| seyf-educ.com/ | 104.21.57.213 | 301 Moved Permanently | 0 B |
IP104.21.57.213:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | fortinet | Malware | |
GET / HTTP/1.1
Host: seyf-educ.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Fri, 09 Dec 2022 18:17:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 09 Dec 2022 19:17:15 GMT
Location: https://seyf-educ.com/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6rPaA4EVUnfO%2BJxm8z5Q63Bv%2F4wuVrv2M%2Bd0pckO4aIVmFyEkRppG5DRqZ0OoZk%2Fef0O6FAldbh9Jiznym4PmxN3OuMvQ1QEJKhlf000TZKFLCr7kIq4DzW1ILqeWC5N"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 776fbc912ee6b4ed-OSL
alt-svc: h2=":443"; ma=60
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashf2acd891dc6eb1f09f57a2b086791781 1e2088306501a61edcca1ade62c4d54f23b3b083 51148fed95cc00d60dc3640350f135b1b2763ff0e3cfbffc40f0948317894be9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "51148FED95CC00D60DC3640350F135B1B2763FF0E3CFBFFC40F0948317894BE9"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8143
Expires: Fri, 09 Dec 2022 20:32:58 GMT
Date: Fri, 09 Dec 2022 18:17:15 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashaea93551fa9deb76ae49a3b4019d64fe e3b8862057ebe839959228e42246d7b1807fc90c 7e210f03b140418085e94ec20c1d27d6ecf7a404cbd323e16476ae5ae95d6dac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7E210F03B140418085E94EC20C1D27D6ECF7A404CBD323E16476AE5AE95D6DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8099
Expires: Fri, 09 Dec 2022 20:32:14 GMT
Date: Fri, 09 Dec 2022 18:17:15 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ | 35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash14cd9a0afb6ba9a763651d5112760d1e 75d7b104ab9ab11fbb73c3f348b43b0119b5adfa 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Backoff, Content-Length, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 09 Dec 2022 17:33:14 GMT
content-type: application/json
age: 2641
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash4ee537977be9c03702f8ffe0025bf1fe 21637881c4aa34c4add703f8bff4eff573159f45 4819229fd8f502a0c68c80bd7409e104c1b4d1a98ca8a6cd9deba629b1511aea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4819229FD8F502A0C68C80BD7409E104C1B4D1A98CA8A6CD9DEBA629B1511AEA"
Last-Modified: Thu, 08 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6665
Expires: Fri, 09 Dec 2022 20:08:20 GMT
Date: Fri, 09 Dec 2022 18:17:15 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash53341dea33f4f3d9b4966f80589f429a 20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: TvL/6JWiIyFNsjHW7K8+V2z656uaTjnMWlMyVnCSRJVQpe+hxk3aXvBFd5J23okbhwT4dbguKoCsQ6xaUdZmNw==
x-amz-request-id: GDDZ7XVPERK22FFE
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 09 Dec 2022 17:48:25 GMT
age: 1731
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| e1.o.lencr.org/ | 23.36.76.226 | 200 OK | 344 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash1f3b5e5c4397b6317fb1628664b940e9 1da4ec9bec635cb6c6add7a89a243f8a9c45cc36 4ba22f532b23fd2f8cce205bb6b43fff23e0ab0842d7d4ddabf37fc05d2bb30c
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "4BA22F532B23FD2F8CCE205BB6B43FFF23E0AB0842D7D4DDABF37FC05D2BB30C"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1593
Expires: Fri, 09 Dec 2022 18:43:49 GMT
Date: Fri, 09 Dec 2022 18:17:16 GMT
Connection: keep-alive
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 18:17:16 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Cache-Control, Backoff, Content-Length, Content-Type, Last-Modified, ETag, Expires, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 09 Dec 2022 17:33:13 GMT
age: 2643
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashe6be4d2155028ffff5d01ab6e7edf6da 07172071b5cf43c4cd7d7930b4ad8518ec1e32e9 4d8a5fa2362fd0910babd6d128d850d4460829468eb23d34ee5ee6eaa42d5a38
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2697
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:17:16 GMT
Last-Modified: Fri, 09 Dec 2022 17:32:19 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
|
|
| push.services.mozilla.com/ | 52.39.62.124 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP52.39.62.124:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: OLWi6vhFVbiq+r0Y6RqtIQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 6gIsXrlJN/vVHCe0Ih0tOUWjZpo=
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash7b8c1870f03a90aac6370fc69516f95f 1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3700
Expires: Fri, 09 Dec 2022 19:18:58 GMT
Date: Fri, 09 Dec 2022 18:17:18 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash7b8c1870f03a90aac6370fc69516f95f 1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3700
Expires: Fri, 09 Dec 2022 19:18:58 GMT
Date: Fri, 09 Dec 2022 18:17:18 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash7b8c1870f03a90aac6370fc69516f95f 1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3700
Expires: Fri, 09 Dec 2022 19:18:58 GMT
Date: Fri, 09 Dec 2022 18:17:18 GMT
Connection: keep-alive
|
|
| e1.o.lencr.org/ | 23.36.76.226 | 200 OK | 344 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash1f3b5e5c4397b6317fb1628664b940e9 1da4ec9bec635cb6c6add7a89a243f8a9c45cc36 4ba22f532b23fd2f8cce205bb6b43fff23e0ab0842d7d4ddabf37fc05d2bb30c
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "4BA22F532B23FD2F8CCE205BB6B43FFF23E0AB0842D7D4DDABF37FC05D2BB30C"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1591
Expires: Fri, 09 Dec 2022 18:43:49 GMT
Date: Fri, 09 Dec 2022 18:17:18 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf07b4f3-8986-4a9c-8c85-b126338852d2.jpeg | 34.120.237.76 | 200 OK | 13 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf07b4f3-8986-4a9c-8c85-b126338852d2.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash730ba1a8edb79ba6f83b46d1ba5aed7b 55a236fedf6f5f7ca2bb88ae13e20846a50fd36d f8043e76265c59073d111987fd4c08d05a3ac80989af9269cca9ebcc21af4013
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf07b4f3-8986-4a9c-8c85-b126338852d2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12748
x-amzn-requestid: edd028e3-c23e-4985-b12d-d3ebe760df47
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cjuciEptIAMFj9A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638af783-1c151eb66f590c9c0e0c4c82;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 07:15:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -y4-_OwHl5_OFykJYYZSqwIopjKoYy1MhaGTpVXd4Grq2EsUP2c3IA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 07:44:29 GMT
age: 37969
etag: "55a236fedf6f5f7ca2bb88ae13e20846a50fd36d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4119e239-0c3b-4175-bfe0-f5d42729d743.jpeg | 34.120.237.76 | 200 OK | 7.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4119e239-0c3b-4175-bfe0-f5d42729d743.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash8c94003641bb5a7595e7004f80f95d22 3446450df60d732f9021d5bfd5f5f7c6c870d9ec 4d782dbf94b2163e9bc18028cd0c1a391fdcfcb019f23c4c26ea0b44432039ff
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4119e239-0c3b-4175-bfe0-f5d42729d743.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7801
x-amzn-requestid: cb8d5aab-409f-4b39-b498-b1ba84f34e06
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czFRNHX4oAMFvoQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911c07-7c6e3bfa3f81082b48f43fa9;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 23:04:39 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 8QHhEAFHTHd-5UqS1S5qwJj_h4WNfix2CgS4MO4zR_psrzgMP3SZ5g==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 17:48:23 GMT
age: 1735
etag: "3446450df60d732f9021d5bfd5f5f7c6c870d9ec"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe602fad-66c2-48db-acd3-371ca6dcb8f6.jpeg | 34.120.237.76 | 200 OK | 7.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe602fad-66c2-48db-acd3-371ca6dcb8f6.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash8c3214044657f3b876d1f1848bca5684 7558222788f06623ddae6e883413e38e1146281e e1f9c9c445bba7765f371dbb655cab43c1e12de7cbd015f8034c494118f7f708
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe602fad-66c2-48db-acd3-371ca6dcb8f6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7897
x-amzn-requestid: 032fd8ae-b7e9-4e12-8546-838191a73688
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cwVM_F51IAMFunw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63900252-345ae6cd107d207f5dbe29a8;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 03:02:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: N-zFZ8yeL7RrOZ5xfqvfBaE3zcXWecvr6Jd-93nKiUZlCXp2n2_Bgw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 03:41:46 GMT
age: 52532
etag: "7558222788f06623ddae6e883413e38e1146281e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d2c55a-1a85-4fbf-b256-9d812a2b5ec2.jpeg | 34.120.237.76 | 200 OK | 5.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d2c55a-1a85-4fbf-b256-9d812a2b5ec2.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashfba9a3854df65740512f96efe7442e58 8fbff7725c842d70e047c635a725723a9dc9c55a 6e639298ebc82343cee9267d2910d15735af55f910e2c3de9218266b7c6fffc9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d2c55a-1a85-4fbf-b256-9d812a2b5ec2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5188
x-amzn-requestid: afb8cbd2-3674-4dac-9cd9-9ff83618ac0a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ck2-5G9joAMFlPA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638b6b92-2979ff216b9028aa70baef8b;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 15:30:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 7Dp35PIr_WYUI1bBa21AvmCMEPi0d3jnhuS8eEk3Q3CXRcGWAnkD8g==
via: 1.1 8ae6af4d17aae7471e5fe2792eb6abcc.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 16:56:53 GMT
age: 4825
etag: "8fbff7725c842d70e047c635a725723a9dc9c55a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29d00d08-ec53-4c7b-a2ef-5901b64cdefd.jpeg | 34.120.237.76 | 200 OK | 7.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29d00d08-ec53-4c7b-a2ef-5901b64cdefd.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash5de5d319f43d9c9c641419d96655541f cde4c7fa0145d3645af17e34c83c63c08f76a076 fdb114eb142f035c7a54195d16af51b5b423642c312f4bccc0f407d8fcc245aa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29d00d08-ec53-4c7b-a2ef-5901b64cdefd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7557
x-amzn-requestid: 400d1465-ecbf-4d95-8aa8-4dce5dca0716
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ctluwGo4oAMFhTg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638ee991-6dba29ae7065d5347a1a420d;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 07:04:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Lazl-stakC-31gMuQ2WzH9uFkIb0g7HaaM3xkwSFdFJMWKTaKqrBEQ==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 04:07:07 GMT
age: 51011
etag: "cde4c7fa0145d3645af17e34c83c63c08f76a076"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a20bda5-6ca4-42c4-8729-6e975652e66a.jpeg | 34.120.237.76 | 200 OK | 6.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a20bda5-6ca4-42c4-8729-6e975652e66a.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash8546542f00ea29ef4df6ab8d3c7c2164 5c8ffe91490006a9890188b53f875568c2b6bd8f 7fb11750ac339ac283da62fd370862c6b95a103a585ca5dd8c90038718d818a1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a20bda5-6ca4-42c4-8729-6e975652e66a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6578
x-amzn-requestid: 6392feb9-e33e-42fa-bc10-b5e31e654c9b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cw4beGG7oAMF8hA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63903aaf-2c890b7b0a16617346a0f7e7;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 07:03:11 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: H067kZXU_djWxbWO34bYMqa0xZ-WF9ntEBhZ-kV_TDoJFXQL_J1hqQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 03:34:27 GMT
age: 52971
etag: "5c8ffe91490006a9890188b53f875568c2b6bd8f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hash795e67bdfadc3c890a663080413b56b7 fdefde3befb6aceac3c337c34c8d738f5091908c 8375b55cfc13989b0cf96293b7bead2ce5811a993b3445da1776ca7015c36985
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:17:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.googletagmanager.com/gtag/js?id=UA-51279578-2 | 142.250.74.168 | 200 OK | 44 kB |
URL HTTP/2www.googletagmanager.com/gtag/js?id=UA-51279578-2 IP142.250.74.168:0
File typeASCII text, with very long lines (1921) Hashd405f15970c278171b131d4ce80838c3 9ce7f1cf7ca1d8e6efe2bf9fce5fde751835aaa0 1ba5ffcf1522bcc41fb7f8a53f48c41ced24cff39b73e51f31ced7853b75f08f
GET /gtag/js?id=UA-51279578-2 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 09 Dec 2022 18:17:18 GMT
expires: Fri, 09 Dec 2022 18:17:18 GMT
cache-control: private, max-age=900
last-modified: Fri, 09 Dec 2022 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43595
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash8f6ab0debac98d11413e20fa98ba8286 e63543ba0f3a685edf4d8fee3f587efd5417015f fe6bc081b1963c61a3af1ab7b7b1213ae5bc7b962c5474d8f6fe123547d5d309
