| paidgoogleplay.blogspot.com/search/ |  216.58.207.193 | 200 OK | 37 kB |
URL User Request GET HTTP/2paidgoogleplay.blogspot.com/search/ IP216.58.207.193:443
CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintE8:F4:4F:CE:D1:E0:7B:C8:CD:18:45:AA:90:5A:35:8B:D5:CF:66:6B ValidityMon, 18 Mar 2024 20:01:08 GMT - Mon, 10 Jun 2024 20:01:07 GMT
File typeHTML document, ASCII text, with very long lines (1000) Hasha3c26994391ba418157df0f3df1a88bd ced0262ffceb7a26de50ff37b1d7be6ebec66ae1 324395081cf9d923509baa8dc42f5580d652a08af9113d51fd0c8867d7dafc42
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /search/ HTTP/1.1
Host: paidgoogleplay.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Wed, 24 Apr 2024 13:15:17 GMT
date: Wed, 24 Apr 2024 13:15:17 GMT
cache-control: private, max-age=0
last-modified: Thu, 04 Apr 2024 07:44:48 GMT
etag: W/"9c7d9879c66b74d0e83bd46b3e565ecd7d6f9093c32bca1ab0b6332afa1d8e15"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 36600
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| paidgoogleplay.blogspot.com/js/cookienotice.js | 216.58.207.193 | 200 OK | 2.0 kB |
URL GET HTTP/3paidgoogleplay.blogspot.com/js/cookienotice.js IP216.58.207.193:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintE8:F4:4F:CE:D1:E0:7B:C8:CD:18:45:AA:90:5A:35:8B:D5:CF:66:6B ValidityMon, 18 Mar 2024 20:01:08 GMT - Mon, 10 Jun 2024 20:01:07 GMT
File typeJavaScript source, ASCII text Hasha705132a2174f88e196ec3610d68faa8 3bad57a48d973a678fec600d45933010f6edc659 068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/cookienotice.js HTTP/1.1
Host: paidgoogleplay.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/search/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
date: Wed, 24 Apr 2024 13:15:17 GMT
expires: Wed, 01 May 2024 13:15:17 GMT
cache-control: public, max-age=604800
last-modified: Wed, 24 Apr 2024 11:53:54 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.blogger.com/static/v1/widgets/3566091532-css_bundle_v2.css | 142.250.74.105 | 200 OK | 7.8 kB |
URL GET HTTP/2www.blogger.com/static/v1/widgets/3566091532-css_bundle_v2.css IP142.250.74.105:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint17:41:C7:D0:1D:55:29:41:DB:6D:65:5F:4E:63:97:50:32:7D:E1:60 ValidityMon, 18 Mar 2024 19:33:57 GMT - Mon, 10 Jun 2024 19:33:56 GMT
File typeASCII text, with very long lines (35959) Hash1e32420a7b6ddbdcb7def8b3141c4d1e a1be54d42ff1f95244c9653539f90318f5bc0580 a9ca837900b6ae007386d400f659c233120b8af7d93407fd6475c9180d9e83d2
GET /static/v1/widgets/3566091532-css_bundle_v2.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 7756
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 22 Apr 2024 18:36:14 GMT
expires: Tue, 22 Apr 2025 18:36:14 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 03:50:25 GMT
content-type: text/css
vary: Accept-Encoding
age: 153543
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pagead2.googlesyndication.com/pagead/show_ads.js | 142.250.74.162 | 200 OK | 10 kB |
URL GET HTTP/2pagead2.googlesyndication.com/pagead/show_ads.js IP142.250.74.162:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoogle Trust Services LLC Subject*.g.doubleclick.net Fingerprint1B:FA:17:60:E2:34:D4:FA:D1:13:08:09:6E:8F:ED:E7:A8:8C:6E:7A ValidityMon, 18 Mar 2024 19:37:13 GMT - Mon, 10 Jun 2024 19:37:12 GMT
File typeJavaScript source, ASCII text, with very long lines (5369) Hash08ee7630471a5d4a624f854fc74bcd81 92790b3479a32dadb8f6aff1b4eaaf758891a978 fee92c158c874dabdecd201c64e2421114c213f29a6ff296bcec7343a9601b21
GET /pagead/show_ads.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Wed, 24 Apr 2024 13:15:17 GMT
expires: Wed, 24 Apr 2024 13:15:17 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 14626293582944913162
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 10548
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/1.4.3/jquery.min.js | 142.250.74.170 | 200 OK | 27 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/1.4.3/jquery.min.js IP142.250.74.170:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File typeJavaScript source, ASCII text, with very long lines (561) Hashe4958bd2e32d9fcd6115a585ed17a9cc 97be02d1785b7bb4f41ae116a6a9bef74cb018d6 f800b399e5c7a5254fc66bb407117fe38dbde0528780e68c9f7c87d299f8486a
GET /ajax/libs/jquery/1.4.3/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 26934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 03:00:59 GMT
expires: Fri, 18 Apr 2025 03:00:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 555258
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.blogger.com/static/v1/widgets/1807328581-widgets.js | 142.250.74.105 | 200 OK | 51 kB |
URL GET HTTP/2www.blogger.com/static/v1/widgets/1807328581-widgets.js IP142.250.74.105:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint17:41:C7:D0:1D:55:29:41:DB:6D:65:5F:4E:63:97:50:32:7D:E1:60 ValidityMon, 18 Mar 2024 19:33:57 GMT - Mon, 10 Jun 2024 19:33:56 GMT
File typeJavaScript source, ASCII text, with very long lines (1941) Hash3fd63936a88c795358e97868e471a443 ca64663c1f3115e480fc373d6e47b01d1f5b03a0 d611421e714f0491c867715cfd4b567a8e4590161c005cbf65fe2644e38685f1
GET /static/v1/widgets/1807328581-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 51394
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 Apr 2024 01:58:49 GMT
expires: Thu, 24 Apr 2025 01:58:49 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 23 Apr 2024 23:51:06 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 40588
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lh3-testonly.googleusercontent.com/blogger_img_proxy/AEn0k_tx12jI3Z7OoZlkEWoekkkag5q--32qfttX7hZawdAnKU0-o8NHlBxLE8FqyvZ__Xi1H5_pMxGDM0wWj0vT0RzOg_Fq3vzC=s0-d | 142.250.74.161 | 404 Not Found | 1.7 kB |
URL GET HTTP/2lh3-testonly.googleusercontent.com/blogger_img_proxy/AEn0k_tx12jI3Z7OoZlkEWoekkkag5q--32qfttX7hZawdAnKU0-o8NHlBxLE8FqyvZ__Xi1H5_pMxGDM0wWj0vT0RzOg_Fq3vzC=s0-d IP142.250.74.161:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint6E:66:E1:45:85:5C:3A:EB:60:4A:8E:EF:62:B8:7C:E3:C7:1B:FA:47 ValidityMon, 18 Mar 2024 20:34:07 GMT - Mon, 10 Jun 2024 20:34:06 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1136) Hash90064d46a4e1feb416c723b9c387f04e 4fe3a2022b56feee069c86d5dc7b7ad6388649c8 0f99697c49ce6c59e84eca2788c09c7628af4e7d94e3585a5df31b14d3bf2907
GET /blogger_img_proxy/AEn0k_tx12jI3Z7OoZlkEWoekkkag5q--32qfttX7hZawdAnKU0-o8NHlBxLE8FqyvZ__Xi1H5_pMxGDM0wWj0vT0RzOg_Fq3vzC=s0-d HTTP/1.1
Host: lh3-testonly.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 13:15:17 GMT
server: sffe
content-length: 1684
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lh3-testonly.googleusercontent.com/blogger_img_proxy/AEn0k_vKm3f_4o1ETgYzuAgFDiWqejUbL5qiBZlY3hQ91ceXV0MiCHF4av_-1fD8F5IGmvMb-INAWNbrQB4oU0HsIV7ccHklOhQSccTr=s0-d | 142.250.74.161 | 404 Not Found | 1.7 kB |
