ocsp.pki.goog/s/gts1d4/_QQiB5gpc7A
471 B URL ocsp.pki.goog/s/gts1d4/_QQiB5gpc7A
IP
Hash 1036954d090318cba1c610f5c7eecde3
030d527664a9e7de7b4d32e0b9204cb546a0d929
56ad3ef6ce1ee1d1bb3bf090151bcea04bcf337b13a3aeded6e8b911e753ef73
POST /s/gts1d4/_QQiB5gpc7A HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 26 Sep 2023 09:47:01 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.perisxxx.com/2021/01/sandra-on-periscope.html
200 OK 25 kB URL User Request GET HTTP/2 www.perisxxx.com/2021/01/sandra-on-periscope.html
IP
Certificate IssuerGoogle Trust Services LLC
Subjectwww.perisxxx.com
FingerprintEC:96:46:DC:BA:7F:61:84:89:AB:63:E7:BB:39:07:A7:E5:D9:BD:F2
ValidityWed, 30 Aug 2023 14:27:52 GMT - Tue, 28 Nov 2023 15:13:00 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (13627)
Hash 6e5e7279bb381ecbb97af8561d34733e
51b91f731966abea62fc34ffd88ea194dc0be829
0b098116e95945127753da53fd753c8d310a16346d0c1ca58da6d31addd9e2e3
GET /2021/01/sandra-on-periscope.html HTTP/1.1
Host: www.perisxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Tue, 26 Sep 2023 09:47:02 GMT
date: Tue, 26 Sep 2023 09:47:02 GMT
cache-control: private, max-age=0
last-modified: Mon, 25 Sep 2023 13:29:04 GMT
etag: W/"ade7fe4b19993522ec6b7fdba76695c784901eaa603eed258857d3ff5e7fe894"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 25194
server: GSE
X-Firefox-Spdy: h2
www.perisxxx.com/js/cookienotice.js
200 OK 2.0 kB URL GET HTTP/2 www.perisxxx.com/js/cookienotice.js
IP
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerGoogle Trust Services LLC
Subjectwww.perisxxx.com
FingerprintEC:96:46:DC:BA:7F:61:84:89:AB:63:E7:BB:39:07:A7:E5:D9:BD:F2
ValidityWed, 30 Aug 2023 14:27:52 GMT - Tue, 28 Nov 2023 15:13:00 GMT
Hash a705132a2174f88e196ec3610d68faa8
3bad57a48d973a678fec600d45933010f6edc659
068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
GET /js/cookienotice.js HTTP/1.1
Host: www.perisxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
date: Tue, 26 Sep 2023 09:47:02 GMT
expires: Tue, 03 Oct 2023 09:47:02 GMT
cache-control: public, max-age=604800
last-modified: Mon, 25 Sep 2023 14:51:55 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
X-Firefox-Spdy: h2
a.magsrv.com/ad-provider.js
200 OK 34 kB URL GET HTTP/2 a.magsrv.com/ad-provider.js
IP
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerLet's Encrypt
Subjectmagsrv.com
Fingerprint9C:9C:8C:15:3B:65:AB:34:94:B5:CD:26:D6:67:61:2A:99:F9:0A:7B
ValidityTue, 01 Aug 2023 11:24:30 GMT - Mon, 30 Oct 2023 11:24:29 GMT
File type ASCII text, with very long lines (32346)
Hash 40daadf4e7a5c317d92105a93d6402a8
97940d3fd62b22371e12e104e3c4f46a8680af5a
79334bdcc8cb9e1ee10bf3d0437670801217fe9f28ea38b49144b9e2e420fde8
GET /ad-provider.js HTTP/1.1
Host: a.magsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 26 Sep 2023 09:47:02 GMT
content-encoding: gzip
content-length: 33767
content-type: application/javascript
accept-ranges: bytes
server: nginx
etag: W/"97940d3fd62b22371e12e104e3c"
accept-ch:
cache-control: max-age=10800
x-robots-tag: noindex, follow
access-control-allow-origin: *
x-hw: 1695721622.dop010.sk1.t,1695721622.cds204.sk1.hn,1695721622.cds257.sk1.c
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash edb0c213685c28c266c093ac59c369b0
e0841c1928ee05cb6b2e1394c51ee33b51095d06
0224d0e9559dee969f319bbc8cb3def81a2d418d9f2ba72d60cd6830d1e6dee2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 26 Sep 2023 09:47:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash 1a531c4a6f63eec7c47b290aaea56a63
2ab462b13b2696cf0fb363d65c833b7b55e363fb
a36b9f9add0059bf3c5054b2e14d5ddcca528eff04908102701a426d2fa603a5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 26 Sep 2023 09:47:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash 1a531c4a6f63eec7c47b290aaea56a63
2ab462b13b2696cf0fb363d65c833b7b55e363fb
a36b9f9add0059bf3c5054b2e14d5ddcca528eff04908102701a426d2fa603a5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 26 Sep 2023 09:47:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
a.realsrv.com/fp-interstitial.js
200 OK 6.5 kB URL GET HTTP/2 a.realsrv.com/fp-interstitial.js
IP
ASN #60068 Datacamp Limited
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerLet's Encrypt
Subjectrealsrv.com
FingerprintCC:B9:27:44:89:99:7C:9F:94:A5:01:B6:FD:90:95:3E:AA:18:D8:7B
ValiditySun, 23 Jul 2023 14:21:20 GMT - Sat, 21 Oct 2023 14:21:19 GMT
File type gzip compressed data, from Unix\012- data
Hash ab1a93ff688066f0d3489e413c59466a
f5a2358847cd5d3f9d1c59ea3ee5609571f8891b
ba1b9d4148b81fbac4460772e60c3a3c336d8f95c1a524731ce433c181541ef4
GET /fp-interstitial.js HTTP/1.1
Host: a.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 26 Sep 2023 09:47:02 GMT
content-type: application/javascript
vary: Accept-Encoding
access-control-allow-credentials: true
etag: W/"7b6717b9fbdcb42ee5fc47e090d"
accept-ch:
expires: Tue, 19 Sep 2023 18:49:08 GMT
cache-control: max-age=10800
x-robots-tag: noindex, follow
access-control-allow-origin: *, *
x-cache-op: HIT
server: CDN77-Turbo
x-77-nzt: AblMCQ0i0kH/EigAAA
x-77-nzt-ray: c0a4cc28d73bd4af96a8126519f2e623
x-accel-expires: @1695722164
x-accel-date: 1695711364
x-cache: HIT
x-age: 10258
x-77-pop: stockholmSE
x-77-cache: HIT
x-77-age: 10258
content-encoding: gzip
X-Firefox-Spdy: h2
a.realsrv.com/video-slider.js
200 OK 14 kB URL GET HTTP/2 a.realsrv.com/video-slider.js
IP
ASN #60068 Datacamp Limited
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerLet's Encrypt
Subjectrealsrv.com
FingerprintCC:B9:27:44:89:99:7C:9F:94:A5:01:B6:FD:90:95:3E:AA:18:D8:7B
ValiditySun, 23 Jul 2023 14:21:20 GMT - Sat, 21 Oct 2023 14:21:19 GMT
File type gzip compressed data, from Unix\012- data
Hash afdfaf35649cc5dd2b27aaabc553235f
86796a2e719139b78b666f26fa5f8c66fc409523
80a80bbdb531b83fe27cf531f6858524fc9e7dfb2fcd122d55f3476f8deeed0f
GET /video-slider.js HTTP/1.1
Host: a.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 26 Sep 2023 09:47:02 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"1c6f186699a5f677bd3fa8bba39"
accept-ch:
expires: Tue, 19 Sep 2023 18:49:08 GMT
cache-control: max-age=10800
x-robots-tag: noindex, follow
access-control-allow-origin: *
x-cache-op: HIT
server: CDN77-Turbo
x-77-nzt: AblMCQ02cbn/cCgAAA
x-77-nzt-ray: c0a4cc28d73bd4af96a81265fc3fb523
x-accel-expires: @1695722070
x-accel-date: 1695711270
x-cache: HIT
x-age: 10352
x-77-pop: stockholmSE
x-77-cache: HIT
x-77-age: 10352
content-encoding: gzip
X-Firefox-Spdy: h2
resources.blogblog.com/blogblog/data/res/2591169437-vegeclub_compiled.js
200 OK 47 kB URL GET HTTP/2 resources.blogblog.com/blogblog/data/res/2591169437-vegeclub_compiled.js
IP
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
FingerprintCB:2E:4E:04:8F:48:B1:A1:1A:F4:F6:E1:8A:18:2F:F9:B5:A6:DD:60
ValidityMon, 04 Sep 2023 08:16:44 GMT - Mon, 27 Nov 2023 08:16:43 GMT
File type ASCII text, with very long lines (1733)
Hash bbea0d422fc5814476ff4f4bc3d4ac23
efab5199dcd0246363db178d0fdb1ae8cb0205d2
f8109ae3bcfd5a6ddf76332fe722b7b2ef77169b6be729e7f92e87d1ab2f7b81
GET /blogblog/data/res/2591169437-vegeclub_compiled.js HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 46996
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 25 Sep 2023 02:47:59 GMT
expires: Mon, 02 Oct 2023 02:47:59 GMT
cache-control: public, max-age=604800