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:17:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/tajawal/v3/Iurf6YBj_oCad4k1l8KiHrFpiQ.woff2 | 216.58.207.227 | 200 OK | 9.9 kB |
URL HTTP/2fonts.gstatic.com/s/tajawal/v3/Iurf6YBj_oCad4k1l8KiHrFpiQ.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 9864, version 1.0\012- data Hash9751651b345afc0e49ca1a302c19a294 05393c6e747f5e8a3c7fbee5fe15cad4c80837e1 d5aa3e4c58493f8d3693be4962e94e08d14e178ef4f0be2a27369a8813498e54
GET /s/tajawal/v3/Iurf6YBj_oCad4k1l8KiHrFpiQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.seyf-educ.com
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9864
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 09 Dec 2022 10:06:15 GMT
expires: Sat, 09 Dec 2023 10:06:15 GMT
cache-control: public, max-age=31536000
age: 29464
last-modified: Tue, 16 Jul 2019 03:31:06 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash8f6ab0debac98d11413e20fa98ba8286 e63543ba0f3a685edf4d8fee3f587efd5417015f fe6bc081b1963c61a3af1ab7b7b1213ae5bc7b962c5474d8f6fe123547d5d309
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:17:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/tajawal/v3/Iurf6YBj_oCad4k1l8KiHrRpiYlJ.woff2 | 216.58.207.227 | 200 OK | 8.5 kB |
URL HTTP/2fonts.gstatic.com/s/tajawal/v3/Iurf6YBj_oCad4k1l8KiHrRpiYlJ.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 8488, version 1.0\012- data Hashb405dddf4639fdf946fed00d4b91139c 5df4eb97753c51715b996fcec1dec7e55877404b b0d3610919043227b56c8d5130e2ead271a067bb1b930678d5af24bbbae7c16f
GET /s/tajawal/v3/Iurf6YBj_oCad4k1l8KiHrRpiYlJ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.seyf-educ.com
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8488
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 03 Dec 2022 07:20:32 GMT
expires: Sun, 03 Dec 2023 07:20:32 GMT
cache-control: public, max-age=31536000
age: 557807
last-modified: Tue, 16 Jul 2019 03:31:11 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash8f6ab0debac98d11413e20fa98ba8286 e63543ba0f3a685edf4d8fee3f587efd5417015f fe6bc081b1963c61a3af1ab7b7b1213ae5bc7b962c5474d8f6fe123547d5d309
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:17:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash8f6ab0debac98d11413e20fa98ba8286 e63543ba0f3a685edf4d8fee3f587efd5417015f fe6bc081b1963c61a3af1ab7b7b1213ae5bc7b962c5474d8f6fe123547d5d309
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:17:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/tajawal/v3/Iurf6YBj_oCad4k1l4qkHrFpiQ.woff2 | 216.58.207.227 | 200 OK | 10 kB |
URL HTTP/2fonts.gstatic.com/s/tajawal/v3/Iurf6YBj_oCad4k1l4qkHrFpiQ.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 9988, version 1.0\012- data Hash1ebcf6603786ff3b7e64cc8b4665fa5d 855f5fd5c0f7cc51b15a1fe82c06731f28b669e7 773d39d817342d38ff8203ede93c2280d9f4e6cbeac425fe09bdb7decddc65aa
GET /s/tajawal/v3/Iurf6YBj_oCad4k1l4qkHrFpiQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.seyf-educ.com
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9988
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Dec 2022 16:40:48 GMT
expires: Fri, 08 Dec 2023 16:40:48 GMT
cache-control: public, max-age=31536000
age: 92191
last-modified: Tue, 16 Jul 2019 03:34:05 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash34da737f5d8fab7415ab2d552058d653 2e28de807960cde0030e68b4f468aaeecd1b533f bbd3063026b41b4487911d85977a7dfe8e0f62f93a48cedad2ce2448f28e2cf0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:17:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/tajawal/v3/Iurf6YBj_oCad4k1l4qkHrRpiYlJ.woff2 | 216.58.207.227 | 200 OK | 8.6 kB |
URL HTTP/2fonts.gstatic.com/s/tajawal/v3/Iurf6YBj_oCad4k1l4qkHrRpiYlJ.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 8600, version 1.0\012- data Hasha0b4060f16acb762eec31ad1392c8644 cdac9afa81ba0670823913f386acfd670e343e40 453a980367e2c76aacb9c48ddab4f0732175bd0f2aefc257cfaa75dfb4dc2ae2
GET /s/tajawal/v3/Iurf6YBj_oCad4k1l4qkHrRpiYlJ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.seyf-educ.com
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 05:45:54 GMT
expires: Thu, 07 Dec 2023 05:45:54 GMT
cache-control: public, max-age=31536000
age: 217885
last-modified: Tue, 16 Jul 2019 03:34:05 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash34da737f5d8fab7415ab2d552058d653 2e28de807960cde0030e68b4f468aaeecd1b533f bbd3063026b41b4487911d85977a7dfe8e0f62f93a48cedad2ce2448f28e2cf0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:17:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hasha5bdd65780397c16e1f11d2144025fed 7631c404b4f9bcb38d95ef6527de5b9ca8104579 bc8cdd03ed2e87ad1405c91f28d8d6a3b88972f75756e531e854165111b07ecd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:17:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| 1.bp.blogspot.com/-osXs30WkxGs/Xc54W712ZGI/AAAAAAAALNc/s5APXdvzZFolZpxugDFqtKJg3AMisnJ4gCLcBGAsYHQ/s640/1.jpg | 142.250.74.65 | 200 OK | 42 kB |
URL HTTP/21.bp.blogspot.com/-osXs30WkxGs/Xc54W712ZGI/AAAAAAAALNc/s5APXdvzZFolZpxugDFqtKJg3AMisnJ4gCLcBGAsYHQ/s640/1.jpg IP142.250.74.65:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 640x592, components 3\012- data Hashde7b4045b0888d50ab373762b65e52c9 a3b6136d934cedb43eeed0bf8ce7a52c8fec3477 0f30f694c488171fade2395a042448762f4aef832b6fa02e549ce4a9fb5129a0
GET /-osXs30WkxGs/Xc54W712ZGI/AAAAAAAALNc/s5APXdvzZFolZpxugDFqtKJg3AMisnJ4gCLcBGAsYHQ/s640/1.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v2cd9"
expires: Sat, 10 Dec 2022 18:17:19 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="1.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 18:17:19 GMT
server: fife
content-length: 42006
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| 1.bp.blogspot.com/-GBvvc4hLyRw/XRnq5WRw8CI/AAAAAAAAHfc/7fu7fBi_WB0QQRZ51Y0TYhuICbGDbImUQCLcBGAs/s1600/%25D9%2583%25D8%25AA%25D8%25A7%25D8%25A8%2B%25D8%25A7%25D8%25B3%25D8%25A7%25D8%25B3%25D9%258A%25D8%25A7%25D8%25AA%2B%25D8%25A7%25D9%2584%25D8%25A7%25D8%25B9%25D9%2584%25D8%25A7%25D9%2585%2B%25D8%25A7%25D9%2584%25D8%25A2%25D9%2584%25D9%258A.PNG | 142.250.74.65 | 200 OK | 44 kB |
URL HTTP/21.bp.blogspot.com/-GBvvc4hLyRw/XRnq5WRw8CI/AAAAAAAAHfc/7fu7fBi_WB0QQRZ51Y0TYhuICbGDbImUQCLcBGAs/s1600/%25D9%2583%25D8%25AA%25D8%25A7%25D8%25A8%2B%25D8%25A7%25D8%25B3%25D8%25A7%25D8%25B3%25D9%258A%25D8%25A7%25D8%25AA%2B%25D8%25A7%25D9%2584%25D8%25A7%25D8%25B9%25D9%2584%25D8%25A7%25D9%2585%2B%25D8%25A7%25D9%2584%25D8%25A2%25D9%2584%25D9%258A.PNG IP142.250.74.65:0
File typePNG image data, 728 x 451, 8-bit/color RGB, non-interlaced\012- data Hash6fe51914a86a5ba1611f62d28761e794 0080c51823db73480a729885c162e4333d82308a f2fa4a2714747e42d47f790dc396719b88bc75e280091d5cdbfd05bc40b03f65
GET /-GBvvc4hLyRw/XRnq5WRw8CI/AAAAAAAAHfc/7fu7fBi_WB0QQRZ51Y0TYhuICbGDbImUQCLcBGAs/s1600/%25D9%2583%25D8%25AA%25D8%25A7%25D8%25A8%2B%25D8%25A7%25D8%25B3%25D8%25A7%25D8%25B3%25D9%258A%25D8%25A7%25D8%25AA%2B%25D8%25A7%25D9%2584%25D8%25A7%25D8%25B9%25D9%2584%25D8%25A7%25D9%2585%2B%25D8%25A7%25D9%2584%25D8%25A2%25D9%2584%25D9%258A.PNG HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1df8"
expires: Sat, 10 Dec 2022 18:17:19 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="____ _______ _______ _____.PNG";filename*=UTF-8''%D9%83%D8%AA%D8%A7%D8%A8%20%D8%A7%D8%B3%D8%A7%D8%B3%D9%8A%D8%A7%D8%AA%20%D8%A7%D9%84%D8%A7%D8%B9%D9%84%D8%A7%D9%85%20%D8%A7%D9%84%D8%A2%D9%84%D9%8A.PNG
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 18:17:19 GMT
server: fife
content-length: 43697
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| 1.bp.blogspot.com/-ox0H3QrVXI8/XRc2l4QaNYI/AAAAAAAAHX4/1-omoxIMImYNdjYqgcSHRLz9y-JZu-guwCLcBGAs/s1600/111111.PNG | 142.250.74.65 | 200 OK | 25 kB |
URL HTTP/21.bp.blogspot.com/-ox0H3QrVXI8/XRc2l4QaNYI/AAAAAAAAHX4/1-omoxIMImYNdjYqgcSHRLz9y-JZu-guwCLcBGAs/s1600/111111.PNG IP142.250.74.65:0
File typePNG image data, 652 x 414, 8-bit/color RGB, non-interlaced\012- data Hash5ff6736818249657dd9599bd45ddba36 fff3e2e19612b557deca1ec6feca0c39901c2d3d dcafd1a0c2ce42ae1dab59fbb432a0ebc9a1556bc6a6479483f4d50c82750628
GET /-ox0H3QrVXI8/XRc2l4QaNYI/AAAAAAAAHX4/1-omoxIMImYNdjYqgcSHRLz9y-JZu-guwCLcBGAs/s1600/111111.PNG HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1d7f"
expires: Sat, 10 Dec 2022 18:17:19 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="111111.PNG"
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 18:17:19 GMT
server: fife
content-length: 25385
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| 1.bp.blogspot.com/-MbUESlFxnn0/X0jRJhyHEVI/AAAAAAAAVSY/5IIZafklAJQu1EzwsmKAoH5dPYDN3RzogCLcBGAsYHQ/s640/%25D8%25AC%25D9%2585%25D9%2588%25D8%25B9%2B%25D8%25A7%25D9%2584%25D9%2582%25D9%2584%25D8%25A9.jpg | 142.250.74.65 | 200 OK | 35 kB |
URL HTTP/21.bp.blogspot.com/-MbUESlFxnn0/X0jRJhyHEVI/AAAAAAAAVSY/5IIZafklAJQu1EzwsmKAoH5dPYDN3RzogCLcBGAsYHQ/s640/%25D8%25AC%25D9%2585%25D9%2588%25D8%25B9%2B%25D8%25A7%25D9%2584%25D9%2582%25D9%2584%25D8%25A9.jpg IP142.250.74.65:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 640x302, components 3\012- data Hash437853198830ec4b906451a25a6a5fde 4a066c485b7930f153fdeb38fad3dfddda336475 07221360cb35adabae4f78c107d912682e2ad578ab2e9c38a5a7be65c2f22fb0
GET /-MbUESlFxnn0/X0jRJhyHEVI/AAAAAAAAVSY/5IIZafklAJQu1EzwsmKAoH5dPYDN3RzogCLcBGAsYHQ/s640/%25D8%25AC%25D9%2585%25D9%2588%25D8%25B9%2B%25D8%25A7%25D9%2584%25D9%2582%25D9%2584%25D8%25A9.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v5528"
expires: Sat, 10 Dec 2022 18:17:19 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="____ _____.jpg";filename*=UTF-8''%D8%AC%D9%85%D9%88%D8%B9%20%D8%A7%D9%84%D9%82%D9%84%D8%A9.jpg
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 18:17:19 GMT
server: fife
content-length: 34594
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| 3.bp.blogspot.com/-RH2Kh-wK9vQ/WQr-S0KqlwI/AAAAAAAAC6I/Z7t2H7Q9lZ8INeFRREY_V9NdPt-JXbblgCLcB/w640-h473/16473177_214722648992187_3159552472687964958_n.jpg | 142.250.74.65 | 200 OK | 65 kB |
URL HTTP/23.bp.blogspot.com/-RH2Kh-wK9vQ/WQr-S0KqlwI/AAAAAAAAC6I/Z7t2H7Q9lZ8INeFRREY_V9NdPt-JXbblgCLcB/w640-h473/16473177_214722648992187_3159552472687964958_n.jpg IP142.250.74.65:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 640x473, components 3\012- data Hash052097d50246e9b10eee2cafa9c08575 0ceb4ccf5b97380b844c1797c4d8c5ba8162d207 f2e4da85ecc7bf7e7dbecd5f3238e7737efe15ea819f317e1d528bbd11edcb7a
GET /-RH2Kh-wK9vQ/WQr-S0KqlwI/AAAAAAAAC6I/Z7t2H7Q9lZ8INeFRREY_V9NdPt-JXbblgCLcB/w640-h473/16473177_214722648992187_3159552472687964958_n.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vba3"
expires: Sat, 10 Dec 2022 18:17:19 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="16473177_214722648992187_3159552472687964958_n.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 18:17:19 GMT
server: fife
content-length: 65009
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| 1.bp.blogspot.com/-b4mes08clvc/X65WZ_vbZBI/AAAAAAAAXPY/MRe5VoO6LLw7GyLbI4NMYtAnJBotJai1ACLcBGAsYHQ/w640-h324/%25D8%25AD%25D9%2584%2B%25D8%25AA%25D9%2585%25D8%25B1%25D9%258A%25D9%2586%2B18%2B%25D8%25B5%25D9%2581%25D8%25AD%25D8%25A9%2B14.jpg | 142.250.74.65 | 200 OK | 54 kB |
URL HTTP/21.bp.blogspot.com/-b4mes08clvc/X65WZ_vbZBI/AAAAAAAAXPY/MRe5VoO6LLw7GyLbI4NMYtAnJBotJai1ACLcBGAsYHQ/w640-h324/%25D8%25AD%25D9%2584%2B%25D8%25AA%25D9%2585%25D8%25B1%25D9%258A%25D9%2586%2B18%2B%25D8%25B5%25D9%2581%25D8%25AD%25D8%25A9%2B14.jpg IP142.250.74.65:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 640x323, components 3\012- data Hash001df5239b2f1bd1d786affbd1f9c141 55c388ba556f5ae33a932c97f08254f2aa5e73f3 ab6dd62c5efc2a3b8c43900f02ef7b713aab8aa6b95c46efb2f3c6876d5ea3e0
GET /-b4mes08clvc/X65WZ_vbZBI/AAAAAAAAXPY/MRe5VoO6LLw7GyLbI4NMYtAnJBotJai1ACLcBGAsYHQ/w640-h324/%25D8%25AD%25D9%2584%2B%25D8%25AA%25D9%2585%25D8%25B1%25D9%258A%25D9%2586%2B18%2B%25D8%25B5%25D9%2581%25D8%25AD%25D8%25A9%2B14.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v5cf7"
expires: Sat, 10 Dec 2022 18:17:19 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="__ _____ 18 ____ 14.jpg";filename*=UTF-8''%D8%AD%D9%84%20%D8%AA%D9%85%D8%B1%D9%8A%D9%86%2018%20%D8%B5%D9%81%D8%AD%D8%A9%2014.jpg
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 18:17:19 GMT
server: fife
content-length: 53495
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| 1.bp.blogspot.com/-aXkL3mya4ZU/X_bMw5PtIwI/AAAAAAAAY7g/VLQvv1t9OkQfER1SfKGHIQ-qxJ4N_6vigCLcBGAsYHQ/w640-h324/%25D8%25AD%25D9%2584%2B%25D8%25AA%25D9%2585%25D8%25B1%25D9%258A%25D9%2586%2B29%2B%25D8%25B5%2B38.jpg | 142.250.74.65 | 200 OK | 53 kB |
URL HTTP/21.bp.blogspot.com/-aXkL3mya4ZU/X_bMw5PtIwI/AAAAAAAAY7g/VLQvv1t9OkQfER1SfKGHIQ-qxJ4N_6vigCLcBGAsYHQ/w640-h324/%25D8%25AD%25D9%2584%2B%25D8%25AA%25D9%2585%25D8%25B1%25D9%258A%25D9%2586%2B29%2B%25D8%25B5%2B38.jpg IP142.250.74.65:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 640x323, components 3\012- data Hash0c03fb8d8415135d0ffc8de9d3830db0 1f719209be77832365e23ada3020d0739df4d5f6 63abb4cfee81a1069bb817ef124582bc5a89ba3ac0b640fd1d1b23142eab950a