URL GET HTTP/3lh3-testonly.googleusercontent.com/blogger_img_proxy/AEn0k_vKm3f_4o1ETgYzuAgFDiWqejUbL5qiBZlY3hQ91ceXV0MiCHF4av_-1fD8F5IGmvMb-INAWNbrQB4oU0HsIV7ccHklOhQSccTr=s0-d IP142.250.74.161:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint6E:66:E1:45:85:5C:3A:EB:60:4A:8E:EF:62:B8:7C:E3:C7:1B:FA:47 ValidityMon, 18 Mar 2024 20:34:07 GMT - Mon, 10 Jun 2024 20:34:06 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1136) Hash6356ea64c4267df9d2c057617b6a76d1 0693207eca34557405b60830f9881d8c19cf92f3 7f407d55f52597c76eb37455b091701207cf82107d8975cc39923a22e9246cc3
GET /blogger_img_proxy/AEn0k_vKm3f_4o1ETgYzuAgFDiWqejUbL5qiBZlY3hQ91ceXV0MiCHF4av_-1fD8F5IGmvMb-INAWNbrQB4oU0HsIV7ccHklOhQSccTr=s0-d HTTP/1.1
Host: lh3-testonly.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 13:15:17 GMT
server: sffe
content-length: 1688
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lh3-testonly.googleusercontent.com/blogger_img_proxy/AEn0k_skPqEj-SxtUc_U9au1F9LxHt_W-0gAluAco7LvuBpy6XS8Hv-KDYH7lt0WAQqZGPK68Z1VOIWGt8-4FvEREhZjCjvUzc48T28uVfDlw7l8l4l53P38HxN_pgM-de5d1AuQnHxO-dqMRE3IgkS4XHN3FRlD2P0WzZkAIfI6K0BNEw=s0-d | 142.250.74.161 | 404 Not Found | 1.8 kB |
URL GET HTTP/3lh3-testonly.googleusercontent.com/blogger_img_proxy/AEn0k_skPqEj-SxtUc_U9au1F9LxHt_W-0gAluAco7LvuBpy6XS8Hv-KDYH7lt0WAQqZGPK68Z1VOIWGt8-4FvEREhZjCjvUzc48T28uVfDlw7l8l4l53P38HxN_pgM-de5d1AuQnHxO-dqMRE3IgkS4XHN3FRlD2P0WzZkAIfI6K0BNEw=s0-d IP142.250.74.161:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint6E:66:E1:45:85:5C:3A:EB:60:4A:8E:EF:62:B8:7C:E3:C7:1B:FA:47 ValidityMon, 18 Mar 2024 20:34:07 GMT - Mon, 10 Jun 2024 20:34:06 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1136) Hash77d2cd91c2744607dadb86f177275b0b 1169428be2eac1d412745226aecbd244a16a4ecb 893823f7d1c8181ac73e05b9701672ff82d906c70ec09015dcc00260ee57ab51
GET /blogger_img_proxy/AEn0k_skPqEj-SxtUc_U9au1F9LxHt_W-0gAluAco7LvuBpy6XS8Hv-KDYH7lt0WAQqZGPK68Z1VOIWGt8-4FvEREhZjCjvUzc48T28uVfDlw7l8l4l53P38HxN_pgM-de5d1AuQnHxO-dqMRE3IgkS4XHN3FRlD2P0WzZkAIfI6K0BNEw=s0-d HTTP/1.1
Host: lh3-testonly.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 13:15:17 GMT
server: sffe
content-length: 1762
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/1.5.2/jquery.min.js | 142.250.74.170 | 200 OK | 30 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/1.5.2/jquery.min.js IP142.250.74.170:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65168) Hashe85aed5c30d734f1e30646e030d7a817 b8dcaa1c866905c0bdb0b70c8e564ff1c3fe27ad 8f0a19ee8c606b35a10904951e0a27da1896eafe33c6e88cb7bcbe455f05a24a
GET /ajax/libs/jquery/1.5.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30082
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 22 Apr 2024 13:57:54 GMT
expires: Tue, 22 Apr 2025 13:57:54 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 170243
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lh3-testonly.googleusercontent.com/blogger_img_proxy/AEn0k_sZZavhbh8A2UZEHMxoRzsI76sBe9F8UHLjqN-_rlPRIsjMaoznf_DdoSrGt0GXQG_WNXo075Fj5ZgnO1l2K62Y5fCdgR3FR-zaN4u1yMvYz4pAaKbDl9E5jD-ElQ82LA=s0-d | 142.250.74.161 | 404 Not Found | 1.7 kB |
URL GET HTTP/2lh3-testonly.googleusercontent.com/blogger_img_proxy/AEn0k_sZZavhbh8A2UZEHMxoRzsI76sBe9F8UHLjqN-_rlPRIsjMaoznf_DdoSrGt0GXQG_WNXo075Fj5ZgnO1l2K62Y5fCdgR3FR-zaN4u1yMvYz4pAaKbDl9E5jD-ElQ82LA=s0-d IP142.250.74.161:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint6E:66:E1:45:85:5C:3A:EB:60:4A:8E:EF:62:B8:7C:E3:C7:1B:FA:47 ValidityMon, 18 Mar 2024 20:34:07 GMT - Mon, 10 Jun 2024 20:34:06 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1136) Hash961b79893600555d195aee24db545ff4 945fb5ac742a0637ce0f444b818af2082f8fda22 bf44ca5250cdf612a714d7f391584d144f380ced037c87283c9aa94e0b2d88ad
GET /blogger_img_proxy/AEn0k_sZZavhbh8A2UZEHMxoRzsI76sBe9F8UHLjqN-_rlPRIsjMaoznf_DdoSrGt0GXQG_WNXo075Fj5ZgnO1l2K62Y5fCdgR3FR-zaN4u1yMvYz4pAaKbDl9E5jD-ElQ82LA=s0-d HTTP/1.1
Host: lh3-testonly.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 13:15:17 GMT
server: sffe
content-length: 1718
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lh6.ggpht.com/PH3BpWDkQv_Y0xKp0me8ud_yAY1QWHe5ByvvdCr3of5hSZYBCVDwppqL_x8pfyARe3vI=w300-rw | 142.250.74.33 | 200 OK | 62 kB |
URL GET HTTP/2lh6.ggpht.com/PH3BpWDkQv_Y0xKp0me8ud_yAY1QWHe5ByvvdCr3of5hSZYBCVDwppqL_x8pfyARe3vI=w300-rw IP142.250.74.33:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint6E:66:E1:45:85:5C:3A:EB:60:4A:8E:EF:62:B8:7C:E3:C7:1B:FA:47 ValidityMon, 18 Mar 2024 20:34:07 GMT - Mon, 10 Jun 2024 20:34:06 GMT
File typeRIFF (little-endian) data, Web/P image Hash92764a2b3f9e9f9201da43c405f92ef9 f314e988a6b1d7167bc9380ea84c88eba4f96a87 673bafa34e4f890b7a487d9e53697f15bac1dbb7e9e45877c1c837fb9edee5ae
GET /PH3BpWDkQv_Y0xKp0me8ud_yAY1QWHe5ByvvdCr3of5hSZYBCVDwppqL_x8pfyARe3vI=w300-rw HTTP/1.1
Host: lh6.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 25 Apr 2024 13:15:17 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.webp"
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 13:15:17 GMT
server: fife
content-length: 61862
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 4.bp.blogspot.com/-WIuMq5GYd2M/UjyqmxD-nmI/AAAAAAAAAsQ/Ym7rjvprHds/s1600/ppsperfct.jpg | 142.250.74.161 | 200 OK | 21 kB |
URL GET HTTP/24.bp.blogspot.com/-WIuMq5GYd2M/UjyqmxD-nmI/AAAAAAAAAsQ/Ym7rjvprHds/s1600/ppsperfct.jpg IP142.250.74.161:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintE8:F4:4F:CE:D1:E0:7B:C8:CD:18:45:AA:90:5A:35:8B:D5:CF:66:6B ValidityMon, 18 Mar 2024 20:01:08 GMT - Mon, 10 Jun 2024 20:01:07 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 1060x128, components 3 Hashc600430db743c2db04bc73c2ac66e878 2fca6d967c09d6cbdc716653fdd11581d63b951a 557d39cfbf876ad53dcfb913c14d2df4ba057ca7df05d23fb12f5abe45777136
GET /-WIuMq5GYd2M/UjyqmxD-nmI/AAAAAAAAAsQ/Ym7rjvprHds/s1600/ppsperfct.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v2c5"
expires: Thu, 25 Apr 2024 13:15:17 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="ppsperfct.jpg"
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 13:15:17 GMT
server: fife
content-length: 20825
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| apis.google.com/js/platform.js | 142.250.74.174 | 200 OK | 21 kB |
URL GET HTTP/2apis.google.com/js/platform.js IP142.250.74.174:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoogle Trust Services LLC Subject*.apis.google.com FingerprintE8:68:ED:59:65:88:CD:45:4F:B0:64:88:FF:F3:32:D4:8B:C7:75:F0 ValidityMon, 18 Mar 2024 20:39:12 GMT - Mon, 10 Jun 2024 20:39:11 GMT
File typeJavaScript source, ASCII text, with very long lines (2050) Hashe66acfdb2f1dfcff8c6dba736dd4ab6d 36026360b6c8d750488ef2c739e04969f8c5bcd7 742841b3cf614dd55ce486a7335018bd1992c4d05ef74b45a0781318075a99f3
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 21303
date: Wed, 24 Apr 2024 13:15:17 GMT
expires: Wed, 24 Apr 2024 13:15:17 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "d8cc7aca923e8ade"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.edomz.net/popup.js |  190.2.139.23 | 200 OK | 3.8 kB |
IP190.2.139.23:443 ASN#49981 WorldStream B.V.
