Overview

URLerfundien.blogspot.com/2009/11/why-you-should-date-nearsighted-girls.html
IP 142.250.74.161 (United States)
ASN#15169 GOOGLE
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-11-26 21:11:31 UTC
StatusLoading report..
IDS alerts0
Blocklist alert2
urlquery alerts No alerts detected
Tags None

Domain Summary (20)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
ocsp.digicert.com (2) 86 2012-05-21 07:02:23 UTC 2020-05-02 20:58:10 UTC 93.184.220.29
blogcounter.com (1) 0 2012-09-29 22:56:39 UTC 2022-07-22 10:25:50 UTC 72.52.179.174 Unknown ranking
ww12.blogcounter.com (1) 0 No data No data 13.248.148.254 Unknown ranking
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-21 23:36:00 UTC 2020-02-19 04:43:25 UTC 34.120.237.76
www.google.com (1) 7 2016-03-22 03:56:07 UTC 2022-11-26 09:58:02 UTC 142.250.74.164
fonts.gstatic.com (2) 0 2014-09-09 00:40:21 UTC 2022-11-26 10:10:14 UTC 216.58.207.195 Domain (gstatic.com) ranked at: 540
erfundien.blogspot.com (3) 0 2013-02-09 15:34:46 UTC 2015-07-19 02:47:16 UTC 142.250.74.161 Unknown ranking
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-11-26 05:33:16 UTC 34.117.237.239
ocsp.pki.goog (13) 175 2018-07-01 06:43:07 UTC 2020-05-02 20:58:16 UTC 142.250.74.3
www.blogger.com (4) 8975 2012-05-22 07:35:03 UTC 2020-05-05 09:48:25 UTC 142.250.74.105
resources.blogblog.com (1) 13274 2018-07-01 19:33:30 UTC 2020-04-09 16:15:03 UTC 142.250.74.105
apis.google.com (2) 105 2013-05-30 23:17:44 UTC 2020-05-14 13:59:47 UTC 142.250.74.174
www.google-analytics.com (2) 40 2012-10-03 01:04:21 UTC 2022-11-26 11:34:11 UTC 142.250.74.174
r3.o.lencr.org (6) 344 No data No data 23.36.76.226
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-11-26 05:33:20 UTC 34.102.187.140
content-signature-2.cdn.mozilla.net (1) 1152 No data No data 34.160.144.191
play.google.com (2) 34 2018-05-12 00:28:37 UTC 2022-11-26 06:29:51 UTC 142.250.74.110
www.blogblog.com (1) 28878 2012-05-22 07:35:04 UTC 2020-05-06 23:24:00 UTC 142.250.74.105
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2020-05-03 10:09:39 UTC 52.35.167.249
www.gstatic.com (1) 0 2016-07-26 09:37:06 UTC 2022-11-26 09:57:59 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-11-26 2 erfundien.blogspot.com/2009/11/why-you-should-date-nearsighted-girls.html Phishing
2022-11-26 2 erfundien.blogspot.com/js/cookienotice.js Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 142.250.74.161
Date UQ / IDS / BL URL IP
2023-02-03 04:26:07 +0000 0 - 0 - 1 almayasabdam.blogspot.com/2017/12/whats-chris (...) 142.250.74.161
2023-02-03 04:25:08 +0000 0 - 0 - 2 deamoresyrelaciones.blogspot.com/2011/02/mi-c (...) 142.250.74.161
2023-02-02 23:04:20 +0000 0 - 1 - 0 enricroig2015.blogspot.com.es/2014/06/antoni- (...) 142.250.74.161
2023-02-01 14:02:23 +0000 0 - 0 - 0 statements-docsbankstatement-org-za.translate (...) 142.250.74.161
2023-01-21 16:46:31 +0000 0 - 0 - 1 wytike.page.link/pQhBiPQ2o7GVemxA8 142.250.74.161


Last 5 reports on ASN: GOOGLE
Date UQ / IDS / BL URL IP
2023-02-07 16:45:58 +0000 0 - 0 - 1 emp-game.com/dhlaccount/dhl/Confirmation.html 34.102.136.180
2023-02-07 16:40:23 +0000 0 - 2 - 0 r1---sn-25ge7nzr.gvt1.com/edgedl/release2/upd (...) 173.194.3.38
2023-02-07 16:39:57 +0000 0 - 0 - 1 mullychildrensfamily.com/adobe/adobes/1d3c9cf (...) 34.98.99.30
2023-02-07 16:36:56 +0000 0 - 0 - 3 www.senzaregole.com/auto/3bd98e49bb6770060baf (...) 34.98.109.147
2023-02-07 16:31:02 +0000 0 - 0 - 0 lh6.googleusercontent.com/Lz4nky0hj9CZlzIY50- (...) 142.250.74.97


Last 5 reports on domain: erfundien.blogspot.com
Date UQ / IDS / BL URL IP
2022-12-12 23:11:46 +0000 0 - 0 - 2 erfundien.blogspot.com/search/label/Bleach 172.217.21.161
2022-12-10 05:36:09 +0000 0 - 0 - 2 erfundien.blogspot.com/search/label/Loose%20Change 142.250.74.161
2022-11-26 21:11:31 +0000 0 - 0 - 2 erfundien.blogspot.com/2009/11/why-you-should (...) 142.250.74.161
2022-11-25 10:58:33 +0000 0 - 0 - 2 erfundien.blogspot.com/search/label/Counterstrike 142.250.74.161
2022-11-25 06:54:19 +0000 0 - 0 - 2 erfundien.blogspot.com/2010_05_01_archive.html?m=1 142.250.74.161


No other reports with similar screenshot

JavaScript

Executed Scripts (54)