GET /-aXkL3mya4ZU/X_bMw5PtIwI/AAAAAAAAY7g/VLQvv1t9OkQfER1SfKGHIQ-qxJ4N_6vigCLcBGAsYHQ/w640-h324/%25D8%25AD%25D9%2584%2B%25D8%25AA%25D9%2585%25D8%25B1%25D9%258A%25D9%2586%2B29%2B%25D8%25B5%2B38.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v63bb"
expires: Sat, 10 Dec 2022 18:17:19 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="__ _____ 29 _ 38.jpg";filename*=UTF-8''%D8%AD%D9%84%20%D8%AA%D9%85%D8%B1%D9%8A%D9%86%2029%20%D8%B5%2038.jpg
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 18:17:19 GMT
server: fife
content-length: 52629
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| 1.bp.blogspot.com/-iQdUbk8iq30/Xz-m3QGNAvI/AAAAAAAAVA0/KegUUhdNFa8plcR2ALTtAu3jQljgwO0CQCLcBGAsYHQ/s640/%25D8%25A7%25D8%25BA%25D8%25B1%25D8%25A7%25D8%25B6%2B%25D8%25A7%25D9%2584%25D8%25AE%25D8%25A8%25D8%25B1%2B%25D9%2588%2B%25D8%25A7%25D9%2584%25D8%25A7%25D9%2586%25D8%25B4%25D8%25A7%25D8%25A1.jpg | 142.250.74.65 | 200 OK | 43 kB |
URL HTTP/21.bp.blogspot.com/-iQdUbk8iq30/Xz-m3QGNAvI/AAAAAAAAVA0/KegUUhdNFa8plcR2ALTtAu3jQljgwO0CQCLcBGAsYHQ/s640/%25D8%25A7%25D8%25BA%25D8%25B1%25D8%25A7%25D8%25B6%2B%25D8%25A7%25D9%2584%25D8%25AE%25D8%25A8%25D8%25B1%2B%25D9%2588%2B%25D8%25A7%25D9%2584%25D8%25A7%25D9%2586%25D8%25B4%25D8%25A7%25D8%25A1.jpg IP142.250.74.65:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 640x302, components 3\012- data Hashe21716c0dd41e9383a870ac848fe292a c3d9bf32bef58f81fea4d4b587f3049c2c00cc5c e7fa6caa1722c279ff3717a6db9350c75b2e256992e8f2a22eafe53bc5967fc2
GET /-iQdUbk8iq30/Xz-m3QGNAvI/AAAAAAAAVA0/KegUUhdNFa8plcR2ALTtAu3jQljgwO0CQCLcBGAsYHQ/s640/%25D8%25A7%25D8%25BA%25D8%25B1%25D8%25A7%25D8%25B6%2B%25D8%25A7%25D9%2584%25D8%25AE%25D8%25A8%25D8%25B1%2B%25D9%2588%2B%25D8%25A7%25D9%2584%25D8%25A7%25D9%2586%25D8%25B4%25D8%25A7%25D8%25A1.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v540f"
expires: Sat, 10 Dec 2022 18:17:19 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="_____ _____ _ _______.jpg";filename*=UTF-8''%D8%A7%D8%BA%D8%B1%D8%A7%D8%B6%20%D8%A7%D9%84%D8%AE%D8%A8%D8%B1%20%D9%88%20%D8%A7%D9%84%D8%A7%D9%86%D8%B4%D8%A7%D8%A1.jpg
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 18:17:19 GMT
server: fife
content-length: 43045
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashe00a9dffaf819576d67e09781fb54423 6dd8eaf8216dde6007adf996d2f97a905234fae2 28da6d28a527037929fa0d0b55581361af52bc39d4841a701deba305504254c4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "28DA6D28A527037929FA0D0B55581361AF52BC39D4841A701DEBA305504254C4"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1286
Expires: Fri, 09 Dec 2022 18:38:45 GMT
Date: Fri, 09 Dec 2022 18:17:19 GMT
Connection: keep-alive
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash4e3dc85fd71bdb106039966a96cdd02b 53d3487232ddcac30b53c224c94e63571633e5af d0a3a292876b50c590a3fa6c04d3471a6fb726c54f57e75c21f2e1bd45424ace
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:17:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash34da737f5d8fab7415ab2d552058d653 2e28de807960cde0030e68b4f468aaeecd1b533f bbd3063026b41b4487911d85977a7dfe8e0f62f93a48cedad2ce2448f28e2cf0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:17:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| 1.bp.blogspot.com/-IFtC-gAfvNw/X7T7EqmoN9I/AAAAAAAAXaI/ayTvojaNJEoye6tOskbKT73-idHXmD98ACLcBGAsYHQ/w640-h324/%25D8%25AD%25D9%2584%2B%25D8%25AA%25D9%2585%25D8%25B1%25D9%258A%25D9%2586%2B24%2B%25D8%25B5%25D9%2581%25D8%25AD%25D8%25A9%2B15.jpg | 142.250.74.65 | 200 OK | 54 kB |
URL HTTP/21.bp.blogspot.com/-IFtC-gAfvNw/X7T7EqmoN9I/AAAAAAAAXaI/ayTvojaNJEoye6tOskbKT73-idHXmD98ACLcBGAsYHQ/w640-h324/%25D8%25AD%25D9%2584%2B%25D8%25AA%25D9%2585%25D8%25B1%25D9%258A%25D9%2586%2B24%2B%25D8%25B5%25D9%2581%25D8%25AD%25D8%25A9%2B15.jpg IP142.250.74.65:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 640x323, components 3\012- data Hasha0972a1827f2e67de61c3b6b5e15d752 18bf2a79ce83ecbf0b0059c466a740c256100728 66cd83929d43491764db287376acd0d0ab566066e7f0aea9fc0af6d7a90f41de
GET /-IFtC-gAfvNw/X7T7EqmoN9I/AAAAAAAAXaI/ayTvojaNJEoye6tOskbKT73-idHXmD98ACLcBGAsYHQ/w640-h324/%25D8%25AD%25D9%2584%2B%25D8%25AA%25D9%2585%25D8%25B1%25D9%258A%25D9%2586%2B24%2B%25D8%25B5%25D9%2581%25D8%25AD%25D8%25A9%2B15.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v5da5"
expires: Sat, 10 Dec 2022 18:17:19 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="__ _____ 24 ____ 15.jpg";filename*=UTF-8''%D8%AD%D9%84%20%D8%AA%D9%85%D8%B1%D9%8A%D9%86%2024%20%D8%B5%D9%81%D8%AD%D8%A9%2015.jpg
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 18:17:19 GMT
server: fife
content-length: 53786
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| 3.bp.blogspot.com/-F3TmuEkQUWY/WCiXphQ8XaI/AAAAAAAABaw/Dg-mgW6Xgf4iwy43K5Zw7Lz2GC2Hl4YLgCLcB/s1600/%25D8%25A7%25D8%25AE%25D8%25AA%25D8%25A8%25D8%25A7%25D8%25B1%2B%25D8%25A7%25D9%2584%25D9%2581%25D8%25B5%25D9%2584%2B%25D8%25A7%25D9%2584%25D8%25A3%25D9%2588%25D9%2584%2B%25D9%2581%25D9%258A%2B%25D8%25AC%25D8%25AC%25D9%2585%25D9%258A%25D8%25B9%2B%25D8%25A7%25D9%2584%25D9%2585%25D9%2588%25D8%25A7%25D8%25AF%2B%25D9%2584%25D9%2584%25D8%25B3%25D9%2586%25D8%25A9%2B%25D8%25A7%25D9%2584%25D8%25B1%25D8%25A7%25D8%25A8%25D8%25B9%25D8%25A9%2B%25D8%25A7%25D8%25A8%25D8%25AA%25D8%25AF%25D8%25A7%25D8%25A6%25D9%258A.jpg | 142.250.74.65 | 200 OK | 76 kB |
URL HTTP/23.bp.blogspot.com/-F3TmuEkQUWY/WCiXphQ8XaI/AAAAAAAABaw/Dg-mgW6Xgf4iwy43K5Zw7Lz2GC2Hl4YLgCLcB/s1600/%25D8%25A7%25D8%25AE%25D8%25AA%25D8%25A8%25D8%25A7%25D8%25B1%2B%25D8%25A7%25D9%2584%25D9%2581%25D8%25B5%25D9%2584%2B%25D8%25A7%25D9%2584%25D8%25A3%25D9%2588%25D9%2584%2B%25D9%2581%25D9%258A%2B%25D8%25AC%25D8%25AC%25D9%2585%25D9%258A%25D8%25B9%2B%25D8%25A7%25D9%2584%25D9%2585%25D9%2588%25D8%25A7%25D8%25AF%2B%25D9%2584%25D9%2584%25D8%25B3%25D9%2586%25D8%25A9%2B%25D8%25A7%25D9%2584%25D8%25B1%25D8%25A7%25D8%25A8%25D8%25B9%25D8%25A9%2B%25D8%25A7%25D8%25A8%25D8%25AA%25D8%25AF%25D8%25A7%25D8%25A6%25D9%258A.jpg IP142.250.74.65:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=4, orientation=upper-left, software=Google], baseline, precision 8, 682x475, components 3\012- data Hash55f664a639d8b4b1f015d28c32fe297c 9eae015ba5e30e8b21e0de16505a726df247b5b8 9f6a27ccfe567491c8d9428fdb1223e02bf10c31f1bedeb1358e5d439de36cc5
GET /-F3TmuEkQUWY/WCiXphQ8XaI/AAAAAAAABaw/Dg-mgW6Xgf4iwy43K5Zw7Lz2GC2Hl4YLgCLcB/s1600/%25D8%25A7%25D8%25AE%25D8%25AA%25D8%25A8%25D8%25A7%25D8%25B1%2B%25D8%25A7%25D9%2584%25D9%2581%25D8%25B5%25D9%2584%2B%25D8%25A7%25D9%2584%25D8%25A3%25D9%2588%25D9%2584%2B%25D9%2581%25D9%258A%2B%25D8%25AC%25D8%25AC%25D9%2585%25D9%258A%25D8%25B9%2B%25D8%25A7%25D9%2584%25D9%2585%25D9%2588%25D8%25A7%25D8%25AF%2B%25D9%2584%25D9%2584%25D8%25B3%25D9%2586%25D8%25A9%2B%25D8%25A7%25D9%2584%25D8%25B1%25D8%25A7%25D8%25A8%25D8%25B9%25D8%25A9%2B%25D8%25A7%25D8%25A8%25D8%25AA%25D8%25AF%25D8%25A7%25D8%25A6%25D9%258A.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v5c7"
expires: Sat, 10 Dec 2022 18:17:19 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="______ _____ _____ __ _____ ______ _____ _______ _______.jpg";filename*=UTF-8''%D8%A7%D8%AE%D8%AA%D8%A8%D8%A7%D8%B1%20%D8%A7%D9%84%D9%81%D8%B5%D9%84%20%D8%A7%D9%84%D8%A3%D9%88%D9%84%20%D9%81%D9%8A%20%D8%AC%D8%AC%D9%85%D9%8A%D8%B9%20%D8%A7%D9%84%D9%85%D9%88%D8%A7%D8%AF%20%D9%84%D9%84%D8%B3%D9%86%D8%A9%20%D8%A7%D9%84%D8%B1%D8%A7%D8%A8%D8%B9%D8%A9%20%D8%A7%D8%A8%D8%AA%D8%AF%D8%A7%D8%A6%D9%8A.jpg
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 18:17:19 GMT
server: fife
content-length: 76436
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash34da737f5d8fab7415ab2d552058d653 2e28de807960cde0030e68b4f468aaeecd1b533f bbd3063026b41b4487911d85977a7dfe8e0f62f93a48cedad2ce2448f28e2cf0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:17:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| 1.bp.blogspot.com/-64eMJGv9e_c/Wd-qLJT4vZI/AAAAAAAAAl0/KyOQINRrZ-8K3xljVcmiUUklJqB9zNvVgCLcBGAs/w640-h373/%25D9%2585%25D9%2586%2B%25D8%25A7%25D8%25AB%25D8%25A7%25D8%25B1%2B%25D8%25A7%25D9%2584%25D8%25A7%25D8%25B3%25D9%2584%25D8%25A7%25D9%2585%2B%25D8%25B9%25D9%2584%25D9%2589%2B%25D8%25A7%25D9%2584%25D9%2581%25D9%2583%25D8%25B1%2B%25D9%2588%2B%25D8%25A7%25D9%2584%25D9%2584%25D8%25BA%25D8%25A9.png | 142.250.74.65 | 200 OK | 83 kB |
URL HTTP/21.bp.blogspot.com/-64eMJGv9e_c/Wd-qLJT4vZI/AAAAAAAAAl0/KyOQINRrZ-8K3xljVcmiUUklJqB9zNvVgCLcBGAs/w640-h373/%25D9%2585%25D9%2586%2B%25D8%25A7%25D8%25AB%25D8%25A7%25D8%25B1%2B%25D8%25A7%25D9%2584%25D8%25A7%25D8%25B3%25D9%2584%25D8%25A7%25D9%2585%2B%25D8%25B9%25D9%2584%25D9%2589%2B%25D8%25A7%25D9%2584%25D9%2581%25D9%2583%25D8%25B1%2B%25D9%2588%2B%25D8%25A7%25D9%2584%25D9%2584%25D8%25BA%25D8%25A9.png IP142.250.74.65:0
File typePNG image data, 600 x 350, 8-bit/color RGB, non-interlaced\012- data Hashee39f30f4b7d423f59ca0cde43e61e23 c61dee4114d67582f3863972b887ceee29874c8e caad53735a271b38953fe4322394927d43df6fd8f186cff1ca0a30179ce2216c
GET /-64eMJGv9e_c/Wd-qLJT4vZI/AAAAAAAAAl0/KyOQINRrZ-8K3xljVcmiUUklJqB9zNvVgCLcBGAs/w640-h373/%25D9%2585%25D9%2586%2B%25D8%25A7%25D8%25AB%25D8%25A7%25D8%25B1%2B%25D8%25A7%25D9%2584%25D8%25A7%25D8%25B3%25D9%2584%25D8%25A7%25D9%2585%2B%25D8%25B9%25D9%2584%25D9%2589%2B%25D8%25A7%25D9%2584%25D9%2581%25D9%2583%25D8%25B1%2B%25D9%2588%2B%25D8%25A7%25D9%2584%25D9%2584%25D8%25BA%25D8%25A9.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v264"
expires: Sat, 10 Dec 2022 18:17:19 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="__ ____ _______ ___ _____ _ _____.png";filename*=UTF-8''%D9%85%D9%86%20%D8%A7%D8%AB%D8%A7%D8%B1%20%D8%A7%D9%84%D8%A7%D8%B3%D9%84%D8%A7%D9%85%20%D8%B9%D9%84%D9%89%20%D8%A7%D9%84%D9%81%D9%83%D8%B1%20%D9%88%20%D8%A7%D9%84%D9%84%D8%BA%D8%A9.png
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 18:17:19 GMT
server: fife
content-length: 83000
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| 3.bp.blogspot.com/-0W2NPQJyxlE/V-MQby0JOqI/AAAAAAAAAJI/mCwCKaxeASM7YtFHZnPhCEUO-21xsCA-QCLcB/s640/%25D8%25A7%25D9%2584%25D8%25AA%25D8%25AF%25D8%25B1%25D8%25AC%2B%25D8%25A7%25D9%2584%25D8%25B3%25D9%2586%25D9%2588%25D9%258A%2B%25D9%2584%25D8%25A3%25D9%2586%25D8%25B4%25D8%25B7%25D8%25A9%2B%25D8%25A7%25D9%2584%25D9%2584%25D8%25BA%25D8%25A9%2B%25D8%25A7%25D9%2584%25D8%25B9%25D8%25B1%25D8%25A8%25D9%258A%25D8%25A9%25E2%2580%258B.JPG | 142.250.74.65 | 200 OK | 75 kB |
URL HTTP/23.bp.blogspot.com/-0W2NPQJyxlE/V-MQby0JOqI/AAAAAAAAAJI/mCwCKaxeASM7YtFHZnPhCEUO-21xsCA-QCLcB/s640/%25D8%25A7%25D9%2584%25D8%25AA%25D8%25AF%25D8%25B1%25D8%25AC%2B%25D8%25A7%25D9%2584%25D8%25B3%25D9%2586%25D9%2588%25D9%258A%2B%25D9%2584%25D8%25A3%25D9%2586%25D8%25B4%25D8%25B7%25D8%25A9%2B%25D8%25A7%25D9%2584%25D9%2584%25D8%25BA%25D8%25A9%2B%25D8%25A7%25D9%2584%25D8%25B9%25D8%25B1%25D8%25A8%25D9%258A%25D8%25A9%25E2%2580%258B.JPG IP142.250.74.65:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 640x426, components 3\012- data Hashc9a2d218ea9a771918aec7f3172e2718 69a0256de6666ae7d3605a032357b8aa0292e1f6 bc1dabbf5d71de4209370f9e6745e8e2aa742da9b01421fa7f3faa9a21b31238
GET /-0W2NPQJyxlE/V-MQby0JOqI/AAAAAAAAAJI/mCwCKaxeASM7YtFHZnPhCEUO-21xsCA-QCLcB/s640/%25D8%25A7%25D9%2584%25D8%25AA%25D8%25AF%25D8%25B1%25D8%25AC%2B%25D8%25A7%25D9%2584%25D8%25B3%25D9%2586%25D9%2588%25D9%258A%2B%25D9%2584%25D8%25A3%25D9%2586%25D8%25B4%25D8%25B7%25D8%25A9%2B%25D8%25A7%25D9%2584%25D9%2584%25D8%25BA%25D8%25A9%2B%25D8%25A7%25D9%2584%25D8%25B9%25D8%25B1%25D8%25A8%25D9%258A%25D8%25A9%25E2%2580%258B.JPG HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v94"
expires: Sat, 10 Dec 2022 18:17:19 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="______ ______ ______ _____ ________.JPG";filename*=UTF-8''%D8%A7%D9%84%D8%AA%D8%AF%D8%B1%D8%AC%20%D8%A7%D9%84%D8%B3%D9%86%D9%88%D9%8A%20%D9%84%D8%A3%D9%86%D8%B4%D8%B7%D8%A9%20%D8%A7%D9%84%D9%84%D8%BA%D8%A9%20%D8%A7%D9%84%D8%B9%D8%B1%D8%A8%D9%8A%D8%A9%E2%80%8B.JPG
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 18:17:19 GMT
server: fife
content-length: 74817
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| 1.bp.blogspot.com/-dFOKaqPo95c/X04etwyIbzI/AAAAAAAAVe0/WKXE-AZpy843NpeXeKaG4n-25dwgB0pLQCLcBGAsYHQ/s640/%25D8%25A7%25D9%2584%25D9%2584%25D8%25BA%25D8%25A9%2B%25D8%25A7%25D9%2584%25D8%25B9%25D8%25B1%25D8%25A8%25D9%258A%25D8%25A9%2B%25D8%25A7%25D8%25AF%25D8%25A7%25D8%25A8%2B%25D9%2588%25D9%2581%25D9%2584%25D8%25B3%25D9%2581%25D8%25A9.jpg | 142.250.74.65 | 200 OK | 45 kB |
URL HTTP/21.bp.blogspot.com/-dFOKaqPo95c/X04etwyIbzI/AAAAAAAAVe0/WKXE-AZpy843NpeXeKaG4n-25dwgB0pLQCLcBGAsYHQ/s640/%25D8%25A7%25D9%2584%25D9%2584%25D8%25BA%25D8%25A9%2B%25D8%25A7%25D9%2584%25D8%25B9%25D8%25B1%25D8%25A8%25D9%258A%25D8%25A9%2B%25D8%25A7%25D8%25AF%25D8%25A7%25D8%25A8%2B%25D9%2588%25D9%2581%25D9%2584%25D8%25B3%25D9%2581%25D8%25A9.jpg IP142.250.74.65:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 640x329, components 3\012- data Hash7731c55ad27eb9dfb21cb5420461ca67 f54f0ce8ecff98c024eb08836f2ec1c5159dbbf4 da3a83f65eb716ad6cb9b39b88d2c76c39d14fb4a546a5838702b3622e01d5f3