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerLet's Encrypt Subjectedomz.net Fingerprint09:68:87:6E:CD:7F:C5:0E:28:78:DF:28:F3:52:1A:91:6C:41:1E:CC ValidityThu, 28 Mar 2024 01:40:43 GMT - Wed, 26 Jun 2024 01:40:42 GMT
File typeJavaScript source, ASCII text, with very long lines (1510) Hash3fe507553728bf6136c90179e183934a c065f78ff4cb26f736e0b94eca028ea22aa0677e 17eeb9f14ff750f1f96a2f7e25165c4e6be9ed7c43422736169d070f5cde9fce
GET /popup.js HTTP/1.1
Host: www.edomz.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Wed, 24 Apr 2024 13:15:17 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
X-Powered-By: PHP/7.2.34
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Content-Encoding: gzip
|
|
| lh4.ggpht.com/mi6u2_nnzPgDVXVem7gjVedZ2XNRFTlvL0IrRNahbucZLgA3WjfnOoPu7c3ew7f4efE=w300-rw | 142.250.74.161 | 200 OK | 27 kB |
URL GET HTTP/2lh4.ggpht.com/mi6u2_nnzPgDVXVem7gjVedZ2XNRFTlvL0IrRNahbucZLgA3WjfnOoPu7c3ew7f4efE=w300-rw IP142.250.74.161:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint6E:66:E1:45:85:5C:3A:EB:60:4A:8E:EF:62:B8:7C:E3:C7:1B:FA:47 ValidityMon, 18 Mar 2024 20:34:07 GMT - Mon, 10 Jun 2024 20:34:06 GMT
File typeRIFF (little-endian) data, Web/P image Hashb8ca0b31bd47722f1a5bcbd331ef8c53 ea2f5eb28ebb701f7b371254c6bef244cd8cab00 9b3328a76ef4c30caaeb3818cf7e33d6a56eedcb18c412a9b95432f55a0deccd
GET /mi6u2_nnzPgDVXVem7gjVedZ2XNRFTlvL0IrRNahbucZLgA3WjfnOoPu7c3ew7f4efE=w300-rw HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 25 Apr 2024 13:15:18 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.webp"
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 13:15:18 GMT
server: fife
content-length: 26554
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lh4.ggpht.com/mmGJGCO4x15pf1g_MPjO1qmp3nbiqc26-ExnFQA_dWQ1mLI07auhCUVXEc-NSxT1vug=w300-rw | 142.250.74.161 | 200 OK | 28 kB |
URL GET HTTP/2lh4.ggpht.com/mmGJGCO4x15pf1g_MPjO1qmp3nbiqc26-ExnFQA_dWQ1mLI07auhCUVXEc-NSxT1vug=w300-rw IP142.250.74.161:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint6E:66:E1:45:85:5C:3A:EB:60:4A:8E:EF:62:B8:7C:E3:C7:1B:FA:47 ValidityMon, 18 Mar 2024 20:34:07 GMT - Mon, 10 Jun 2024 20:34:06 GMT
File typeRIFF (little-endian) data, Web/P image Hashaeb15e9aed132ede704d1c143d5e8d21 c7136426ea0f7a8ce58634268ee0fae358edd633 c249ee786ee93537fbdeb639e4216eaa8b0100b81f1d769bdf62e00d65bc6a54
GET /mmGJGCO4x15pf1g_MPjO1qmp3nbiqc26-ExnFQA_dWQ1mLI07auhCUVXEc-NSxT1vug=w300-rw HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 25 Apr 2024 13:15:18 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.webp"
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 13:15:18 GMT
server: fife
content-length: 27982
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lh6.ggpht.com/yGqYKPAc5jJhYPA_72eICaGHwu25VhTMyN4L7KY3nzbeAOe3kXK5cnBt6IvuuxJL1Q=w300-rw | 142.250.74.33 | 200 OK | 27 kB |
URL GET HTTP/2lh6.ggpht.com/yGqYKPAc5jJhYPA_72eICaGHwu25VhTMyN4L7KY3nzbeAOe3kXK5cnBt6IvuuxJL1Q=w300-rw IP142.250.74.33:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint6E:66:E1:45:85:5C:3A:EB:60:4A:8E:EF:62:B8:7C:E3:C7:1B:FA:47 ValidityMon, 18 Mar 2024 20:34:07 GMT - Mon, 10 Jun 2024 20:34:06 GMT
File typeRIFF (little-endian) data, Web/P image Hasheb50d942036cf5a905bde25ec3765f8c 1099e7bc811a0adf5052f481f07cb3394dca63da 2f52c0aa6fa1e8e5ba06171232e024417619356cfa06516373d3df4fdbf4ae78
GET /yGqYKPAc5jJhYPA_72eICaGHwu25VhTMyN4L7KY3nzbeAOe3kXK5cnBt6IvuuxJL1Q=w300-rw HTTP/1.1
Host: lh6.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 25 Apr 2024 13:15:18 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.webp"
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 13:15:18 GMT
server: fife
content-length: 27322
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lh3.ggpht.com/uecWwSHZyK0emvJIswGD2q_hqD6WNnoTOc9T8phEf14kTjKQsVkKbpklS6cgE5BBIQ=w300-rw | 142.250.74.161 | 200 OK | 55 kB |
URL GET HTTP/2lh3.ggpht.com/uecWwSHZyK0emvJIswGD2q_hqD6WNnoTOc9T8phEf14kTjKQsVkKbpklS6cgE5BBIQ=w300-rw IP142.250.74.161:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint6E:66:E1:45:85:5C:3A:EB:60:4A:8E:EF:62:B8:7C:E3:C7:1B:FA:47 ValidityMon, 18 Mar 2024 20:34:07 GMT - Mon, 10 Jun 2024 20:34:06 GMT
File typeRIFF (little-endian) data, Web/P image Hashfac295ed4d3d4866508599e796609433 f2715257ba42c108433e491ae5fdbe368e151dae efb68166cc98181bcad992484583024f2f9d8529fabbae03d4493405e40c10a2
GET /uecWwSHZyK0emvJIswGD2q_hqD6WNnoTOc9T8phEf14kTjKQsVkKbpklS6cgE5BBIQ=w300-rw HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 25 Apr 2024 13:15:18 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.webp"
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 13:15:18 GMT
server: fife
content-length: 55270
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lh4.ggpht.com/5BTvGv-7LvrEapSvNWdr3m6U0qkJy--vwhzIJnOsPUUqmXFC7Q1inZACjwMcDY5unlY=w300-rw | 142.250.74.161 | 200 OK | 32 kB |
URL GET HTTP/2lh4.ggpht.com/5BTvGv-7LvrEapSvNWdr3m6U0qkJy--vwhzIJnOsPUUqmXFC7Q1inZACjwMcDY5unlY=w300-rw IP142.250.74.161:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint6E:66:E1:45:85:5C:3A:EB:60:4A:8E:EF:62:B8:7C:E3:C7:1B:FA:47 ValidityMon, 18 Mar 2024 20:34:07 GMT - Mon, 10 Jun 2024 20:34:06 GMT
File typeRIFF (little-endian) data, Web/P image Hashe8fc6b55ecdbae8776c55d2290a81ab1 ab150e280a23d03227b6dea9b16257e7b8c52b0d 1b6bb221cf2ffdfc034ac709cd7eeed020fced87741fe9363f38d180e97207d9
GET /5BTvGv-7LvrEapSvNWdr3m6U0qkJy--vwhzIJnOsPUUqmXFC7Q1inZACjwMcDY5unlY=w300-rw HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 25 Apr 2024 13:15:18 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.webp"
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 13:15:18 GMT
server: fife
content-length: 32506
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lh6.ggpht.com/JHG5UmfwRHQSyK7IwLynx6Xunskc0mY0GFvvAldw-arSTU65Ek_I3ClTOb73n5VA0g=w300-rw | 142.250.74.33 | 200 OK | 68 kB |
URL GET HTTP/2lh6.ggpht.com/JHG5UmfwRHQSyK7IwLynx6Xunskc0mY0GFvvAldw-arSTU65Ek_I3ClTOb73n5VA0g=w300-rw IP142.250.74.33:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint6E:66:E1:45:85:5C:3A:EB:60:4A:8E:EF:62:B8:7C:E3:C7:1B:FA:47 ValidityMon, 18 Mar 2024 20:34:07 GMT - Mon, 10 Jun 2024 20:34:06 GMT
File typeRIFF (little-endian) data, Web/P image Hash938729fe6ae5a4bf0c24ba67820338af f9246eaf69ce3b4a46978f0c331b640f9b2d15f7 8d68390b114aaeaebde999bce6836d7235249cf50343bda4f158a1f8862eb356
GET /JHG5UmfwRHQSyK7IwLynx6Xunskc0mY0GFvvAldw-arSTU65Ek_I3ClTOb73n5VA0g=w300-rw HTTP/1.1