Executed Evals (5)
#1 JavaScript::Eval (size: 15563) - SHA256: 3f4f8ddee61218c2f999b0831a04a6a0776ae6456405bda675c1a95ce8f8afa2
/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */
(function() {
    var X = function(E) {
            return E
        },
        n = function(E, f) {
            if (f = (E = null, d.trustedTypes), !f || !f.createPolicy) return E;
            try {
                E = f.createPolicy("bg", {
                    createHTML: X,
                    createScript: X,
                    createScriptURL: X
                })
            } catch (N) {
                d.console && d.console.error(N.message)
            }
            return E
        },
        d = this || self;
    (0, eval)(function(E, f) {
        return (f = n()) && 1 === E.eval(f.createScript("1")) ? function(N) {
            return f.createScript(N)
        } : function(N) {
            return "" + N
        }
    }(d)(Array(7824 * Math.random() | 0).join("\n") + '(function(){var Z,fD=function(E,f,X,d){return t(f,(k(478,f,(((d=t(f,478),f).D&&d<f.L?(k(478,f,f.L),oh(X,f)):k(478,f,X),E9)(E,f),d)),201))},ND=function(E,f){return O[f](O.prototype,{propertyIsEnumerable:E,pop:E,parent:E,stack:E,call:E,length:E,replace:E,splice:E,document:E,console:E,prototype:E,floor:E})},k=function(E,f,X){if(478==E||141==E)f.J[E]?f.J[E].concat(X):f.J[E]=XC(X,f);else{if(f.v&&2!=E)return;209==E||436==E||360==E||125==E||136==E?f.J[E]||(f.J[E]=dW(f,110,X,E)):f.J[E]=dW(f,9,X,E)}2==E&&(f.I=p(f,false,32),f.H=void 0)},Zj=function(E,f,X,d,q){if(q=E[0],q==g)f.g=25,f.j(E);else if(q==v){X=E[1];try{d=f.C||f.j(E)}catch(N){T(N,f),d=f.C}X(d)}else if(q==nD)f.j(E);else if(q==u)f.j(E);else if(q==cu){try{for(d=0;d<f.A.length;d++)try{X=f.A[d],X[0][X[1]](X[2])}catch(N){}}catch(N){}(0,E[1])((f.A=[],function(N,n){f.h(N,true,n)}),function(N){(z((N=!f.s.length,[Vc]),f),N)&&x(f,false,true)})}else{if(q==e)return d=E[2],k(29,f,E[6]),k(201,f,d),f.j(E);q==Vc?(f.D=[],f.S=[],f.J=null):q==qD&&"loading"===D.document.readyState&&(f.u=function(N,n){function c(){n||(n=true,N())}D.document.addEventListener("DOMContentLoaded",(n=false,c),I),D.addEventListener("load",c,I)})}},P=function(E,f,X){k(E,X,f),f[qD]=2796},b=function(E,f,X,d,q,N,n,c,V){if(((N=(q=(d||f.V++,0)<f.Z&&f.F&&f.C_&&1>=f.G&&!f.B&&!f.u&&(!d||1<f.K-X)&&0==document.hidden,n=(V=4==f.V)||q?f.R():f.P,c=n-f.P,c>>14),f.I&&(f.I^=N*(c<<2)),f.T=N||f.T,f).i+=N,V)||q)f.V=0,f.P=n;if(!q||n-f.N<f.Z-(E?255:d?5:2))return false;return!(f.u=((k(478,f,(E=t(f,(f.K=X,d?141:478)),f.L)),f).s.push([nD,E,d?X+1:X]),A),0)},k8=function(E,f,X,d){function q(){}return{invoke:(d=(X=void 0,tb(E,function(N){q&&(f&&A(f),X=N,q(),q=void 0)},!!f))[0],function(N,n,c,V){function H(){X(function(C){A(function(){N(C)})},c)}if(!n)return n=d(c),N&&N(n),n;X?H():(V=q,q=function(){V(),A(H)})})}},CD=function(E,f,X){if((f=typeof E,"object")==f)if(E){if(E instanceof Array)return"array";if(E instanceof Object)return f;if((X=Object.prototype.toString.call(E),"[object Window]")==X)return"object";if("[object Array]"==X||"number"==typeof E.length&&"undefined"!=typeof E.splice&&"undefined"!=typeof E.propertyIsEnumerable&&!E.propertyIsEnumerable("splice"))return"array";if("[object Function]"==X||"undefined"!=typeof E.call&&"undefined"!=typeof E.propertyIsEnumerable&&!E.propertyIsEnumerable("call"))return"function"}else return"null";else if("function"==f&&"undefined"==typeof E.call)return"object";return f},W=function(E,f){if(E.B)return $8(E,E.U);return f=p(E,true,8),f&128&&(f^=128,E=p(E,true,2),f=(f<<2)+(E|0)),f},T1=function(E,f,X,d,q){for(d=((E.kJ=ND((E.e5=MD,E.cM=(E.Rc=E[v],O9),{get:function(){return this.concat()}}),E.O),E).L_=O[E.O](E.kJ,{value:{value:{}}}),q=[],0);277>d;d++)q[d]=String.fromCharCode(d);x(E,!(z((z(((P(108,function(N){iK(N,1)},(P(40,(k(50,E,(P(95,function(N,n,c,V,H){for(n=(V=W(N),c=rW(N),0),H=[];n<c;n++)H.push(S(N));k(V,N,H)},(E.X0=(P(396,function(N,n,c,V){(n=W((V=W(N),N)),c=W(N),N).T==N&&(n=t(N,n),c=t(N,c),t(N,V)[n]=c,2==V&&(N.H=void 0,2==n&&(N.I=p(N,false,32),N.H=void 0)))},(P(5,(k(436,(P(139,(P(481,(P(287,function(N,n,c,V){(n=t(N,(c=(V=W((n=W((c=W(N),N)),N)),t(N,c)),n)),k)(V,N,+(c==n))},(P(246,function(N,n){(N=(n=W(N),t)(N.T,n),N)[0].removeEventListener(N[1],N[2],I)},(P(159,function(N,n,c,V,H,C){if(!b(true,N,n,true)){if("object"==CD((N=(c=t((V=(n=t((n=(V=(C=(c=W(N),W(N)),W(N)),W)(N),N),n),t)(N,V),N),c),t)(N,C),c))){for(H in C=[],c)C.push(H);c=C}for(V=(C=(H=c.length,0),0)<V?V:1;C<H;C+=V)N(c.slice(C,(C|0)+(V|0)),n)}},(k(201,(P((P(507,function(N,n,c,V){(c=t((n=(n=(c=W(N),W(N)),V=W(N),t)(N,n),N),c),k)(V,N,c[n])},(P(31,function(N){pD(N,4)},(P(285,function(N,n,c){(n=(n=t(N,(n=W(N),c=W(N),n)),CD)(n),k)(c,N,n)},(k(341,E,(P(168,function(N,n,c){b(false,N,n,true)||(n=W(N),c=W(N),k(c,N,function(V){return eval(V)}(Qc(t(N.T,n)))))},(E.D2=(P(397,function(N,n,c){c=W((n=W(N),N)),k(c,N,""+t(N,n))},(P(137,function(N,n,c,V){(V=t(N,(n=t(N,(c=(V=W(N),W(N)),c)),V)),k)(c,N,n+V)},(P(86,(P(217,function(N,n,c,V,H){k((c=(H=(n=t((n=W((c=(V=W(N),H=W(N),W)(N),N)),N),n),t(N,H)),t(N,c)),V),N,vu(c,N,n,H))},(P((P(219,function(N,n){(n=t(N,W(N)),oh)(n,N.T)},(k(13,E,(E.f_=(P((k(209,E,[(P(470,(k(125,E,(P(370,(P(257,(k(443,(k(141,(k(478,E,(E.H=void 0,(E.D=[],(((E.A=(E.Z=(E.o=0,0),[]),E.C=void 0,E).F=!(E.J=[],E.g=25,E.B=void 0,E.U=void 0,E.N=0,E.P=0,1),E.s=[],((E.l=void 0,E).u=(E.v=false,null),E).i=1,E.L=0,E.V=void 0,E).BM=(E.S=[],d=window.performance||{},function(N){this.T=N}),E.K=(E.C_=false,8001),E).I=(E.G=0,E.T=E,void 0),(E.J5=[],E).yZ=d.timeOrigin||(d.timing||{}).navigationStart||0,E).UG=0,0)),E),0),E),D),function(N,n,c,V){(V=(n=W(N),c=S(N),W(N)),k)(V,N,t(N,n)>>>c)}),E),P(386,function(N,n,c,V){k((c=t(N,(V=(n=(c=(V=W(N),W)(N),W(N)),t)(N,V),c)),n),N,V in c|0)},E),function(N,n,c,V){k((V=W(N),c=W(N),n=W(N),n),N,t(N,V)||t(N,c))}),E),[])),function(N,n,c,V){!b(false,N,n,true)&&(n=Rh(N),V=n.TJ,c=n.Y,N.T==N||c==N.BM&&V==N)&&(k(n.n_,N,c.apply(V,n.X)),N.P=N.R())}),E),k(459,E,937),160),0,0]),163),function(N,n,c,V){if(c=N.J5.pop()){for(n=S(N);0<n;n--)V=W(N),c[V]=N.J[V];c[13]=(c[125]=N.J[125],N.J)[13],N.J=c}else k(478,N,N.L)},E),0),2048)),E)),128),function(N){gW(3,N)},E),E)),function(N,n,c){(c=t(N,(n=W(N),c=W(N),n=0!=t(N,n),c)),n)&&k(478,N,c)}),E),E)),E)),0),E)),P(9,function(N,n,c,V,H,C,M,r,Q,U,a,R){function Y(L,G){for(;a<L;)c|=S(N)<<a,a+=8;return c>>=(G=c&(a-=L,1<<L)-1,L),G}for(n=(U=R=(C=(Q=(a=c=(r=W(N),0),(Y(3)|0)+1),Y(5)),0),[]);U<C;U++)V=Y(1),n.push(V),R+=V?0:1;for(U=(M=(R=((R|0)-1).toString(2).length,[]),0);U<C;U++)n[U]||(M[U]=Y(R));for(R=0;R<C;R++)n[R]&&(M[R]=W(N));for(H=[];Q--;)H.push(t(N,W(N)));P(r,function(L,G,Hu,m,K){for(Hu=(K=0,[]),G=[];K<C;K++){if(m=M[K],!n[K]){for(;m>=G.length;)G.push(W(L));m=G[m]}Hu.push(m)}L.B=XC(H.slice(),L),L.U=XC(Hu,L)},N)},E),0)),E)),E)),E)),k(104,E,E),169),function(){},E),E),{}),E)),E)),k(136,E,[0,0,0]),E)),P(127,function(N,n,c,V,H,C,M){for(V=(n=(M=t(N,(C=(c=W(N),rW(N)),H="",218)),M).length,0);C--;)V=((V|0)+(rW(N)|0))%n,H+=q[M[V]];k(c,N,H)},E),function(N){iK(N,4)}),E),function(N,n,c,V,H,C){b(false,N,n,true)||(c=Rh(N.T),H=c.X,V=c.TJ,C=H.length,n=c.n_,c=c.Y,H=0==C?new V[c]:1==C?new V[c](H[0]):2==C?new V[c](H[0],H[1]):3==C?new V[c](H[0],H[1],H[2]):4==C?new V[c](H[0],H[1],H[2],H[3]):2(),k(n,N,H))}),E),E),l(4)),function(N){gW(4,N)}),E),E)),k(360,E,[]),0),E)),0)),function(N,n,c,V,H){0!==(n=(H=t(N,(c=t(N,(c=W((H=W((n=W((V=W(N),N)),N)),N)),V=t(N.T,V),c)),H)),t(N,n)),V)&&(H=vu(c,N,1,H,V,n),V.addEventListener(n,H,I),k(341,N,[V,n,H]))}),E),E)),z)([qD],E),[u,X]),E),[cu,f]),E),0),true)},U9=function(E,f,X){return f.h(function(d){X=d},false,E),X},LD=function(E,f){return f[E]<<24|f[(E|0)+1]<<16|f[(E|0)+2]<<8|f[(E|0)+3]},z1=function(E,f){if(f=null,E=D.trustedTypes,!E||!E.createPolicy)return f;try{f=E.createPolicy("bg",{createHTML:uK,createScript:uK,createScriptURL:uK})}catch(X){D.console&&D.console.error(X.message)}return f},z=function(E,f){f.s.splice(0,0,E)},t=function(E,f){if(void 0===(E=E.J[f],E))throw[J,30,f];if(E.value)return E.create();return(E.create(2*f*f+33*f+40),E).prototype},S=function(E){return E.B?$8(E,E.U):p(E,true,8)},oh=function(E,f){k(478,f,(f.J5.push(f.J.slice()),f.J[478]=void 0,E))},pD=function(E,f,X,d){for(X=W(E),d=0;0<f;f--)d=d<<8|S(E);k(X,E,d)},gW=function(E,f,X,d,q){F((((d=(q=W((X=E&3,E&=4,f)),W(f)),q=t(f,q),E)&&(q=ah(""+q)),X)&&F(w(q.length,2),f,d),q),f,d)},Rh=function(E,f,X,d,q,N){for(X=(((N=E[x8]||{},q=W(E),N).n_=W(E),N).X=[],E.T==E)?(S(E)|0)-1:1,f=W(E),d=0;d<X;d++)N.X.push(W(E));for(N.TJ=t(E,f),N.Y=t(E,q);X--;)N.X[X]=t(E,N.X[X]);return N},eB=function(E,f,X){if(3==E.length){for(X=0;3>X;X++)f[X]+=E[X];for(X=(E=[13,8,13,12,16,5,3,10,15],0);9>X;X++)f[3](f,X%3,E[X])}},G1=function(E,f){(f.push(E[0]<<24|E[1]<<16|E[2]<<8|E[3]),f).push(E[4]<<24|E[5]<<16|E[6]<<8|E[7]),f.push(E[8]<<24|E[9]<<16|E[10]<<8|E[11])},F=function(E,f,X,d,q,N){if(f.T==f)for(N=t(f,X),436==X?(X=function(n,c,V,H){if((c=(H=N.length,(H|0)-4>>3),N).w9!=c){c=(N.w9=c,V=[0,0,q[1],q[2]],(c<<3)-4);try{N.Mv=Dj(LD((c|0)+4,N),LD(c,N),V)}catch(C){throw C;}}N.push(N.Mv[H&7]^n)},q=t(f,136)):X=function(n){N.push(n)},d&&X(d&255),f=E.length,d=0;d<f;d++)X(E[d])},XC=function(E,f,X){return X=O[f.O](f.L_),X[f.O]=function(){return E},X.concat=function(d){E=d},X},dW=function(E,f,X,d,q,N,n,c){return(N=O[E.O]((X=[-11,33,-34,-(c=(q=f&7,Y8),13),56,-49,X,14,-25,-39],E.kJ)),N[E.O]=function(V){n=(q+=6+7*f,V),q&=7},N).concat=function(V){return((V=(V=(V=d%16+1,-120*d)*d*n+(c()|0)*V-1980*d*n+X[q+27&7]*d*V+q-2400*n-V*n+60*n*n+2*d*d*V,X)[V],n=void 0,X)[(q+53&7)+(f&2)]=V,X)[q+(f&2)]=33,V},N},uK=function(E){return E},I={passive:true,capture:true},l=function(E,f){for(f=[];E--;)f.push(255*Math.random()|0);return f},y=function(E,f,X){X=this;try{T1(this,f,E)}catch(d){T(d,this),f(function(q){q(X.C)})}},rW=function(E,f){return(f=S(E),f)&128&&(f=f&127|S(E)<<7),f},B,iK=function(E,f,X,d){F(w((X=(d=W(E),W(E)),t(E,d)),f),E,X)},Ih=function(E,f,X,d){for(;f.s.length;){X=(f.u=null,f.s).pop();try{d=Zj(X,f)}catch(q){T(q,f)}if(E&&f.u){(E=f.u,E)(function(){x(f,true,true)});break}}return d},x=function(E,f,X,d,q,N){if(E.s.length){E.C_=(E.F&&0(),E.F=true,X);try{N=E.R(),E.N=N,E.V=0,E.P=N,q=Ih(X,E),d=E.R()-E.N,E.o+=d,d<(f?0:10)||0>=E.g--||(d=Math.floor(d),E.S.push(254>=d?d:254))}finally{E.F=false}return q}},w=function(E,f,X,d){for(X=(f|0)-1,d=[];0<=X;X--)d[(f|0)-1-(X|0)]=E>>8*X&255;return d},ah=function(E,f,X,d,q){for(d=f=(X=(E=E.replace(/\\r\\n/g,"\\n"),[]),0);d<E.length;d++)q=E.charCodeAt(d),128>q?X[f++]=q:(2048>q?X[f++]=q>>6|192:(55296==(q&64512)&&d+1<E.length&&56320==(E.charCodeAt(d+1)&64512)?(q=65536+((q&1023)<<10)+(E.charCodeAt(++d)&1023),X[f++]=q>>18|240,X[f++]=q>>12&63|128):X[f++]=q>>12|224,X[f++]=q>>6&63|128),X[f++]=q&63|128);return X},tb=function(E,f,X,d){return(d=Z[E.substring(0,3)+"_"])?d(E.substring(3),f,X):Pu(f,E)},Ab=function(E,f,X,d){try{d=E[((f|0)+2)%3],E[f]=(E[f]|0)-(E[((f|0)+1)%3]|0)-(d|0)^(1==f?d<<X:d>>>X)}catch(q){throw q;}},D=this||self,$8=function(E,f){return(f=f.create().shift(),E.B.create().length||E.U.create().length)||(E.B=void 0,E.U=void 0),f},h=function(E,f,X,d,q,N){if(!f.v){if((E=(X=((q=t(f,(N=void 0,E&&E[0]===J&&(N=E[2],X=E[1],E=void 0),125)),0)==q.length&&(d=t(f,141)>>3,q.push(X,d>>8&255,d&255),void 0!