GET /-dFOKaqPo95c/X04etwyIbzI/AAAAAAAAVe0/WKXE-AZpy843NpeXeKaG4n-25dwgB0pLQCLcBGAsYHQ/s640/%25D8%25A7%25D9%2584%25D9%2584%25D8%25BA%25D8%25A9%2B%25D8%25A7%25D9%2584%25D8%25B9%25D8%25B1%25D8%25A8%25D9%258A%25D8%25A9%2B%25D8%25A7%25D8%25AF%25D8%25A7%25D8%25A8%2B%25D9%2588%25D9%2581%25D9%2584%25D8%25B3%25D9%2581%25D8%25A9.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v55ee"
expires: Sat, 10 Dec 2022 18:17:19 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="_____ _______ ____ ______.jpg";filename*=UTF-8''%D8%A7%D9%84%D9%84%D8%BA%D8%A9%20%D8%A7%D9%84%D8%B9%D8%B1%D8%A8%D9%8A%D8%A9%20%D8%A7%D8%AF%D8%A7%D8%A8%20%D9%88%D9%81%D9%84%D8%B3%D9%81%D8%A9.jpg
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 18:17:19 GMT
server: fife
content-length: 45104
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| 1.bp.blogspot.com/-ITiQPWLRgBg/XQTYqPyqQ-I/AAAAAAAAHBg/RjERHbjSqhEMwD-o0ke_i7eGPYYn8xy3wCLcBGAs/s1600/%25D9%2585%25D9%2588%25D8%25A7%25D8%25B6%25D9%258A%25D8%25B9%2B%25D9%2588%2B%25D8%25AD%25D9%2584%25D9%2588%25D9%2584%2B%25D8%25B4%25D9%2587%25D8%25A7%25D8%25AF%25D8%25A9%2B%25D8%25A7%25D9%2584%25D8%25A8%25D9%2583%25D8%25A7%25D9%2584%25D9%2588%25D8%25B1%25D9%258A%25D8%25A7%2B2019%2B%25D8%25AC%25D9%2585%25D9%258A%25D8%25B9%2B%25D8%25A7%25D9%2584%25D8%25B4%25D8%25B9%25D8%25A8.JPG | 142.250.74.65 | 200 OK | 78 kB |
URL HTTP/21.bp.blogspot.com/-ITiQPWLRgBg/XQTYqPyqQ-I/AAAAAAAAHBg/RjERHbjSqhEMwD-o0ke_i7eGPYYn8xy3wCLcBGAs/s1600/%25D9%2585%25D9%2588%25D8%25A7%25D8%25B6%25D9%258A%25D8%25B9%2B%25D9%2588%2B%25D8%25AD%25D9%2584%25D9%2588%25D9%2584%2B%25D8%25B4%25D9%2587%25D8%25A7%25D8%25AF%25D8%25A9%2B%25D8%25A7%25D9%2584%25D8%25A8%25D9%2583%25D8%25A7%25D9%2584%25D9%2588%25D8%25B1%25D9%258A%25D8%25A7%2B2019%2B%25D8%25AC%25D9%2585%25D9%258A%25D8%25B9%2B%25D8%25A7%25D9%2584%25D8%25B4%25D8%25B9%25D8%25A8.JPG IP142.250.74.65:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=4, orientation=upper-left, software=Google], progressive, precision 8, 620x330, components 3\012- data Hash483ae0e3badc24cc2e8568f808fde535 067fe0123ad456964b74a9480c9983e221dd62c2 6d8859739da97227cc312b91c30cc2c417a0ff19d7e714e6f6f4770a419dd364
GET /-ITiQPWLRgBg/XQTYqPyqQ-I/AAAAAAAAHBg/RjERHbjSqhEMwD-o0ke_i7eGPYYn8xy3wCLcBGAs/s1600/%25D9%2585%25D9%2588%25D8%25A7%25D8%25B6%25D9%258A%25D8%25B9%2B%25D9%2588%2B%25D8%25AD%25D9%2584%25D9%2588%25D9%2584%2B%25D8%25B4%25D9%2587%25D8%25A7%25D8%25AF%25D8%25A9%2B%25D8%25A7%25D9%2584%25D8%25A8%25D9%2583%25D8%25A7%25D9%2584%25D9%2588%25D8%25B1%25D9%258A%25D8%25A7%2B2019%2B%25D8%25AC%25D9%2585%25D9%258A%25D8%25B9%2B%25D8%25A7%25D9%2584%25D8%25B4%25D8%25B9%25D8%25A8.JPG HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1c19"
expires: Sat, 10 Dec 2022 18:17:19 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="______ _ ____ _____ __________ 2019 ____ _____.JPG";filename*=UTF-8''%D9%85%D9%88%D8%A7%D8%B6%D9%8A%D8%B9%20%D9%88%20%D8%AD%D9%84%D9%88%D9%84%20%D8%B4%D9%87%D8%A7%D8%AF%D8%A9%20%D8%A7%D9%84%D8%A8%D9%83%D8%A7%D9%84%D9%88%D8%B1%D9%8A%D8%A7%202019%20%D8%AC%D9%85%D9%8A%D8%B9%20%D8%A7%D9%84%D8%B4%D8%B9%D8%A8.JPG
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 18:17:19 GMT
server: fife
content-length: 77539
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| 1.bp.blogspot.com/-f6GHEYI-r-4/YYpHv_rtiHI/AAAAAAAAhxg/kOmAcMAqMoo82Y17NmjGEN5LECDXnE-AQCLcBGAsYHQ/w640-h410/%25D8%25AA%25D8%25AD%25D8%25B6%25D9%258A%25D8%25B1%2B%25D8%25AF%25D8%25B1%25D8%25B3%2B%25D8%25AD%25D8%25B3%25D8%25A7%25D8%25A8%2B%25D8%25AD%25D8%25AC%25D9%2585%2B%25D9%2585%25D8%25AA%25D9%2588%25D8%25A7%25D8%25B2%25D9%258A%2B%25D9%2585%25D8%25B3%25D8%25AA%25D8%25B7%25D9%258A%25D9%2584%25D8%25A7%25D8%25AA%2B%25D9%2584%25D9%2584%25D8%25B3%25D9%2586%25D8%25A9%2B%25D8%25A7%25D9%2584%25D8%25A7%25D9%2588%25D9%2584%25D9%2589%2B%25D9%2585%25D8%25AA%25D9%2588%25D8%25B3%25D8%25B7.JPG | 142.250.74.65 | 200 OK | 73 kB |
URL HTTP/21.bp.blogspot.com/-f6GHEYI-r-4/YYpHv_rtiHI/AAAAAAAAhxg/kOmAcMAqMoo82Y17NmjGEN5LECDXnE-AQCLcBGAsYHQ/w640-h410/%25D8%25AA%25D8%25AD%25D8%25B6%25D9%258A%25D8%25B1%2B%25D8%25AF%25D8%25B1%25D8%25B3%2B%25D8%25AD%25D8%25B3%25D8%25A7%25D8%25A8%2B%25D8%25AD%25D8%25AC%25D9%2585%2B%25D9%2585%25D8%25AA%25D9%2588%25D8%25A7%25D8%25B2%25D9%258A%2B%25D9%2585%25D8%25B3%25D8%25AA%25D8%25B7%25D9%258A%25D9%2584%25D8%25A7%25D8%25AA%2B%25D9%2584%25D9%2584%25D8%25B3%25D9%2586%25D8%25A9%2B%25D8%25A7%25D9%2584%25D8%25A7%25D9%2588%25D9%2584%25D9%2589%2B%25D9%2585%25D8%25AA%25D9%2588%25D8%25B3%25D8%25B7.JPG IP142.250.74.65:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 640x410, components 3\012- data Hash05af045466d3c0e9eda5e91a304beb78 17c286739a529af7489f1bd4d6efacf013f9eb7d 65863dca9e0f8c247de07e958bdeef2a4c5960386be66360fd7eed2cc7e5dbce
GET /-f6GHEYI-r-4/YYpHv_rtiHI/AAAAAAAAhxg/kOmAcMAqMoo82Y17NmjGEN5LECDXnE-AQCLcBGAsYHQ/w640-h410/%25D8%25AA%25D8%25AD%25D8%25B6%25D9%258A%25D8%25B1%2B%25D8%25AF%25D8%25B1%25D8%25B3%2B%25D8%25AD%25D8%25B3%25D8%25A7%25D8%25A8%2B%25D8%25AD%25D8%25AC%25D9%2585%2B%25D9%2585%25D8%25AA%25D9%2588%25D8%25A7%25D8%25B2%25D9%258A%2B%25D9%2585%25D8%25B3%25D8%25AA%25D8%25B7%25D9%258A%25D9%2584%25D8%25A7%25D8%25AA%2B%25D9%2584%25D9%2584%25D8%25B3%25D9%2586%25D8%25A9%2B%25D8%25A7%25D9%2584%25D8%25A7%25D9%2588%25D9%2584%25D9%2589%2B%25D9%2585%25D8%25AA%25D9%2588%25D8%25B3%25D8%25B7.JPG HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v8719"
expires: Sat, 10 Dec 2022 18:17:19 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="_____ ___ ____ ___ ______ ________ _____ ______ _____.JPG";filename*=UTF-8''%D8%AA%D8%AD%D8%B6%D9%8A%D8%B1%20%D8%AF%D8%B1%D8%B3%20%D8%AD%D8%B3%D8%A7%D8%A8%20%D8%AD%D8%AC%D9%85%20%D9%85%D8%AA%D9%88%D8%A7%D8%B2%D9%8A%20%D9%85%D8%B3%D8%AA%D8%B7%D9%8A%D9%84%D8%A7%D8%AA%20%D9%84%D9%84%D8%B3%D9%86%D8%A9%20%D8%A7%D9%84%D8%A7%D9%88%D9%84%D9%89%20%D9%85%D8%AA%D9%88%D8%B3%D8%B7.JPG
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 18:17:19 GMT
server: fife
content-length: 72626
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| 3.bp.blogspot.com/-WnW0mxEiB_c/WCWGujkUu6I/AAAAAAAABA4/uSz9BgXlqiAIzHtCMbGxcq37aKVGdSYJwCLcB/s1600/%25D9%2588%25D8%25B6%25D8%25B9%25D9%258A%25D8%25A7%25D8%25AA_%25D8%25A5%25D8%25AF%25D9%2585%25D8%25A7%25D8%25AC%25D9%258A%25D8%25A9_%25D9%2581%25D9%258A_%25D8%25A7%25D9%2584%25D8%25B1%25D9%258A%25D8%25A7%25D8%25B6%25D9%258A%25D8%25A7%25D8%25AA_%25D9%2586%25D9%2585%25D9%2588%25D8%25B0%25D8%25AC_1_%25D8%25B35.JPG | 142.250.74.65 | 200 OK | 187 kB |
URL HTTP/23.bp.blogspot.com/-WnW0mxEiB_c/WCWGujkUu6I/AAAAAAAABA4/uSz9BgXlqiAIzHtCMbGxcq37aKVGdSYJwCLcB/s1600/%25D9%2588%25D8%25B6%25D8%25B9%25D9%258A%25D8%25A7%25D8%25AA_%25D8%25A5%25D8%25AF%25D9%2585%25D8%25A7%25D8%25AC%25D9%258A%25D8%25A9_%25D9%2581%25D9%258A_%25D8%25A7%25D9%2584%25D8%25B1%25D9%258A%25D8%25A7%25D8%25B6%25D9%258A%25D8%25A7%25D8%25AA_%25D9%2586%25D9%2585%25D9%2588%25D8%25B0%25D8%25AC_1_%25D8%25B35.JPG IP142.250.74.65:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=4, orientation=upper-left, software=Google], baseline, precision 8, 682x475, components 3\012- data Size187 kB (186974 bytes) Hashd9e4dff26a4ed8f1198fcf5573981d6c 4dabbcb3fc5659e6e7b890f32552c6df62224360 c74e1e7950f5edfd5b4c4fa1e084bd3484df1aac5d8c7e286c5afe100b659b6e
GET /-WnW0mxEiB_c/WCWGujkUu6I/AAAAAAAABA4/uSz9BgXlqiAIzHtCMbGxcq37aKVGdSYJwCLcB/s1600/%25D9%2588%25D8%25B6%25D8%25B9%25D9%258A%25D8%25A7%25D8%25AA_%25D8%25A5%25D8%25AF%25D9%2585%25D8%25A7%25D8%25AC%25D9%258A%25D8%25A9_%25D9%2581%25D9%258A_%25D8%25A7%25D9%2584%25D8%25B1%25D9%258A%25D8%25A7%25D8%25B6%25D9%258A%25D8%25A7%25D8%25AA_%25D9%2586%25D9%2585%25D9%2588%25D8%25B0%25D8%25AC_1_%25D8%25B35.JPG HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v414"
expires: Sat, 10 Dec 2022 18:17:19 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="__________________________________1__5.JPG";filename*=UTF-8''%D9%88%D8%B6%D8%B9%D9%8A%D8%A7%D8%AA_%D8%A5%D8%AF%D9%85%D8%A7%D8%AC%D9%8A%D8%A9_%D9%81%D9%8A_%D8%A7%D9%84%D8%B1%D9%8A%D8%A7%D8%B6%D9%8A%D8%A7%D8%AA_%D9%86%D9%85%D9%88%D8%B0%D8%AC_1_%D8%B35.JPG
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 18:17:19 GMT
server: fife
content-length: 186974
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| 1.bp.blogspot.com/-vW2v-wN9apc/XQYtZdbb4jI/AAAAAAAAHFc/OZT_Q14rNeod-9AhqHA5EzoPLVzSeyyIgCLcBGAs/s640/%25D9%2585%25D9%2588%25D8%25A7%25D8%25B6%25D9%258A%25D8%25B9%2B%25D8%25B4%25D9%2587%25D8%25A7%25D8%25AF%25D8%25A9%2B%25D8%25A7%25D9%2584%25D8%25AA%25D8%25B9%25D9%2584%25D9%258A%25D9%2585%2B%25D8%25A7%25D9%2584%25D8%25A7%25D8%25A8%25D8%25AA%25D8%25AF%25D8%25A7%25D8%25A6%25D9%258A%2B2019.png | 142.250.74.65 | 200 OK | 42 kB |
URL HTTP/21.bp.blogspot.com/-vW2v-wN9apc/XQYtZdbb4jI/AAAAAAAAHFc/OZT_Q14rNeod-9AhqHA5EzoPLVzSeyyIgCLcBGAs/s640/%25D9%2585%25D9%2588%25D8%25A7%25D8%25B6%25D9%258A%25D8%25B9%2B%25D8%25B4%25D9%2587%25D8%25A7%25D8%25AF%25D8%25A9%2B%25D8%25A7%25D9%2584%25D8%25AA%25D8%25B9%25D9%2584%25D9%258A%25D9%2585%2B%25D8%25A7%25D9%2584%25D8%25A7%25D8%25A8%25D8%25AA%25D8%25AF%25D8%25A7%25D8%25A6%25D9%258A%2B2019.png IP142.250.74.65:0
File typePNG image data, 600 x 350, 8-bit/color RGB, non-interlaced\012- data Hasha7ba5f89d83307509b8d708edad5afe2 236bd5fe66bb6d73c9f97e97d36b761cd7b8d5ba fbcbe86d0478f57224d7c930c218ebb89064c0d6189f1bdc6aba4d5a23036af6
GET /-vW2v-wN9apc/XQYtZdbb4jI/AAAAAAAAHFc/OZT_Q14rNeod-9AhqHA5EzoPLVzSeyyIgCLcBGAs/s640/%25D9%2585%25D9%2588%25D8%25A7%25D8%25B6%25D9%258A%25D8%25B9%2B%25D8%25B4%25D9%2587%25D8%25A7%25D8%25AF%25D8%25A9%2B%25D8%25A7%25D9%2584%25D8%25AA%25D8%25B9%25D9%2584%25D9%258A%25D9%2585%2B%25D8%25A7%25D9%2584%25D8%25A7%25D8%25A8%25D8%25AA%25D8%25AF%25D8%25A7%25D8%25A6%25D9%258A%2B2019.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1c58"
expires: Sat, 10 Dec 2022 18:17:19 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="______ _____ _______ _________ 2019.png";filename*=UTF-8''%D9%85%D9%88%D8%A7%D8%B6%D9%8A%D8%B9%20%D8%B4%D9%87%D8%A7%D8%AF%D8%A9%20%D8%A7%D9%84%D8%AA%D8%B9%D9%84%D9%8A%D9%85%20%D8%A7%D9%84%D8%A7%D8%A8%D8%AA%D8%AF%D8%A7%D8%A6%D9%8A%202019.png
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 18:17:19 GMT
server: fife
content-length: 41516
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| 1.bp.blogspot.com/-XnxmG2Zg6r0/XPMn-NJQsKI/AAAAAAAAG4A/oZIKtb2YRwAyTqg2iDyd0GP5whlW55UgwCLcBGAs/s1600/%25D9%2586%25D8%25AA%25D8%25A7%25D8%25A6%25D8%25AC%2B%25D8%25B4%25D9%2587%25D8%25A7%25D8%25AF%25D8%25A9%2B%25D8%25A7%25D9%2584%25D8%25AA%25D8%25B9%25D9%2584%25D9%258A%25D9%2585%2B%25D8%25A7%25D9%2584%25D8%25A7%25D8%25A8%25D8%25AA%25D8%25AF%25D8%25A7%25D8%25A6%25D9%258A%2B%25D8%25AD%25D8%25B3%25D8%25A8%2B%25D8%25B1%25D9%2582%25D9%2585%2B%25D8%25A7%25D9%2584%25D8%25AA%25D8%25B3%25D8%25AC%25D9%258A%25D9%2584.PNG | 142.250.74.65 | 200 OK | 235 kB |
URL HTTP/21.bp.blogspot.com/-XnxmG2Zg6r0/XPMn-NJQsKI/AAAAAAAAG4A/oZIKtb2YRwAyTqg2iDyd0GP5whlW55UgwCLcBGAs/s1600/%25D9%2586%25D8%25AA%25D8%25A7%25D8%25A6%25D8%25AC%2B%25D8%25B4%25D9%2587%25D8%25A7%25D8%25AF%25D8%25A9%2B%25D8%25A7%25D9%2584%25D8%25AA%25D8%25B9%25D9%2584%25D9%258A%25D9%2585%2B%25D8%25A7%25D9%2584%25D8%25A7%25D8%25A8%25D8%25AA%25D8%25AF%25D8%25A7%25D8%25A6%25D9%258A%2B%25D8%25AD%25D8%25B3%25D8%25A8%2B%25D8%25B1%25D9%2582%25D9%2585%2B%25D8%25A7%25D9%2584%25D8%25AA%25D8%25B3%25D8%25AC%25D9%258A%25D9%2584.PNG IP142.250.74.65:0
File typePNG image data, 640 x 360, 8-bit/color RGB, non-interlaced\012- data Size235 kB (234563 bytes) Hash17bce86d7d452f582a39fdde34d24f81 6e50f7b21b6a611bdba0f747c025c26255b1ca0a 8bc8e72ec23665f54ceb53c1a673d99806a1707441dceb815af168bf754e68a7
GET /-XnxmG2Zg6r0/XPMn-NJQsKI/AAAAAAAAG4A/oZIKtb2YRwAyTqg2iDyd0GP5whlW55UgwCLcBGAs/s1600/%25D9%2586%25D8%25AA%25D8%25A7%25D8%25A6%25D8%25AC%2B%25D8%25B4%25D9%2587%25D8%25A7%25D8%25AF%25D8%25A9%2B%25D8%25A7%25D9%2584%25D8%25AA%25D8%25B9%25D9%2584%25D9%258A%25D9%2585%2B%25D8%25A7%25D9%2584%25D8%25A7%25D8%25A8%25D8%25AA%25D8%25AF%25D8%25A7%25D8%25A6%25D9%258A%2B%25D8%25AD%25D8%25B3%25D8%25A8%2B%25D8%25B1%25D9%2582%25D9%2585%2B%25D8%25A7%25D9%2584%25D8%25AA%25D8%25B3%25D8%25AC%25D9%258A%25D9%2584.PNG HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1b81"
expires: Sat, 10 Dec 2022 18:17:19 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="_____ _____ _______ _________ ___ ___ _______.PNG";filename*=UTF-8''%D9%86%D8%AA%D8%A7%D8%A6%D8%AC%20%D8%B4%D9%87%D8%A7%D8%AF%D8%A9%20%D8%A7%D9%84%D8%AA%D8%B9%D9%84%D9%8A%D9%85%20%D8%A7%D9%84%D8%A7%D8%A8%D8%AA%D8%AF%D8%A7%D8%A6%D9%8A%20%D8%AD%D8%B3%D8%A8%20%D8%B1%D9%82%D9%85%20%D8%A7%D9%84%D8%AA%D8%B3%D8%AC%D9%8A%D9%84.PNG
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 18:17:19 GMT
server: fife
content-length: 234563
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hash795e67bdfadc3c890a663080413b56b7 fdefde3befb6aceac3c337c34c8d738f5091908c 8375b55cfc13989b0cf96293b7bead2ce5811a993b3445da1776ca7015c36985
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:17:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash8f6ab0debac98d11413e20fa98ba8286 e63543ba0f3a685edf4d8fee3f587efd5417015f fe6bc081b1963c61a3af1ab7b7b1213ae5bc7b962c5474d8f6fe123547d5d309