last-modified: Sun, 24 Sep 2023 18:49:39 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 111543
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/562952797-widgets.js
200 OK 160 kB URL GET HTTP/2 www.blogger.com/static/v1/widgets/562952797-widgets.js
IP
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
FingerprintCB:2E:4E:04:8F:48:B1:A1:1A:F4:F6:E1:8A:18:2F:F9:B5:A6:DD:60
ValidityMon, 04 Sep 2023 08:16:44 GMT - Mon, 27 Nov 2023 08:16:43 GMT
File type ASCII text, with very long lines (2215)
Size 160 kB (160393 bytes)
Hash 0804e4c7fd72aea2ce34a04d9ec9686c
9f46bef1076230a1271d151a506fd1d91ae7df93
5ea4b0b19c5f030a3b42b570c07cbea89a7899f1d824a95b53ad2c4ca18a2b5c
GET /static/v1/widgets/562952797-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 160393
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 20 Sep 2023 02:21:50 GMT
expires: Thu, 19 Sep 2024 02:21:50 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 20 Sep 2023 00:55:53 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 545112
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2
200 OK 35 kB URL GET HTTP/2 fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2
IP
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 34852, version 1.0\012- data
Hash 0e8eefb4549a2edf26c560cb9845952e
8d0b1718aacad934fd0043c87cbc54aa091396bf
7f653b3ce9d3277457fc6da4edb246ae2f6c913f088c42dcb8cd2e96267aa21a
GET /s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.perisxxx.com
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 34852
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 21 Sep 2023 14:54:30 GMT
expires: Fri, 20 Sep 2024 14:54:30 GMT
cache-control: public, max-age=31536000
age: 413552
last-modified: Wed, 27 Apr 2022 16:31:23 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/static/v1/jsbin/4235886812-comment_from_post_iframe.js
200 OK 6.8 kB URL GET HTTP/2 www.blogger.com/static/v1/jsbin/4235886812-comment_from_post_iframe.js
IP
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
FingerprintCB:2E:4E:04:8F:48:B1:A1:1A:F4:F6:E1:8A:18:2F:F9:B5:A6:DD:60
ValidityMon, 04 Sep 2023 08:16:44 GMT - Mon, 27 Nov 2023 08:16:43 GMT
File type ASCII text, with very long lines (2165)
Hash 49aad9405434d8887646881ecda8cf64
59bfe11a22024072043b6fc2562ce01b3d4b7344
d86e5bbbff2909f2cefcd5edbbb5b224660e76913e3872dc029758206955a8c6
GET /static/v1/jsbin/4235886812-comment_from_post_iframe.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6760
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 25 Sep 2023 02:12:58 GMT
expires: Tue, 24 Sep 2024 02:12:58 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 25 Sep 2023 00:49:04 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 113644
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1.bp.blogspot.com/-ZteRiSvax7g/YBQf_sk4fTI/AAAAAAAALbc/9GXX8igeswQsSxK0rZHYX_IUoNw3xk5awCLcBGAsYHQ/s200/sandra.png
200 OK 33 kB URL GET HTTP/2 1.bp.blogspot.com/-ZteRiSvax7g/YBQf_sk4fTI/AAAAAAAALbc/9GXX8igeswQsSxK0rZHYX_IUoNw3xk5awCLcBGAsYHQ/s200/sandra.png
IP
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type PNG image data, 200 x 169, 8-bit/color RGB, non-interlaced\012- data
Hash 57aafc2fad1eeea10250ccd138e60a8c
08fd1f4d43ff1acb5bbab40d432f6e9241833f24
76f61dc7b1633b73107c89116b3e02744757f7afba58d4ef248e4f75c2a5147f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-ZteRiSvax7g/YBQf_sk4fTI/AAAAAAAALbc/9GXX8igeswQsSxK0rZHYX_IUoNw3xk5awCLcBGAsYHQ/s200/sandra.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v2db8"
expires: Wed, 27 Sep 2023 09:47:03 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="sandra.png"
x-content-type-options: nosniff
date: Tue, 26 Sep 2023 09:47:03 GMT
server: fife
content-length: 33310
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 1a531c4a6f63eec7c47b290aaea56a63
2ab462b13b2696cf0fb363d65c833b7b55e363fb
a36b9f9add0059bf3c5054b2e14d5ddcca528eff04908102701a426d2fa603a5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 26 Sep 2023 09:47:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash 1a531c4a6f63eec7c47b290aaea56a63
2ab462b13b2696cf0fb363d65c833b7b55e363fb
a36b9f9add0059bf3c5054b2e14d5ddcca528eff04908102701a426d2fa603a5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 26 Sep 2023 09:47:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash 178dd930993366d9bb01d73e2960a0c5
8b316934e079b21ca97a190c864b937c00c677a6
41a94531c3c30183ccecbebd35c18f2e201bcfd8c8184d579725bb5124971baf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 26 Sep 2023 09:47:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash edb0c213685c28c266c093ac59c369b0
e0841c1928ee05cb6b2e1394c51ee33b51095d06
0224d0e9559dee969f319bbc8cb3def81a2d418d9f2ba72d60cd6830d1e6dee2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 26 Sep 2023 09:47:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.perisxxx.com/responsive/sprite_v1_6.css.svg
200 OK 2.2 kB URL GET HTTP/2 www.perisxxx.com/responsive/sprite_v1_6.css.svg
IP
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerGoogle Trust Services LLC
Subjectwww.perisxxx.com
FingerprintEC:96:46:DC:BA:7F:61:84:89:AB:63:E7:BB:39:07:A7:E5:D9:BD:F2
ValidityWed, 30 Aug 2023 14:27:52 GMT - Tue, 28 Nov 2023 15:13:00 GMT
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (7657)
Hash d4dcfc8144f556815c7a1d84ed4e959e
22088bd6cdf970dcf7bfab9a74a4768548ca8890
73d16aca9b019e42dd2de3a10e5049b5606268ce0d8e3a167b05b37acb9b0e9c
GET /responsive/sprite_v1_6.css.svg HTTP/1.1
Host: www.perisxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: image/svg+xml
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2244
date: Tue, 26 Sep 2023 09:47:03 GMT
expires: Tue, 03 Oct 2023 09:47:03 GMT
cache-control: public, max-age=604800
last-modified: Mon, 25 Sep 2023 21:03:50 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
X-Firefox-Spdy: h2
fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCjC3jsGyN.woff2
200 OK 30 kB URL GET HTTP/2 fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCjC3jsGyN.woff2
IP
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 30480, version 1.0\012- data
Hash 0e7e5f9d3a8ef121149827180b790b5c
0e9f9333078e5df9245630ff6f68ba1d9da3c403
e8e147e15907f25cad69b2bcf060213efad4ed04e0d36374715cbca17b2afc1c
GET /s/ubuntu/v20/4iCv6KVjbNBYlgoCjC3jsGyN.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.perisxxx.com
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30480
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 22 Sep 2023 10:25:48 GMT
expires: Sat, 21 Sep 2024 10:25:48 GMT
cache-control: public, max-age=31536000
age: 343275
last-modified: Wed, 27 Apr 2022 16:04:03 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/merriweather/v30/u-4m0qyriQwlOrhSvowK_l5-eRZOf-I.woff2
200 OK 20 kB URL GET HTTP/2 fonts.gstatic.com/s/merriweather/v30/u-4m0qyriQwlOrhSvowK_l5-eRZOf-I.woff2
IP
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 19780, version 1.0\012- data
Hash 03717344e4dbb2de44988b281bb7430b
0cd3f7724bd0a5bf2460e1a85e35ccfbd5e85c05
499ec54eb2afd103ec37505e23c6570fc7d89a0d728dde19d87a092e4a3261b4
GET /s/merriweather/v30/u-4m0qyriQwlOrhSvowK_l5-eRZOf-I.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.perisxxx.com
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 21 Sep 2023 14:55:30 GMT
expires: Fri, 20 Sep 2024 14:55:30 GMT
cache-control: public, max-age=31536000
age: 413493