=N&&q.push(N&255)),""),E&&(E.message&&(X+=E.message),E.stack&&(X+=":"+E.stack)),t)(f,13),3)<E){f.T=(X=(E-=(X=X.slice(0,(E|0)-3),(X.length|0)+3),ah)(X),N=f.T,f);try{F(w(X.length,2).concat(X),f,436,9)}finally{f.T=N}}k(13,f,E)}},E9=function(E,f,X,d,q,N){if(!f.C){f.G++;try{for(d=(N=(X=0,void 0),f.L);--E;)try{if(q=void 0,f.B)N=$8(f,f.B);else{if((X=t(f,478),X)>=d)break;N=t(f,(q=(k(141,f,X),W(f)),q))}b(false,f,(N&&N[Vc]&2048?N(f,E):h([J,21,q],f,0),E),false)}catch(n){t(f,459)?h(n,f,22):k(459,f,n)}if(!E){if(f.OG){E9((f.G--,675748417995),f);return}h([J,33],f,0)}}catch(n){try{h(n,f,22)}catch(c){T(c,f)}}f.G--}},vu=function(E,f,X,d,q,N){function n(){if(f.T==f){if(f.J){var c=[e,d,E,void 0,q,N,arguments];if(2==X)var V=x(f,false,(z(c,f),false));else if(1==X){var H=!f.s.length;(z(c,f),H)&&x(f,false,false)}else V=Zj(c,f);return V}q&&N&&q.removeEventListener(N,n,I)}}return n},T=function(E,f){f.C=((f.C?f.C+"~":"E:")+E.message+":"+E.stack).slice(0,2048)},p=function(E,f,X,d,q,N,n,c,V,H,C,M,r,Q){if(Q=t(E,478),Q>=E.L)throw[J,31];for(c=(M=(C=X,Q),q=0,E.Rc).length;0<C;)n=M>>3,H=M%8,V=8-(H|0),V=V<C?V:C,N=E.D[n],f&&(d=E,d.H!=M>>6&&(d.H=M>>6,r=t(d,2),d.l=Dj(d.H,d.I,[0,0,r[1],r[2]])),N^=E.l[n&c]),q|=(N>>8-(H|0)-(V|0)&(1<<V)-1)<<(C|0)-(V|0),M+=V,C-=V;return(f=q,k)(478,E,(Q|0)+(X|0)),f},Dj=function(E,f,X,d,q){for(X=(d=X[3]|(q=0,0),X[2])|0;16>q;q++)E=E>>>8|E<<24,E+=f|0,f=f<<3|f>>>29,E^=X+2906,d=d>>>8|d<<24,f^=E,d+=X|0,X=X<<3|X>>>29,d^=q+2906,X^=d;return[f>>>24&255,f>>>16&255,f>>>8&255,f>>>0&255,E>>>24&255,E>>>16&255,E>>>8&255,E>>>0&255]},Pu=function(E,f){return E(function(X){X(f)}),[function(){return f}]},A=D.requestIdleCallback?function(E){requestIdleCallback(function(){E()},{timeout:4})}:D.setImmediate?function(E){setImmediate(E)}:function(E){setTimeout(E,0)},x8=String.fromCharCode(105,110,116,101,103,67,104,101,99,107,66,121,112,97,115,115),Vc=(y.prototype.OG=(y.prototype.Nv=void 0,false),[]),nD=(y.prototype.PM=void 0,y.prototype.W="toString",[]),e=[],g=[],J={},cu=[],u=[],qD=[],v=[],Y8=(((B=(((G1,l,function(){})(Ab),function(){})(eB),y.prototype),B).Ic=function(){return Math.floor(this.o+(this.R()-this.N))},B).j5=function(E,f,X,d,q,N){for(d=(N=0,q=[],0);d<E.length;d++)for(N+=f,X=X<<f|E[d];7<N;)N-=8,q.push(X>>N&255);return q},void 0),O=(B.h=function(E,f,X,d,q){if((X="array"===CD(X)?X:[X],this).C)E(this.C);else try{d=[],q=!this.s.length,z([g,d,X],this),z([v,E,d],this),f&&!q||x(this,true,f)}catch(N){T(N,this),E(this.C)}},y.prototype.O="create",B.zJ=(B.R=(window.performance||{}).now?function(){return this.yZ+window.performance.now()}:function(){return+new Date},B.uh=function(E,f,X,d,q){for(q=d=0;d<E.length;d++)q+=E.charCodeAt(d),q+=q<<10,q^=q>>6;return d=(E=(q+=q<<3,q^=q>>11,q)+(q<<15)>>>0,new Number(E&(1<<f)-1)),d[0]=(E>>>f)%X,d},function(){return Math.floor(this.R())}),B.t5=function(E,f,X){return E^((f=(f^=f<<13,f^=f>>17,(f^f<<5)&X))||(f=1),f)},J.constructor),O9=(y.prototype.j=function(E,f){return f=(Y8=function(){return f==E?40:3},{}),E={},function(X,d,q,N,n,c,V,H,C,M,r,Q,U,a,R){f=(a=f,E);try{if(c=X[0],c==u){q=X[1];try{for(d=r=(Q=(H=[],atob)(q),0);d<Q.length;d++)n=Q.charCodeAt(d),255<n&&(H[r++]=n&255,n>>=8),H[r++]=n;k(2,(this.L=(this.D=H,this.D.length<<3),this),[0,0,0])}catch(Y){h(Y,this,17);return}E9(8001,this)}else if(c==g)X[1].push(t(this,13),t(this,436).length,t(this,360).length,t(this,209).length),k(201,this,X[2]),this.J[469]&&fD(8001,this,t(this,469));else{if(c==v){this.T=(U=(N=w((H=X[2],(t(this,209).length|0)+2),2),this).T,this);try{V=t(this,125),0<V.length&&F(w(V.length,2).concat(V),this,209,10),F(w(this.i,1),this,209,109),F(w(this[v].length,1),this,209),Q=0,R=t(this,436),Q-=(t(this,209).length|0)+5,Q+=t(this,50)&2047,4<R.length&&(Q-=(R.length|0)+3),0<Q&&F(w(Q,2).concat(l(Q)),this,209,15),4<R.length&&F(w(R.length,2).concat(R),this,209,156)}finally{this.T=U}if(C=(d=l(2).concat(t(this,209)),d[1]=d[0]^6,d[3]=d[1]^N[0],d[4]=d[1]^N[1],this).sG(d))C="!"+C;else for(Q=0,C="";Q<d.length;Q++)M=d[Q][this.W](16),1==M.length&&(M="0"+M),C+=M;return(t(this,((k(13,this,(r=C,H.shift())),t(this,436)).length=H.shift(),360)).length=H.shift(),t(this,209)).length=H.shift(),r}if(c==nD)fD(X[2],this,X[1]);else if(c==e)return fD(8001,this,X[1])}}finally{f=a}}}(),/./),MD,s9=u.pop.bind((y.prototype[cu]=[0,0,1,1,0,(y.prototype.sG=(y.prototype.GJ=(y.prototype.EG=0,0),function(E,f,X,d){if(f=window.btoa){for(X=(d=0,"");d<E.length;d+=8192)X+=String.fromCharCode.apply(null,E.slice(d,d+8192));E=f(X).replace(/\\+/g,"-").replace(/\\//g,"_").replace(/=/g,"")}else E=void 0;return E}),1),1],y.prototype[g])),Qc=(MD=ND({get:s9},(O9[y.prototype.W]=s9,y.prototype.O)),y.prototype.HM=void 0,function(E,f){return(f=z1())&&1===E.eval(f.createScript("1"))?function(X){return f.createScript(X)}:function(X){return""+X}})(D);((Z=D.botguard||(D.botguard={}),40<Z.m)||(Z.m=41,Z.bg=k8,Z.a=tb),Z).EDn_=function(E,f,X){return X=new y(E,f),[function(d){return U9(d,X)}]};}).call(this);'));
}).call(this);
#2 JavaScript::Eval (size: 17620) - SHA256: 6a4ce842e8a52fc9fb0ae1ef50d103785603f5aebaafa8567ebec14108ab2833
(function() {
    var Z, fD = function(E, f, X, d) {
            return t(f, (k(478, f, (((d = t(f, 478), f).D && d < f.L ? (k(478, f, f.L), oh(X, f)) : k(478, f, X), E9)(E, f), d)), 201))
        },
        ND = function(E, f) {
            return O[f](O.prototype, {
                propertyIsEnumerable: E,
                pop: E,
                parent: E,
                stack: E,
                call: E,
                length: E,
                replace: E,
                splice: E,
                document: E,
                console: E,
                prototype: E,
                floor: E
            })
        },
        k = function(E, f, X) {
            if (478 == E || 141 == E) f.J[E] ? f.J[E].concat(X) : f.J[E] = XC(X, f);
            else {
                if (f.v && 2 != E) return;
                209 == E || 436 == E || 360 == E || 125 == E || 136 == E ? f.J[E] || (f.J[E] = dW(f, 110, X, E)) : f.J[E] = dW(f, 9, X, E)
            }
            2 == E && (f.I = p(f, false, 32), f.H = void 0)
        },
        Zj = function(E, f, X, d, q) {
            if (q = E[0], q == g) f.g = 25, f.j(E);
            else if (q == v) {
                X = E[1];
                try {
                    d = f.C || f.j(E)
                } catch (N) {
                    T(N, f), d = f.C
                }
                X(d)
            } else if (q == nD) f.j(E);
            else if (q == u) f.j(E);
            else if (q == cu) {
                try {
                    for (d = 0; d < f.A.length; d++) try {
                        X = f.A[d], X[0][X[1]](X[2])
                    } catch (N) {}
                } catch (N) {}(0, E[1])((f.A = [], function(N, n) {
                    f.h(N, true, n)
                }), function(N) {
                    (z((N = !f.s.length, [Vc]), f), N) && x(f, false, true)
                })
            } else {
                if (q == e) return d = E[2], k(29, f, E[6]), k(201, f, d), f.j(E);
                q == Vc ? (f.D = [], f.S = [], f.J = null) : q == qD && "loading" === D.document.readyState && (f.u = function(N, n) {
                    function c() {
                        n || (n = true, N())
                    }
                    D.document.addEventListener("DOMContentLoaded", (n = false, c), I), D.addEventListener("load", c, I)
                })
            }
        },
        P = function(E, f, X) {
            k(E, X, f), f[qD] = 2796
        },
        b = function(E, f, X, d, q, N, n, c, V) {
            if (((N = (q = (d || f.V++, 0) < f.Z && f.F && f.C_ && 1 >= f.G && !f.B && !f.u && (!d || 1 < f.K - X) && 0 == document.hidden, n = (V = 4 == f.V) || q ? f.R() : f.P, c = n - f.P, c >> 14), f.I && (f.I ^= N * (c << 2)), f.T = N || f.T, f).i += N, V) || q) f.V = 0, f.P = n;
            if (!q || n - f.N < f.Z - (E ? 255 : d ? 5 : 2)) return false;
            return !(f.u = ((k(478, f, (E = t(f, (f.K = X, d ? 141 : 478)), f.L)), f).s.push([nD, E, d ? X + 1 : X]), A), 0)
        },
        k8 = function(E, f, X, d) {
            function q() {}
            return {
                invoke: (d = (X = void 0, tb(E, function(N) {
                    q && (f && A(f), X = N, q(), q = void 0)
                }, !!f))[0], function(N, n, c, V) {
                    function H() {
                        X(function(C) {
                            A(function() {
                                N(C)
                            })
                        }, c)
                    }
                    if (!n) return n = d(c), N && N(n), n;
                    X ? H() : (V = q, q = function() {
                        V(), A(H)
                    })
                })
            }
        },
        CD = function(E, f, X) {
            if ((f = typeof E, "object") == f)
                if (E) {
                    if (E instanceof Array) return "array";
                    if (E instanceof Object) return f;
                    if ((X = Object.prototype.toString.call(E), "[object Window]") == X) return "object";
                    if ("[object Array]" == X || "number" == typeof E.length && "undefined" != typeof E.splice && "undefined" != typeof E.propertyIsEnumerable && !E.propertyIsEnumerable("splice")) return "array";
                    if ("[object Function]" == X || "undefined" != typeof E.call && "undefined" != typeof E.propertyIsEnumerable && !E.propertyIsEnumerable("call")) return "function"
                } else return "null";
            else if ("function" == f && "undefined" == typeof E.call) return "object";
            return f
        },
        W = function(E, f) {
            if (E.B) return $8(E, E.U);
            return f = p(E, true, 8), f & 128 && (f ^= 128, E = p(E, true, 2), f = (f << 2) + (E | 0)), f
        },
        T1 = function(E, f, X, d, q) {
            for (d = ((E.kJ = ND((E.e5 = MD, E.cM = (E.Rc = E[v], O9), {get: function() {
                        return this.concat()
                    }
                }), E.O), E).L_ = O[E.O](E.kJ, {
                    value: {
                        value: {}
                    }
                }), q = [], 0); 277 > d; d++) q[d] = String.fromCharCode(d);
            x(E, !(z((z(((P(108, function(N) {
                iK(N, 1)
            }, (P(40, (k(50, E, (P(95, function(N, n, c, V, H) {
                for (n = (V = W(N), c = rW(N), 0), H = []; n < c; n++) H.push(S(N));
                k(V, N, H)
            }, (E.X0 = (P(396, function(N, n, c, V) {
                (n = W((V = W(N), N)), c = W(N), N).T == N && (n = t(N, n), c = t(N, c), t(N, V)[n] = c, 2 == V && (N.H = void 0, 2 == n && (N.I = p(N, false, 32), N.H = void 0)))
            }, (P(5, (k(436, (P(139, (P(481, (P(287, function(N, n, c, V) {
                (n = t(N, (c = (V = W((n = W((c = W(N), N)), N)), t(N, c)), n)), k)(V, N, +(c == n))
            }, (P(246, function(N, n) {
                (N = (n = W(N), t)(N.T, n), N)[0].removeEventListener(N[1], N[2], I)
            }, (P(159, function(N, n, c, V, H, C) {
                if (!b(true, N, n, true)) {