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:17:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| 4.bp.blogspot.com/-HxmXKhtVJtY/WLRHSBI04RI/AAAAAAAAC-Q/eyX70tpWIik4pwiCH98PDw5YmVM5RYBzQCLcB/w640-h445/%25D8%25A7%25D8%25AE%25D8%25AA%25D8%25A8%25D8%25A7%25D8%25B1%25D8%25A7%25D8%25AA%2B%25D8%25A7%25D9%2584%25D9%2581%25D8%25B5%25D9%2584%2B%25D8%25A7%25D9%2584%25D8%25AB%25D8%25A7%25D9%2586%25D9%258A%2B%25D9%2584%25D9%2584%25D8%25B3%25D9%2586%25D8%25A9%2B%25D8%25A7%25D9%2588%25D9%2584%25D9%2589%2B%25D9%2585%25D8%25AA%25D9%2588%25D8%25B3%25D8%25B7.jpg | 142.250.74.65 | 200 OK | 79 kB |
URL HTTP/24.bp.blogspot.com/-HxmXKhtVJtY/WLRHSBI04RI/AAAAAAAAC-Q/eyX70tpWIik4pwiCH98PDw5YmVM5RYBzQCLcB/w640-h445/%25D8%25A7%25D8%25AE%25D8%25AA%25D8%25A8%25D8%25A7%25D8%25B1%25D8%25A7%25D8%25AA%2B%25D8%25A7%25D9%2584%25D9%2581%25D8%25B5%25D9%2584%2B%25D8%25A7%25D9%2584%25D8%25AB%25D8%25A7%25D9%2586%25D9%258A%2B%25D9%2584%25D9%2584%25D8%25B3%25D9%2586%25D8%25A9%2B%25D8%25A7%25D9%2588%25D9%2584%25D9%2589%2B%25D9%2585%25D8%25AA%25D9%2588%25D8%25B3%25D8%25B7.jpg IP142.250.74.65:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 639x445, components 3\012- data Hash5ddb2ac424f7d5547785bdfbce570b67 b1d1125aed1da37a3d7b5b12db7334b45c7ac1e4 8ff0f3c47ccc1cf33a3aa406a2cfaee662b88ed935862452d2604ee745b4d8be
GET /-HxmXKhtVJtY/WLRHSBI04RI/AAAAAAAAC-Q/eyX70tpWIik4pwiCH98PDw5YmVM5RYBzQCLcB/w640-h445/%25D8%25A7%25D8%25AE%25D8%25AA%25D8%25A8%25D8%25A7%25D8%25B1%25D8%25A7%25D8%25AA%2B%25D8%25A7%25D9%2584%25D9%2581%25D8%25B5%25D9%2584%2B%25D8%25A7%25D9%2584%25D8%25AB%25D8%25A7%25D9%2586%25D9%258A%2B%25D9%2584%25D9%2584%25D8%25B3%25D9%2586%25D8%25A9%2B%25D8%25A7%25D9%2588%25D9%2584%25D9%2589%2B%25D9%2585%25D8%25AA%25D9%2588%25D8%25B3%25D8%25B7.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vbe6"
expires: Sat, 10 Dec 2022 18:17:19 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="________ _____ ______ _____ ____ _____.jpg";filename*=UTF-8''%D8%A7%D8%AE%D8%AA%D8%A8%D8%A7%D8%B1%D8%A7%D8%AA%20%D8%A7%D9%84%D9%81%D8%B5%D9%84%20%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A%20%D9%84%D9%84%D8%B3%D9%86%D8%A9%20%D8%A7%D9%88%D9%84%D9%89%20%D9%85%D8%AA%D9%88%D8%B3%D8%B7.jpg
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 18:17:19 GMT
server: fife
content-length: 78774
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| 1.bp.blogspot.com/-BJF8GtCSOfo/YBEiqkvKhZI/AAAAAAAAZ10/9WCZNK-Y0DglCgzufNV2ToF8Cuv_jDvHwCLcBGAsYHQ/w640-h334/%25D8%25B3%25D9%2588%25D8%25A1%2B%25D8%25A7%25D8%25B3%25D8%25AA%25D8%25BA%25D9%2584%25D8%25A7%25D9%2584%2B%25D8%25A7%25D9%2584%25D8%25B4%25D8%25A8%25D9%2583%25D8%25A9%2B%25D8%25A7%25D9%2584%25D9%2583%25D9%2587%25D8%25B1%25D8%25A8%25D8%25A7%25D8%25A6%25D9%258A%25D8%25A9%2B%25D9%2584%25D9%2587%2B%25D8%25B9%25D9%2588%25D8%25A7%25D9%2582%25D8%25A8%2B%25D9%2588%25D8%25AE%25D9%258A%25D9%2585%25D8%25A9.jpg | 142.250.74.65 | 200 OK | 79 kB |
URL HTTP/21.bp.blogspot.com/-BJF8GtCSOfo/YBEiqkvKhZI/AAAAAAAAZ10/9WCZNK-Y0DglCgzufNV2ToF8Cuv_jDvHwCLcBGAsYHQ/w640-h334/%25D8%25B3%25D9%2588%25D8%25A1%2B%25D8%25A7%25D8%25B3%25D8%25AA%25D8%25BA%25D9%2584%25D8%25A7%25D9%2584%2B%25D8%25A7%25D9%2584%25D8%25B4%25D8%25A8%25D9%2583%25D8%25A9%2B%25D8%25A7%25D9%2584%25D9%2583%25D9%2587%25D8%25B1%25D8%25A8%25D8%25A7%25D8%25A6%25D9%258A%25D8%25A9%2B%25D9%2584%25D9%2587%2B%25D8%25B9%25D9%2588%25D8%25A7%25D9%2582%25D8%25A8%2B%25D9%2588%25D8%25AE%25D9%258A%25D9%2585%25D8%25A9.jpg IP142.250.74.65:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 640x334, components 3\012- data Hashee97f08a2ae61ef204875902516a78d5 22d4cee9ed76a310fe0437d8458ea16797226e78 3cef713257473ba61c04bcf5ee19d0ecbe2040d24e703d27aab42863879b1b41
GET /-BJF8GtCSOfo/YBEiqkvKhZI/AAAAAAAAZ10/9WCZNK-Y0DglCgzufNV2ToF8Cuv_jDvHwCLcBGAsYHQ/w640-h334/%25D8%25B3%25D9%2588%25D8%25A1%2B%25D8%25A7%25D8%25B3%25D8%25AA%25D8%25BA%25D9%2584%25D8%25A7%25D9%2584%2B%25D8%25A7%25D9%2584%25D8%25B4%25D8%25A8%25D9%2583%25D8%25A9%2B%25D8%25A7%25D9%2584%25D9%2583%25D9%2587%25D8%25B1%25D8%25A8%25D8%25A7%25D8%25A6%25D9%258A%25D8%25A9%2B%25D9%2584%25D9%2587%2B%25D8%25B9%25D9%2588%25D8%25A7%25D9%2582%25D8%25A8%2B%25D9%2588%25D8%25AE%25D9%258A%25D9%2585%25D8%25A9.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v675f"
expires: Sat, 10 Dec 2022 18:17:19 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="___ _______ ______ __________ __ _____ _____.jpg";filename*=UTF-8''%D8%B3%D9%88%D8%A1%20%D8%A7%D8%B3%D8%AA%D8%BA%D9%84%D8%A7%D9%84%20%D8%A7%D9%84%D8%B4%D8%A8%D9%83%D8%A9%20%D8%A7%D9%84%D9%83%D9%87%D8%B1%D8%A8%D8%A7%D8%A6%D9%8A%D8%A9%20%D9%84%D9%87%20%D8%B9%D9%88%D8%A7%D9%82%D8%A8%20%D9%88%D8%AE%D9%8A%D9%85%D8%A9.jpg
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 18:17:19 GMT
server: fife
content-length: 78956
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| 1.bp.blogspot.com/-3CZOi2ASGjo/WjTxJdC62-I/AAAAAAAABcc/MwhT17UZF9opArDO7F1YJMmM4C2Ay9owgCLcBGAs/s1600/18.png | 142.250.74.65 | 200 OK | 62 kB |
URL HTTP/21.bp.blogspot.com/-3CZOi2ASGjo/WjTxJdC62-I/AAAAAAAABcc/MwhT17UZF9opArDO7F1YJMmM4C2Ay9owgCLcBGAs/s1600/18.png IP142.250.74.65:0
File typePNG image data, 600 x 350, 8-bit/color RGB, non-interlaced\012- data Hashf3af70c9c55fb67da844afea8a12c221 3a3674c3ea9d0fbc4c8401d8c8768812e2e29646 cfb6ad36d14eed34fa9a5403c97ec9d19c5d95c9b46e57eadab77868aeeda06e
GET /-3CZOi2ASGjo/WjTxJdC62-I/AAAAAAAABcc/MwhT17UZF9opArDO7F1YJMmM4C2Ay9owgCLcBGAs/s1600/18.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v5c8"
expires: Sat, 10 Dec 2022 18:17:19 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="18.png"
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 18:17:19 GMT
server: fife
content-length: 61808
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| 3.bp.blogspot.com/-nQkghQNRbiQ/WivazAmKERI/AAAAAAAAFPY/2HRRiXTdmHIIYM4-j6yZmbdJCHRTkdU1ACLcBGAs/s640/%25D8%25A7%25D9%2585%25D8%25AA%25D8%25AD%25D8%25A7%25D9%2586%25D8%25A7%25D8%25AA%2B%25D8%25A7%25D9%2584%25D8%25AA%25D8%25A7%25D8%25B1%25D9%258A%25D8%25AE%2B%25D9%2588%2B%25D8%25A7%25D9%2584%25D8%25AC%25D8%25BA%25D8%25B1%25D8%25A7%25D9%2581%25D9%258A%25D8%25A7%2B%25D8%25A7%25D9%2584%25D9%2581%25D8%25B5%25D9%2584%2B%25D8%25A7%25D9%2584%25D8%25A3%25D9%2588%25D9%2584%2B%25D8%25A7%25D9%2584%25D8%25AC%25D9%258A%25D9%2584%2B%25D8%25A7%25D9%2584%25D8%25AB%25D8%25A7%25D9%2586%25D9%258A%2B%25D9%2585%25D8%25B9%2B%25D8%25A7%25D9%2584%25D8%25AD%25D9%2584%25D9%2588%25D9%2584.PNG | 142.250.74.65 | 200 OK | 205 kB |
URL HTTP/23.bp.blogspot.com/-nQkghQNRbiQ/WivazAmKERI/AAAAAAAAFPY/2HRRiXTdmHIIYM4-j6yZmbdJCHRTkdU1ACLcBGAs/s640/%25D8%25A7%25D9%2585%25D8%25AA%25D8%25AD%25D8%25A7%25D9%2586%25D8%25A7%25D8%25AA%2B%25D8%25A7%25D9%2584%25D8%25AA%25D8%25A7%25D8%25B1%25D9%258A%25D8%25AE%2B%25D9%2588%2B%25D8%25A7%25D9%2584%25D8%25AC%25D8%25BA%25D8%25B1%25D8%25A7%25D9%2581%25D9%258A%25D8%25A7%2B%25D8%25A7%25D9%2584%25D9%2581%25D8%25B5%25D9%2584%2B%25D8%25A7%25D9%2584%25D8%25A3%25D9%2588%25D9%2584%2B%25D8%25A7%25D9%2584%25D8%25AC%25D9%258A%25D9%2584%2B%25D8%25A7%25D9%2584%25D8%25AB%25D8%25A7%25D9%2586%25D9%258A%2B%25D9%2585%25D8%25B9%2B%25D8%25A7%25D9%2584%25D8%25AD%25D9%2584%25D9%2588%25D9%2584.PNG IP142.250.74.65:0
File typePNG image data, 640 x 372, 8-bit/color RGB, non-interlaced\012- data Size205 kB (204971 bytes) Hash1ecb94f3a324f462111a15f03b4f98e6 863da6729cf46d21459225008dd8a21e4293c175 bd9d52be7e876a807aae0da5a137ad23dad73c6a2fc230f48f030cf9de842633
GET /-nQkghQNRbiQ/WivazAmKERI/AAAAAAAAFPY/2HRRiXTdmHIIYM4-j6yZmbdJCHRTkdU1ACLcBGAs/s640/%25D8%25A7%25D9%2585%25D8%25AA%25D8%25AD%25D8%25A7%25D9%2586%25D8%25A7%25D8%25AA%2B%25D8%25A7%25D9%2584%25D8%25AA%25D8%25A7%25D8%25B1%25D9%258A%25D8%25AE%2B%25D9%2588%2B%25D8%25A7%25D9%2584%25D8%25AC%25D8%25BA%25D8%25B1%25D8%25A7%25D9%2581%25D9%258A%25D8%25A7%2B%25D8%25A7%25D9%2584%25D9%2581%25D8%25B5%25D9%2584%2B%25D8%25A7%25D9%2584%25D8%25A3%25D9%2588%25D9%2584%2B%25D8%25A7%25D9%2584%25D8%25AC%25D9%258A%25D9%2584%2B%25D8%25A7%25D9%2584%25D8%25AB%25D8%25A7%25D9%2586%25D9%258A%2B%25D9%2585%25D8%25B9%2B%25D8%25A7%25D9%2584%25D8%25AD%25D9%2584%25D9%2588%25D9%2584.PNG HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v14f7"
expires: Sat, 10 Dec 2022 18:17:19 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="________ _______ _ _________ _____ _____ _____ ______ __ ______.PNG";filename*=UTF-8''%D8%A7%D9%85%D8%AA%D8%AD%D8%A7%D9%86%D8%A7%D8%AA%20%D8%A7%D9%84%D8%AA%D8%A7%D8%B1%D9%8A%D8%AE%20%D9%88%20%D8%A7%D9%84%D8%AC%D8%BA%D8%B1%D8%A7%D9%81%D9%8A%D8%A7%20%D8%A7%D9%84%D9%81%D8%B5%D9%84%20%D8%A7%D9%84%D8%A3%D9%88%D9%84%20%D8%A7%D9%84%D8%AC%D9%8A%D9%84%20%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A%20%D9%85%D8%B9%20%D8%A7%D9%84%D8%AD%D9%84%D9%88%D9%84.PNG
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 18:17:19 GMT
server: fife
content-length: 204971
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js | 142.250.74.74 | 200 OK | 31 kB |
URL HTTP/2ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js IP142.250.74.74:0
File typeASCII text, with very long lines (65451) Hash903bc7a7e510f87aa5d0201eb59a0832 ac9aa4dd94cde1bcba9037e94087138b127e41fc 41a7ac8150cc9f38421451d5143c1ffec7a1f1fafbf7a7fc0f51b98ad699cf8f
GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31021
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Dec 2022 21:57:45 GMT
expires: Wed, 06 Dec 2023 21:57:45 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 245974
last-modified: Fri, 08 May 2020 07:05:03 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash34da737f5d8fab7415ab2d552058d653 2e28de807960cde0030e68b4f468aaeecd1b533f bbd3063026b41b4487911d85977a7dfe8e0f62f93a48cedad2ce2448f28e2cf0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:17:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| 1.bp.blogspot.com/-8rRgLxWprhk/Xz-W8eNZffI/AAAAAAAAU_g/MFN1-Tf2sb0rjOqtE9FXhi6-pjusm6D-ACLcBGAsYHQ/s640/%25D8%25A7%25D9%2588%25D8%25B2%25D8%25A7%25D9%2586%2B%25D8%25A7%25D9%2584%25D9%2585%25D8%25A8%25D8%25A7%25D9%2584%25D8%25BA%25D8%25A9.jpg | 142.250.74.65 | 200 OK | 42 kB |
URL HTTP/21.bp.blogspot.com/-8rRgLxWprhk/Xz-W8eNZffI/AAAAAAAAU_g/MFN1-Tf2sb0rjOqtE9FXhi6-pjusm6D-ACLcBGAsYHQ/s640/%25D8%25A7%25D9%2588%25D8%25B2%25D8%25A7%25D9%2586%2B%25D8%25A7%25D9%2584%25D9%2585%25D8%25A8%25D8%25A7%25D9%2584%25D8%25BA%25D8%25A9.jpg IP142.250.74.65:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 640x302, components 3\012- data Hash1031ad16577bb4f0116a5d19a58f356a 4e5cce045d027550beea45e1786fe904d2ac368e 85e00f97014ce3320e35d26a20e0b0c92ea02c590ffc7523e6c09a1b7b600b5d
GET /-8rRgLxWprhk/Xz-W8eNZffI/AAAAAAAAU_g/MFN1-Tf2sb0rjOqtE9FXhi6-pjusm6D-ACLcBGAsYHQ/s640/%25D8%25A7%25D9%2588%25D8%25B2%25D8%25A7%25D9%2586%2B%25D8%25A7%25D9%2584%25D9%2585%25D8%25A8%25D8%25A7%25D9%2584%25D8%25BA%25D8%25A9.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v53f9"
expires: Sat, 10 Dec 2022 18:17:19 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="_____ ________.jpg";filename*=UTF-8''%D8%A7%D9%88%D8%B2%D8%A7%D9%86%20%D8%A7%D9%84%D9%85%D8%A8%D8%A7%D9%84%D8%BA%D8%A9.jpg
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 18:17:19 GMT
server: fife
content-length: 42283
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hasha5bdd65780397c16e1f11d2144025fed 7631c404b4f9bcb38d95ef6527de5b9ca8104579 bc8cdd03ed2e87ad1405c91f28d8d6a3b88972f75756e531e854165111b07ecd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:17:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| 2.bp.blogspot.com/-v1-hN5y5CU8/WDB6WuNbLgI/AAAAAAAABMs/OJ03GkYmFXMuynR0fHQiTBROFeF5HjlNACLcB/w640-h446/%25D9%2583%25D8%25AA%25D8%25A7%25D8%25A8%252B%25D8%25A7%25D9%2584%25D8%25AA%25D8%25A7%25D8%25B1%25D9%258A%25D8%25AE%252B%25D8%25A7%25D9%2584%25D8%25A3%25D9%2588%25D9%2584%25D9%2589%252B%25D9%2585%25D8%25AA%25D9%2588%25D8%25B3%25D8%25B7%252B%25D8%25A7%25D9%2584%25D8%25AC%25D9%258A%25D9%2584%252B%25D8%25A7%25D9%2584%25D8%25AB%25D8%25A7%25D9%2586%25D9%258A.jpg | 142.250.74.65 | 200 OK | 74 kB |
URL HTTP/22.bp.blogspot.com/-v1-hN5y5CU8/WDB6WuNbLgI/AAAAAAAABMs/OJ03GkYmFXMuynR0fHQiTBROFeF5HjlNACLcB/w640-h446/%25D9%2583%25D8%25AA%25D8%25A7%25D8%25A8%252B%25D8%25A7%25D9%2584%25D8%25AA%25D8%25A7%25D8%25B1%25D9%258A%25D8%25AE%252B%25D8%25A7%25D9%2584%25D8%25A3%25D9%2588%25D9%2584%25D9%2589%252B%25D9%2585%25D8%25AA%25D9%2588%25D8%25B3%25D8%25B7%252B%25D8%25A7%25D9%2584%25D8%25AC%25D9%258A%25D9%2584%252B%25D8%25A7%25D9%2584%25D8%25AB%25D8%25A7%25D9%2586%25D9%258A.jpg IP142.250.74.65:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 640x446, components 3\012- data Hasheca8bfccc8062eebbcf4b33ffe6dd042 fc3336daf2b5305cca4aef20970d313e8b1f1d70 52d3c4c3b11aaa90215c178b4984ebd060c505713879432148e153a8ce57d880
GET /-v1-hN5y5CU8/WDB6WuNbLgI/AAAAAAAABMs/OJ03GkYmFXMuynR0fHQiTBROFeF5HjlNACLcB/w640-h446/%25D9%2583%25D8%25AA%25D8%25A7%25D8%25A8%252B%25D8%25A7%25D9%2584%25D8%25AA%25D8%25A7%25D8%25B1%25D9%258A%25D8%25AE%252B%25D8%25A7%25D9%2584%25D8%25A3%25D9%2588%25D9%2584%25D9%2589%252B%25D9%2585%25D8%25AA%25D9%2588%25D8%25B3%25D8%25B7%252B%25D8%25A7%25D9%2584%25D8%25AC%25D9%258A%25D9%2584%252B%25D8%25A7%25D9%2584%25D8%25AB%25D8%25A7%25D9%2586%25D9%258A.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v4de"