last-modified: Tue, 26 Apr 2022 15:48:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52xwNZWMf6.woff2
200 OK 20 kB URL GET HTTP/2 fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52xwNZWMf6.woff2
IP
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 19740, version 1.0\012- data
Hash 101cf2a65d64322878605fa8472bb025
6dffc15e38c321e4bb567b4bd8107a2e8d97c61d
273c8613cdd2852dd5318f224d804ae6d2fc717c48d3f1dab587b6d396fb4fc8
GET /s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52xwNZWMf6.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.perisxxx.com
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 22 Sep 2023 10:16:11 GMT
expires: Sat, 21 Sep 2024 10:16:11 GMT
cache-control: public, max-age=31536000
age: 343852
last-modified: Tue, 26 Apr 2022 15:48:38 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
a.realsrv.com/ad-provider.js
200 OK 49 kB URL GET HTTP/2 a.realsrv.com/ad-provider.js
IP
ASN #60068 Datacamp Limited
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerLet's Encrypt
Subjectrealsrv.com
FingerprintCC:B9:27:44:89:99:7C:9F:94:A5:01:B6:FD:90:95:3E:AA:18:D8:7B
ValiditySun, 23 Jul 2023 14:21:20 GMT - Sat, 21 Oct 2023 14:21:19 GMT
File type gzip compressed data, from Unix\012- data
Hash 19b7190b2c0edf5ec9807b82828a3e89
3237d8d486d3e92b3f27b2d57c2bcda0b777423b
03a57dbfedb4361981bf915bc8337e5316a0c539f0cf0c17fc840648cafaea05
GET /ad-provider.js HTTP/1.1
Host: a.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 26 Sep 2023 09:47:02 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"f61f83c359ed90aabf24cfad697"
accept-ch:
expires: Tue, 19 Sep 2023 18:49:06 GMT
cache-control: max-age=10800
x-robots-tag: noindex, follow
access-control-allow-origin: *
x-cache-op: HIT
server: CDN77-Turbo
x-77-nzt: AblMCQ2o5jr/lygAAA
x-77-nzt-ray: c0a4cc28d73bd4af96a81265750c8123
x-accel-expires: @1695722031
x-accel-date: 1695711231
x-cache: HIT
x-age: 10391
x-77-pop: stockholmSE
x-77-cache: HIT
x-77-age: 10391
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjsGyN.woff2
200 OK 30 kB URL GET HTTP/2 fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjsGyN.woff2
IP
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 29752, version 1.0\012- data
Hash ab1fc8621287e4ea9319a3136812cf80
fb4ed2e52e2a8d7ac50a7618a0c2ea5507a24ef3
7c00752ce82d6abaed0b9766d35b906b16675facdbe24115b410d1fab975effa
GET /s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjsGyN.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.perisxxx.com
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 29752
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 23 Sep 2023 07:57:45 GMT
expires: Sun, 22 Sep 2024 07:57:45 GMT
cache-control: public, max-age=31536000
age: 265758
last-modified: Wed, 27 Apr 2022 17:05:11 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
a.realsrv.com/fp-interstitial.js
200 OK 8.7 kB URL GET HTTP/2 a.realsrv.com/fp-interstitial.js
IP
ASN #60068 Datacamp Limited
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerLet's Encrypt
Subjectrealsrv.com
FingerprintCC:B9:27:44:89:99:7C:9F:94:A5:01:B6:FD:90:95:3E:AA:18:D8:7B
ValiditySun, 23 Jul 2023 14:21:20 GMT - Sat, 21 Oct 2023 14:21:19 GMT
File type ASCII text, with very long lines (18424)
Hash 61e81fc87ed3ecf3b09050795e00e1d2
4127add210de9b0027e93941b64dee15c6fbf83a
74eb4c4f307cb48e06e968c60107fbffe50c54bef69aeae26248c11e9945f692
GET /fp-interstitial.js HTTP/1.1
Host: a.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 26 Sep 2023 09:47:03 GMT
content-type: application/javascript
vary: Accept-Encoding
access-control-allow-credentials: true
etag: W/"7b6717b9fbdcb42ee5fc47e090d"
accept-ch:
expires: Tue, 19 Sep 2023 18:49:08 GMT
cache-control: max-age=10800
x-robots-tag: noindex, follow
access-control-allow-origin: *, *
x-cache-op: HIT
server: CDN77-Turbo
x-77-nzt: AblMCQ0d33P/EygAAA
x-77-nzt-ray: c0a4cc28d73bd4af97a81265d23c3d04
x-accel-expires: @1695722164
x-accel-date: 1695711364
x-cache: HIT
x-age: 10259
x-77-pop: stockholmSE
x-77-cache: HIT
x-77-age: 10259
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.usertrust.com/
471 B IP
Hash 6913374b876a9044b2e9688c4704098d
c37d89508082b8e5ed4f7042fa5a92332d0375d3
51984adc27b39050619d8e65580e38795a91c346507db3f995b9916a544584f0
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 26 Sep 2023 09:47:03 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 22 Sep 2023 23:39:55 GMT
Expires: Fri, 29 Sep 2023 23:39:54 GMT
Etag: "c37d89508082b8e5ed4f7042fa5a92332d0375d3"
Cache-Control: max-age=600779,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 80ca9552fabf1c12-OSL
sendvid.com/embed/3mbhm8rh
200 OK 13 kB URL GET HTTP/1.1 sendvid.com/embed/3mbhm8rh
IP
ASN #43350 NForce Entertainment B.V.
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerGoGetSSL
Subject*.sendvid.com
Fingerprint23:7E:CE:BB:74:A8:91:B0:31:2C:71:08:5A:32:38:34:19:B8:61:51
ValidityThu, 30 Mar 2023 00:00:00 GMT - Mon, 29 Apr 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (428)
Hash 91687c971d38194261839b31394f0f66
f38103a918aa8fe92fe3a4e4a6993e193d34cb2c
01dbe3eaca17b4274b9b5f107f2d2e6fedca7fb72dc46c02634bf731b290cab6
GET /embed/3mbhm8rh HTTP/1.1
Host: sendvid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Status: 200 OK
ETag: "91687c971d38194261839b31394f0f66"
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Runtime: 0.037437
X-Request-Id: c7587cad-72c5-458d-b786-63d403065ead
Date: Tue, 26 Sep 2023 09:47:03 GMT
Set-Cookie: gsc=ImU2MjA1ZjgxLTdlYjEtNGE2My1hODc1LWRlZjk2YjlmOWViZSI%3D--36a7528e65cefb21b6c10be0e07df4b58233cf67; domain=.sendvid.com; path=/; expires=Sat, 26 Sep 2043 09:47:03 -0000
adpref=3; path=/; expires=Thu, 28 Sep 2023 09:47:03 -0000
_sendvid_session=NTdRS0dBNXAraTNoL0JPK1BRS0VRV1NCUURlT1VQWmxqWjduUGtCVEJNZldZU1crSVlPZUFRYTdhUW9jL2pURDhOZXdacVZJRENPTkJiclU3aE83cVU0am44U0lPVWtGb3lUdEVEL3J1TVlCckd5ak1PWEt0VTg4Z1RlQ0MvM1hZSG05d2MxQUtWSGlab1dGdTJwR3hBPT0tLTFZWTMrclZZZjAxZEF2cjg3UHc1bWc9PQ%3D%3D--147e2761082d2830a503a90c39011d8d55aee532; path=/; expires=Tue, 26 Mar 2024 10:47:03 -0000; HttpOnly
X-Powered-By: Phusion Passenger(R) 6.0.9
Server: nginx/1.20.1 + Phusion Passenger(R) 6.0.9
Cache-Control: max-age=0, private, must-revalidate, no-store, no-cache
syndication.realsrv.com/v1/api.php
200 OK 4.0 kB URL POST HTTP/1.1 syndication.realsrv.com/v1/api.php
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerLet's Encrypt
Subjectrealsrv.com
FingerprintCC:B9:27:44:89:99:7C:9F:94:A5:01:B6:FD:90:95:3E:AA:18:D8:7B
ValiditySun, 23 Jul 2023 14:21:20 GMT - Sat, 21 Oct 2023 14:21:19 GMT
File type JSON data\012- , ASCII text, with very long lines (8098), with no line terminators
Hash a543d0a8d94ba88a25ed143d3a3e69e3
fd48028eee406d7f3531b1913d19a975f14e7355
240eeaf339ace087dd7a57164ae325c08182567ed7e8af9a6cae63ed233eea7a
POST /v1/api.php HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 336
Origin: https://www.perisxxx.com
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 09:47:03 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://www.perisxxx.com
Access-Control-Allow-Headers: Authorization, Content-Type
Access-Control-Request-Method: POST
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226512a89777f064.580553911026796596%22%3B%7D; expires=Thu, 25-Sep-2025 09:47:03 GMT; Max-Age=63072000; path=/; domain=realsrv.com; secure; SameSite=None