                    if ("object" == CD((N = (c = t((V = (n = t((n = (V = (C = (c = W(N), W(N)), W(N)), W)(N), N), n), t)(N, V), N), c), t)(N, C), c))) {
                        for (H in C = [], c) C.push(H);
                        c = C
                    }
                    for (V = (C = (H = c.length, 0), 0) < V ? V : 1; C < H; C += V) N(c.slice(C, (C | 0) + (V | 0)), n)
                }
            }, (k(201, (P((P(507, function(N, n, c, V) {
                (c = t((n = (n = (c = W(N), W(N)), V = W(N), t)(N, n), N), c), k)(V, N, c[n])
            }, (P(31, function(N) {
                pD(N, 4)
            }, (P(285, function(N, n, c) {
                (n = (n = t(N, (n = W(N), c = W(N), n)), CD)(n), k)(c, N, n)
            }, (k(341, E, (P(168, function(N, n, c) {
                b(false, N, n, true) || (n = W(N), c = W(N), k(c, N, function(V) {
                    return eval(V)
                }(Qc(t(N.T, n)))))
            }, (E.D2 = (P(397, function(N, n, c) {
                c = W((n = W(N), N)), k(c, N, "" + t(N, n))
            }, (P(137, function(N, n, c, V) {
                (V = t(N, (n = t(N, (c = (V = W(N), W(N)), c)), V)), k)(c, N, n + V)
            }, (P(86, (P(217, function(N, n, c, V, H) {
                k((c = (H = (n = t((n = W((c = (V = W(N), H = W(N), W)(N), N)), N), n), t(N, H)), t(N, c)), V), N, vu(c, N, n, H))
            }, (P((P(219, function(N, n) {
                (n = t(N, W(N)), oh)(n, N.T)
            }, (k(13, E, (E.f_ = (P((k(209, E, [(P(470, (k(125, E, (P(370, (P(257, (k(443, (k(141, (k(478, E, (E.H = void 0, (E.D = [], (((E.A = (E.Z = (E.o = 0, 0), []), E.C = void 0, E).F = !(E.J = [], E.g = 25, E.B = void 0, E.U = void 0, E.N = 0, E.P = 0, 1), E.s = [], ((E.l = void 0, E).u = (E.v = false, null), E).i = 1, E.L = 0, E.V = void 0, E).BM = (E.S = [], d = window.performance || {}, function(N) {
                this.T = N
            }), E.K = (E.C_ = false, 8001), E).I = (E.G = 0, E.T = E, void 0), (E.J5 = [], E).yZ = d.timeOrigin || (d.timing || {}).navigationStart || 0, E).UG = 0, 0)), E), 0), E), D), function(N, n, c, V) {
                (V = (n = W(N), c = S(N), W(N)), k)(V, N, t(N, n) >>> c)
            }), E), P(386, function(N, n, c, V) {
                k((c = t(N, (V = (n = (c = (V = W(N), W)(N), W(N)), t)(N, V), c)), n), N, V in c | 0)
            }, E), function(N, n, c, V) {
                k((V = W(N), c = W(N), n = W(N), n), N, t(N, V) || t(N, c))
            }), E), [])), function(N, n, c, V) {
                !b(false, N, n, true) && (n = Rh(N), V = n.TJ, c = n.Y, N.T == N || c == N.BM && V == N) && (k(n.n_, N, c.apply(V, n.X)), N.P = N.R())
            }), E), k(459, E, 937), 160), 0, 0]), 163), function(N, n, c, V) {
                if (c = N.J5.pop()) {
                    for (n = S(N); 0 < n; n--) V = W(N), c[V] = N.J[V];
                    c[13] = (c[125] = N.J[125], N.J)[13], N.J = c
                } else k(478, N, N.L)
            }, E), 0), 2048)), E)), 128), function(N) {
                gW(3, N)
            }, E), E)), function(N, n, c) {
                (c = t(N, (n = W(N), c = W(N), n = 0 != t(N, n), c)), n) && k(478, N, c)
            }), E), E)), E)), 0), E)), P(9, function(N, n, c, V, H, C, M, r, Q, U, a, R) {
                function Y(L, G) {
                    for (; a < L;) c |= S(N) << a, a += 8;
                    return c >>= (G = c & (a -= L, 1 << L) - 1, L), G
                }
                for (n = (U = R = (C = (Q = (a = c = (r = W(N), 0), (Y(3) | 0) + 1), Y(5)), 0), []); U < C; U++) V = Y(1), n.push(V), R += V ? 0 : 1;
                for (U = (M = (R = ((R | 0) - 1).toString(2).length, []), 0); U < C; U++) n[U] || (M[U] = Y(R));
                for (R = 0; R < C; R++) n[R] && (M[R] = W(N));
                for (H = []; Q--;) H.push(t(N, W(N)));
                P(r, function(L, G, Hu, m, K) {
                    for (Hu = (K = 0, []), G = []; K < C; K++) {
                        if (m = M[K], !n[K]) {
                            for (; m >= G.length;) G.push(W(L));
                            m = G[m]
                        }
                        Hu.push(m)
                    }
                    L.B = XC(H.slice(), L), L.U = XC(Hu, L)
                }, N)
            }, E), 0)), E)), E)), E)), k(104, E, E), 169), function() {}, E), E), {}), E)), E)), k(136, E, [0, 0, 0]), E)), P(127, function(N, n, c, V, H, C, M) {
                for (V = (n = (M = t(N, (C = (c = W(N), rW(N)), H = "", 218)), M).length, 0); C--;) V = ((V | 0) + (rW(N) | 0)) % n, H += q[M[V]];
                k(c, N, H)
            }, E), function(N) {
                iK(N, 4)
            }), E), function(N, n, c, V, H, C) {
                b(false, N, n, true) || (c = Rh(N.T), H = c.X, V = c.TJ, C = H.length, n = c.n_, c = c.Y, H = 0 == C ? new V[c] : 1 == C ? new V[c](H[0]) : 2 == C ? new V[c](H[0], H[1]) : 3 == C ? new V[c](H[0], H[1], H[2]) : 4 == C ? new V[c](H[0], H[1], H[2], H[3]) : 2(), k(n, N, H))
            }), E), E), l(4)), function(N) {
                gW(4, N)
            }), E), E)), k(360, E, []), 0), E)), 0)), function(N, n, c, V, H) {
                0 !== (n = (H = t(N, (c = t(N, (c = W((H = W((n = W((V = W(N), N)), N)), N)), V = t(N.T, V), c)), H)), t(N, n)), V) && (H = vu(c, N, 1, H, V, n), V.addEventListener(n, H, I), k(341, N, [V, n, H]))
            }), E), E)), z)([qD], E), [u, X]), E), [cu, f]), E), 0), true)
        },
        U9 = function(E, f, X) {
            return f.h(function(d) {
                X = d
            }, false, E), X
        },
        LD = function(E, f) {
            return f[E] << 24 | f[(E | 0) + 1] << 16 | f[(E | 0) + 2] << 8 | f[(E | 0) + 3]
        },
        z1 = function(E, f) {
            if (f = null, E = D.trustedTypes, !E || !E.createPolicy) return f;
            try {
                f = E.createPolicy("bg", {
                    createHTML: uK,
                    createScript: uK,
                    createScriptURL: uK
                })
            } catch (X) {
                D.console && D.console.error(X.message)
            }
            return f
        },
        z = function(E, f) {
            f.s.splice(0, 0, E)
        },
        t = function(E, f) {
            if (void 0 === (E = E.J[f], E)) throw [J, 30, f];
            if (E.value) return E.create();
            return (E.create(2 * f * f + 33 * f + 40), E).prototype
        },
        S = function(E) {
            return E.B ? $8(E, E.U) : p(E, true, 8)
        },
        oh = function(E, f) {
            k(478, f, (f.J5.push(f.J.slice()), f.J[478] = void 0, E))
        },
        pD = function(E, f, X, d) {
            for (X = W(E), d = 0; 0 < f; f--) d = d << 8 | S(E);
            k(X, E, d)
        },
        gW = function(E, f, X, d, q) {
            F((((d = (q = W((X = E & 3, E &= 4, f)), W(f)), q = t(f, q), E) && (q = ah("" + q)), X) && F(w(q.length, 2), f, d), q), f, d)
        },
        Rh = function(E, f, X, d, q, N) {
            for (X = (((N = E[x8] || {}, q = W(E), N).n_ = W(E), N).X = [], E.T == E) ? (S(E) | 0) - 1 : 1, f = W(E), d = 0; d < X; d++) N.X.push(W(E));
            for (N.TJ = t(E, f), N.Y = t(E, q); X--;) N.X[X] = t(E, N.X[X]);
            return N
        },
        eB = function(E, f, X) {
            if (3 == E.length) {
                for (X = 0; 3 > X; X++) f[X] += E[X];
                for (X = (E = [13, 8, 13, 12, 16, 5, 3, 10, 15], 0); 9 > X; X++) f[3](f, X % 3, E[X])
            }
        },
        G1 = function(E, f) {
            (f.push(E[0] << 24 | E[1] << 16 | E[2] << 8 | E[3]), f).push(E[4] << 24 | E[5] << 16 | E[6] << 8 | E[7]), f.push(E[8] << 24 | E[9] << 16 | E[10] << 8 | E[11])
        },
        F = function(E, f, X, d, q, N) {
            if (f.T == f)
                for (N = t(f, X), 436 == X ? (X = function(n, c, V, H) {
                        if ((c = (H = N.length, (H | 0) - 4 >> 3), N).w9 != c) {
                            c = (N.w9 = c, V = [0, 0, q[1], q[2]], (c << 3) - 4);
                            try {
                                N.Mv = Dj(LD((c | 0) + 4, N), LD(c, N), V)
                            } catch (C) {
                                throw C;
                            }
                        }
                        N.push(N.Mv[H & 7] ^ n)
                    }, q = t(f, 136)) : X = function(n) {
                        N.push(n)
                    }, d && X(d & 255), f = E.length, d = 0; d < f; d++) X(E[d])
        },
        XC = function(E, f, X) {
            return X = O[f.O](f.L_), X[f.O] = function() {
                return E
            }, X.concat = function(d) {
                E = d
            }, X
        },
        dW = function(E, f, X, d, q, N, n, c) {
            return (N = O[E.O]((X = [-11, 33, -34, -(c = (q = f & 7, Y8), 13), 56, -49, X, 14, -25, -39], E.kJ)), N[E.O] = function(V) {
                n = (q += 6 + 7 * f, V), q &= 7
            }, N).concat = function(V) {
                return ((V = (V = (V = d % 16 + 1, -120 * d) * d * n + (c() | 0) * V - 1980 * d * n + X[q + 27 & 7] * d * V + q - 2400 * n - V * n + 60 * n * n + 2 * d * d * V, X)[V], n = void 0, X)[(q + 53 & 7) + (f & 2)] = V, X)[q + (f & 2)] = 33, V
            }, N
        },
        uK = function(E) {
            return E
        },
        I = {
            passive: true,
            capture: true
        },
        l = function(E, f) {
            for (f = []; E--;) f.push(255 * Math.random() | 0);
            return f
        },
        y = function(E, f, X) {
            X = this;
            try {
                T1(this, f, E)
            } catch (d) {
                T(d, this), f(function(q) {
                    q(X.C)
                })
            }
        },
        rW = function(E, f) {
            return (f = S(E), f) & 128 && (f = f & 127 | S(E) << 7), f
        },
        B, iK = function(E, f, X, d) {
            F(w((X = (d = W(E), W(E)), t(E, d)), f), E, X)
        },
        Ih = function(E, f, X, d) {
            for (; f.s.length;) {
                X = (f.u = null, f.s).pop();
                try {
                    d = Zj(X, f)
                } catch (q) {
                    T(q, f)
                }
                if (E && f.u) {
                    (E = f.u, E)(function() {
                        x(f, true, true)
                    });
                    break
                }
            }
            return d
        },
        x = function(E, f, X, d, q, N) {
            if (E.s.length) {
                E.C_ = (E.F && 0(), E.F = true, X);
                try {
                    N = E.R(), E.N = N, E.V = 0, E.P = N, q = Ih(X, E), d = E.R() - E.N, E.o += d, d < (f ? 0 : 10) || 0 >= E.g-- || (d = Math.floor(d), E.S.push(254 >= d ? d : 254))
                } finally {
                    E.F = false
                }
                return q
            }
        },
        w = function(E, f, X, d) {
            for (X = (f | 0) - 1, d = []; 0 <= X; X--) d[(f | 0) - 1 - (X | 0)] = E >> 8 * X & 255;
            return d
        },
        ah = function(E, f, X, d, q) {