expires: Sat, 10 Dec 2022 18:17:19 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="____+_______+______+_____+_____+______.jpg";filename*=UTF-8''%D9%83%D8%AA%D8%A7%D8%A8%2B%D8%A7%D9%84%D8%AA%D8%A7%D8%B1%D9%8A%D8%AE%2B%D8%A7%D9%84%D8%A3%D9%88%D9%84%D9%89%2B%D9%85%D8%AA%D9%88%D8%B3%D8%B7%2B%D8%A7%D9%84%D8%AC%D9%8A%D9%84%2B%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A.jpg
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 18:17:19 GMT
server: fife
content-length: 74299
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| 1.bp.blogspot.com/-UHrOja9VD-c/YZOEPk1C7sI/AAAAAAAAh9Y/8hvi_pBSoj47oMcDEdgDTrh9GtKKC5DNQCLcBGAsYHQ/w640-h450/%25D8%25A7%25D8%25AE%25D8%25AA%25D8%25A8%25D8%25A7%25D8%25B1%25D8%25A7%25D8%25AA%2B%25D9%2585%25D8%25AD%25D9%2584%25D9%2588%25D9%2584%25D8%25A9%2B%25D9%2584%25D9%2584%25D8%25B3%25D9%2586%25D8%25A9%2B%25D8%25A7%25D9%2584%25D8%25B1%25D8%25A7%25D8%25A8%25D8%25B9%25D8%25A9%2B%25D8%25A7%25D8%25A8%25D8%25AA%25D8%25AF%25D8%25A7%25D8%25A6%25D9%258A.JPG | 142.250.74.65 | 200 OK | 51 kB |
URL HTTP/21.bp.blogspot.com/-UHrOja9VD-c/YZOEPk1C7sI/AAAAAAAAh9Y/8hvi_pBSoj47oMcDEdgDTrh9GtKKC5DNQCLcBGAsYHQ/w640-h450/%25D8%25A7%25D8%25AE%25D8%25AA%25D8%25A8%25D8%25A7%25D8%25B1%25D8%25A7%25D8%25AA%2B%25D9%2585%25D8%25AD%25D9%2584%25D9%2588%25D9%2584%25D8%25A9%2B%25D9%2584%25D9%2584%25D8%25B3%25D9%2586%25D8%25A9%2B%25D8%25A7%25D9%2584%25D8%25B1%25D8%25A7%25D8%25A8%25D8%25B9%25D8%25A9%2B%25D8%25A7%25D8%25A8%25D8%25AA%25D8%25AF%25D8%25A7%25D8%25A6%25D9%258A.JPG IP142.250.74.65:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 640x450, components 3\012- data Hash840c1d7bcf54479de4e460fad19f7233 cfd26074389c76e7f80fbc4865694aec53ce4d59 2ff32c1914155c8f2ad29399c0334edddf4a62ff30ee1095f9566a57713b069c
GET /-UHrOja9VD-c/YZOEPk1C7sI/AAAAAAAAh9Y/8hvi_pBSoj47oMcDEdgDTrh9GtKKC5DNQCLcBGAsYHQ/w640-h450/%25D8%25A7%25D8%25AE%25D8%25AA%25D8%25A8%25D8%25A7%25D8%25B1%25D8%25A7%25D8%25AA%2B%25D9%2585%25D8%25AD%25D9%2584%25D9%2588%25D9%2584%25D8%25A9%2B%25D9%2584%25D9%2584%25D8%25B3%25D9%2586%25D8%25A9%2B%25D8%25A7%25D9%2584%25D8%25B1%25D8%25A7%25D8%25A8%25D8%25B9%25D8%25A9%2B%25D8%25A7%25D8%25A8%25D8%25AA%25D8%25AF%25D8%25A7%25D8%25A6%25D9%258A.JPG HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v87d7"
expires: Sat, 10 Dec 2022 18:17:19 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="________ ______ _____ _______ _______.JPG";filename*=UTF-8''%D8%A7%D8%AE%D8%AA%D8%A8%D8%A7%D8%B1%D8%A7%D8%AA%20%D9%85%D8%AD%D9%84%D9%88%D9%84%D8%A9%20%D9%84%D9%84%D8%B3%D9%86%D8%A9%20%D8%A7%D9%84%D8%B1%D8%A7%D8%A8%D8%B9%D8%A9%20%D8%A7%D8%A8%D8%AA%D8%AF%D8%A7%D8%A6%D9%8A.JPG
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 18:17:19 GMT
server: fife
content-length: 51075
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| 2.bp.blogspot.com/-MTFAXuGWQlE/WKtlJm6tB0I/AAAAAAAACQw/2NnJc6--290axa2uJiLuMh-PD9WN4AIJwCLcB/s1600/16837911_222397604891358_1268562472_n.png | 142.250.74.65 | 200 OK | 507 kB |
URL HTTP/22.bp.blogspot.com/-MTFAXuGWQlE/WKtlJm6tB0I/AAAAAAAACQw/2NnJc6--290axa2uJiLuMh-PD9WN4AIJwCLcB/s1600/16837911_222397604891358_1268562472_n.png IP142.250.74.65:0
File typePNG image data, 500 x 737, 8-bit/color RGBA, non-interlaced\012- data Size507 kB (507227 bytes) Hash64f32f0069a82b79663a0213c069a26e ac65b048587ce9095a645c4cb403422ec01290d3 fe58b01fcadeb5edb15f71cd2955d6151ad79cedc836bd89ead653281f847231
GET /-MTFAXuGWQlE/WKtlJm6tB0I/AAAAAAAACQw/2NnJc6--290axa2uJiLuMh-PD9WN4AIJwCLcB/s1600/16837911_222397604891358_1268562472_n.png HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v90e"
expires: Sat, 10 Dec 2022 18:17:19 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="16837911_222397604891358_1268562472_n.png"
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 18:17:19 GMT
server: fife
content-length: 507227
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| 4.bp.blogspot.com/-hlnz7w9QEXo/XLRM9SC4-HI/AAAAAAAAGks/oso_yUwKnToY0ANlMm9HJGqsRp-aPtb-QCLcBGAs/s640/%25D8%25A7%25D8%25AE%25D8%25AA%25D8%25A8%25D8%25A7%25D8%25B1%2B%25D8%25A7%25D9%2584%25D9%2581%25D8%25B5%25D9%2584%2B%25D8%25A7%25D9%2584%25D8%25AB%25D8%25A7%25D9%2584%25D8%25AB%2B%25D9%2584%25D9%2584%25D8%25B3%25D9%2586%25D8%25A9%2B%25D8%25A7%25D9%2584%25D8%25A7%25D9%2588%25D9%2584%25D9%2589%2B%25D8%25A7%25D8%25A8%25D8%25AA%25D8%25AF%25D8%25A7%25D8%25A6%25D9%258A%2B%25D9%2581%25D9%258A%2B%25D8%25A7%25D9%2584%25D8%25B1%25D9%258A%25D8%25A7%25D8%25B6%25D9%258A%25D8%25A7%25D8%25AA.PNG | 142.250.74.65 | 200 OK | 50 kB |
URL HTTP/24.bp.blogspot.com/-hlnz7w9QEXo/XLRM9SC4-HI/AAAAAAAAGks/oso_yUwKnToY0ANlMm9HJGqsRp-aPtb-QCLcBGAs/s640/%25D8%25A7%25D8%25AE%25D8%25AA%25D8%25A8%25D8%25A7%25D8%25B1%2B%25D8%25A7%25D9%2584%25D9%2581%25D8%25B5%25D9%2584%2B%25D8%25A7%25D9%2584%25D8%25AB%25D8%25A7%25D9%2584%25D8%25AB%2B%25D9%2584%25D9%2584%25D8%25B3%25D9%2586%25D8%25A9%2B%25D8%25A7%25D9%2584%25D8%25A7%25D9%2588%25D9%2584%25D9%2589%2B%25D8%25A7%25D8%25A8%25D8%25AA%25D8%25AF%25D8%25A7%25D8%25A6%25D9%258A%2B%25D9%2581%25D9%258A%2B%25D8%25A7%25D9%2584%25D8%25B1%25D9%258A%25D8%25A7%25D8%25B6%25D9%258A%25D8%25A7%25D8%25AA.PNG IP142.250.74.65:0
File typePNG image data, 640 x 399, 8-bit/color RGB, non-interlaced\012- data Hashdbc60a7c316f25b180881de1bee471de 8389a7b4c369ed8f79a7dc2a9b4a4d8ef8020d55 1b2d7f5a89b676fde75d7b0d1787199272fdb30369eb20eba51a67fc0ed598a5
GET /-hlnz7w9QEXo/XLRM9SC4-HI/AAAAAAAAGks/oso_yUwKnToY0ANlMm9HJGqsRp-aPtb-QCLcBGAs/s640/%25D8%25A7%25D8%25AE%25D8%25AA%25D8%25A8%25D8%25A7%25D8%25B1%2B%25D8%25A7%25D9%2584%25D9%2581%25D8%25B5%25D9%2584%2B%25D8%25A7%25D9%2584%25D8%25AB%25D8%25A7%25D9%2584%25D8%25AB%2B%25D9%2584%25D9%2584%25D8%25B3%25D9%2586%25D8%25A9%2B%25D8%25A7%25D9%2584%25D8%25A7%25D9%2588%25D9%2584%25D9%2589%2B%25D8%25A7%25D8%25A8%25D8%25AA%25D8%25AF%25D8%25A7%25D8%25A6%25D9%258A%2B%25D9%2581%25D9%258A%2B%25D8%25A7%25D9%2584%25D8%25B1%25D9%258A%25D8%25A7%25D8%25B6%25D9%258A%25D8%25A7%25D8%25AA.PNG HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1a4c"
expires: Sat, 10 Dec 2022 18:17:19 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="______ _____ ______ _____ ______ _______ __ _________.PNG";filename*=UTF-8''%D8%A7%D8%AE%D8%AA%D8%A8%D8%A7%D8%B1%20%D8%A7%D9%84%D9%81%D8%B5%D9%84%20%D8%A7%D9%84%D8%AB%D8%A7%D9%84%D8%AB%20%D9%84%D9%84%D8%B3%D9%86%D8%A9%20%D8%A7%D9%84%D8%A7%D9%88%D9%84%D9%89%20%D8%A7%D8%A8%D8%AA%D8%AF%D8%A7%D8%A6%D9%8A%20%D9%81%D9%8A%20%D8%A7%D9%84%D8%B1%D9%8A%D8%A7%D8%B6%D9%8A%D8%A7%D8%AA.PNG
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 18:17:19 GMT
server: fife
content-length: 50503
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| 1.bp.blogspot.com/-jpOy39QdwME/XzuuqcG70kI/AAAAAAAAU5E/GsZKOkiScgw7e2rzALLMCF0lsof-0Q7HQCLcBGAsYHQ/s640/%25D9%2584%25D8%25A7%2B%25D8%25A7%25D9%2584%25D9%2586%25D8%25A7%25D9%2581%25D9%258A%25D8%25A9%2B%25D9%2584%25D9%2584%25D8%25AC%25D9%2586%25D8%25B3.jpg | 142.250.74.65 | 200 OK | 41 kB |
URL HTTP/21.bp.blogspot.com/-jpOy39QdwME/XzuuqcG70kI/AAAAAAAAU5E/GsZKOkiScgw7e2rzALLMCF0lsof-0Q7HQCLcBGAsYHQ/s640/%25D9%2584%25D8%25A7%2B%25D8%25A7%25D9%2584%25D9%2586%25D8%25A7%25D9%2581%25D9%258A%25D8%25A9%2B%25D9%2584%25D9%2584%25D8%25AC%25D9%2586%25D8%25B3.jpg IP142.250.74.65:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 640x302, components 3\012- data Hash822bbe5ed069e04e57d3066af4f55589 d6719f3d1f57cce596d470a1a4e44f43d745ca9b c07aaa424541720df3675c8e5b46f0b4b6f17e1325f3323d7a26ce4bdef6987d
GET /-jpOy39QdwME/XzuuqcG70kI/AAAAAAAAU5E/GsZKOkiScgw7e2rzALLMCF0lsof-0Q7HQCLcBGAsYHQ/s640/%25D9%2584%25D8%25A7%2B%25D8%25A7%25D9%2584%25D9%2586%25D8%25A7%25D9%2581%25D9%258A%25D8%25A9%2B%25D9%2584%25D9%2584%25D8%25AC%25D9%2586%25D8%25B3.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v5394"
expires: Sat, 10 Dec 2022 18:17:19 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="__ _______ _____.jpg";filename*=UTF-8''%D9%84%D8%A7%20%D8%A7%D9%84%D9%86%D8%A7%D9%81%D9%8A%D8%A9%20%D9%84%D9%84%D8%AC%D9%86%D8%B3.jpg
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 18:17:19 GMT
server: fife
content-length: 41294
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| 1.bp.blogspot.com/-9EgTYiuGvg8/XZ3CdaQFQII/AAAAAAAAKM8/h7ZcxstgVFkm51lBd-T8KEgLIWNsymIlwCLcBGAsYHQ/s640/%25D8%25A7%25D9%2584%25D9%2585%25D9%2588%25D8%25A7%25D8%25AF%2B%25D8%25A7%25D9%2584%25D9%2585%25D9%2585%25D8%25AA%25D8%25AD%25D9%2586%25D8%25A9%2B%25D9%2581%25D9%258A%2B%25D9%2585%25D8%25B3%25D8%25A7%25D8%25A8%25D9%2582%25D8%25A9%2B%25D8%25A7%25D9%2584%25D9%2582%25D8%25B6%25D8%25A7%25D8%25A1%2B2019.png | 142.250.74.65 | 200 OK | 256 kB |
URL HTTP/21.bp.blogspot.com/-9EgTYiuGvg8/XZ3CdaQFQII/AAAAAAAAKM8/h7ZcxstgVFkm51lBd-T8KEgLIWNsymIlwCLcBGAsYHQ/s640/%25D8%25A7%25D9%2584%25D9%2585%25D9%2588%25D8%25A7%25D8%25AF%2B%25D8%25A7%25D9%2584%25D9%2585%25D9%2585%25D8%25AA%25D8%25AD%25D9%2586%25D8%25A9%2B%25D9%2581%25D9%258A%2B%25D9%2585%25D8%25B3%25D8%25A7%25D8%25A8%25D9%2582%25D8%25A9%2B%25D8%25A7%25D9%2584%25D9%2582%25D8%25B6%25D8%25A7%25D8%25A1%2B2019.png IP142.250.74.65:0
File typePNG image data, 640 x 360, 8-bit/color RGB, non-interlaced\012- data Size256 kB (256227 bytes) Hash5d0b5aa5d7629d995c6a884f832a9e52 1c3e90ebbdc9f5c38d21c84eaf2d43863052193c fd314cc58dd95b656258c83ecba0cfc352b3c5496c831dd9daa4fd70a7dca3b8
GET /-9EgTYiuGvg8/XZ3CdaQFQII/AAAAAAAAKM8/h7ZcxstgVFkm51lBd-T8KEgLIWNsymIlwCLcBGAsYHQ/s640/%25D8%25A7%25D9%2584%25D9%2585%25D9%2588%25D8%25A7%25D8%25AF%2B%25D8%25A7%25D9%2584%25D9%2585%25D9%2585%25D8%25AA%25D8%25AD%25D9%2586%25D8%25A9%2B%25D9%2581%25D9%258A%2B%25D9%2585%25D8%25B3%25D8%25A7%25D8%25A8%25D9%2582%25D8%25A9%2B%25D8%25A7%25D9%2584%25D9%2582%25D8%25B6%25D8%25A7%25D8%25A1%2B2019.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="______ ________ __ ______ ______ 2019.png";filename*=UTF-8''%D8%A7%D9%84%D9%85%D9%88%D8%A7%D8%AF%20%D8%A7%D9%84%D9%85%D9%85%D8%AA%D8%AD%D9%86%D8%A9%20%D9%81%D9%8A%20%D9%85%D8%B3%D8%A7%D8%A8%D9%82%D8%A9%20%D8%A7%D9%84%D9%82%D8%B6%D8%A7%D8%A1%202019.png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 256227
x-xss-protection: 0
date: Fri, 09 Dec 2022 18:17:19 GMT
expires: Fri, 09 Dec 2022 02:43:39 GMT
cache-control: public, max-age=86400, no-transform
etag: "v28d0"
content-type: image/png
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| 4.bp.blogspot.com/-1r0dzA1mza0/WeCfwEr4kyI/AAAAAAAAFFM/mk8cKINVXl8021WhztaRNAAaBa9m--o-ACLcBGAs/s1600/%25D9%2585%25D8%25B0%25D9%2583%25D8%25B1%25D8%25A7%25D8%25AA%2B%25D8%25A7%25D9%2584%25D8%25B3%25D9%2586%25D8%25A9%2B%25D8%25AB%25D8%25A7%25D9%2584%25D8%25AB%25D8%25A9%2B%25D8%25A7%25D8%25A8%25D8%25AA%25D8%25AF%25D8%25A7%25D8%25A6%25D9%258A%2B%25D8%25A7%25D9%2584%25D8%25AC%25D9%258A%25D9%2584%2B%25D8%25A7%25D9%2584%25D8%25AB%25D8%25A7%25D9%2586%25D9%258A%2B%25D8%25A7%25D9%2584%25D9%2585%25D9%2582%25D8%25B7%25D8%25B9%2B%25D8%25A7%25D9%2584%25D8%25AB%25D8%25A7%25D9%2586%25D9%258A%2B%25D8%25A7%25D9%2584%25D8%25A7%25D8%25B3%25D8%25A8%25D9%2588%25D8%25B9%2B%25D8%25A7%25D9%2584%25D8%25A7%25D9%2588%25D9%2584%2B%25D8%25A7%25D9%2584%25D8%25AD%25D9%258A%25D8%25A7%25D8%25A9%2B%25D8%25A7%25D9%2584%25D8%25A7%25D8%25AC%25D8%25AA%25D9%2585%25D8%25A7%25D8%25B9%25D9%258A%25D8%25A9.PNG | 142.250.74.65 | 200 OK | 139 kB |
URL HTTP/24.bp.blogspot.com/-1r0dzA1mza0/WeCfwEr4kyI/AAAAAAAAFFM/mk8cKINVXl8021WhztaRNAAaBa9m--o-ACLcBGAs/s1600/%25D9%2585%25D8%25B0%25D9%2583%25D8%25B1%25D8%25A7%25D8%25AA%2B%25D8%25A7%25D9%2584%25D8%25B3%25D9%2586%25D8%25A9%2B%25D8%25AB%25D8%25A7%25D9%2584%25D8%25AB%25D8%25A9%2B%25D8%25A7%25D8%25A8%25D8%25AA%25D8%25AF%25D8%25A7%25D8%25A6%25D9%258A%2B%25D8%25A7%25D9%2584%25D8%25AC%25D9%258A%25D9%2584%2B%25D8%25A7%25D9%2584%25D8%25AB%25D8%25A7%25D9%2586%25D9%258A%2B%25D8%25A7%25D9%2584%25D9%2585%25D9%2582%25D8%25B7%25D8%25B9%2B%25D8%25A7%25D9%2584%25D8%25AB%25D8%25A7%25D9%2586%25D9%258A%2B%25D8%25A7%25D9%2584%25D8%25A7%25D8%25B3%25D8%25A8%25D9%2588%25D8%25B9%2B%25D8%25A7%25D9%2584%25D8%25A7%25D9%2588%25D9%2584%2B%25D8%25A7%25D9%2584%25D8%25AD%25D9%258A%25D8%25A7%25D8%25A9%2B%25D8%25A7%25D9%2584%25D8%25A7%25D8%25AC%25D8%25AA%25D9%2585%25D8%25A7%25D8%25B9%25D9%258A%25D8%25A9.PNG IP142.250.74.65:0
File typePNG image data, 500 x 342, 8-bit/color RGB, non-interlaced\012- data Size139 kB (139435 bytes) Hashc154a57f30601bcda1ae64b45dacd3a2 d6a9b7977d41351d1b95c728543a4faea48e80d9 c7c12cb1dfd3da4ee268b1a3fc2b10168e9a305e993d728edb3c9aac238597fa
GET /-1r0dzA1mza0/WeCfwEr4kyI/AAAAAAAAFFM/mk8cKINVXl8021WhztaRNAAaBa9m--o-ACLcBGAs/s1600/%25D9%2585%25D8%25B0%25D9%2583%25D8%25B1%25D8%25A7%25D8%25AA%2B%25D8%25A7%25D9%2584%25D8%25B3%25D9%2586%25D8%25A9%2B%25D8%25AB%25D8%25A7%25D9%2584%25D8%25AB%25D8%25A9%2B%25D8%25A7%25D8%25A8%25D8%25AA%25D8%25AF%25D8%25A7%25D8%25A6%25D9%258A%2B%25D8%25A7%25D9%2584%25D8%25AC%25D9%258A%25D9%2584%2B%25D8%25A7%25D9%2584%25D8%25AB%25D8%25A7%25D9%2586%25D9%258A%2B%25D8%25A7%25D9%2584%25D9%2585%25D9%2582%25D8%25B7%25D8%25B9%2B%25D8%25A7%25D9%2584%25D8%25AB%25D8%25A7%25D9%2586%25D9%258A%2B%25D8%25A7%25D9%2584%25D8%25A7%25D8%25B3%25D8%25A8%25D9%2588%25D8%25B9%2B%25D8%25A7%25D9%2584%25D8%25A7%25D9%2588%25D9%2584%2B%25D8%25A7%25D9%2584%25D8%25AD%25D9%258A%25D8%25A7%25D8%25A9%2B%25D8%25A7%25D9%2584%25D8%25A7%25D8%25AC%25D8%25AA%25D9%2585%25D8%25A7%25D8%25B9%25D9%258A%25D8%25A9.PNG HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1455"