Host: lh6.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 25 Apr 2024 13:15:18 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.webp"
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 13:15:18 GMT
server: fife
content-length: 68220
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lh6.ggpht.com/RFKzH9xQ8r30C8GyXuC6akaUrk638guFMi6VnYRM1G3_qnewmze31oBby9JtXNB6Xmxn=w300-rw | 142.250.74.33 | 200 OK | 65 kB |
URL GET HTTP/2lh6.ggpht.com/RFKzH9xQ8r30C8GyXuC6akaUrk638guFMi6VnYRM1G3_qnewmze31oBby9JtXNB6Xmxn=w300-rw IP142.250.74.33:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint6E:66:E1:45:85:5C:3A:EB:60:4A:8E:EF:62:B8:7C:E3:C7:1B:FA:47 ValidityMon, 18 Mar 2024 20:34:07 GMT - Mon, 10 Jun 2024 20:34:06 GMT
File typeRIFF (little-endian) data, Web/P image Hashe6b496b1a09b4e031ede3881dc350ffc 7901710497d7198f569fa14917f07c496fbe8cdf 5bb41f363d0cbc80a4b9d8fbf76c239a5b0081f1194f74fbaeaac65c6f8c3972
GET /RFKzH9xQ8r30C8GyXuC6akaUrk638guFMi6VnYRM1G3_qnewmze31oBby9JtXNB6Xmxn=w300-rw HTTP/1.1
Host: lh6.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 25 Apr 2024 13:15:18 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.webp"
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 13:15:18 GMT
server: fife
content-length: 64972
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lh3.ggpht.com/b0-bMb4mkb2g8h8gDDWrJXFYRNH7X8NW4kgBgXIbBaXZYzwBzANJPYTRfBcmgpaoVA=w300-rw | 142.250.74.161 | 200 OK | 33 kB |
URL GET HTTP/2lh3.ggpht.com/b0-bMb4mkb2g8h8gDDWrJXFYRNH7X8NW4kgBgXIbBaXZYzwBzANJPYTRfBcmgpaoVA=w300-rw IP142.250.74.161:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint6E:66:E1:45:85:5C:3A:EB:60:4A:8E:EF:62:B8:7C:E3:C7:1B:FA:47 ValidityMon, 18 Mar 2024 20:34:07 GMT - Mon, 10 Jun 2024 20:34:06 GMT
File typeRIFF (little-endian) data, Web/P image Hashc52243eb5e0f29f8db8700cae2f864ca 21b9e3d4f2f16649ac43f59fa58f84ad6c08c72b 9ccddd73aeecbf45d1a23555582190ad3f6de339d7944f45c87b7b59ef8c3526
GET /b0-bMb4mkb2g8h8gDDWrJXFYRNH7X8NW4kgBgXIbBaXZYzwBzANJPYTRfBcmgpaoVA=w300-rw HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 25 Apr 2024 13:15:18 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.webp"
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 13:15:18 GMT
server: fife
content-length: 32942
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lh5.ggpht.com/OGcBz0fckZBKBAz4QdAJFwy7c3XZa-kqRG-FEkJFsiT8u7eYbTJ7KrQuM-j1MuxEWQ=w300-rw | 142.250.74.161 | 200 OK | 108 kB |
URL GET HTTP/2lh5.ggpht.com/OGcBz0fckZBKBAz4QdAJFwy7c3XZa-kqRG-FEkJFsiT8u7eYbTJ7KrQuM-j1MuxEWQ=w300-rw IP142.250.74.161:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint6E:66:E1:45:85:5C:3A:EB:60:4A:8E:EF:62:B8:7C:E3:C7:1B:FA:47 ValidityMon, 18 Mar 2024 20:34:07 GMT - Mon, 10 Jun 2024 20:34:06 GMT
File typeRIFF (little-endian) data, Web/P image Size108 kB (108458 bytes) Hash590be257eb52768652860bcbd19d9954 fff3faa4b2bb33f5651a1869c66f1abd1e540aa0 adf280927485b863c031d5b195f3edac4de28c71d025c6bbde1fc8a770bef217
GET /OGcBz0fckZBKBAz4QdAJFwy7c3XZa-kqRG-FEkJFsiT8u7eYbTJ7KrQuM-j1MuxEWQ=w300-rw HTTP/1.1
Host: lh5.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 25 Apr 2024 13:15:18 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.webp"
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 13:15:18 GMT
server: fife
content-length: 108458
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lh6.ggpht.com/ovVnjCjNt2WFM0lYTryXnMEWmc8PZ0nN7B1gbPYy7PZQ0N9_08IsfuZFVadoNMxxgYXV=w300-rw | 142.250.74.33 | 200 OK | 122 kB |
URL GET HTTP/2lh6.ggpht.com/ovVnjCjNt2WFM0lYTryXnMEWmc8PZ0nN7B1gbPYy7PZQ0N9_08IsfuZFVadoNMxxgYXV=w300-rw IP142.250.74.33:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint6E:66:E1:45:85:5C:3A:EB:60:4A:8E:EF:62:B8:7C:E3:C7:1B:FA:47 ValidityMon, 18 Mar 2024 20:34:07 GMT - Mon, 10 Jun 2024 20:34:06 GMT
File typeRIFF (little-endian) data, Web/P image Size122 kB (121892 bytes) Hashb36c230fc9b7cd973656342c73df3537 97221896d2fc1091e53aa788585c67a96969ef8b 3cfb11aa836bdc26f72d771ce73a9fa6b72f1679edacd6e3e352b3a8237cbc7a
GET /ovVnjCjNt2WFM0lYTryXnMEWmc8PZ0nN7B1gbPYy7PZQ0N9_08IsfuZFVadoNMxxgYXV=w300-rw HTTP/1.1
Host: lh6.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 25 Apr 2024 13:15:18 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.webp"
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 13:15:18 GMT
server: fife
content-length: 121892
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lh5.ggpht.com/TT2pjJyehHYw2PJLRSgahg-7kNsg6N0aUA4r8JEqesBDa4Zf1YEA9S3Tep1vJS_00ZA=w300-rw | 142.250.74.161 | 200 OK | 104 kB |
URL GET HTTP/2lh5.ggpht.com/TT2pjJyehHYw2PJLRSgahg-7kNsg6N0aUA4r8JEqesBDa4Zf1YEA9S3Tep1vJS_00ZA=w300-rw IP142.250.74.161:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint6E:66:E1:45:85:5C:3A:EB:60:4A:8E:EF:62:B8:7C:E3:C7:1B:FA:47 ValidityMon, 18 Mar 2024 20:34:07 GMT - Mon, 10 Jun 2024 20:34:06 GMT
File typeRIFF (little-endian) data, Web/P image Size104 kB (104300 bytes) Hash8cdefce884df69e4b801b2b5d0f5625b 68e0c191662d1919d5ac840294958b93ce17743c 0016b8f2deda5f52d9687b2735407161029d6ee2efb7b567e4106fd712e46ce1
GET /TT2pjJyehHYw2PJLRSgahg-7kNsg6N0aUA4r8JEqesBDa4Zf1YEA9S3Tep1vJS_00ZA=w300-rw HTTP/1.1
Host: lh5.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 25 Apr 2024 13:15:18 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.webp"
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 13:15:18 GMT
server: fife
content-length: 104300
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lh5.ggpht.com/ZAPBlNb8KkRiz9008VYu7Sh4UDlQGt7dLV-WphS18vkRVJyMTmNHO3sU3bB0Qn7LZHzY=w300-rw | 142.250.74.161 | 200 OK | 108 kB |
URL GET HTTP/2lh5.ggpht.com/ZAPBlNb8KkRiz9008VYu7Sh4UDlQGt7dLV-WphS18vkRVJyMTmNHO3sU3bB0Qn7LZHzY=w300-rw IP142.250.74.161:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint6E:66:E1:45:85:5C:3A:EB:60:4A:8E:EF:62:B8:7C:E3:C7:1B:FA:47 ValidityMon, 18 Mar 2024 20:34:07 GMT - Mon, 10 Jun 2024 20:34:06 GMT
File typeRIFF (little-endian) data, Web/P image Size108 kB (107820 bytes) Hash90e66d3d83d08a3bd58c93de84e5acc3 7d9710d6a2f0f37b1d94857f5ea50fb27146a5e8 b7a883282c19028baadf68befc6e67347709ae7bec1409868b1623b4f7a178e8
GET /ZAPBlNb8KkRiz9008VYu7Sh4UDlQGt7dLV-WphS18vkRVJyMTmNHO3sU3bB0Qn7LZHzY=w300-rw HTTP/1.1
Host: lh5.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 25 Apr 2024 13:15:18 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.webp"
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 13:15:18 GMT