            for (d = f = (X = (E = E.replace(/\r\n/g, "\n"), []), 0); d < E.length; d++) q = E.charCodeAt(d), 128 > q ? X[f++] = q : (2048 > q ? X[f++] = q >> 6 | 192 : (55296 == (q & 64512) && d + 1 < E.length && 56320 == (E.charCodeAt(d + 1) & 64512) ? (q = 65536 + ((q & 1023) << 10) + (E.charCodeAt(++d) & 1023), X[f++] = q >> 18 | 240, X[f++] = q >> 12 & 63 | 128) : X[f++] = q >> 12 | 224, X[f++] = q >> 6 & 63 | 128), X[f++] = q & 63 | 128);
            return X
        },
        tb = function(E, f, X, d) {
            return (d = Z[E.substring(0, 3) + "_"]) ? d(E.substring(3), f, X) : Pu(f, E)
        },
        Ab = function(E, f, X, d) {
            try {
                d = E[((f | 0) + 2) % 3], E[f] = (E[f] | 0) - (E[((f | 0) + 1) % 3] | 0) - (d | 0) ^ (1 == f ? d << X : d >>> X)
            } catch (q) {
                throw q;
            }
        },
        D = this || self,
        $8 = function(E, f) {
            return (f = f.create().shift(), E.B.create().length || E.U.create().length) || (E.B = void 0, E.U = void 0), f
        },
        h = function(E, f, X, d, q, N) {
            if (!f.v) {
                if ((E = (X = ((q = t(f, (N = void 0, E && E[0] === J && (N = E[2], X = E[1], E = void 0), 125)), 0) == q.length && (d = t(f, 141) >> 3, q.push(X, d >> 8 & 255, d & 255), void 0 != N && q.push(N & 255)), ""), E && (E.message && (X += E.message), E.stack && (X += ":" + E.stack)), t)(f, 13), 3) < E) {
                    f.T = (X = (E -= (X = X.slice(0, (E | 0) - 3), (X.length | 0) + 3), ah)(X), N = f.T, f);
                    try {
                        F(w(X.length, 2).concat(X), f, 436, 9)
                    } finally {
                        f.T = N
                    }
                }
                k(13, f, E)
            }
        },
        E9 = function(E, f, X, d, q, N) {
            if (!f.C) {
                f.G++;
                try {
                    for (d = (N = (X = 0, void 0), f.L); --E;) try {
                        if (q = void 0, f.B) N = $8(f, f.B);
                        else {
                            if ((X = t(f, 478), X) >= d) break;
                            N = t(f, (q = (k(141, f, X), W(f)), q))
                        }
                        b(false, f, (N && N[Vc] & 2048 ? N(f, E) : h([J, 21, q], f, 0), E), false)
                    } catch (n) {
                        t(f, 459) ? h(n, f, 22) : k(459, f, n)
                    }
                    if (!E) {
                        if (f.OG) {
                            E9((f.G--, 675748417995), f);
                            return
                        }
                        h([J, 33], f, 0)
                    }
                } catch (n) {
                    try {
                        h(n, f, 22)
                    } catch (c) {
                        T(c, f)
                    }
                }
                f.G--
            }
        },
        vu = function(E, f, X, d, q, N) {
            function n() {
                if (f.T == f) {
                    if (f.J) {
                        var c = [e, d, E, void 0, q, N, arguments];
                        if (2 == X) var V = x(f, false, (z(c, f), false));
                        else if (1 == X) {
                            var H = !f.s.length;
                            (z(c, f), H) && x(f, false, false)
                        } else V = Zj(c, f);
                        return V
                    }
                    q && N && q.removeEventListener(N, n, I)
                }
            }
            return n
        },
        T = function(E, f) {
            f.C = ((f.C ? f.C + "~" : "E:") + E.message + ":" + E.stack).slice(0, 2048)
        },
        p = function(E, f, X, d, q, N, n, c, V, H, C, M, r, Q) {
            if (Q = t(E, 478), Q >= E.L) throw [J, 31];
            for (c = (M = (C = X, Q), q = 0, E.Rc).length; 0 < C;) n = M >> 3, H = M % 8, V = 8 - (H | 0), V = V < C ? V : C, N = E.D[n], f && (d = E, d.H != M >> 6 && (d.H = M >> 6, r = t(d, 2), d.l = Dj(d.H, d.I, [0, 0, r[1], r[2]])), N ^= E.l[n & c]), q |= (N >> 8 - (H | 0) - (V | 0) & (1 << V) - 1) << (C | 0) - (V | 0), M += V, C -= V;
            return (f = q, k)(478, E, (Q | 0) + (X | 0)), f
        },
        Dj = function(E, f, X, d, q) {
            for (X = (d = X[3] | (q = 0, 0), X[2]) | 0; 16 > q; q++) E = E >>> 8 | E << 24, E += f | 0, f = f << 3 | f >>> 29, E ^= X + 2906, d = d >>> 8 | d << 24, f ^= E, d += X | 0, X = X << 3 | X >>> 29, d ^= q + 2906, X ^= d;
            return [f >>> 24 & 255, f >>> 16 & 255, f >>> 8 & 255, f >>> 0 & 255, E >>> 24 & 255, E >>> 16 & 255, E >>> 8 & 255, E >>> 0 & 255]
        },
        Pu = function(E, f) {
            return E(function(X) {
                X(f)
            }), [function() {
                return f
            }]
        },
        A = D.requestIdleCallback ? function(E) {
            requestIdleCallback(function() {
                E()
            }, {
                timeout: 4
            })
        } : D.setImmediate ? function(E) {
            setImmediate(E)
        } : function(E) {
            setTimeout(E, 0)
        },
        x8 = String.fromCharCode(105, 110, 116, 101, 103, 67, 104, 101, 99, 107, 66, 121, 112, 97, 115, 115),
        Vc = (y.prototype.OG = (y.prototype.Nv = void 0, false), []),
        nD = (y.prototype.PM = void 0, y.prototype.W = "toString", []),
        e = [],
        g = [],
        J = {},
        cu = [],
        u = [],
        qD = [],
        v = [],
        Y8 = (((B = (((G1, l, function() {})(Ab), function() {})(eB), y.prototype), B).Ic = function() {
            return Math.floor(this.o + (this.R() - this.N))
        }, B).j5 = function(E, f, X, d, q, N) {
            for (d = (N = 0, q = [], 0); d < E.length; d++)
                for (N += f, X = X << f | E[d]; 7 < N;) N -= 8, q.push(X >> N & 255);
            return q
        }, void 0),
        O = (B.h = function(E, f, X, d, q) {
            if ((X = "array" === CD(X) ? X : [X], this).C) E(this.C);
            else try {
                d = [], q = !this.s.length, z([g, d, X], this), z([v, E, d], this), f && !q || x(this, true, f)
            } catch (N) {
                T(N, this), E(this.C)
            }
        }, y.prototype.O = "create", B.zJ = (B.R = (window.performance || {}).now ? function() {
            return this.yZ + window.performance.now()
        } : function() {
            return +new Date
        }, B.uh = function(E, f, X, d, q) {
            for (q = d = 0; d < E.length; d++) q += E.charCodeAt(d), q += q << 10, q ^= q >> 6;
            return d = (E = (q += q << 3, q ^= q >> 11, q) + (q << 15) >>> 0, new Number(E & (1 << f) - 1)), d[0] = (E >>> f) % X, d
        }, function() {
            return Math.floor(this.R())
        }), B.t5 = function(E, f, X) {
            return E ^ ((f = (f ^= f << 13, f ^= f >> 17, (f ^ f << 5) & X)) || (f = 1), f)
        }, J.constructor),
        O9 = (y.prototype.j = function(E, f) {
            return f = (Y8 = function() {
                    return f == E ? 40 : 3
                }, {}), E = {},
                function(X, d, q, N, n, c, V, H, C, M, r, Q, U, a, R) {
                    f = (a = f, E);
                    try {
                        if (c = X[0], c == u) {
                            q = X[1];
                            try {
                                for (d = r = (Q = (H = [], atob)(q), 0); d < Q.length; d++) n = Q.charCodeAt(d), 255 < n && (H[r++] = n & 255, n >>= 8), H[r++] = n;
                                k(2, (this.L = (this.D = H, this.D.length << 3), this), [0, 0, 0])
                            } catch (Y) {
                                h(Y, this, 17);
                                return
                            }
                            E9(8001, this)
                        } else if (c == g) X[1].push(t(this, 13), t(this, 436).length, t(this, 360).length, t(this, 209).length), k(201, this, X[2]), this.J[469] && fD(8001, this, t(this, 469));
                        else {
                            if (c == v) {
                                this.T = (U = (N = w((H = X[2], (t(this, 209).length | 0) + 2), 2), this).T, this);
                                try {
                                    V = t(this, 125), 0 < V.length && F(w(V.length, 2).concat(V), this, 209, 10), F(w(this.i, 1), this, 209, 109), F(w(this[v].length, 1), this, 209), Q = 0, R = t(this, 436), Q -= (t(this, 209).length | 0) + 5, Q += t(this, 50) & 2047, 4 < R.length && (Q -= (R.length | 0) + 3), 0 < Q && F(w(Q, 2).concat(l(Q)), this, 209, 15), 4 < R.length && F(w(R.length, 2).concat(R), this, 209, 156)
                                } finally {
                                    this.T = U
                                }
                                if (C = (d = l(2).concat(t(this, 209)), d[1] = d[0] ^ 6, d[3] = d[1] ^ N[0], d[4] = d[1] ^ N[1], this).sG(d)) C = "!" + C;
                                else
                                    for (Q = 0, C = ""; Q < d.length; Q++) M = d[Q][this.W](16), 1 == M.length && (M = "0" + M), C += M;
                                return (t(this, ((k(13, this, (r = C, H.shift())), t(this, 436)).length = H.shift(), 360)).length = H.shift(), t(this, 209)).length = H.shift(), r
                            }
                            if (c == nD) fD(X[2], this, X[1]);
                            else if (c == e) return fD(8001, this, X[1])
                        }
                    } finally {
                        f = a
                    }
                }
        }(), /./),
        MD, s9 = u.pop.bind((y.prototype[cu] = [0, 0, 1, 1, 0, (y.prototype.sG = (y.prototype.GJ = (y.prototype.EG = 0, 0), function(E, f, X, d) {
            if (f = window.btoa) {
                for (X = (d = 0, ""); d < E.length; d += 8192) X += String.fromCharCode.apply(null, E.slice(d, d + 8192));
                E = f(X).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "")
            } else E = void 0;
            return E
        }), 1), 1], y.prototype[g])),
        Qc = (MD = ND({get: s9
        }, (O9[y.prototype.W] = s9, y.prototype.O)), y.prototype.HM = void 0, function(E, f) {
            return (f = z1()) && 1 === E.eval(f.createScript("1")) ? function(X) {
                return f.createScript(X)
            } : function(X) {
                return "" + X
            }
        })(D);
    ((Z = D.botguard || (D.botguard = {}), 40 < Z.m) || (Z.m = 41, Z.bg = k8, Z.a = tb), Z).EDn_ = function(E, f, X) {
        return X = new y(E, f), [function(d) {
            return U9(d, X)
        }]
    };
}).call(this);
#3 JavaScript::Eval (size: 62) - SHA256: c4d5016b023d21892acb0cd44b234fd7837bf875f13e25abed15ce0a0c12e7ad
0,
function(N, n, c) {
    k((n = (n = W(N), c = W(N), N.J[n] && t(N, n)), c), N, n)
}
#4 JavaScript::Eval (size: 22) - SHA256: efe86fa7ac1644549eef15f114272b16f92088dbaa0d57c186521c50ff068431
0,
function(N) {
    pD(N, 2)
}
#5 JavaScript::Eval (size: 22) - SHA256: 0d24decf967aeaa45be2f0d7ffdc90196af12e3af6519d1737179fd1499258d8
0,
function(N) {
    pD(N, 1)
}