expires: Sat, 10 Dec 2022 18:17:19 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="______ _____ _____ _______ _____ ______ ______ ______ _______ _____ ______ __________.PNG";filename*=UTF-8''%D9%85%D8%B0%D9%83%D8%B1%D8%A7%D8%AA%20%D8%A7%D9%84%D8%B3%D9%86%D8%A9%20%D8%AB%D8%A7%D9%84%D8%AB%D8%A9%20%D8%A7%D8%A8%D8%AA%D8%AF%D8%A7%D8%A6%D9%8A%20%D8%A7%D9%84%D8%AC%D9%8A%D9%84%20%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A%20%D8%A7%D9%84%D9%85%D9%82%D8%B7%D8%B9%20%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A%20%D8%A7%D9%84%D8%A7%D8%B3%D8%A8%D9%88%D8%B9%20%D8%A7%D9%84%D8%A7%D9%88%D9%84%20%D8%A7%D9%84%D8%AD%D9%8A%D8%A7%D8%A9%20%D8%A7%D9%84%D8%A7%D8%AC%D8%AA%D9%85%D8%A7%D8%B9%D9%8A%D8%A9.PNG
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 18:17:19 GMT
server: fife
content-length: 139435
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| 2.bp.blogspot.com/-pV_fLs3Z3RI/WCWEE-6iYoI/AAAAAAAABAc/XxdBZ_HJC6sOX1C5wZLxUtn0Q9PqumfDwCLcB/s1600/%25D9%2585%25D8%25AE%25D8%25AA%25D8%25B5%25D8%25B1%25D8%25A7%25D8%25AA_%25D8%25AF%25D8%25B1%25D9%2588%25D8%25B3_%25D8%25A7%25D9%2584%25D8%25B1%25D9%258A%25D8%25A7%25D8%25B6%25D9%258A%25D8%25A7%25D8%25AA_%25D9%2588%25D8%25A7%25D9%2584%25D9%2584%25D8%25BA%25D8%25A9_%25D8%25A7%25D9%2584%25D8%25B9%25D8%25B1%25D8%25A8%25D9%258A%25D8%25A9_%25D8%25B35_%25D8%25A7%25D8%25A8%25D8%25AA%25D8%25AF%25D8%25A7%25D8%25A6%25D9%258A.JPG | 142.250.74.65 | 200 OK | 184 kB |
URL HTTP/22.bp.blogspot.com/-pV_fLs3Z3RI/WCWEE-6iYoI/AAAAAAAABAc/XxdBZ_HJC6sOX1C5wZLxUtn0Q9PqumfDwCLcB/s1600/%25D9%2585%25D8%25AE%25D8%25AA%25D8%25B5%25D8%25B1%25D8%25A7%25D8%25AA_%25D8%25AF%25D8%25B1%25D9%2588%25D8%25B3_%25D8%25A7%25D9%2584%25D8%25B1%25D9%258A%25D8%25A7%25D8%25B6%25D9%258A%25D8%25A7%25D8%25AA_%25D9%2588%25D8%25A7%25D9%2584%25D9%2584%25D8%25BA%25D8%25A9_%25D8%25A7%25D9%2584%25D8%25B9%25D8%25B1%25D8%25A8%25D9%258A%25D8%25A9_%25D8%25B35_%25D8%25A7%25D8%25A8%25D8%25AA%25D8%25AF%25D8%25A7%25D8%25A6%25D9%258A.JPG IP142.250.74.65:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=4, orientation=upper-left, software=Google], baseline, precision 8, 682x475, components 3\012- data Size184 kB (184305 bytes) Hasha118fc9dd26b4354f239a2753775b63c ecd572b6cca608ef96e7ddcf73d423136c84d7aa 8c207e621826797c29f8a7b37da0a5a2dc1e9b25e58faa969250873ecf48ed0e
GET /-pV_fLs3Z3RI/WCWEE-6iYoI/AAAAAAAABAc/XxdBZ_HJC6sOX1C5wZLxUtn0Q9PqumfDwCLcB/s1600/%25D9%2585%25D8%25AE%25D8%25AA%25D8%25B5%25D8%25B1%25D8%25A7%25D8%25AA_%25D8%25AF%25D8%25B1%25D9%2588%25D8%25B3_%25D8%25A7%25D9%2584%25D8%25B1%25D9%258A%25D8%25A7%25D8%25B6%25D9%258A%25D8%25A7%25D8%25AA_%25D9%2588%25D8%25A7%25D9%2584%25D9%2584%25D8%25BA%25D8%25A9_%25D8%25A7%25D9%2584%25D8%25B9%25D8%25B1%25D8%25A8%25D9%258A%25D8%25A9_%25D8%25B35_%25D8%25A7%25D8%25A8%25D8%25AA%25D8%25AF%25D8%25A7%25D8%25A6%25D9%258A.JPG HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v40a"
expires: Sat, 10 Dec 2022 18:17:19 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="_______________________________________5________.JPG";filename*=UTF-8''%D9%85%D8%AE%D8%AA%D8%B5%D8%B1%D8%A7%D8%AA_%D8%AF%D8%B1%D9%88%D8%B3_%D8%A7%D9%84%D8%B1%D9%8A%D8%A7%D8%B6%D9%8A%D8%A7%D8%AA_%D9%88%D8%A7%D9%84%D9%84%D8%BA%D8%A9_%D8%A7%D9%84%D8%B9%D8%B1%D8%A8%D9%8A%D8%A9_%D8%B35_%D8%A7%D8%A8%D8%AA%D8%AF%D8%A7%D8%A6%D9%8A.JPG
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 18:17:19 GMT
server: fife
content-length: 184305
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash4e3dc85fd71bdb106039966a96cdd02b 53d3487232ddcac30b53c224c94e63571633e5af d0a3a292876b50c590a3fa6c04d3471a6fb726c54f57e75c21f2e1bd45424ace
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:17:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 | 104.17.25.14 | 200 OK | 77 kB |
URL HTTP/2cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 IP104.17.25.14:0
File typeWeb Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data Hashaf7ae505a9eed503f8b8e6982036873e d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.seyf-educ.com
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:17:19 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 77160
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eb03e5f-12d68"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 177085
expires: Wed, 29 Nov 2023 18:17:19 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nAUVdefmFY7mbafvBS5hmBM6k13NsTIl9yU35geRcgMQUqS9YKQuN6kI%2FPYZAhPMP1g%2FiIOW3EFrySUOI%2FzhjT%2F0pKe59x1%2B6yYeNAxynEfsbtsF%2F8ABGSNF113pZ%2Bvmtw7Sao1H"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 776fbcab2b7efab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 8.5 kB |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashd42cd731f49a79d6c51543df4eda29c6 49ba2c1c1b02c2ee4e8192a85e735e1f044b08cc 9a7a4a23fe72e62efa9904cbe250b129ee098e045c3222e47d9733b59e050d80
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AA935A586A8F1E18C93BF12958884D1EE590BEDF8531B0F81A90EE09BF66896A"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5060
Expires: Fri, 09 Dec 2022 19:41:40 GMT
Date: Fri, 09 Dec 2022 18:17:20 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashacea7cb44141792f5d84b0c9ab8c57e4 69f1e46739200324bd891063d17c7a7083f313b7 4c0d144b20ab8cf7fec972a66e08ed2b993121e9c4b6c88bbf0f3e7388f2b058
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4C0D144B20AB8CF7FEC972A66E08ED2B993121E9C4B6C88BBF0F3E7388F2B058"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7541
Expires: Fri, 09 Dec 2022 20:23:01 GMT
Date: Fri, 09 Dec 2022 18:17:20 GMT
Connection: keep-alive
|
|
| my.rtmark.net/gid.js?userId=c15fa9e287604a87a65a98e0bedeb8e3 | 139.45.195.8 | 200 OK | 65 B |
URL HTTP/2my.rtmark.net/gid.js?userId=c15fa9e287604a87a65a98e0bedeb8e3 IP139.45.195.8:0
File typeJSON data\012- , ASCII text Hashed424c8f5253f71ca2b13ee2bb8f3593 7a2c319c822ff202d3abf4b5d45264623e695dc9 4840e43757b1c76560f55463a73d25e98a55d673563ae2cfeeefc3cc8f1a8dac
GET /gid.js?userId=c15fa9e287604a87a65a98e0bedeb8e3 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.seyf-educ.com
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 18:17:20 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://www.seyf-educ.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=c15fa9e287604a87a65a98e0bedeb8e3; expires=Sat, 09 Dec 2023 18:17:20 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| www.google-analytics.com/analytics.js | 216.239.34.178 | 200 OK | 20 kB |
URL HTTP/2www.google-analytics.com/analytics.js IP216.239.34.178:0
File typeASCII text, with very long lines (1325) Hash47e6f374ca946fddd5b59871b325736c baa9282efc8785e84d247c3bff518eaa45f101c4 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Fri, 09 Dec 2022 16:41:08 GMT
expires: Fri, 09 Dec 2022 18:41:08 GMT
cache-control: public, max-age=7200
age: 5772
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hash3b873c6396aca4019ea51aed119cc8b6 b9684a5bf5075eb4e8ae2512b9ab3f1ddbddf80a 0045a8cb68ae0065903c118fcce7eb8b5eb1ad3bf92da3a50630346f5b45ca34
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:17:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| betotodilea.com/400/4675720 | 139.45.197.237 | 200 OK | 33 kB |
URL HTTP/2betotodilea.com/400/4675720 IP139.45.197.237:0
Hash3d5ff7753b7a4779ba43446926207bcd 3cd8de9a15714130e33101e549e619a5a083798e d96d315f8b1b6d864c249feb32641951cefadb356890a5969b83cd6cec47353f
GET /400/4675720 HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 18:17:20 GMT
content-type: application/javascript
x-trace-id: f1d0c3d6e604042d172876f523df86ac
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
set-cookie: OAID=d6751379f3524a4886c1dd3b19a6eb27; expires=Sat, 09 Dec 2023 18:17:20 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.google-analytics.com/j/collect?v=1&_v=j98&a=1067660639&t=pageview&_s=1&dl=https%3A%2F%2Fwww.seyf-educ.com%2F&ul=en-us&de=UTF-8&dt=%D8%A3%D9%83%D8%A7%D8%AF%D9%8A%D9%85%D9%8A%D8%A9%20%D8%B3%D9%8A%D9%81%20%D9%84%D9%84%D8%AF%D8%B1%D8%A7%D8%B3%D8%A9%20%D9%81%D9%8A%20%D8%A7%D9%84%D8%AC%D8%B2%D8%A7%D8%A6%D8%B1%20-%20%D8%A7%D9%84%D9%85%D9%88%D9%82%D8%B9%20%D8%A7%D9%84%D8%A7%D9%88%D9%84%20%D9%84%D9%84%D8%AF%D8%B1%D8%A7%D8%B3%D8%A9%20%D9%81%D9%8A%20%D8%A7%D9%84%D8%AC%D8%B2%D8%A7%D8%A6%D8%B1%20%2C%20%D8%A8%D9%86%D9%83%20%D8%A7%D9%84%D9%81%D8%B1%D9%88%D8%B6%20%D9%88%20%D8%A7%D9%84%D8%A7%D8%AE%D8%AA%D8%A8%D8%A7%D8%B1%D8%A7%D8%AA%20%D8%A7%D9%84%D8%AC%D9%8A%D9%84%20%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=1670939871&gjid=1932157345&cid=144364856.1670609839&tid=UA-51279578-2&_gid=532845566.1670609839&_r=1>m=2oubu0&z=1404719609 | 216.239.34.178 | 200 OK | 2 B |
URL HTTP/2www.google-analytics.com/j/collect?v=1&_v=j98&a=1067660639&t=pageview&_s=1&dl=https%3A%2F%2Fwww.seyf-educ.com%2F&ul=en-us&de=UTF-8&dt=%D8%A3%D9%83%D8%A7%D8%AF%D9%8A%D9%85%D9%8A%D8%A9%20%D8%B3%D9%8A%D9%81%20%D9%84%D9%84%D8%AF%D8%B1%D8%A7%D8%B3%D8%A9%20%D9%81%D9%8A%20%D8%A7%D9%84%D8%AC%D8%B2%D8%A7%D8%A6%D8%B1%20-%20%D8%A7%D9%84%D9%85%D9%88%D9%82%D8%B9%20%D8%A7%D9%84%D8%A7%D9%88%D9%84%20%D9%84%D9%84%D8%AF%D8%B1%D8%A7%D8%B3%D8%A9%20%D9%81%D9%8A%20%D8%A7%D9%84%D8%AC%D8%B2%D8%A7%D8%A6%D8%B1%20%2C%20%D8%A8%D9%86%D9%83%20%D8%A7%D9%84%D9%81%D8%B1%D9%88%D8%B6%20%D9%88%20%D8%A7%D9%84%D8%A7%D8%AE%D8%AA%D8%A8%D8%A7%D8%B1%D8%A7%D8%AA%20%D8%A7%D9%84%D8%AC%D9%8A%D9%84%20%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=1670939871&gjid=1932157345&cid=144364856.1670609839&tid=UA-51279578-2&_gid=532845566.1670609839&_r=1>m=2oubu0&z=1404719609 IP216.239.34.178:0
File typeASCII text, with no line terminators Hashcc7a1e792bca8ccb1946b7a07f6dbc03 11a2757082428311f587b7664fa9840376137f80 de3246094525b21a870fc7d2a67490d0132535c6fa5993755c549f1a9d1bd8af
POST /j/collect?v=1&_v=j98&a=1067660639&t=pageview&_s=1&dl=https%3A%2F%2Fwww.seyf-educ.com%2F&ul=en-us&de=UTF-8&dt=%D8%A3%D9%83%D8%A7%D8%AF%D9%8A%D9%85%D9%8A%D8%A9%20%D8%B3%D9%8A%D9%81%20%D9%84%D9%84%D8%AF%D8%B1%D8%A7%D8%B3%D8%A9%20%D9%81%D9%8A%20%D8%A7%D9%84%D8%AC%D8%B2%D8%A7%D8%A6%D8%B1%20-%20%D8%A7%D9%84%D9%85%D9%88%D9%82%D8%B9%20%D8%A7%D9%84%D8%A7%D9%88%D9%84%20%D9%84%D9%84%D8%AF%D8%B1%D8%A7%D8%B3%D8%A9%20%D9%81%D9%8A%20%D8%A7%D9%84%D8%AC%D8%B2%D8%A7%D8%A6%D8%B1%20%2C%20%D8%A8%D9%86%D9%83%20%D8%A7%D9%84%D9%81%D8%B1%D9%88%D8%B6%20%D9%88%20%D8%A7%D9%84%D8%A7%D8%AE%D8%AA%D8%A8%D8%A7%D8%B1%D8%A7%D8%AA%20%D8%A7%D9%84%D8%AC%D9%8A%D9%84%20%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=1670939871&gjid=1932157345&cid=144364856.1670609839&tid=UA-51279578-2&_gid=532845566.1670609839&_r=1>m=2oubu0&z=1404719609 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.seyf-educ.com
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.seyf-educ.com
date: Fri, 09 Dec 2022 18:17:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| betotodilea.com/500/4675720?excludes=&oaid=c15fa9e287604a87a65a98e0bedeb8e3&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=1&pl=https%3A%2F%2Fwww.seyf-educ.com%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false | 139.45.197.237 | 200 OK | 0 B |
URL HTTP/2betotodilea.com/500/4675720?excludes=&oaid=c15fa9e287604a87a65a98e0bedeb8e3&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=1&pl=https%3A%2F%2Fwww.seyf-educ.com%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false IP139.45.197.237:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /500/4675720?excludes=&oaid=c15fa9e287604a87a65a98e0bedeb8e3&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=1&pl=https%3A%2F%2Fwww.seyf-educ.com%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://www.seyf-educ.com/
Origin: https://www.seyf-educ.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 18:17:20 GMT
content-length: 0
allow: GET, OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://www.seyf-educ.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-allow-credentials: true
access-control-max-age: 600
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| ocsp.sectigo.com/ | 104.18.32.68 | 200 OK | 471 B |
IP104.18.32.68:0
Hash849e7d14c79720f2ab4168c416effd9c 764bcd5ba64a4fd23bfef15e4401bb741e0e515f a219f07e6ab39a84155b8956d651925de6ec8328acedb5e636c94bff6f6efc85
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 18:17:20 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 09 Dec 2022 13:33:26 GMT
Expires: Fri, 16 Dec 2022 13:33:25 GMT
Etag: "764bcd5ba64a4fd23bfef15e4401bb741e0e515f"
Cache-Control: max-age=587164,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 776fbcaf9b92b515-OSL
|
|
| datatechonert.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f | 37.48.68.71 | 200 OK | 12 B |
URL HTTP/1.1datatechonert.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f IP37.48.68.71:0 ASN#60781 LeaseWeb Netherlands B.V.