server: fife
content-length: 107820
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| adhitzads.com/663221 |  104.21.30.81 | | 990 B |
IP104.21.30.81:0
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerLet's Encrypt Subjectadhitzads.com Fingerprint98:F3:F8:D8:6C:DA:D1:91:F1:B3:FF:CB:54:F4:8B:6D:42:46:6C:2A ValiditySat, 16 Mar 2024 05:35:01 GMT - Fri, 14 Jun 2024 05:35:00 GMT
File typeJavaScript source, ASCII text, with very long lines (598) Hash2c8a396441493a8a82bcbc8c2fedf881 8ff4983ea4a2ee45cfea3dfd84dc799cc66aac7e 0594353fc476bb01afd9647158b9947ebaf0d67d7b147cae05510fd6d8883ccc
GET /663221 HTTP/1.1
Host: adhitzads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 13:15:17 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QVzZpJoIfrbCHJGnT8D2e2FORLWpznttDFf950ts0T34TwVD0jPK0yIGzdbofZAq7%2FNTWwKFebsWqDs9sya1VgdWEXbUc7pMMvXEKGLTNwLSKpok5qeRGQD7izS1swld"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87965c7b8bdfb518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs | 142.250.74.174 | 200 OK | 61 kB |
URL GET HTTP/3apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs IP142.250.74.174:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeJavaScript source, ASCII text, with very long lines (2124) Hash575e42a695a782c950bd57d1cd413c7e 8549b65a7e35bd251ac277315a063c07ea288a2e c3f62bbfcc26082d78406d7f36866969da709db71ef269081374aee5a5b2cf21
GET /_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 61025
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 22 Apr 2024 16:22:34 GMT
expires: Tue, 22 Apr 2025 16:22:34 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Apr 2024 18:15:45 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 161565
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| pagead2.googlesyndication.com/pagead/js/google_top_exp.js | 142.250.74.162 | 200 OK | 42 B |
URL GET HTTP/3pagead2.googlesyndication.com/pagead/js/google_top_exp.js IP142.250.74.162:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoogle Trust Services LLC Subject*.g.doubleclick.net Fingerprint1B:FA:17:60:E2:34:D4:FA:D1:13:08:09:6E:8F:ED:E7:A8:8C:6E:7A ValidityMon, 18 Mar 2024 19:37:13 GMT - Mon, 10 Jun 2024 19:37:12 GMT
Hash7f5f2be159837d73b72a4b37616bce44 c93d7f25b530b05c26440d3352213b683d03dcc3 ccecd185ac16ba0a538840f37701053fbb861f7fbbdd86039c7415fcd924d1f2
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 42
x-xss-protection: 0
date: Wed, 24 Apr 2024 11:16:15 GMT
expires: Wed, 08 May 2024 11:16:15 GMT
cache-control: public, max-age=1209600
age: 7144
etag: 13036835877489095579
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 2.bp.blogspot.com/-obJ0SKnhVm4/Ukb81j2TswI/AAAAAAAAAts/jSDOqJ-LmN8/s0/andro.jpg | 142.250.74.161 | 200 OK | 26 kB |
URL GET HTTP/32.bp.blogspot.com/-obJ0SKnhVm4/Ukb81j2TswI/AAAAAAAAAts/jSDOqJ-LmN8/s0/andro.jpg IP142.250.74.161:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintE8:F4:4F:CE:D1:E0:7B:C8:CD:18:45:AA:90:5A:35:8B:D5:CF:66:6B ValidityMon, 18 Mar 2024 20:01:08 GMT - Mon, 10 Jun 2024 20:01:07 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 400x225, components 3 Hash14692a50b6a505627b1d69fb70c3b47e f22a2e6d5a84d581f2591bc2ffe89586217f41a3 f753bf8022ec44e82434aa979409c1118805590d37d96f18849261d622e02719
GET /-obJ0SKnhVm4/Ukb81j2TswI/AAAAAAAAAts/jSDOqJ-LmN8/s0/andro.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v2dc"
expires: Thu, 25 Apr 2024 13:15:19 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="andro.jpg"
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 13:15:19 GMT
server: fife
content-length: 26548
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| lh3-testonly.googleusercontent.com/blogger_img_proxy/AEn0k_skPqEj-SxtUc_U9au1F9LxHt_W-0gAluAco7LvuBpy6XS8Hv-KDYH7lt0WAQqZGPK68Z1VOIWGt8-4FvEREhZjCjvUzc48T28uVfDlw7l8l4l53P38HxN_pgM-de5d1AuQnHxO-dqMRE3IgkS4XHN3FRlD2P0WzZkAIfI6K0BNEw=s0-d | 142.250.74.161 | 404 Not Found | 1.8 kB |
URL GET HTTP/3lh3-testonly.googleusercontent.com/blogger_img_proxy/AEn0k_skPqEj-SxtUc_U9au1F9LxHt_W-0gAluAco7LvuBpy6XS8Hv-KDYH7lt0WAQqZGPK68Z1VOIWGt8-4FvEREhZjCjvUzc48T28uVfDlw7l8l4l53P38HxN_pgM-de5d1AuQnHxO-dqMRE3IgkS4XHN3FRlD2P0WzZkAIfI6K0BNEw=s0-d IP142.250.74.161:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint6E:66:E1:45:85:5C:3A:EB:60:4A:8E:EF:62:B8:7C:E3:C7:1B:FA:47 ValidityMon, 18 Mar 2024 20:34:07 GMT - Mon, 10 Jun 2024 20:34:06 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1136) Hash77d2cd91c2744607dadb86f177275b0b 1169428be2eac1d412745226aecbd244a16a4ecb 893823f7d1c8181ac73e05b9701672ff82d906c70ec09015dcc00260ee57ab51
GET /blogger_img_proxy/AEn0k_skPqEj-SxtUc_U9au1F9LxHt_W-0gAluAco7LvuBpy6XS8Hv-KDYH7lt0WAQqZGPK68Z1VOIWGt8-4FvEREhZjCjvUzc48T28uVfDlw7l8l4l53P38HxN_pgM-de5d1AuQnHxO-dqMRE3IgkS4XHN3FRlD2P0WzZkAIfI6K0BNEw=s0-d HTTP/1.1
Host: lh3-testonly.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 13:15:19 GMT
server: sffe
content-length: 1762
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| lh3-testonly.googleusercontent.com/blogger_img_proxy/AEn0k_skPqEj-SxtUc_U9au1F9LxHt_W-0gAluAco7LvuBpy6XS8Hv-KDYH7lt0WAQqZGPK68Z1VOIWGt8-4FvEREhZjCjvUzc48T28uVfDlw7l8l4l53P38HxN_pgM-de5d1AuQnHxO-dqMRE3IgkS4XHN3FRlD2P0WzZkAIfI6K0BNEw=s0-d | 142.250.74.161 | 404 Not Found | 1.8 kB |
URL GET HTTP/3lh3-testonly.googleusercontent.com/blogger_img_proxy/AEn0k_skPqEj-SxtUc_U9au1F9LxHt_W-0gAluAco7LvuBpy6XS8Hv-KDYH7lt0WAQqZGPK68Z1VOIWGt8-4FvEREhZjCjvUzc48T28uVfDlw7l8l4l53P38HxN_pgM-de5d1AuQnHxO-dqMRE3IgkS4XHN3FRlD2P0WzZkAIfI6K0BNEw=s0-d IP142.250.74.161:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint6E:66:E1:45:85:5C:3A:EB:60:4A:8E:EF:62:B8:7C:E3:C7:1B:FA:47 ValidityMon, 18 Mar 2024 20:34:07 GMT - Mon, 10 Jun 2024 20:34:06 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1136) Hash77d2cd91c2744607dadb86f177275b0b 1169428be2eac1d412745226aecbd244a16a4ecb 893823f7d1c8181ac73e05b9701672ff82d906c70ec09015dcc00260ee57ab51
GET /blogger_img_proxy/AEn0k_skPqEj-SxtUc_U9au1F9LxHt_W-0gAluAco7LvuBpy6XS8Hv-KDYH7lt0WAQqZGPK68Z1VOIWGt8-4FvEREhZjCjvUzc48T28uVfDlw7l8l4l53P38HxN_pgM-de5d1AuQnHxO-dqMRE3IgkS4XHN3FRlD2P0WzZkAIfI6K0BNEw=s0-d HTTP/1.1
Host: lh3-testonly.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 13:15:19 GMT
server: sffe
content-length: 1762
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| lh3-testonly.googleusercontent.com/blogger_img_proxy/AEn0k_vKm3f_4o1ETgYzuAgFDiWqejUbL5qiBZlY3hQ91ceXV0MiCHF4av_-1fD8F5IGmvMb-INAWNbrQB4oU0HsIV7ccHklOhQSccTr=s0-d | 142.250.74.161 | 404 Not Found | 1.7 kB |