Executed Writes (3)
#1 JavaScript::Write (size: 84) - SHA256: 071bb71cc5f59a8a7b8eeb83d3b40bdfebdb2381c15bfb06526d6bc7b795dd25
< script src = 'http://www.google-analytics.com/ga.js'
type = 'text/javascript' > < /script>
#2 JavaScript::Write (size: 221) - SHA256: e546be894f1b90a3eb05e824dd39a6422ea46b4731f2cc3c082b820afe1484df
< script language = "javascript" > function dF(s) {
    var s1 = unescape(s.substr(0, s.length - 1));
    var t = '';
    for (i = 0; i < s1.length; i++) t += String.fromCharCode(s1.charCodeAt(i) - s.substr(s.length - 1, 1));
    document.write(unescape(t));
} < /script>
#3 JavaScript::Write (size: 270) - SHA256: 4b5b56b9d266c0cd56b0e6895a3da7554bbf7a851739af9423042cb39fd2d5cc
< script type = "text/javascript" >
    var image = document.createElement('img');
image.setAttribute('src', 'http://img5.imagebanana.com/img/4jljqfr1/nom_nom_by_LinXitoW.jpg');
image.setAttribute('height', '430px');
document.getElementById('devious').appendChild(image); < /script>


HTTP Transactions (53)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "12AF026999398F4976749E320667D43DA3F99B7A2E8254ACA7A410A964A106AA"
Last-Modified: Thu, 24 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3318
Expires: Sat, 26 Nov 2022 22:06:38 GMT
Date: Sat, 26 Nov 2022 21:11:20 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3864
Cache-Control: max-age=138252
Date: Sat, 26 Nov 2022 21:11:20 GMT
Etag: "6381eaec-1d7"
Expires: Mon, 28 Nov 2022 11:35:32 GMT
Last-Modified: Sat, 26 Nov 2022 10:31:08 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 26 Nov 2022 20:17:33 GMT
cache-control: public,max-age=3600
age: 3227
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    d130218d0e2841f39c99610fe1a2ab90
Sha1:   29fbe1e177ee55c7a61ae0a206afff271cf5f945
Sha256: 6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3995
Expires: Sat, 26 Nov 2022 22:17:55 GMT
Date: Sat, 26 Nov 2022 21:11:20 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: AuumfxMLvZuLBPINTMieYbneyG+ZzIQDDPXnHcxyy/0bzjp/HlPmLeP9hOWXDZnTJ6OYmck/YH1pbJ5zDvW1Tw==
x-amz-request-id: 6A338R76B6TNK6KX
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 26 Nov 2022 20:41:21 GMT
age: 1799
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /2009/11/why-you-should-date-nearsighted-girls.html HTTP/1.1 
Host: erfundien.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         142.250.74.161
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Expires: Sat, 26 Nov 2022 21:11:20 GMT
Date: Sat, 26 Nov 2022 21:11:20 GMT
Cache-Control: private, max-age=0
Last-Modified: Tue, 08 Nov 2022 03:03:23 GMT
ETag: W/"9a3e780cefe9ade41a00e04df1fb05d8e83b31cce9bb235242f8fa5aa14f6390"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 12328
Server: GSE