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
1.bp.blogspot.com/-ZteRiSvax7g/YBQf_sk4fTI/AAAAAAAALbc/9GXX8igeswQsSxK0rZHYX_IUoNw3xk5awCLcBGAsYHQ/w1600/sandra.png
200 OK 125 kB URL GET HTTP/3 1.bp.blogspot.com/-ZteRiSvax7g/YBQf_sk4fTI/AAAAAAAALbc/9GXX8igeswQsSxK0rZHYX_IUoNw3xk5awCLcBGAsYHQ/w1600/sandra.png
IP
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type PNG image data, 458 x 388, 8-bit/color RGB, non-interlaced\012- data
Size 125 kB (125248 bytes)
Hash 7033a40f765a8479e71bb1047f62c70b
b2e0521bd854d0045b5f1b96c19eac7ca7d16af7
eb67cef5af5e880416d5f8738fbf71c250e810d7c2ce13b0e13b216e681e072e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-ZteRiSvax7g/YBQf_sk4fTI/AAAAAAAALbc/9GXX8igeswQsSxK0rZHYX_IUoNw3xk5awCLcBGAsYHQ/w1600/sandra.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v2db8"
expires: Wed, 27 Sep 2023 09:47:03 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="sandra.png"
x-content-type-options: nosniff
date: Tue, 26 Sep 2023 09:47:03 GMT
server: fife
content-length: 125248
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.cdn4ads.com/web3.min.js
200 OK 52 kB URL GET HTTP/2 www.cdn4ads.com/web3.min.js
IP
ASN #60068 Datacamp Limited
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerLet's Encrypt
Subject1037973644.rsc.cdn77.org
Fingerprint3C:70:A5:95:4C:8F:C3:AF:D0:6A:88:06:CA:66:3C:78:8F:D5:42:A0
ValidityMon, 24 Jul 2023 14:50:52 GMT - Sun, 22 Oct 2023 14:50:51 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (30757)
Hash 37bcd31d8f8f2c9ab79a6cf02afd82a4
87c5882779a467328bcc65bf8fe877568e335f64
135c67999daf5612c0b2ef5dce41ca235b1e84459305b59d8a61717f217acf0d
GET /web3.min.js HTTP/1.1
Host: www.cdn4ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.perisxxx.com
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 26 Sep 2023 09:47:02 GMT
content-type: application/x-javascript
expires: Sat, 30 Sep 2023 20:24:49 GMT
access-control-allow-origin: https://www.perisxxx.com
link: <https://cdn4ads.com/>;rel=preconnect,<https://c.adsco.re/>;rel=preconnect,<https://adsco.re/>;rel=preconnect
cache-control: public, max-age=604800
server: CDN77-Turbo
vary: Accept-Encoding, Origin
x-77-nzt: AblMCRQwz8D/BV8DAA
x-77-nzt-ray: af58563010b7307a96a8126535b04a27
x-accel-expires: @1696105489
x-accel-date: 1695500689
x-cache: HIT
x-age: 220933
x-77-pop: stockholmSE
x-77-cache: HIT
x-77-age: 220933
content-encoding: gzip
X-Firefox-Spdy: h2
syndication.realsrv.com/splash.php?native-settings=1&idzone=4050424&cookieconsent=true&&p=https%3A%2F%2Fwww.perisxxx.com%2F2021%2F01%2Fsandra-on-periscope.html
200 OK 4.8 kB URL GET HTTP/1.1 syndication.realsrv.com/splash.php?native-settings=1&idzone=4050424&cookieconsent=true&&p=https%3A%2F%2Fwww.perisxxx.com%2F2021%2F01%2Fsandra-on-periscope.html
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerLet's Encrypt
Subjectrealsrv.com
FingerprintCC:B9:27:44:89:99:7C:9F:94:A5:01:B6:FD:90:95:3E:AA:18:D8:7B
ValiditySun, 23 Jul 2023 14:21:20 GMT - Sat, 21 Oct 2023 14:21:19 GMT
File type JSON data\012- , ASCII text, with very long lines (8768), with no line terminators
Hash 7ef086d0a04eb9f0794e571250358aca
8d5394b332990ece610012747e9aed6f5f7dd392
9f24ebadf629099b875bb743417f6ad87cdd014cf455793721d88da57403b55e
GET /splash.php?native-settings=1&idzone=4050424&cookieconsent=true&&p=https%3A%2F%2Fwww.perisxxx.com%2F2021%2F01%2Fsandra-on-periscope.html HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.perisxxx.com
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226512a8976a2389.375483923105795118%22%3B%7D; c-tag=%7B%22tag-video%22%3A%22v4%7C%7CNOR%7C4347984%7C81873080%7C0%7C%7C97%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C%7C0%7Cperisxxx.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1695721623%7C6fa620243b14475aa9fedcaa8cbc59d6%7Cok%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 09:47:03 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://www.perisxxx.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-CH-VALUES
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226512a8976a2389.375483923105795118%22%3B%7D; expires=Thu, 25 Sep 2025 09:47:03 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
impressions=cxbmsbocnxgxalrmxelrxgeioslmrxbmnxgxalrmoxaosgeimcersxocnxgxabamamroxgeioslmrxlsnxgxalxsccxrcgeimcclsxlbnxgxalrxscbxcgeimcclossbnxgxabbmlasmogeimcclsxobnxgxalcreblmmgeicxbmsbcenxgxalrmoxaosgeioslmrxbrnxgxalraroomrgeicxbmsbxcnxgxalraxrrbxgeioslmroemnxgxalrelmrmbgeimcclsxlcnxgxalclbxxlsgeicxbmsboenxgxalraroomrgeialbserebnxgxalcllebcmgeialbserecnxgxalsxarexlgeimcersxrcnxgxablrolooageimcersoeenxgxabllbmcoageirbabxabbnxgxalcllebaogeimcersxacnxgxabbxbrmsmgeialbserxenxgxalccxcemcgeimcclsxsonxgxalrxscbxcgeimcclsxlenxgxalrelmrmbgeimcclossanxgxalraroomrgeimcclsxlonxgxalsbamxecgeimcclsxmenxgxalrelmrmbgeimcersxaanxgxalsocbbbcgeialbsereanxgxalrelmrmbgeimcclsxconxgxalcsoexlsgeimrblxoobnxgxabbmosmxsgeimrblxelcnxgxalxassbxogeimrblxocenxgxalrmoxaosgeimrblxxmcnxgxalclsmsorgeimcclsxsanxgxalollaxeageimcclosconxgxabbmararageimcclsxscnxgxalrebambogeimcclsoeenxgxalosexrscgeimcclsxsenxgxalclbesalgeicmmsxrbonxgxalxsclexegeialbserxonxgxalrraolabgeimrblxosenxgxalclmsxsbgeimrblxxaenxgxabblercelgeimcclsxcanxgxalxbrarxxgeislsaroornxgxalrslerbageicmmsxaeenxgxabblxelaegeimrblxosanxgxalxbrarxxgeimrblxxmbnxgxaloebalxageimrblxxoenxgxablxeomocgeimrblxxxanxgxablxbbebsgeimrblxelenxgxablxbbebsgeimcclsxlanxgxalcoblcrxgeimcclsxacnxgxalreolresgeimrblxoscnxgxablcrbsrlgeimrblxxxbnxgxablcrbsrlgeimrblxoxenxgxablcrbsrlgeimcersxbbnxgxalxorsooegeimcersoeonxgxalxbaaxsrgeimcersoebnxgxablrolooageimcersxcanxgxabllbmcoageimcclsxoanxgxalclbxxlsgeicaxsscmbnxgxalrraolabgeibrxlceaanxgxalxxrmaxegeimmoamoccnxgxalxcemeacgeimrblxosbnxgxalxroclebgeimcersoxenxgxalxorsooegeimcclsxaonxgxalceooeeegeimcersxxbnxgxalxcemeacgeimcersxeonxgxalxcemeacgeimcerocrenxgxalxcemeacgeimcersxsenxgxalxcemeacgeimcersrscnxgxalrclaelbgeimrblxxmanxgxalclmsxsbgeimrblxxbonxgxalrrbeaesgeimrblxebbnxgxalclsmssogeimcersxlanxgxalxbaaooxgeimcersxmbnxgxalxbaacmsgeimcersxlonxgxalcbblcsrgeimcersxlcnxgxalxlrocoageimrblxxbenxgxalxlasaelgeimrblxxrbnxgxalclmsxsbgeimcersrsanxgxalxlbreargeimcersxbcnxgxalorrallogeimcersoecnxgxalorrmlxcgeimrblxxbcnxgxalolbrmbogeimcersxsbnxgxalcxllrcbgeimcersxronxgxalcbblcsbgeimcersxbanxgxalcbleelbgeisaeeasslnxgxalreooexlgeimrblxoconxgxalrrbeaesgeimcersrmanxgxalrcmascsgeimcersrxanxgxalrclaelbgeimcersroonxgxalrclmbbcgeimcersrccnxgxalrclmbbcgeimcersrxenxgxalrclmbbcgeimrblxoeanxgxalrrbeaesgeibomrloronxgxalraroommgxcceimeembescnxgxalraroblbgxcceibslarmsbnxgxalraroblbgxcceimeembesonxgxalraroblbgxcceimeelaclbnxgxalraroblbgxcceimeelareenxgxalraroblbgxcceibaaoarbcnxgxalraraxelgxcceibaaoarmanxgxalraraxelgxcceibaaoarmbnsgxalraraxelgxcceibxscllmenxgxalraramcrgxcceibaaoarbencgxalrarmcxxgxcceicxmecmcanxgxalrarmcxxgxcceibasmobxbnxgxalraarmsbgxcceibasmrolanxgxalraarmslgxcceibaereoeancgxalraarmslgxcceibaarcabanxgxalraarmslgxcceibaarcabcnogxalraarmslgxcceibaereoecnxgxalraarmslgxcceibaaoarmonmgxalrabxercgxcceibxrceomonogxalrabxxbegxcceibaoelllenxgxalrabxxbegxcceibclceaoenxgxalrabxxbegxcceimllrabmanxgxalrabxxbegxcceibaoellbbnxgxalrabxxbegxcceibrarbbaonxgxalrabxxbegxcceimbbcemoanxgxalrabxxbegxcceibxsmlooanogxalrabxxbegxcceimclsaoxbnogxalrabxxbegxcceibamlsmoenxgxalrabxacbgxcceixbblrmlanxgxalrabsrxmgxcceibslarmcanogxalrabsrxmgxcceimeembecenxgxalrabsrxbgxcceimllrabmcnxgxalrabraasgxcceibaereoxenxgxalrmeomsrgxcceialaroxrcnxgxalrmeomsagxcceibabxxsmcnxgxalrmxelregxcceibabxxrmenxgxalrmxelrxgxcceimrbxmxmanxgxalrmxxrbrgxcceibrcrrlebnogxalrmxxrbrgxcceibaaoarmenxgxalrmxssomgxcceibcmxmrsbncgxalrmxsamsgxcceicloaxxaanxgxalrmxrccagxcceibasmobxanxgxalrmxrccagxcceicloaxxacnxgxalrmxrccmgxcceibosbeccenxgxalrmxrccmgxcce; expires=Wed, 27 Sep 2023 09:47:03 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-video%22%3A%22v4%7C%7CNOR%7C4347984%7C81873080%7C0%7C%7C97%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C%7C0%7Cperisxxx.