URL GET HTTP/3lh3-testonly.googleusercontent.com/blogger_img_proxy/AEn0k_vKm3f_4o1ETgYzuAgFDiWqejUbL5qiBZlY3hQ91ceXV0MiCHF4av_-1fD8F5IGmvMb-INAWNbrQB4oU0HsIV7ccHklOhQSccTr=s0-d IP142.250.74.161:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint6E:66:E1:45:85:5C:3A:EB:60:4A:8E:EF:62:B8:7C:E3:C7:1B:FA:47 ValidityMon, 18 Mar 2024 20:34:07 GMT - Mon, 10 Jun 2024 20:34:06 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1136) Hash6356ea64c4267df9d2c057617b6a76d1 0693207eca34557405b60830f9881d8c19cf92f3 7f407d55f52597c76eb37455b091701207cf82107d8975cc39923a22e9246cc3
GET /blogger_img_proxy/AEn0k_vKm3f_4o1ETgYzuAgFDiWqejUbL5qiBZlY3hQ91ceXV0MiCHF4av_-1fD8F5IGmvMb-INAWNbrQB4oU0HsIV7ccHklOhQSccTr=s0-d HTTP/1.1
Host: lh3-testonly.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 13:15:19 GMT
server: sffe
content-length: 1688
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| lh3-testonly.googleusercontent.com/blogger_img_proxy/AEn0k_sZZavhbh8A2UZEHMxoRzsI76sBe9F8UHLjqN-_rlPRIsjMaoznf_DdoSrGt0GXQG_WNXo075Fj5ZgnO1l2K62Y5fCdgR3FR-zaN4u1yMvYz4pAaKbDl9E5jD-ElQ82LA=s0-d | 142.250.74.161 | 404 Not Found | 1.7 kB |
URL GET HTTP/2lh3-testonly.googleusercontent.com/blogger_img_proxy/AEn0k_sZZavhbh8A2UZEHMxoRzsI76sBe9F8UHLjqN-_rlPRIsjMaoznf_DdoSrGt0GXQG_WNXo075Fj5ZgnO1l2K62Y5fCdgR3FR-zaN4u1yMvYz4pAaKbDl9E5jD-ElQ82LA=s0-d IP142.250.74.161:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint6E:66:E1:45:85:5C:3A:EB:60:4A:8E:EF:62:B8:7C:E3:C7:1B:FA:47 ValidityMon, 18 Mar 2024 20:34:07 GMT - Mon, 10 Jun 2024 20:34:06 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1136) Hash961b79893600555d195aee24db545ff4 945fb5ac742a0637ce0f444b818af2082f8fda22 bf44ca5250cdf612a714d7f391584d144f380ced037c87283c9aa94e0b2d88ad
GET /blogger_img_proxy/AEn0k_sZZavhbh8A2UZEHMxoRzsI76sBe9F8UHLjqN-_rlPRIsjMaoznf_DdoSrGt0GXQG_WNXo075Fj5ZgnO1l2K62Y5fCdgR3FR-zaN4u1yMvYz4pAaKbDl9E5jD-ElQ82LA=s0-d HTTP/1.1
Host: lh3-testonly.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 13:15:19 GMT
server: sffe
content-length: 1718
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.linkwithin.com/widget.js |  118.139.179.30 | 404 Not Found | 315 B |
URL GET HTTP/2www.linkwithin.com/widget.js IP118.139.179.30:443 ASN#26496 AS-26496-GO-DADDY-COM-LLC
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoDaddy.com, Inc. Subjectlinkwithin.com Fingerprint54:09:95:17:57:02:0F:06:24:43:27:BF:AC:C5:FC:CD:9B:C5:70:54 ValidityWed, 14 Feb 2024 01:23:46 GMT - Fri, 14 Feb 2025 00:21:29 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
GET /widget.js HTTP/1.1
Host: www.linkwithin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Wed, 24 Apr 2024 13:15:19 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| lh3-testonly.googleusercontent.com/blogger_img_proxy/AEn0k_tx12jI3Z7OoZlkEWoekkkag5q--32qfttX7hZawdAnKU0-o8NHlBxLE8FqyvZ__Xi1H5_pMxGDM0wWj0vT0RzOg_Fq3vzC=s0-d | 142.250.74.161 | 404 Not Found | 1.7 kB |
URL GET HTTP/2lh3-testonly.googleusercontent.com/blogger_img_proxy/AEn0k_tx12jI3Z7OoZlkEWoekkkag5q--32qfttX7hZawdAnKU0-o8NHlBxLE8FqyvZ__Xi1H5_pMxGDM0wWj0vT0RzOg_Fq3vzC=s0-d IP142.250.74.161:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint6E:66:E1:45:85:5C:3A:EB:60:4A:8E:EF:62:B8:7C:E3:C7:1B:FA:47 ValidityMon, 18 Mar 2024 20:34:07 GMT - Mon, 10 Jun 2024 20:34:06 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1136) Hash90064d46a4e1feb416c723b9c387f04e 4fe3a2022b56feee069c86d5dc7b7ad6388649c8 0f99697c49ce6c59e84eca2788c09c7628af4e7d94e3585a5df31b14d3bf2907
GET /blogger_img_proxy/AEn0k_tx12jI3Z7OoZlkEWoekkkag5q--32qfttX7hZawdAnKU0-o8NHlBxLE8FqyvZ__Xi1H5_pMxGDM0wWj0vT0RzOg_Fq3vzC=s0-d HTTP/1.1
Host: lh3-testonly.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 13:15:19 GMT
server: sffe
content-length: 1684
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/paytoneone/v23/0nksC9P7MfYHj2oFtYm2ChTtgPs.woff2 | 216.58.207.227 | 200 OK | 23 kB |
URL GET HTTP/2fonts.gstatic.com/s/paytoneone/v23/0nksC9P7MfYHj2oFtYm2ChTtgPs.woff2 IP216.58.207.227:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 23064, version 1.0 Hashc715689915b4e30f14c5facedc2ebbd3 f7178f676e98319593bc1361b2392a449e284452 168c5fc9446db472cbf9e25c0af43e551f18568b20828973eb2068b9d42401c8
GET /s/paytoneone/v23/0nksC9P7MfYHj2oFtYm2ChTtgPs.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://paidgoogleplay.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23064
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 22 Apr 2024 16:24:30 GMT
expires: Tue, 22 Apr 2025 16:24:30 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 24 Aug 2023 22:01:27 GMT
content-type: font/woff2
age: 161449
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| draft.blogger.com/dyn-css/authorization.css?targetBlogID=4303973847473991493&zx=ad831356-c6a0-4964-b2aa-0fc0ae59c8f6 | 142.250.74.105 | 200 OK | 21 B |
URL GET HTTP/3draft.blogger.com/dyn-css/authorization.css?targetBlogID=4303973847473991493&zx=ad831356-c6a0-4964-b2aa-0fc0ae59c8f6 IP142.250.74.105:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint17:41:C7:D0:1D:55:29:41:DB:6D:65:5F:4E:63:97:50:32:7D:E1:60 ValidityMon, 18 Mar 2024 19:33:57 GMT - Mon, 10 Jun 2024 19:33:56 GMT
File typevery short file (no magic) Hash68b329da9893e34099c7d8ad5cb9c940 adc83b19e793491b1c6ea0fd8b46cd9f32e592fc 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /dyn-css/authorization.css?targetBlogID=4303973847473991493&zx=ad831356-c6a0-4964-b2aa-0fc0ae59c8f6 HTTP/1.1
Host: draft.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 24 Apr 2024 13:15:19 GMT
last-modified: Wed, 24 Apr 2024 13:15:19 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| draft.blogger.com/navbar.g?targetBlogID=4303973847473991493&blogName=PaidPlayStore&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://paidgoogleplay.blogspot.com/search&blogLocale=en_GB&v=2&homepageUrl=https://paidgoogleplay.blogspot.com/&vt=-3452799811054678173&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__ | 142.250.74.105 | | 2.6 kB |
URL draft.blogger.com/navbar.g?targetBlogID=4303973847473991493&blogName=PaidPlayStore&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://paidgoogleplay.blogspot.com/search&blogLocale=en_GB&v=2&homepageUrl=https://paidgoogleplay.blogspot.com/&vt=-3452799811054678173&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__ IP142.250.74.105:0
CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint17:41:C7:D0:1D:55:29:41:DB:6D:65:5F:4E:63:97:50:32:7D:E1:60 ValidityMon, 18 Mar 2024 19:33:57 GMT - Mon, 10 Jun 2024 19:33:56 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (3170) Hashf4b6466a1f7b32bfd15ed09fa8754f43 0c5d3cf4d659c7ffafd35cef131abc29a550aa37 ca1b1f1dc90b4328383a7b162e6ec440f07174a6b078dff04570cfaf32ef6ea1
GET /navbar.g?targetBlogID=4303973847473991493&blogName=PaidPlayStore&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://paidgoogleplay.blogspot.com/search&blogLocale=en_GB&v=2&homepageUrl=https://paidgoogleplay.blogspot.com/&vt=-3452799811054678173&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__ HTTP/1.1
Host: draft.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 24 Apr 2024 13:15:19 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 2595
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| apis.google.com/js/platform:gapi.iframes.style.common.js | 142.250.74.174 | 200 OK | 21 kB |
URL GET HTTP/3apis.google.com/js/platform:gapi.iframes.style.common.js IP142.250.74.174:443
Requested byhttps://draft.blogger.com/navbar.g?targetBlogID=4303973847473991493&blogName=PaidPlayStore&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://paidgoogleplay.blogspot.com/search&blogLocale=en_GB&v=2&homepageUrl=https://paidgoogleplay.blogspot.com/&vt=-3452799811054678173&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Fpaidgoogleplay.blogspot.com&pfname=&rpctoken=39735499 CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeJavaScript source, ASCII text, with very long lines (2050) Hash7ef4bc18139bcdbdd14c5b58b0955a67 afe44fd9a877f81a3c36f571c0fc934324c6cbd7 192bc707852c5986f930528442d88a79e5bcf4513aacc2b722a3c5e964501838
GET /js/platform:gapi.iframes.style.common.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://draft.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 21313
date: Wed, 24 Apr 2024 13:15:19 GMT
expires: Wed, 24 Apr 2024 13:15:19 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "1df5d68c1707a051"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| resources.blogblog.com/img/navbar/arrows-light.png | 142.250.74.105 | 200 OK | 117 B |
URL GET HTTP/3resources.blogblog.com/img/navbar/arrows-light.png IP142.250.74.105:443
Requested byhttps://draft.blogger.com/navbar.g?targetBlogID=4303973847473991493&blogName=PaidPlayStore&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://paidgoogleplay.blogspot.com/search&blogLocale=en_GB&v=2&homepageUrl=https://paidgoogleplay.blogspot.com/&vt=-3452799811054678173&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Fpaidgoogleplay.blogspot.com&pfname=&rpctoken=39735499 CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint17:41:C7:D0:1D:55:29:41:DB:6D:65:5F:4E:63:97:50:32:7D:E1:60 ValidityMon, 18 Mar 2024 19:33:57 GMT - Mon, 10 Jun 2024 19:33:56 GMT
File typePNG image data, 19 x 4, 8-bit/color RGBA, non-interlaced Hash25c2b0cfe0ad4dcda4a0e3727d091d80 b9d16f4311e64648b7970baf00cb9841e3c3351b bb6685107846b4c25384202730b84ec168fecee197e5f9e3fe8ffdd5bed6749d
GET /img/navbar/arrows-light.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://draft.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 117
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 22 Apr 2024 17:57:46 GMT
expires: Mon, 29 Apr 2024 17:57:46 GMT
cache-control: public, max-age=604800
last-modified: Mon, 22 Apr 2024 05:50:59 GMT
content-type: image/png
age: 155853
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| resources.blogblog.com/img/navbar/icons_peach.png | 142.250.74.105 | 200 OK | 907 B |
URL GET HTTP/3resources.blogblog.com/img/navbar/icons_peach.png IP142.250.74.105:443
Requested byhttps://draft.blogger.com/navbar.g?targetBlogID=4303973847473991493&blogName=PaidPlayStore&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://paidgoogleplay.blogspot.com/search&blogLocale=en_GB&v=2&homepageUrl=https://paidgoogleplay.blogspot.com/&vt=-3452799811054678173&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Fpaidgoogleplay.blogspot.com&pfname=&rpctoken=39735499 CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint17:41:C7:D0:1D:55:29:41:DB:6D:65:5F:4E:63:97:50:32:7D:E1:60 ValidityMon, 18 Mar 2024 19:33:57 GMT - Mon, 10 Jun 2024 19:33:56 GMT
File typePNG image data, 46 x 20, 8-bit colormap, non-interlaced Hash3718077fe5eb689b0ded987a52881d06 f0ce5596ef43f850c400cbbc0556697fb3e7b232 72be8098b87d7e2d7fbc6eb0a3eaebcf1013186d7733cd340549f9e1701a4865
GET /img/navbar/icons_peach.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://draft.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 907
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 22:09:44 GMT
expires: Tue, 30 Apr 2024 22:09:44 GMT
cache-control: public, max-age=604800
last-modified: Tue, 23 Apr 2024 03:56:12 GMT
content-type: image/png
age: 54335
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| paidgoogleplay.blogspot.com/favicon.ico | 216.58.207.193 | 200 OK | 454 B |
URL GET HTTP/3paidgoogleplay.blogspot.com/favicon.ico IP216.58.207.193:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintE8:F4:4F:CE:D1:E0:7B:C8:CD:18:45:AA:90:5A:35:8B:D5:CF:66:6B ValidityMon, 18 Mar 2024 20:01:08 GMT - Mon, 10 Jun 2024 20:01:07 GMT
File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel Hashf3019e4ac40d4817bfcec91448ca216d ec5b39e814b9f8901508c0406ed1eddb319e2e33 333dd15ff04913fc73eb7bdd63ebdaacaf648b8f38f381e65f626cec80e9e323
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: paidgoogleplay.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/search/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/x-icon; charset=UTF-8
expires: Wed, 24 Apr 2024 13:15:19 GMT
date: Wed, 24 Apr 2024 13:15:19 GMT
cache-control: private, max-age=86400
last-modified: Thu, 04 Apr 2024 07:44:48 GMT
etag: W/"9c7d9879c66b74d0e83bd46b3e565ecd7d6f9093c32bca1ab0b6332afa1d8e15"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 454
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs | 142.250.74.174 | 200 OK | 46 kB |
URL GET HTTP/3apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs IP142.250.74.174:443