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4685)
Size:   12328
Md5:    d74e2e28b6b2ae8ec3a6b9b96faebc4c
Sha1:   1b9e1c975e0e6ef8371719ff7aa0d655e9a062da
Sha256: e76d7c92dea104db01c7faf9d0cd0b7ce7a351489072777d0a44c0d5c2b36725

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sat, 26 Nov 2022 21:11:20 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /js/cookienotice.js HTTP/1.1 
Host: erfundien.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://erfundien.blogspot.com/2009/11/why-you-should-date-nearsighted-girls.html

search
                                         142.250.74.161
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 05:21:15 GMT
Expires: Thu, 01 Dec 2022 05:21:15 GMT
Cache-Control: public, max-age=604800
Last-Modified: Thu, 24 Nov 2022 00:53:02 GMT
Age: 229805


--- Additional Info ---
Magic:  ASCII text
Size:   2026
Md5:    c4e1ed83d89245089b8a1203be20a377
Sha1:   f3940e1215b89300ef97d57a25993f25243b8688
Sha256: afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 26 Nov 2022 21:11:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 26 Nov 2022 21:11:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 26 Nov 2022 21:11:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 26 Nov 2022 21:11:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 26 Nov 2022 21:11:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /static/v1/widgets/2975350028-css_bundle_v2.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://erfundien.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.105
HTTP/2 200 OK
content-type: text/css
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 7776
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 18:12:52 GMT
expires: Wed, 22 Nov 2023 18:12:52 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 21 Nov 2022 18:53:15 GMT
age: 356308
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (35959)
Size:   7776
Md5:    5aa2d3297bdc86bc81322aedecbb5e79
Sha1:   1c0a3c007e41726e167e79b70ddea76198650884
Sha256: feae1fac625d0f30b5f10fa00b62df1a5600cd2178062c427e55f289b29cc630
                                        
                                            GET /img/icon18_edit_allbkg.gif HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://erfundien.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.105
HTTP/2 200 OK
content-type: image/gif
                                        
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 162
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 14:43:55 GMT
expires: Tue, 29 Nov 2022 14:43:55 GMT
cache-control: public, max-age=604800
last-modified: Mon, 21 Nov 2022 15:52:34 GMT
age: 368845
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 18 x 18\012- data
Size:   162
Md5:    c991641178ff05adf0d004298b5eafa9
Sha1:   d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
Sha256: ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
                                        
                                            GET /static/v1/jsbin/3469866930-comment_from_post_iframe.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://erfundien.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.105
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6573
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 18:59:43 GMT
expires: Wed, 22 Nov 2023 18:59:43 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 21 Nov 2022 19:52:12 GMT
age: 353497
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1441)
Size:   6573
Md5:    f60e5037324bf7fd2256c16929886f09
Sha1:   aae4b1aea3737e0268e3578dd1d0e7cfe6c6d66b
Sha256: 71846da8d45274b77549b110389ab3dbcb8ce042051b5c39547909c1c343dfde
                                        
                                            GET /js/platform.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://erfundien.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.174
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20984
date: Sat, 26 Nov 2022 21:11:20 GMT
expires: Sat, 26 Nov 2022 21:11:20 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "7446758f13887885"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1279)
Size:   20984
Md5:    7ac44ef24e267df17ff72f195b252806
Sha1:   62db12d9ce11a576ccd7fa3544d851c5fd42f3b7
Sha256: aae7897e7b55999c1b3166309381d19ac488dced51e14071339d8b193a686a61
                                        
                                            GET /static/v1/widgets/2342155703-widgets.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://erfundien.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.105
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56726
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 21 Nov 2022 16:02:03 GMT
expires: Tue, 21 Nov 2023 16:02:03 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 21 Nov 2022 00:52:59 GMT
age: 450557
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2221)
Size:   56726
Md5:    1217c8e34acb09c7cea97bae4d386ea1
Sha1:   55ee17703d0a7710943e93913bacb49220d98b4b
Sha256: c2f23437ab938096bf8b40de8b08c4f27bb880b7ef8588481ec5ccc08b58870b
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 26 Nov 2022 21:11:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 26 Nov 2022 21:11:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 26 Nov 2022 21:11:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /_/scs/abc-static/_/js/k=gapi.lb.en.geaHZXF2-fw.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/cb=gapi.loaded_0?le=scs HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://erfundien.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.174
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 57794
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 09:56:18 GMT
expires: Thu, 23 Nov 2023 09:56:18 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 01 Nov 2022 15:24:55 GMT
age: 299703
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (580)
Size:   57794
Md5:    813b15c3004464f6bd39fd0773b04757
Sha1:   bd2218fe1e647f61132aad70d29cd91fd0416f26
Sha256: 446c6d83404c0fc4bc1ca6e1c0895f9400309185a534b3f4b6d500e668efeadf
                                        
                                            GET /1kt/awesomeinc/tabs_gradient_light.png HTTP/1.1 
Host: www.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://erfundien.blogspot.com/

search
                                         142.250.74.105
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 182
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 23 Nov 2022 07:13:21 GMT
Expires: Wed, 30 Nov 2022 07:13:21 GMT
Cache-Control: public, max-age=604800
Last-Modified: Wed, 23 Nov 2022 06:49:48 GMT
Age: 309480


--- Additional Info ---
Magic:  PNG image data, 20 x 200, 8-bit/color RGBA, non-interlaced\012- data
Size:   182
Md5:    a3c2c1c288eca66ee27f75ea41dcd96f
Sha1:   77dbd443ccabca3cfb43a48a2ccb44f752f5a77a
Sha256: 5e516df49b160c3efcb1ea09dd4c5f5b7c99a23a18a2a882acc379179bdbaacd
                                        
                                            GET /dyn-css/authorization.css?targetBlogID=4470451117823136109&zx=3767682e-1f5f-492c-b3e9-b7fc64c7baf0 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://erfundien.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.105
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                        
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 26 Nov 2022 21:11:21 GMT
last-modified: Sat, 26 Nov 2022 21:11:21 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  very short file (no magic)
Size:   21
Md5:    a62e4d501434033d5d177e67d3aafdd0
Sha1:   34f7300c9ed47334cf10826d57af785321e3138b
Sha256: b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 26 Nov 2022 21:08:54 GMT
cache-control: public,max-age=3600
age: 147
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5542
Cache-Control: max-age=134872
Date: Sat, 26 Nov 2022 21:11:21 GMT
Etag: "6381d72b-1d7"
Expires: Mon, 28 Nov 2022 10:39:13 GMT
Last-Modified: Sat, 26 Nov 2022 09:06:51 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 26 Nov 2022 21:11:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 26 Nov 2022 21:11:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 26 Nov 2022 21:11:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.164
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
expires: Sat, 26 Nov 2022 21:11:21 GMT
date: Sat, 26 Nov 2022 21:11:21 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 665
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1034), with no line terminators
Size:   665
Md5:    34e37af4d526255a20a2056cd5f4addf
Sha1:   bcac186d6a49539e69a3f67aa08d0188966f5623
Sha256: 51a2c479b272414cb9d7e1ec62edffbad01217068b73d516d33cb8f26a4fc634
                                        
                                            OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 
Host: play.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.110
HTTP/2 200 OK
content-type: text/plain; charset=UTF-8
                                        
access-control-allow-origin: https://www.blogger.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
date: Sat, 26 Nov 2022 21:11:21 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+540; expires=Mon, 25-Nov-2024 21:11:21 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Sat, 26 Nov 2022 21:11:21 GMT
cache-control: private
X-Firefox-Spdy: h2