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1695721623%7C6fa620243b14475aa9fedcaa8cbc59d6%7Cok%22%2C%22tag-banner%22%3A%22v4%7C%7CNOR%7C4050424%7C86626572%7C0%7C%7C508%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C6512a8976a2389.375483923105795118%7C919bd35d3e37a7c6409a87806916a44c%7C0%7Cperisxxx.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1695721623%7C3be3280188406e7526bf9523ce44bf3c%7Cok%22%7D; expires=Wed, 27 Sep 2023 09:47:03 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-video%22%3A%22v4%7C%7CNOR%7C4347984%7C81873080%7C0%7C%7C97%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C%7C0%7Cperisxxx.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1695721623%7C6fa620243b14475aa9fedcaa8cbc59d6%7Cok%22%2C%22tag-banner%22%3A%22v4%7C%7CNOR%7C4050424%7C41873840%7C0%7C%7C508%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C6512a8976a2389.375483923105795118%7C919bd35d3e37a7c6409a87806916a44c%7C0%7Cperisxxx.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1695721623%7C347dec0f0e9a4f6300749a00f2e647b8%7Cok%22%7D; expires=Wed, 27 Sep 2023 09:47:03 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-video%22%3A%22v4%7C%7CNOR%7C4347984%7C81873080%7C0%7C%7C97%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C%7C0%7Cperisxxx.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1695721623%7C6fa620243b14475aa9fedcaa8cbc59d6%7Cok%22%2C%22tag-banner%22%3A%22v4%7C%7CNOR%7C4050424%7C23975187%7C0%7C%7C508%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C6512a8976a2389.375483923105795118%7C919bd35d3e37a7c6409a87806916a44c%7C0%7Cperisxxx.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1695721623%7Ccdcb696b72668aea674641a55288723a%7Cok%22%7D; expires=Wed, 27 Sep 2023 09:47:03 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-video%22%3A%22v4%7C%7CNOR%7C4347984%7C81873080%7C0%7C%7C97%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C%7C0%7Cperisxxx.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1695721623%7C6fa620243b14475aa9fedcaa8cbc59d6%7Cok%22%2C%22tag-banner%22%3A%22v4%7C%7CNOR%7C4050424%7C75891240%7C0%7C%7C508%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C6512a8976a2389.375483923105795118%7C919bd35d3e37a7c6409a87806916a44c%7C0%7Cperisxxx.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1695721623%7Ca54a5c38adeff2df8f573b74f29cf054%7Cok%22%7D; expires=Wed, 27 Sep 2023 09:47:03 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
www.blogblog.com/indie/mspin_black_large.svg
200 OK 870 B URL GET HTTP/3 www.blogblog.com/indie/mspin_black_large.svg
IP
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
FingerprintCB:2E:4E:04:8F:48:B1:A1:1A:F4:F6:E1:8A:18:2F:F9:B5:A6:DD:60
ValidityMon, 04 Sep 2023 08:16:44 GMT - Mon, 27 Nov 2023 08:16:43 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (6453)
Hash 98e0e5b23b2beab22f8278e26b349129
1414f65ab732f08c8efb82ac4b724df3502532f2
1e2c209346d02318a063c7ea2513498881c35f1525114c9b969b573384f54baf
GET /indie/mspin_black_large.svg HTTP/1.1
Host: www.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 870
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 26 Sep 2023 08:41:26 GMT
expires: Tue, 03 Oct 2023 08:41:26 GMT
cache-control: public, max-age=604800
last-modified: Mon, 25 Sep 2023 14:51:55 GMT
content-type: image/svg+xml
vary: Accept-Encoding
age: 3937
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA1VPy2oEMQz7lf7ADI7t2Mnee93CQj8gk0yhhz7oXqagj6+zLaW1MBghJRITy0J1YbujfFI/kaCmtdKqvKasOD9coAnv+8fz9TiOtb+9QNkoV5i5ckYp6qxQK5qrIlOBevHshhI6YjKkDAEFOIvqvFaihEq4f7zcNiGtZLWCIUQHZwpqfg4laNx0TH9NdRuSh+zizbsp1Va8hDNZU+1T+D8sfSPKSOSI5+kXyxRLUuHIFEO40e36+dqBP8KJ/GPlKA4tMx76Nsh38+TW+2ibpWjlsrU+ghlPX1jvMMteAQAA
200 OK 20 B URL GET HTTP/1.1 syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA1VPy2oEMQz7lf7ADI7t2Mnee93CQj8gk0yhhz7oXqagj6+zLaW1MBghJRITy0J1YbujfFI/kaCmtdKqvKasOD9coAnv+8fz9TiOtb+9QNkoV5i5ckYp6qxQK5qrIlOBevHshhI6YjKkDAEFOIvqvFaihEq4f7zcNiGtZLWCIUQHZwpqfg4laNx0TH9NdRuSh+zizbsp1Va8hDNZU+1T+D8sfSPKSOSI5+kXyxRLUuHIFEO40e36+dqBP8KJ/GPlKA4tMx76Nsh38+TW+2ibpWjlsrU+ghlPX1jvMMteAQAA
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerLet's Encrypt
Subjectrealsrv.com
FingerprintCC:B9:27:44:89:99:7C:9F:94:A5:01:B6:FD:90:95:3E:AA:18:D8:7B
ValiditySun, 23 Jul 2023 14:21:20 GMT - Sat, 21 Oct 2023 14:21:19 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAA1VPy2oEMQz7lf7ADI7t2Mnee93CQj8gk0yhhz7oXqagj6+zLaW1MBghJRITy0J1YbujfFI/kaCmtdKqvKasOD9coAnv+8fz9TiOtb+9QNkoV5i5ckYp6qxQK5qrIlOBevHshhI6YjKkDAEFOIvqvFaihEq4f7zcNiGtZLWCIUQHZwpqfg4laNx0TH9NdRuSh+zizbsp1Va8hDNZU+1T+D8sfSPKSOSI5+kXyxRLUuHIFEO40e36+dqBP8KJ/GPlKA4tMx76Nsh38+TW+2ibpWjlsrU+ghlPX1jvMMteAQAA HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.perisxxx.com
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226512a8976a2389.375483923105795118%22%3B%7D; c-tag=%7B%22tag-video%22%3A%22v4%7C%7CNOR%7C4347984%7C81873080%7C0%7C%7C97%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C%7C0%7Cperisxxx.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1695721623%7C6fa620243b14475aa9fedcaa8cbc59d6%7Cok%22%2C%22tag-banner%22%3A%22v4%7C%7CNOR%7C4050424%7C75891240%7C0%7C%7C508%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C6512a8976a2389.375483923105795118%7C919bd35d3e37a7c6409a87806916a44c%7C0%7Cperisxxx.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1695721623%7Ca54a5c38adeff2df8f573b74f29cf054%7Cok%22%7D; impressions=cxbmsbocnxgxalrmxelrxgeioslmrxbmnxgxalrmoxaosgeimcersxocnxgxabamamroxgeioslmrxlsnxgxalxsccxrcgeimcclsxlbnxgxalrxscbxcgeimcclossbnxgxabbmlasmogeimcclsxobnxgxalcreblmmgeicxbmsbcenxgxalrmoxaosgeioslmrxbrnxgxalraroomrgeicxbmsbxcnxgxalraxrrbxgeioslmroemnxgxalrelmrmbgeimcclsxlcnxgxalclbxxlsgeicxbmsboenxgxalraroomrgeialbserebnxgxalcllebcmgeialbserecnxgxalsxarexlgeimcersxrcnxgxablrolooageimcersoeenxgxabllbmcoageirbabxabbnxgxalcllebaogeimcersxacnxgxabbxbrmsmgeialbserxenxgxalccxcemcgeimcclsxsonxgxalrxscbxcgeimcclsxlenxgxalrelmrmbgeimcclossanxgxalraroomrgeimcclsxlonxgxalsbamxecgeimcclsxmenxgxalrelmrmbgeimcersxaanxgxalsocbbbcgeialbsereanxgxalrelmrmbgeimcclsxconxgxalcsoexlsgeimrblxoobnxgxabbmosmxsgeimrblxelcnxgxalxassbxogeimrblxocenxgxalrmoxaosgeimrblxxmcnxgxalclsmsorgeimcclsxsanxgxalollaxeageimcclosconxgxabbmararageimcclsxscnxgxalrebambogeimcclsoeenxgxalosexrscgeimcclsxsenxgxalclbesalgeicmmsxrbonxgxalxsclexegeialbserxonxgxalrraolabgeimrblxosenxgxalclmsxsbgeimrblxxaenxgxabblercelgeimcclsxcanxgxalxbrarxxgeislsaroornxgxalrslerbageicmmsxaeenxgxabblxelaegeimrblxosanxgxalxbrarxxgeimrblxxmbnxgxaloebalxageimrblxxoenxgxablxeomocgeimrblxxxanxgxablxbbebsgeimrblxelenxgxablxbbebsgeimcclsxlanxgxalcoblcrxgeimcclsxacnxgxalreolresgeimrblxoscnxgxablcrbsrlgeimrblxxxbnxgxablcrbsrlgeimrblxoxenxgxablcrbsrlgeimcersxbbnxgxalxorsooegeimcersoeonxgxalxbaaxsrgeimcersoebnxgxablrolooageimcersxcanxgxabllbmcoageimcclsxoanxgxalclbxxlsgeicaxsscmbnxgxalrraolabgeibrxlceaanxgxalxxrmaxegeimmoamoccnxgxalxcemeacgeimrblxosbnxgxalxroclebgeimcersoxenxgxalxorsooegeimcclsxaonxgxalceooeeegeimcersxxbnxgxalxcemeacgeimcersxeonxgxalxcemeacgeimcerocrenxgxalxcemeacgeimcersxsenxgxalxcemeacgeimcersrscnxgxalrclaelbgeimrblxxmanxgxalclmsxsbgeimrblxxbonxgxalrrbeaesgeimrblxebbnxgxalclsmssogeimcersxlanxgxalxbaaooxgeimcersxmbnxgxalxbaacmsgeimcersxlonxgxalcbblcsrgeimcersxlcnxgxalxlrocoageimrblxxbenxgxalxlasaelgeimrblxxrbnxgxalclmsxsbgeimcersrsanxgxalxlbreargeimcersxbcnxgxalorrallogeimcersoecnxgxalorrmlxcgeimrblxxbcnxgxalolbrmbogeimcersxsbnxgxalcxllrcbgeimcersxronxgxalcbblcsbgeimcersxbanxgxalcbleelbgeisaeeasslnxgxalreooexlgeimrblxoconxgxalrrbeaesgeimcersrmanxgxalrcmascsgeimcersrxanxgxalrclaelbgeimcersroonxgxalrclmbbcgeimcersrccnxgxalrclmbbcgeimcersrxenxgxalrclmbbcgeimrblxoeanxgxalrrbeaesgeibomrloronxgxalraroommgxcceimeembescnxgxalraroblbgxcceibslarmsbnxgxalraroblbgxcceimeembesonxgxalraroblbgxcceimeelaclbnxgxalraroblbgxcceimeelareenxgxalraroblbgxcceibaaoarbcnxgxalraraxelgxcceibaaoarmanxgxalraraxelgxcceibaaoarmbnsgxalraraxelgxcceibxscllmenxgxalraramcrgxcceibaaoarbencgxalrarmcxxgxcceicxmecmcanxgxalrarmcxxgxcceibasmobxbnxgxalraarmsbgxcceibasmrolanxgxalraarmslgxcceibaereoeancgxalraarmslgxcceibaarcabanxgxalraarmslgxcceibaarcabcnogxalraarmslgxcceibaereoecnxgxalraarmslgxcceibaaoarmonmgxalrabxercgxcceibxrceomonogxalrabxxbegxcceibaoelllenxgxalrabxxbegxcceibclceaoenxgxalrabxxbegxcceimllrabmanxgxalrabxxbegxcceibaoellbbnxgxalrabxxbegxcceibrarbbaonxgxalrabxxbegxcceimbbcemoanxgxalrabxxbegxcceibxsmlooanogxalrabxxbegxcceimclsaoxbnogxalrabxxbegxcceibamlsmoenxgxalrabxacbgxcceixbblrmlanxgxalrabsrxmgxcceibslarmcanogxalrabsrxmgxcceimeembecenxgxalrabsrxbgxcceimllrabmcnxgxalrabraasgxcceibaereoxenxgxalrmeomsrgxcceialaroxrcnxgxalrmeomsagxcceibabxxsmcnxgxalrmxelregxcceibabxxrmenxgxalrmxelrxgxcceimrbxmxmanxgxalrmxxrbrgxcceibrcrrlebnogxalrmxxrbrgxcceibaaoarmenxgxalrmxssomgxcceibcmxmrsbncgxalrmxsamsgxcceicloaxxaanxgxalrmxrccagxcceibasmobxanxgxalrmxrccagxcceicloaxxacnxgxalrmxrccmgxcceibosbeccenxgxalrmxrccmgxcce
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 09:47:03 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://www.perisxxx.com
Access-Control-Allow-Credentials: true
Set-Cookie: __upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.0199%22%7D; expires=Thu, 25 Sep 2025 09:47:03 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA1VPSWoEMQz8Sj7QRpK12HPPdQIDeUCP7YEcspC5dKAeH3eHBOJCaKuSZCHJC9VF/IHspHGijMqpUlJJbIrz0wXK+BifL/dt21J7f4WKk1W4h4qhFA1RKBmxOowKNCrnSiju4hYCNmTQhFhW3aNExJiUx+fLYQxO5LVCCDPZ186R0BnTtisr12vP1vPIsUZzpbqWKFPDvqq2nfj/TPpBoojZlN98Ytm5mTXLPGY+wlFe719vDfij5XI4O7QikPlnaKE5DTZIeltv6tGuXX30Fr3EWO2WC4/2DQ5e0x5ZAQAA
200 OK 20 B URL GET HTTP/1.1 syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA1VPSWoEMQz8Sj7QRpK12HPPdQIDeUCP7YEcspC5dKAeH3eHBOJCaKuSZCHJC9VF/IHspHGijMqpUlJJbIrz0wXK+BifL/dt21J7f4WKk1W4h4qhFA1RKBmxOowKNCrnSiju4hYCNmTQhFhW3aNExJiUx+fLYQxO5LVCCDPZ186R0BnTtisr12vP1vPIsUZzpbqWKFPDvqq2nfj/TPpBoojZlN98Ytm5mTXLPGY+wlFe719vDfij5XI4O7QikPlnaKE5DTZIeltv6tGuXX30Fr3EWO2WC4/2DQ5e0x5ZAQAA
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerLet's Encrypt
Subjectrealsrv.com
FingerprintCC:B9:27:44:89:99:7C:9F:94:A5:01:B6:FD:90:95:3E:AA:18:D8:7B
ValiditySun, 23 Jul 2023 14:21:20 GMT - Sat, 21 Oct 2023 14:21:19 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAA1VPSWoEMQz8Sj7QRpK12HPPdQIDeUCP7YEcspC5dKAeH3eHBOJCaKuSZCHJC9VF/IHspHGijMqpUlJJbIrz0wXK+BifL/dt21J7f4WKk1W4h4qhFA1RKBmxOowKNCrnSiju4hYCNmTQhFhW3aNExJiUx+fLYQxO5LVCCDPZ186R0BnTtisr12vP1vPIsUZzpbqWKFPDvqq2nfj/TPpBoojZlN98Ytm5mTXLPGY+wlFe719vDfij5XI4O7QikPlnaKE5DTZIeltv6tGuXX30Fr3EWO2WC4/2DQ5e0x5ZAQAA HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.perisxxx.com
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226512a8976a2389.375483923105795118%22%3B%7D; c-tag=%7B%22tag-video%22%3A%22v4%7C%7CNOR%7C4347984%7C81873080%7C0%7C%7C97%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C%7C0%7Cperisxxx.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1695721623%7C6fa620243b14475aa9fedcaa8cbc59d6%7Cok%22%2C%22tag-banner%22%3A%22v4%7C%7CNOR%7C4050424%7C75891240%7C0%7C%7C508%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C6512a8976a2389.375483923105795118%7C919bd35d3e37a7c6409a87806916a44c%7C0%7Cperisxxx.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1695721623%7Ca54a5c38adeff2df8f573b74f29cf054%7Cok%22%7D; impressions=cxbmsbocnxgxalrmxelrxgeioslmrxbmnxgxalrmoxaosgeimcersxocnxgxabamamroxgeioslmrxlsnxgxalxsccxrcgeimcclsxlbnxgxalrxscbxcgeimcclossbnxgxabbmlasmogeimcclsxobnxgxalcreblmmgeicxbmsbcenxgxalrmoxaosgeioslmrxbrnxgxalraroomrgeicxbmsbxcnxgxalraxrrbxgeioslmroemnxgxalrelmrmbgeimcclsxlcnxgxalclbxxlsgeicxbmsboenxgxalraroomrgeialbserebnxgxalcllebcmgeialbserecnxgxalsxarexlgeimcersxrcnxgxablrolooageimcersoeenxgxabllbmcoageirbabxabbnxgxalcllebaogeimcersxacnxgxabbxbrmsmgeialbserxenxgxalccxcemcgeimcclsxsonxgxalrxscbxcgeimcclsxlenxgxalrelmrmbgeimcclossanxgxalraroomrgeimcclsxlonxgxalsbamxecgeimcclsxmenxgxalrelmrmbgeimcersxaanxgxalsocbbbcgeialbsereanxgxalrelmrmbgeimcclsxconxgxalcsoexlsgeimrblxoobnxgxabbmosmxsgeimrblxelcnxgxalxassbxogeimrblxocenxgxalrmoxaosgeimrblxxmcnxgxalclsmsorgeimcclsxsanxgxalollaxeageimcclosconxgxabbmararageimcclsxscnxgxalrebambogeimcclsoeenxgxalosexrscgeimcclsxsenxgxalclbesalgeicmmsxrbonxgxalxsclexegeialbserxonxgxalrraolabgeimrblxosenxgxalclmsxsbgeimrblxxaenxgxabblercelgeimcclsxcanxgxalxbrarxxgeislsaroornxgxalrslerbageicmmsxaeenxgxabblxelaegeimrblxosanxgxalxbrarxxgeimrblxxmbnxgxaloebalxageimrblxxoenxgxablxeomocgeimrblxxxanxgxablxbbebsgeimrblxelenxgxablxbbebsgeimcclsxlanxgxalcoblcrxgeimcclsxacnxgxalreolresgeimrblxoscnxgxablcrbsrlgeimrblxxxbnxgxablcrbsrlgeimrblxoxenxgxablcrbsrlgeimcersxbbnxgxalxorsooegeimcersoeonxgxalxbaaxsrgeimcersoebnxgxablrolooageimcersxcanxgxabllbmcoageimcclsxoanxgxalclbxxlsgeicaxsscmbnxgxalrraolabgeibrxlceaanxgxalxxrmaxegeimmoamoccnxgxalxcemeacgeimrblxosbnxgxalxroclebgeimcersoxenxgxalxorsooegeimcclsxaonxgxalceooeeegeimcersxxbnxgxalxcemeacgeimcersxeonxgxalxcemeacgeimcerocrenxgxalxcemeacgeimcersxsenxgxalxcemeacgeimcersrscnxgxalrclaelbgeimrblxxmanxgxalclmsxsbgeimrblxxbonxgxalrrbeaesgeimrblxebbnxgxalclsmssogeimcersxlanxgxalxbaaooxgeimcersxmbnxgxalxbaacmsgeimcersxlonxgxalcbblcsrgeimcersxlcnxgxalxlrocoageimrblxxbenxgxalxlasaelgeimrblxxrbnxgxalclmsxsbgeimcersrsanxgxalxlbreargeimcersxbcnxgxalorrallogeimcersoecnxgxalorrmlxcgeimrblxxbcnxgxalolbrmbogeimcersxsbnxgxalcxllrcbgeimcersxronxgxalcbblcsbgeimcersxbanxgxalcbleelbgeisaeeasslnxgxalreooexlgeimrblxoconxgxalrrbeaesgeimcersrmanxgxalrcmascsgeimcersrxanxgxalrclaelbgeimcersroonxgxalrclmbbcgeimcersrccnxgxalrclmbbcgeimcersrxenxgxalrclmbbcgeimrblxoeanxgxalrrbeaesgeibomrloronxgxalraroommgxcceimeembescnxgxalraroblbgxcceibslarmsbnxgxalraroblbgxcceimeembesonxgxalraroblbgxcceimeelaclbnxgxalraroblbgxcceimeelareenxgxalraroblbgxcceibaaoarbcnxgxalraraxelgxcceibaaoarmanxgxalraraxelgxcceibaaoarmbnsgxalraraxelgxcceibxscllmenxgxalraramcrgxcceibaaoarbencgxalrarmcxxgxcceicxmecmcanxgxalrarmcxxgxcceibasmobxbnxgxalraarmsbgxcceibasmrolanxgxalraarmslgxcceibaereoeancgxalraarmslgxcceibaarcabanxgxalraarmslgxcceibaarcabcnogxalraarmslgxcceibaereoecnxgxalraarmslgxcceibaaoarmonmgxalrabxercgxcceibxrceomonogxalrabxxbegxcceibaoelllenxgxalrabxxbegxcceibclceaoenxgxalrabxxbegxcceimllrabmanxgxalrabxxbegxcceibaoellbbnxgxalrabxxbegxcceibrarbbaonxgxalrabxxbegxcceimbbcemoanxgxalrabxxbegxcceibxsmlooanogxalrabxxbegxcceimclsaoxbnogxalrabxxbegxcceibamlsmoenxgxalrabxacbgxcceixbblrmlanxgxalrabsrxmgxcceibslarmcanogxalrabsrxmgxcceimeembecenxgxalrabsrxbgxcceimllrabmcnxgxalrabraasgxcceibaereoxenxgxalrmeomsrgxcceialaroxrcnxgxalrmeomsagxcceibabxxsmcnxgxalrmxelregxcceibabxxrmenxgxalrmxelrxgxcceimrbxmxmanxgxalrmxxrbrgxcceibrcrrlebnogxalrmxxrbrgxcceibaaoarmenxgxalrmxssomgxcceibcmxmrsbncgxalrmxsamsgxcceicloaxxaanxgxalrmxrccagxcceibasmobxanxgxalrmxrccagxcceicloaxxacnxgxalrmxrccmgxcceibosbeccenxgxalrmxrccmgxcce