Requested byhttps://draft.blogger.com/navbar.g?targetBlogID=4303973847473991493&blogName=PaidPlayStore&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://paidgoogleplay.blogspot.com/search&blogLocale=en_GB&v=2&homepageUrl=https://paidgoogleplay.blogspot.com/&vt=-3452799811054678173&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Fpaidgoogleplay.blogspot.com&pfname=&rpctoken=39735499 CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeJavaScript source, ASCII text, with very long lines (2124) Hash4d1bd282f5a3799d4e2880cf69af9269 2ede61be138a7beaa7d6214aa278479dce258adb 5e075152b65966c0c6fcd3ee7d9f62550981a7bb4ed47611f4286c16e0d79693
GET /_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://draft.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 45677
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 22 Apr 2024 16:22:36 GMT
expires: Tue, 22 Apr 2025 16:22:36 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Apr 2024 18:15:45 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 161563
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| statinside.com/api/add-hit | 172.67.146.166 | 200 OK | 145 B |
URL POST HTTP/3statinside.com/api/add-hit IP172.67.146.166:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerLet's Encrypt Subjectstatinside.com Fingerprint56:97:D9:99:B2:59:A7:33:5B:92:79:F7:D2:19:55:43:2E:ED:F1:E9 ValidityTue, 26 Mar 2024 05:02:42 GMT - Mon, 24 Jun 2024 05:02:41 GMT
File typeASCII text, with no line terminators Hashbd9574efcb9399450f8abf5b0cbbfc84 a3da2f4dd669db9af59c6ca2c9740680320025a6 3295b1e542210108c8215de4dde85046e2be859f601e7821cd7f18baefaf5eff
POST /api/add-hit HTTP/1.1
Host: statinside.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 286
Origin: https://paidgoogleplay.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:15:19 GMT
content-type: application/json; charset=UTF-8
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ab0FT8I9o9Bof%2FRYnlF4NRB1ivTAiCQ7cgqCcwHujLHT1EPGAntmFhiN76whMkSoY0dN75ZU8iXufdM2nF0ny7%2F0mtJj3SVIIbI1tYYe%2FDqSQz3lIEqza6E4dkwEcgXrQA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87965c887fd9569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| statinside.com/counter.js | 172.67.146.166 | 200 OK | 12 kB |
URL GET HTTP/2statinside.com/counter.js IP172.67.146.166:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerLet's Encrypt Subjectstatinside.com Fingerprint56:97:D9:99:B2:59:A7:33:5B:92:79:F7:D2:19:55:43:2E:ED:F1:E9 ValidityTue, 26 Mar 2024 05:02:42 GMT - Mon, 24 Jun 2024 05:02:41 GMT
File typeJavaScript source, ASCII text, with very long lines (12110) Hash56e61fe57edb0915c80a3fece5023127 4aa2bade6e617d29a478c81b8e2118feca7f933f 209d0649f3ce6499b0df8fe49650042b4e5cecdd7df313c1bb73460e5d330638
GET /counter.js HTTP/1.1
Host: statinside.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 13:15:19 GMT
content-type: application/javascript
last-modified: Tue, 27 Feb 2024 08:02:54 GMT
etag: W/"65dd972e-2f4f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3837
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n3KUsVr4RwF9oSyIrdLdd0DwH%2BrPJVZTBZT56Kz9a0qy9%2F1exM0JKJjVnOsyWfiVDtikHZIpZGLZKEgdzSijsYpOqiGf4qLLz0ZtFIEOYjPtm4RxNs9ns8HoDrah%2BUeQRQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87965c87fb1fb4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| draft.blogger.com/navbar.g?targetBlogID=4303973847473991493&blogName=PaidPlayStore&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://paidgoogleplay.blogspot.com/search&blogLocale=en_GB&v=2&homepageUrl=https://paidgoogleplay.blogspot.com/&vt=-3452799811054678173&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__ | 142.250.74.105 | 200 OK | 6.7 kB |
URL GET HTTP/3draft.blogger.com/navbar.g?targetBlogID=4303973847473991493&blogName=PaidPlayStore&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://paidgoogleplay.blogspot.com/search&blogLocale=en_GB&v=2&homepageUrl=https://paidgoogleplay.blogspot.com/&vt=-3452799811054678173&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__ IP142.250.74.105:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint17:41:C7:D0:1D:55:29:41:DB:6D:65:5F:4E:63:97:50:32:7D:E1:60 ValidityMon, 18 Mar 2024 19:33:57 GMT - Mon, 10 Jun 2024 19:33:56 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (6896), with no line terminators Hashebda9dea6f7eab4454f5d5512d97b766 68c825d4114200e9e61eb86d1482d259322f9072 5e3872c137d3ec3a320a4c15d31b801f1bf6a0e1d48fea44033b388a27bfad26
GET /navbar.g?targetBlogID=4303973847473991493&blogName=PaidPlayStore&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://paidgoogleplay.blogspot.com/search&blogLocale=en_GB&v=2&homepageUrl=https://paidgoogleplay.blogspot.com/&vt=-3452799811054678173&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__ HTTP/1.1
Host: draft.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 24 Apr 2024 13:15:19 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 2595
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| api.adhitz.com/adjs.php?zoneid=&block=1&c=1&l=https%3A//paidgoogleplay.blogspot.com/search/&r=&s=&p=3917133889&cb=97623707805&charset=UTF-8&loc=https%3A//paidgoogleplay.blogspot.com/search/ | 172.67.132.45 | 200 OK | 52 B |
URL GET HTTP/2api.adhitz.com/adjs.php?zoneid=&block=1&c=1&l=https%3A//paidgoogleplay.blogspot.com/search/&r=&s=&p=3917133889&cb=97623707805&charset=UTF-8&loc=https%3A//paidgoogleplay.blogspot.com/search/ IP172.67.132.45:443
Requested byhttps://paidgoogleplay.blogspot.com/search/ CertificateIssuerGoogle Trust Services LLC Subjectadhitz.com FingerprintCA:01:71:03:30:47:14:DA:C5:8A:BF:30:D5:43:0C:C6:D4:DB:49:C4 ValidityThu, 07 Mar 2024 19:06:50 GMT - Wed, 05 Jun 2024 19:06:49 GMT
File typeASCII text, with no line terminators Hash0db185072e94984dcf030ff32d699772 640a14c01548599f11ac8e0f4dd7747dc1ae8506 36e581d3fe1e0612277f1e9d25ec82b7a3c3a518d563517ff38713fa5e1b7957
GET /adjs.php?zoneid=&block=1&c=1&l=https%3A//paidgoogleplay.blogspot.com/search/&r=&s=&p=3917133889&cb=97623707805&charset=UTF-8&loc=https%3A//paidgoogleplay.blogspot.com/search/ HTTP/1.1
Host: api.adhitz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paidgoogleplay.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 13:15:19 GMT
content-type: text/javascript; charset=UTF-8
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate
expires: 0
access-control-allow-origin: *
p3p: CP="CUR ADM OUR NOR STA NID"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r0gFOa4Ie2vTFATxhWg6nA%2BDzkUxWEt9MzTQ3Ad3kQKo496XjaIT77exWyUXyNVRE%2Bf0spyDWL353qX%2Bd%2B%2FQYXuT65pgBY5N1JlLIUgqtpfFpogZMwHNVC7lCWvgl7N47g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87965c85db320b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
0.0.0.0