                                        
                                            POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 
Host: play.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 1558
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.110
HTTP/2 200 OK
content-type: text/plain; charset=UTF-8
                                        
access-control-allow-origin: https://www.blogger.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-encoding: gzip
date: Sat, 26 Nov 2022 21:11:21 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+537; expires=Mon, 25-Nov-2024 21:11:21 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Sat, 26 Nov 2022 21:11:21 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   131
Md5:    babb6f090aeebc6f421624475b4aefff
Sha1:   06079b7547949822c118224e51604f4c5ebf80c8
Sha256: b2fe8b91f31edc7284cc9690e90dd4a38d985598374df68967d917590beb55dd
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 26 Nov 2022 21:11:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: QchsnyrUVvut/Et5JAYNqw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         52.35.167.249
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: hQ1bah87fkRt5RZJ6swmBsvO6pY=

                                        
                                            GET /recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.163
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 25 Nov 2022 08:12:22 GMT
expires: Sat, 25 Nov 2023 08:12:22 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 03:01:59 GMT
age: 133139
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (33820)
Size:   179722
Md5:    3f62a8ab509efbba538f27b97f5c7909
Sha1:   16ce31e2f156a3442ad7534d6986e3060c291673
Sha256: 80cb9b5c36d6da45b42bebd10dda0089482af33ceae4a65665c45cdd9aa7a71b
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 26 Nov 2022 21:11:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /js.php?user=LinXitoW&style=1 HTTP/1.1 
Host: blogcounter.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://erfundien.blogspot.com/

search
                                         72.52.179.174
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
Date: Sat, 26 Nov 2022 21:11:21 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
X-Powered-By: PHP/5.4.16
Location: http://ww12.blogcounter.com
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Transfer-Encoding: chunked

                                        
                                            GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 26 Nov 2022 12:31:58 GMT
expires: Sun, 26 Nov 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 31164
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Size:   15344
Md5:    5d4aeb4e5f5ef754e307d7ffaef688bd
Sha1:   06db651cdf354c64a7383ea9c77024ef4fb4cef8
Sha256: 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
                                        
                                            GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 21:46:16 GMT
expires: Fri, 24 Nov 2023 21:46:16 GMT
cache-control: public, max-age=31536000
age: 170706
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Size:   15552
Md5:    285467176f7fe6bb6a9c6873b3dad2cc
Sha1:   ea04e4ff5142ddd69307c183def721a160e0a64e
Sha256: 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
                                        
                                            GET / HTTP/1.1 
Host: ww12.blogcounter.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://erfundien.blogspot.com/
Connection: keep-alive

search
                                         13.248.148.254
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Sat, 26 Nov 2022 21:11:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Buckets: bucket103
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_tekdZiwVAonlQYr6H09TKFsOr/pMDuaWNai+tFYej42mJ4GXudJuZcX3VXzgz4A+AWfyxUGEv3CJ0lHNsAzxDA==
X-Template: tpl_CleanPeppermintBlack_twoclick
X-Language: norwegian
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2469)
Size:   4400
Md5:    1bf45b69ed2d2be446f5a9ccd41c5103
Sha1:   992fe2a5c62481c084f3f22abd8cfbc9429bfa30
Sha256: e38d87f59e35001e030126388d49540169b4ea79647f3173aeb0fabe7773d88e
                                        
                                            GET /ga.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://erfundien.blogspot.com/

search
                                         142.250.74.174
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 17168
Date: Sat, 26 Nov 2022 21:05:59 GMT
Expires: Sat, 26 Nov 2022 23:05:59 GMT
Cache-Control: public, max-age=7200
Age: 323
Last-Modified: Tue, 27 Sep 2022 22:01:05 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (1305)
Size:   17168
Md5:    01d5892e6e243b52998310c2925b9f3a
Sha1:   58180151b6a6ee4af73583a214b68efb9e8844d4
Sha256: 7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
                                        
                                            GET /r/__utm.gif?utmwv=5.7.2&utms=1&utmn=1312244867&utmhn=erfundien.blogspot.com&utmcs=UTF-8&utmsr=1280x1024&utmvp=1268x939&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=Erfundien%3A%20Why%20you%20should%20date%20nearsighted%20girls&utmhid=1757340237&utmr=-&utmp=%2F2009%2F11%2Fwhy-you-should-date-nearsighted-girls.html&utmht=1669497082337&utmac=UA-4750990-1&utmcc=__utma%3D40566774.345037478.1669497082.1669497082.1669497082.1%3B%2B__utmz%3D40566774.1669497082.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=526089440&utmredir=1&utmu=DAAAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://erfundien.blogspot.com/

search
                                         142.250.74.174
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Sat, 26 Nov 2022 21:11:22 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 35


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: erfundien.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://erfundien.blogspot.com/2009/11/why-you-should-date-nearsighted-girls.html
Cookie: __utma=40566774.345037478.1669497082.1669497082.1669497082.1; __utmb=40566774.1.10.1669497082; __utmc=40566774; __utmz=40566774.1669497082.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1

search
                                         142.250.74.161
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Expires: Sat, 26 Nov 2022 21:11:22 GMT
Date: Sat, 26 Nov 2022 21:11:22 GMT
Cache-Control: private, max-age=86400
Last-Modified: Tue, 08 Nov 2022 03:03:23 GMT
ETag: W/"9a3e780cefe9ade41a00e04df1fb05d8e83b31cce9bb235242f8fa5aa14f6390"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 412
Server: GSE


--- Additional Info ---
Magic:  MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel\012- data
Size:   412
Md5:    501c61a70f5c41181aa050d9110909ca
Sha1:   5b985d5671a7caf686fdfb1df13488c4407f6c9f
Sha256: c4aaf001607ee331f6871b4dbbf45942b1e197726714fd106e46d70cc10ee97e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20352
Expires: Sun, 27 Nov 2022 02:50:34 GMT
Date: Sat, 26 Nov 2022 21:11:22 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20352
Expires: Sun, 27 Nov 2022 02:50:34 GMT
Date: Sat, 26 Nov 2022 21:11:22 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20352
Expires: Sun, 27 Nov 2022 02:50:34 GMT
Date: Sat, 26 Nov 2022 21:11:22 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20352
Expires: Sun, 27 Nov 2022 02:50:34 GMT
Date: Sat, 26 Nov 2022 21:11:22 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1de44df6-bdc7-487f-a2a0-b42d26be2420.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 15818
x-amzn-requestid: a6570859-3b03-492e-9f84-e25b01223da2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLXrUF3bIAMF8CA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381397b-379b1bcf2ac0715835e10e48;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:54:03 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: HgiyaodE2vJx5JL8QfOiTersSAgAwq74gtsPkpHUhnQ3In2vZ-3rbQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:33:09 GMT
etag: "1ac7a410cd4f3709f476c776dd5646dd982dcfa8"
age: 81493
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   15818
Md5:    17ebe470d040a6ea8c57e9b9d4f4e828
Sha1:   1ac7a410cd4f3709f476c776dd5646dd982dcfa8
Sha256: d65114b68fcc12344c6df7bf294718b79822fa9782d3bd54ca044b66f82052b1
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f5318cc-4728-4160-afd1-9d20b79b7de9.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9914
x-amzn-requestid: 4db4ed29-20b4-4ca7-8835-2463d0989d5b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVVFHQYIAMFc4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638135b9-613da006118724124e345b29;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:38:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 7cJmhEGkKqLUQUMqGuYtWBeu_1nlEUAxgTMy4ABekPJYrJP95wE6Jg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:59:05 GMT
age: 83537
etag: "47fac81a2dd809df5c42ca1362f71d553572d2b1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9914
Md5:    3b1c6878914466cfece680fa7cb73502
Sha1:   47fac81a2dd809df5c42ca1362f71d553572d2b1
Sha256: 6458883dfa2bdfd483e92e5f847a229508ef00ce1dbd11f49eec369d0bd3160a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F93728079-c686-4b9a-9313-1cc6778793d2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7799
x-amzn-requestid: 4b3bf619-fb69-4cfe-b8e7-7de4ea127853
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLXADFOvoAMFXQg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813866-77f561ae3496d84c75541300;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:49:26 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: mxC9qkJyuCX0NOEgkK3Z0LWPpxbTcFIvkrDAJ6KBnMFLHToB50AEFg==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:02:20 GMT
age: 83342
etag: "3f4a47cdd9ea3bbd20fec37e4a9dbfa9af2acc50"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7799
Md5:    96437d0cb1ceaffa77124f0dcfeb38cf
Sha1:   3f4a47cdd9ea3bbd20fec37e4a9dbfa9af2acc50
Sha256: 89244601b0a4bc150033e52dc56cf0fbe2846ebba7532c477146258a70783e05
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34ec689c-96b7-450b-b77e-e0ecb4d89c3c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9049
x-amzn-requestid: 6cbd9639-c29d-4ff4-8091-3168f64f4c78
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVVGHzKoAMFSuA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638135ba-100ea4235fdf1df8491041c8;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:38:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: OJZkZ18TlSgdBWsmSroQPIcYIvBFvz5-7hu9_GravTcz6zqxKXHZrg==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:43:36 GMT
age: 84466
etag: "3d32bff85cb7ec118c4496d0c3802829fdc9af3b"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9049
Md5:    c8dc4b8a7e9f7f4f84f0da568b43392b
Sha1:   3d32bff85cb7ec118c4496d0c3802829fdc9af3b
Sha256: 4b0ffde427085c796a7a5823604b29a4af43dbb93e99ec41f34feb37f52ac7d9
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4309
x-amzn-requestid: 47c2739d-73c5-4d91-914c-fe635cb09772
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b1U8xGxgIAMF-qQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63786851-6fbe19dc5c4c20dd657604e3;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 05:23:29 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ezHvyK3va4SioabOjSittTiLQRs_Q8k4TPxkiGp_svtZ8omDPTUN-A==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 05:04:28 GMT
age: 58014
etag: "126771b86638108050cf57c0d12faa27f80f0edb"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4309
Md5:    841a4b110022a99ddea6f7bf66df0fa1
Sha1:   126771b86638108050cf57c0d12faa27f80f0edb
Sha256: 240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf04cc9f-ee4b-42fd-914f-cd86b9dc30eb.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 3502
x-amzn-requestid: ca3f2610-e03c-48a7-abb3-fbbab76f63d2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCvYUHO5IAMFqDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637dc5ce-7e36137711dc4668278c1c94;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 07:03:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QS3ZKYetcm87GNwSr34eRPF2d4r8ppwf3fT19aV-u84f7ObX4bU8wQ==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 07:13:26 GMT
age: 50276
etag: "61f9bed607e81606be78285596acdc5e0e4f4994"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3502
Md5:    a783df85f30f9c555f9df6b99f61744d
Sha1:   61f9bed607e81606be78285596acdc5e0e4f4994
Sha256: 19db42201d0fa059f680d890ede6683c04e893e6308a2256d0203f826a7f34de