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 09:47:03 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://www.perisxxx.com
Access-Control-Allow-Credentials: true
Set-Cookie: __upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.0199%22%7D; expires=Thu, 25 Sep 2025 09:47:03 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
s3t3d2y8.afcdn.net/library/426059/fe76c4e6a4d5c1a6d3f00a24da632f827b02868a.webp
200 OK 14 kB URL GET HTTP/2 s3t3d2y8.afcdn.net/library/426059/fe76c4e6a4d5c1a6d3f00a24da632f827b02868a.webp
IP
ASN #60068 Datacamp Limited
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerLet's Encrypt
Subjectafcdn.net
FingerprintCA:9B:AA:FE:AE:52:F5:06:6F:3C:E5:8C:B7:0F:9A:60:0B:A7:00:C2
ValiditySun, 23 Jul 2023 14:03:50 GMT - Sat, 21 Oct 2023 14:03:49 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x250, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash c5c34760f6bb13963a5262d81e27d2ff
fe76c4e6a4d5c1a6d3f00a24da632f827b02868a
5e1e486b7e9facad9edf4d888c37be4d610de13b1058d356c523328ee070ea22
GET /library/426059/fe76c4e6a4d5c1a6d3f00a24da632f827b02868a.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 26 Sep 2023 09:47:04 GMT
content-type: image/webp
content-length: 13800
last-modified: Wed, 30 Aug 2023 17:30:54 GMT
etag: "64ef7cce-35e8"
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
expires: Thu, 29 Aug 2024 17:33:14 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
server: CDN77-Turbo
x-77-nzt: AblMCQ2USpb/lSYjAA
x-77-nzt-ray: c0a4cc28393d3ec798a8126547c73302
x-accel-expires: @1724953987
x-accel-date: 1693417987
x-cache: HIT
x-age: 2303637
x-77-pop: stockholmSE
x-77-cache: HIT
x-77-age: 2303637
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/426059/68d84479a78f899d74e64d1c5b153448c73c5981.jpg
200 OK 28 kB URL GET HTTP/2 s3t3d2y8.afcdn.net/library/426059/68d84479a78f899d74e64d1c5b153448c73c5981.jpg
IP
ASN #60068 Datacamp Limited
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerLet's Encrypt
Subjectafcdn.net
FingerprintCA:9B:AA:FE:AE:52:F5:06:6F:3C:E5:8C:B7:0F:9A:60:0B:A7:00:C2
ValiditySun, 23 Jul 2023 14:03:50 GMT - Sat, 21 Oct 2023 14:03:49 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 8333a69d19cbbf481ff786c2f05eb1ab
68d84479a78f899d74e64d1c5b153448c73c5981
3f830386e9c7f7f5538b18646b0aa287e8bf2a6a3fa107f628b28efc9a955d82
GET /library/426059/68d84479a78f899d74e64d1c5b153448c73c5981.jpg HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 26 Sep 2023 09:47:04 GMT
content-type: image/jpeg
content-length: 28294
last-modified: Tue, 19 Sep 2023 15:48:31 GMT
etag: "6509c2cf-6e86"
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
expires: Wed, 18 Sep 2024 15:53:23 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
server: CDN77-Turbo
x-77-nzt: AblMCQ1ypYH/2OEIAA
x-77-nzt-ray: c0a4cc28393d3ec798a81265142c5202
x-accel-expires: @1726675520
x-accel-date: 1695139520
x-cache: HIT
x-age: 582104
x-77-pop: stockholmSE
x-77-cache: HIT
x-77-age: 582104
accept-ranges: bytes
X-Firefox-Spdy: h2
www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.pt_PT.b3UStQ_DuAA.es5.O/am=AICmAxA/d=1/excm=_b,_tp,commentformiframeview/ed=1/dg=0/wt=2/ujg=1/rs=AEy-KP3jMhBM0ckgNH43GzAKBTzDRhQ7_A/m=_b,_tp
200 OK 64 kB URL GET HTTP/3 www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.pt_PT.b3UStQ_DuAA.es5.O/am=AICmAxA/d=1/excm=_b,_tp,commentformiframeview/ed=1/dg=0/wt=2/ujg=1/rs=AEy-KP3jMhBM0ckgNH43GzAKBTzDRhQ7_A/m=_b,_tp
IP
Requested by https://www.blogger.com/comment/frame/1434394199162494526?po=8297985360320810530&hl=pt-PT&skin=emporio&blogspotRpcToken=9246565
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
FingerprintCB:2E:4E:04:8F:48:B1:A1:1A:F4:F6:E1:8A:18:2F:F9:B5:A6:DD:60
ValidityMon, 04 Sep 2023 08:16:44 GMT - Mon, 27 Nov 2023 08:16:43 GMT
File type ASCII text, with very long lines (2507)
Hash 88cdd30972de14a4220073d2f68a05ba
991e28005d32997b2ee8b0f9909d4c4bb0e66298
b57f010f2e6c96804fc7d821117efb6b9e8a8a3197a06f0e61c16693ae65261b
GET /_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.pt_PT.b3UStQ_DuAA.es5.O/am=AICmAxA/d=1/excm=_b,_tp,commentformiframeview/ed=1/dg=0/wt=2/ujg=1/rs=AEy-KP3jMhBM0ckgNH43GzAKBTzDRhQ7_A/m=_b,_tp HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/boq-infra/blogger-boq-js-css-signers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="boq-infra/blogger-boq-js-css-signers"
report-to: {"group":"boq-infra/blogger-boq-js-css-signers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/boq-infra/blogger-boq-js-css-signers"}]}
content-length: 63871
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 25 Sep 2023 03:51:36 GMT
expires: Tue, 24 Sep 2024 03:51:36 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Sat, 23 Sep 2023 03:12:35 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 107728
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-fCZJ.ttf
200 OK 25 kB URL GET HTTP/3 fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-fCZJ.ttf
IP
Requested by https://www.blogger.com/comment/frame/1434394199162494526?po=8297985360320810530&hl=pt-PT&skin=emporio&blogspotRpcToken=9246565
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type TrueType Font data, 17 tables, 1st "GDEF", 8 names, Microsoft, language 0x409\012- data
Hash 7eea9cbe3b7cce90e614bbe5eb05330d
e41b16445fec1c6543f13b4627a92f70e132fc6c
dec1097fab20801430f93e77b1559e7258041ee57150faf8a827c6df3358c918
GET /s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-fCZJ.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 25033
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 23 Sep 2023 11:04:26 GMT
expires: Sun, 22 Sep 2024 11:04:26 GMT
cache-control: public, max-age=31536000
age: 254558
last-modified: Tue, 26 Apr 2022 16:41:06 GMT
content-type: font/ttf
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
s.pemsrv.com/venor.php
200 OK 21 B IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerLet's Encrypt
Subjectpemsrv.com
Fingerprint6A:BE:92:41:5D:8D:0E:9B:62:8C:CC:18:7C:41:8B:66:F4:F7:6B:15
ValidityTue, 01 Aug 2023 11:24:47 GMT - Mon, 30 Oct 2023 11:24:46 GMT
File type very short file (no magic)
Hash cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9
GET /venor.php HTTP/1.1
Host: s.pemsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.perisxxx.com
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 09:47:04 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
sendvid.com/assets/application-b65b6886b2dc28a3f7d72b06ae6bb283.css
200 OK 74 kB URL GET HTTP/1.1 sendvid.com/assets/application-b65b6886b2dc28a3f7d72b06ae6bb283.css
IP
ASN #43350 NForce Entertainment B.V.