File typeJSON data\012- , ASCII text, with no line terminators Hashadb4650bfc9d2a73d4dd69583b0ceb14 1ce399d6e936232aaf2192cd7903a279c5015f22 21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1198
Origin: https://www.seyf-educ.com
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Fri, 09 Dec 2022 18:17:20 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://www.seyf-educ.com
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 278 B |
IP93.184.220.29:0
Hash4fbea77a0d1d179d738cb7851746552e 8808e4b54c414ca5a58c5b859ff335d61b472a8c 414fa4b36451eb121315b4a80993f6632206eb5ea7fe8c65ddf65acfdf18ae15
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6408
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:17:20 GMT
Last-Modified: Fri, 09 Dec 2022 16:30:32 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 278
|
|
| betotodilea.com/500/4675720?excludes=&oaid=c15fa9e287604a87a65a98e0bedeb8e3&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=1&pl=https%3A%2F%2Fwww.seyf-educ.com%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false | 139.45.197.237 | 200 OK | 16 kB |
URL HTTP/2betotodilea.com/500/4675720?excludes=&oaid=c15fa9e287604a87a65a98e0bedeb8e3&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=1&pl=https%3A%2F%2Fwww.seyf-educ.com%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false IP139.45.197.237:0
Hash98e166c4eb452ddefbaa9edb4f32e7e2 f44b5d0babbf3427141fbbadb2f5afa39db0ecc5 6d08a86db01274cef8b1caa37ee7ee2f10ac85d2a5d923378d91f94f67d565e2
GET /500/4675720?excludes=&oaid=c15fa9e287604a87a65a98e0bedeb8e3&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=1&pl=https%3A%2F%2Fwww.seyf-educ.com%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://www.seyf-educ.com
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Cookie: OAID=d6751379f3524a4886c1dd3b19a6eb27
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 18:17:20 GMT
content-type: application/javascript
x-trace-id: ac237cf4902cfd2c2dbb3d9d7efe39d6
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://www.seyf-educ.com
access-control-expose-headers: Link
access-control-allow-credentials: true
set-cookie: OAID=c15fa9e287604a87a65a98e0bedeb8e3; expires=Sat, 09 Dec 2023 18:17:20 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash2556512b197b09798af71bea10bb4bbb 23b647aca5f8294ae82fa8cc7e2215ebe3347b60 3b5bd592342d978bcf8919d1a1e2f87295e2e4af5b5b266e6017b7a25725d08d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:17:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-51279578-2&cid=144364856.1670609839&jid=1670939871&gjid=1932157345&_gid=532845566.1670609839&_u=YEBAAUAAAAAAACAAI~&z=2129062570 | 173.194.222.157 | 200 OK | 4 B |
URL HTTP/2stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-51279578-2&cid=144364856.1670609839&jid=1670939871&gjid=1932157345&_gid=532845566.1670609839&_u=YEBAAUAAAAAAACAAI~&z=2129062570 IP173.194.222.157:0
File typeASCII text, with no line terminators Hash48c0473b7821185d937e685216e2168b 3743e47f8a429a5e87b86cb582d78940733d9d2e 570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-51279578-2&cid=144364856.1670609839&jid=1670939871&gjid=1932157345&_gid=532845566.1670609839&_u=YEBAAUAAAAAAACAAI~&z=2129062570 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.seyf-educ.com
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.seyf-educ.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 09 Dec 2022 18:17:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash8105b33e4e3af998e9d016e156205c22 dfa2f5cecd72be8ec63d5f833b82cd993a5ce8b9 4a682a72e5d599d48706927cbc0852df5ac36dbb57747681cc2ee91c719c7ccf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:17:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash32d90ff0cc366730c3633c1201b4c058 f4175292b607197a15085e14bf69df301dff6706 b4b2f80fbe9b02f3d54dc35a3738c31a4d7cb5a5e528fcbce50263d8c458231a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:17:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash23f0fed6cb9af080a75d8b899ae5bd84 2c02a8cb4a6e70d8ba58696fd709838656d443c3 b1102b6924fcffe1f07a07385010a47aa142435d4efc79b338e50f8258a4d5da
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:17:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-51279578-2&cid=144364856.1670609839&jid=1670939871&_u=YEBAAUAAAAAAACAAI~&z=977278903 | 216.58.207.228 | 200 OK | 42 B |
URL HTTP/2www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-51279578-2&cid=144364856.1670609839&jid=1670939871&_u=YEBAAUAAAAAAACAAI~&z=977278903 IP216.58.207.228:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-51279578-2&cid=144364856.1670609839&jid=1670939871&_u=YEBAAUAAAAAAACAAI~&z=977278903 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Dec 2022 18:17:21 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-51279578-2&cid=144364856.1670609839&jid=1670939871&_u=YEBAAUAAAAAAACAAI~&z=977278903 | 142.250.74.67 | 200 OK | 42 B |
URL HTTP/2www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-51279578-2&cid=144364856.1670609839&jid=1670939871&_u=YEBAAUAAAAAAACAAI~&z=977278903 IP142.250.74.67:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-51279578-2&cid=144364856.1670609839&jid=1670939871&_u=YEBAAUAAAAAAACAAI~&z=977278903 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Dec 2022 18:17:21 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| tzegilo.com/stattag.js | 172.64.105.21 | 200 OK | 82 kB |
IP172.64.105.21:0
File typeASCII text, with very long lines (12966), with no line terminators Hash4490d769f03b18be5f065de28673003b 15b51e7d03cf8925b8cfe090c6765f3385825649 4e709550a173a8740ce4ec207dcd3918ab118540546a5b569301e27d23d52d0e
GET /stattag.js HTTP/1.1
Host: tzegilo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:17:20 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 15:07:42 GMT
etag: W/"637e373e-32a6"
link: <https://flerap.com/>; rel=preconnect; crossorigin, <https://fleraprt.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 3267
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rcieow9sLcjpIPcp5kYbG276Erz0oT%2Bk9SB56H5GYsFelIJe3DSPDSWsva4fc51xGNpn793Chl62yyrnECD61pJ6vOBTL7L83JQJ%2F9bUIOaC3LmY3k8DeTJ5C%2FZZqQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776fbcae2c2b23b4-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash32d90ff0cc366730c3633c1201b4c058 f4175292b607197a15085e14bf69df301dff6706 b4b2f80fbe9b02f3d54dc35a3738c31a4d7cb5a5e528fcbce50263d8c458231a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:17:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash8585fe73b51c643ee300c3df9313bfe1 c184ce0c12fbfc0f17a81ad0e0bdaad5503bceb1 807b590f961c83886bbd27c879dfbf03a3336005cdabbba42d4d63bdcb11bf51
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:17:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hash3b873c6396aca4019ea51aed119cc8b6 b9684a5bf5075eb4e8ae2512b9ab3f1ddbddf80a 0045a8cb68ae0065903c118fcce7eb8b5eb1ad3bf92da3a50630346f5b45ca34
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:17:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| seyf-educ.com/ | 172.67.167.8 | 301 Moved Permanently | 0 B |
IP172.67.167.8:0
Analyzer | Verdict | Alert | fortinet | Malware | |
GET / HTTP/1.1
Host: seyf-educ.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
date: Fri, 09 Dec 2022 18:17:18 GMT
content-type: text/html; charset=UTF-8
location: https://www.seyf-educ.com/
cf-ray: 776fbc93ef710b59-OSL
cache-control: max-age=14400
expires: Fri, 09 Dec 2022 19:17:18 GMT
vary: Accept-Encoding
cf-cache-status: MISS
cf-apo-via: origin,resnok
cf-edge-cache: cache,platform=wordpress
x-dns-prefetch-control: on
x-litespeed-tag: b80_HTTP.200,b80_HTTP.301
x-redirect-by: WordPress
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=at4w0slns6DZzTKOhoZWDJDhWv5Id%2FkwML8wMUGtjNrfbKG1UxNy4MbB21adZgOtxdilVpNLYlyu3KBIO8uPefSk8FizPyHy%2BVmcbmJX4DI7ImTQAdEKtUomBxOKNimd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| thefacux.com/5/3654818 | 139.45.197.238 | 200 OK | 0 B |
IP139.45.197.238:0
Analyzer | Verdict | Alert | quad9 | Sinkholed | |
GET /5/3654818 HTTP/1.1
Host: thefacux.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 18:17:19 GMT
content-type: application/javascript
x-trace-id: ca873a8daa554bb71c48ed16f65ad9ae
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=c15fa9e287604a87a65a98e0bedeb8e3; expires=Sat, 09 Dec 2023 18:17:19 GMT; path=/; secure; SameSite=None
oaidts=1670609839; expires=Sat, 09 Dec 2023 18:17:19 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| thefacux.com/?rb=IcTAXVoJK64nLnCpQaNwdOdaH8KlmcCl4DtfVh4Vxq0Se5T0-YR9fkgWRrOZ8mXcvo181s9krrkIWYv-uWv-jsFR1OrmI1SzQ2cgajcOqb1JJhsyhh0Aohaa_aespmzbGI6KUK5xXbDGFRKhzubKBr0Sw8HRK9IVBgiMaSdKeRdAKZq_CxGBEcOxjq5cr0HQt1HQepY8gB84Qddfym2acMx0nenj4Noj2XU9VfIxEMpZThWCtQWFlg%3D%3D&request_ab2=96001&zoneid=3654818&js_build=iclick-v1.459.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=1&pl=https%3A%2F%2Fwww.seyf-educ.com%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.459.0&bs=c0e9a453-cc5e-4020-b0e2-7eadd74b75c1&userId=c15fa9e287604a87a65a98e0bedeb8e3&m=link | 139.45.197.238 | 200 OK | 0 B |
URL HTTP/2thefacux.com/?rb=IcTAXVoJK64nLnCpQaNwdOdaH8KlmcCl4DtfVh4Vxq0Se5T0-YR9fkgWRrOZ8mXcvo181s9krrkIWYv-uWv-jsFR1OrmI1SzQ2cgajcOqb1JJhsyhh0Aohaa_aespmzbGI6KUK5xXbDGFRKhzubKBr0Sw8HRK9IVBgiMaSdKeRdAKZq_CxGBEcOxjq5cr0HQt1HQepY8gB84Qddfym2acMx0nenj4Noj2XU9VfIxEMpZThWCtQWFlg%3D%3D&request_ab2=96001&zoneid=3654818&js_build=iclick-v1.459.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=1&pl=https%3A%2F%2Fwww.seyf-educ.com%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.459.0&bs=c0e9a453-cc5e-4020-b0e2-7eadd74b75c1&userId=c15fa9e287604a87a65a98e0bedeb8e3&m=link IP139.45.197.238:0
Analyzer | Verdict | Alert | quad9 | Sinkholed | |
GET /?rb=IcTAXVoJK64nLnCpQaNwdOdaH8KlmcCl4DtfVh4Vxq0Se5T0-YR9fkgWRrOZ8mXcvo181s9krrkIWYv-uWv-jsFR1OrmI1SzQ2cgajcOqb1JJhsyhh0Aohaa_aespmzbGI6KUK5xXbDGFRKhzubKBr0Sw8HRK9IVBgiMaSdKeRdAKZq_CxGBEcOxjq5cr0HQt1HQepY8gB84Qddfym2acMx0nenj4Noj2XU9VfIxEMpZThWCtQWFlg%3D%3D&request_ab2=96001&zoneid=3654818&js_build=iclick-v1.459.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=1&pl=https%3A%2F%2Fwww.seyf-educ.com%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.459.0&bs=c0e9a453-cc5e-4020-b0e2-7eadd74b75c1&userId=c15fa9e287604a87a65a98e0bedeb8e3&m=link HTTP/1.1
Host: thefacux.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.seyf-educ.com/
Origin: https://www.seyf-educ.com
Connection: keep-alive
Cookie: OAID=c15fa9e287604a87a65a98e0bedeb8e3; oaidts=1670609839
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 18:17:20 GMT
content-type: application/json
x-trace-id: 55e540531af7cbc6242ca58cf17f7411
access-control-allow-origin: https://www.seyf-educ.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=c15fa9e287604a87a65a98e0bedeb8e3; expires=Sat, 09 Dec 2023 18:17:20 GMT; path=/; secure; SameSite=None
oaidts=1670609840; expires=Sat, 09 Dec 2023 18:17:20 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Fri, 16 Dec 2022 18:17:20 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 1.bp.blogspot.com/-zwdkdo5EO78/XeT14WpcRqI/AAAAAAAALag/w0ozHVHNI2EeJB-VnG_nIPN-UwrXQUcOgCLcBGAsYHQ/s640/%25D9%2585%25D8%25B5%25D8%25A7%25D8%25B1%25D9%2581%2B%25D8%25A7%25D9%2584%25D8%25B2%25D9%2583%25D8%25A7%25D8%25A9.png | 142.250.74.65 | 200 OK | 0 B |
URL HTTP/21.bp.blogspot.com/-zwdkdo5EO78/XeT14WpcRqI/AAAAAAAALag/w0ozHVHNI2EeJB-VnG_nIPN-UwrXQUcOgCLcBGAsYHQ/s640/%25D9%2585%25D8%25B5%25D8%25A7%25D8%25B1%25D9%2581%2B%25D8%25A7%25D9%2584%25D8%25B2%25D9%2583%25D8%25A7%25D8%25A9.png IP142.250.74.65:0
GET /-zwdkdo5EO78/XeT14WpcRqI/AAAAAAAALag/w0ozHVHNI2EeJB-VnG_nIPN-UwrXQUcOgCLcBGAsYHQ/s640/%25D9%2585%25D8%25B5%25D8%25A7%25D8%25B1%25D9%2581%2B%25D8%25A7%25D9%2584%25D8%25B2%25D9%2583%25D8%25A7%25D8%25A9.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.seyf-educ.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v2da9"
expires: Sat, 10 Dec 2022 18:17:19 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="_____ ______.png";filename*=UTF-8''%D9%85%D8%B5%D8%A7%D8%B1%D9%81%20%D8%A7%D9%84%D8%B2%D9%83%D8%A7%D8%A9.png
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 18:17:19 GMT
server: fife
content-length: 141994
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|