%2Fkatwvolta.blogspot.com%2Fsearch%2Flabel%2FVerona%2520Pooth&bpli=1

                                         
                                         216.58.211.131
HTTP/1.1 200 OK
Content-Type: text/css; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding, Origin
Content-Encoding: gzip
Content-Length: 2464
Date: Wed, 07 Nov 2018 08:06:26 GMT
Expires: Thu, 07 Nov 2019 08:06:26 GMT
Last-Modified: Mon, 05 Nov 2018 15:19:05 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 130247
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   2464
Md5:    81b9ac20e97c18f5ab145fb6c4dec60d
Sha1:   286b370492199ff093bd6e6262ace33101f3e2b2
Sha256: 0a377a1f90c43ea8abd496228e1190b26957cb39000b21201ffb6aef83a4ddd3
                                        
                                            GET /og/_/js/k=og.qtm.en_US.1dcU9OUCq8s.O/rt=j/m=q_d,q_pc,qawd,qmd,qsd,qmutsd,qbg/exm=qaaw,qabr,qadd,qaid,qalo,qano,qebr,qein,qhaw,qhbr,qhch,qhga,qhid,qhin,qhlo,qhmn,qhno,qhpc,qhpr,qhsf,qhtb,qhtt/d=1/ed=1/rs=AA2YrTvIE9gfRiHNzqS2ScM3RMga31LwmA HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://draft.blogger.com/blogin.g?blogspotURL=http%3A%2F%2Fkatwvolta.blogspot.com%2Fsearch%2Flabel%2FVerona%2520Pooth&bpli=1

                                         
                                         216.58.211.131
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding, Origin
Content-Encoding: gzip
Content-Length: 42804
Date: Wed, 07 Nov 2018 07:38:24 GMT
Expires: Thu, 07 Nov 2019 07:38:24 GMT
Last-Modified: Mon, 05 Nov 2018 15:19:05 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 131929
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   42804
Md5:    66ea0b653f0103b3feac02a8d9cda18f
Sha1:   026e08704d9820a37a458e37e444baf37ff1b97d
Sha256: 5c83b75b89f0adaaf4a7ab81b63138b1e58dcaf04e3dee6419b3f8ff73e0ad27
                                        
                                            GET /s/roboto/v18/KFOlCnqEu92Fr1MmWUlfBBc-.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?lang=no&family=Product+Sans|Roboto:400,700
Origin: https://draft.blogger.com

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 19888
Date: Sun, 04 Nov 2018 09:33:09 GMT
Expires: Mon, 04 Nov 2019 09:33:09 GMT
Last-Modified: Mon, 16 Oct 2017 17:33:11 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 384244
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  data
Size:   19888
Md5:    cf6613d1adf490972c557a8e318e0868
Sha1:   b2198c3fc1c72646d372f63e135e70ba2c9fed8e
Sha256: 468e579fe1210fa55525b1c470ed2d1958404512a2dd4fb972cac5ce0ff00b1f
                                        
                                            GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxM.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?lang=no&family=Product+Sans|Roboto:400,700
Origin: https://draft.blogger.com

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 19824
Date: Tue, 06 Nov 2018 18:05:58 GMT
Expires: Wed, 06 Nov 2019 18:05:58 GMT
Last-Modified: Mon, 16 Oct 2017 17:32:56 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 180675
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  data
Size:   19824
Md5:    bafb105baeb22d965c70fe52ba6b49d9
Sha1:   934014cc9bbe5883542be756b3146c05844b254f
Sha256: 1570f866bf6eae82041e407280894a86ad2b8b275e01908ae156914dc693a4ed
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 08 Nov 2018 20:17:13 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    3695a50d359b2fdcad6caa8733642f9a
Sha1:   50aa700b0f2284f8bdd3b6f5159fdcd3ef6d8479
Sha256: abd84855b87b9a9e6f770aa20874a78c1d802ebac621cf495cba0fb4fa282dc8
                                        
                                            GET /_/scs/abc-static/_/js/k=gapi.gapi.en.CUp85wbT4DI.O/m=gapi_iframes,googleapis_client,plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-XBQda2DFvo9hxbj_dGnCV84SJMA/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://draft.blogger.com/blogin.g?blogspotURL=http%3A%2F%2Fkatwvolta.blogspot.com%2Fsearch%2Flabel%2FVerona%2520Pooth&bpli=1

                                         
                                         216.58.207.238
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 48166
Date: Sun, 28 Oct 2018 08:33:49 GMT
Expires: Mon, 28 Oct 2019 08:33:49 GMT
Last-Modified: Sat, 27 Oct 2018 15:18:28 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 992604
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   48166
Md5:    53eea982d7ad1ad35b35fc3edd48e8a7
Sha1:   b499c475ba422abd98f154163fc85126203bc692
Sha256: 949ad5b24488206810f318d1a973ef081b6296b8ec0b89e86102dd18b9b7f092
                                        
                                            GET /s/opensans/v15/mem5YaGs126MiZpBA-UN_r8OUuhv.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Open+Sans:300
Origin: https://draft.blogger.com

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /ServiceLogin?continue=https://draft.blogger.com/blogin.g?blogspotURL%3Dhttp://katwvolta.blogspot.com/search/label/Verona%252520Pooth%26bpli%3D1&followup=https://draft.blogger.com/blogin.g?blogspotURL%3Dhttp://katwvolta.blogspot.com/search/label/Verona%252520Pooth%26bpli%3D1&passive=true&go=true HTTP/1.1 
Host: accounts.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://katwvolta.blogspot.com/search/label/Verona%20Pooth

                                         
                                         172.217.21.141
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
X-Frame-Options: DENY
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 08 Nov 2018 20:17:08 GMT
Location: https://draft.blogger.com/blogin.g?blogspotURL=http%3A%2F%2Fkatwvolta.blogspot.com%2Fsearch%2Flabel%2FVerona%2520Pooth&bpli=1
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Set-Cookie: GAPS=1:0j6j-rXF31fLpv6POCwgn7zwaAVMEA:3geBKsFlY4A4OZwe;Path=/;Expires=Sat, 07-Nov-2020 20:17:08 GMT;Secure;HttpOnly;Priority=HIGH
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---