Requested by https://sendvid.com/embed/3mbhm8rh
Certificate IssuerGoGetSSL
Subject*.sendvid.com
Fingerprint23:7E:CE:BB:74:A8:91:B0:31:2C:71:08:5A:32:38:34:19:B8:61:51
ValidityThu, 30 Mar 2023 00:00:00 GMT - Mon, 29 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (46353)
Hash cef881c30ba6bd4f3f0522c52f063ab8
086601c27b7d2c6863bd81850adb803603a5ac30
e99eb62c2d97a541a291609715e963f5a7462b1efba6331e9dbf3c9173c41cac
GET /assets/application-b65b6886b2dc28a3f7d72b06ae6bb283.css HTTP/1.1
Host: sendvid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sendvid.com/embed/3mbhm8rh
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Tue, 26 Sep 2023 09:47:04 GMT
Content-Type: text/css
Content-Length: 74322
Last-Modified: Thu, 28 May 2020 12:37:54 GMT
Connection: keep-alive
Expires: Wed, 25 Sep 2024 09:47:04 GMT
Cache-Control: max-age=31536000, public
Accept-Ranges: bytes
www.blogger.com/img/blogger_logo_round_35.png
200 OK 2.5 kB URL GET HTTP/3 www.blogger.com/img/blogger_logo_round_35.png
IP
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
FingerprintCB:2E:4E:04:8F:48:B1:A1:1A:F4:F6:E1:8A:18:2F:F9:B5:A6:DD:60
ValidityMon, 04 Sep 2023 08:16:44 GMT - Mon, 27 Nov 2023 08:16:43 GMT
File type PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash 838622483cbfed35380b4705f19d7cca
7de684136affc969a24d61927afc18905cf2fc36
183923f8c8c3960dce8ad9722cf55a30d19b321b721741bd9e2ab6ae1f1ae72a
GET /img/blogger_logo_round_35.png HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2531
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 25 Sep 2023 07:32:02 GMT
expires: Mon, 02 Oct 2023 07:32:02 GMT
cache-control: public, max-age=604800
last-modified: Sun, 24 Sep 2023 23:50:33 GMT
content-type: image/png
age: 94502
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
sendvid.com/assets/zeroclipboard-5534ae3798279739b2e29b14f0eed44b.js
200 OK 30 kB URL GET HTTP/1.1 sendvid.com/assets/zeroclipboard-5534ae3798279739b2e29b14f0eed44b.js
IP
ASN #43350 NForce Entertainment B.V.
Requested by https://sendvid.com/embed/3mbhm8rh
Certificate IssuerGoGetSSL
Subject*.sendvid.com
Fingerprint23:7E:CE:BB:74:A8:91:B0:31:2C:71:08:5A:32:38:34:19:B8:61:51
ValidityThu, 30 Mar 2023 00:00:00 GMT - Mon, 29 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (29581), with no line terminators
Hash dba4989663875d0931a3a795a575f115
61cd12381056df30da490d1021e3458180091485
32b40b5540af51a67dc1fbff0c2cfc6ae6471f7c3d8e108473faabf07cdd3163
GET /assets/zeroclipboard-5534ae3798279739b2e29b14f0eed44b.js HTTP/1.1
Host: sendvid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sendvid.com/embed/3mbhm8rh
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Tue, 26 Sep 2023 09:47:04 GMT
Content-Type: application/javascript
Content-Length: 29581
Last-Modified: Mon, 08 Jan 2018 13:27:42 GMT
Connection: keep-alive
Expires: Wed, 25 Sep 2024 09:47:04 GMT
Cache-Control: max-age=31536000, public
Accept-Ranges: bytes
www.gstatic.com/external_hosted/clipboardjs/clipboard.min.js
200 OK 3.5 kB URL GET HTTP/2 www.gstatic.com/external_hosted/clipboardjs/clipboard.min.js
IP
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Unicode text, UTF-8 text, with very long lines (10473)
Hash 158013acb7e269a3dbe18de855656c97
08fa355584fc849539b3f04589ae6f61eb4a7d98
92e40dc4bbb485a182b796c58e6da7974cb8a6a84fdb4548ace3b85c991f0f94
GET /external_hosted/clipboardjs/clipboard.min.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 3475
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 26 Sep 2023 09:47:04 GMT
expires: Tue, 26 Sep 2023 09:47:04 GMT
cache-control: public, max-age=0
age: 0
last-modified: Thu, 20 Jul 2023 22:48:00 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 175c22bfd0414558440a0c90af70b3f4
19acfd9436ddf4f1dd0f3efb4e1dd46acbeb90d2
9bc056a4a42d118d3e80e305557d4f523149a3e5ecbc41512231a8f6c1f2f401
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 26 Sep 2023 09:47:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
6.adsco.re/
200 OK 0 B IP
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.perisxxx.com
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 26 Sep 2023 09:47:04 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
access-control-allow-origin: https://www.perisxxx.com
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 80ca955abc2856c1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
sendvid.com/assets/preflight-6f76d03e855720c167da7b77c432ed64.js
200 OK 104 kB URL GET HTTP/1.1 sendvid.com/assets/preflight-6f76d03e855720c167da7b77c432ed64.js
IP
ASN #43350 NForce Entertainment B.V.
Requested by https://sendvid.com/embed/3mbhm8rh
Certificate IssuerGoGetSSL
Subject*.sendvid.com
Fingerprint23:7E:CE:BB:74:A8:91:B0:31:2C:71:08:5A:32:38:34:19:B8:61:51
ValidityThu, 30 Mar 2023 00:00:00 GMT - Mon, 29 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (32831)
Size 104 kB (104203 bytes)
Hash 9070c37aeb36fadbdf3da53c9a54fd06
ee0018963c252b86c45cd38a8f9b9ad9edc8e240
970064da1494ce66c0164cc01c1c532e6720c6b5a870edaebf5da7eddba901c5
GET /assets/preflight-6f76d03e855720c167da7b77c432ed64.js HTTP/1.1
Host: sendvid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sendvid.com/embed/3mbhm8rh
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Tue, 26 Sep 2023 09:47:04 GMT
Content-Type: application/javascript
Content-Length: 104203
Last-Modified: Mon, 08 Jan 2018 13:29:50 GMT
Connection: keep-alive
Expires: Wed, 25 Sep 2024 09:47:04 GMT
Cache-Control: max-age=31536000, public
Accept-Ranges: bytes
sendvid.com/assets/player-4a21a1e4537969b33c3764b7c0a2ec03.css
200 OK 68 kB URL GET HTTP/1.1 sendvid.com/assets/player-4a21a1e4537969b33c3764b7c0a2ec03.css
IP
ASN #43350 NForce Entertainment B.V.
Requested by https://sendvid.com/embed/3mbhm8rh
Certificate IssuerGoGetSSL
Subject*.sendvid.com
Fingerprint23:7E:CE:BB:74:A8:91:B0:31:2C:71:08:5A:32:38:34:19:B8:61:51
ValidityThu, 30 Mar 2023 00:00:00 GMT - Mon, 29 Apr 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Hash 1a4012d78f1987dacff6a9f9f9476fc5
813a2d48ef8f85e55c9605af7275a57a7f575925
3f28bb7fc70e8ae0ec1fa5a9b311d6cc755cb051a56a159b29fedc50735a6ae8
GET /assets/player-4a21a1e4537969b33c3764b7c0a2ec03.css HTTP/1.1
Host: sendvid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sendvid.com/embed/3mbhm8rh
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Tue, 26 Sep 2023 09:47:04 GMT
Content-Type: text/css
Content-Length: 68200
Last-Modified: Mon, 11 Jan 2021 12:08:13 GMT
Connection: keep-alive
Expires: Wed, 25 Sep 2024 09:47:04 GMT
Cache-Control: max-age=31536000, public
Accept-Ranges: bytes
www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.pt_PT.b3UStQ_DuAA.es5.O/ck=boq-blogger.BloggerCommentUi.VNxCB-Kk8vM.L.F4.O/am=AICmAxA/d=1/exm=_b,_tp/excm=_b,_tp,commentformiframeview/ed=1/wt=2/ujg=1/rs=AEy-KP1YW_FoBGxrbxlcwS6Kx8xY3bPZOQ/ee=EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=ws9Tlc,n73qwf,GkRiKb,e5qFLc,IZT63,vfuNJf,UUJqVe,O1Gjze,byfTOb,lsjVmc,xUdipf,OTA3Ae,COQbmf,fKUV3e,aurFic,U0aPgd,ZwDk9d,V3dDOb,mI3LFb,WO9ee,eD1YLc,gZjhIf,O6y8ed,PrPYRd,MpJwZc,LEikZe,NwH0H,OmgaI,lazG7b,XVMNvd,L1AAkb,KUM7Z,Mlhmy,hc6Ubd,lwddkf,gychg,w9hDv,EEDORb,RMhBfe,SdcwHb,aW3pY,SpsfSb,EFQ78c,Ulmmrd,ZfAoz,mdR7q,wmnU7d,xQtZb,Z5uLle,JNoxi,kWgXee,MI6k7c,kjKdXe,BVgquf,ovKuLd,hKSk3e,MdUzUe,yDVVkb,zbML3c,KG2eXe,zr1jrb,VwDzFe,Uas9Hd,A7fCU,pjICDe
200 OK 101 kB URL GET HTTP/3 www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.pt_PT.b3UStQ_DuAA.es5.O/ck=boq-blogger.BloggerCommentUi.VNxCB-Kk8vM.L.F4.O/am=AICmAxA/d=1/exm=_b,_tp/excm=_b,_tp,commentformiframeview/ed=1/wt=2/ujg=1/rs=AEy-KP1YW_FoBGxrbxlcwS6Kx8xY3bPZOQ/ee=EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=ws9Tlc,n73qwf,GkRiKb,e5qFLc,IZT63,vfuNJf,UUJqVe,O1Gjze,byfTOb,lsjVmc,xUdipf,OTA3Ae,COQbmf,fKUV3e,aurFic,U0aPgd,ZwDk9d,V3dDOb,mI3LFb,WO9ee,eD1YLc,gZjhIf,O6y8ed,PrPYRd,MpJwZc,LEikZe,NwH0H,OmgaI,lazG7b,XVMNvd,L1AAkb,KUM7Z,Mlhmy,hc6Ubd,lwddkf,gychg,w9hDv,EEDORb,RMhBfe,SdcwHb,aW3pY,SpsfSb,EFQ78c,Ulmmrd,ZfAoz,mdR7q,wmnU7d,xQtZb,Z5uLle,JNoxi,kWgXee,MI6k7c,kjKdXe,BVgquf,ovKuLd,hKSk3e,MdUzUe,yDVVkb,zbML3c,KG2eXe,zr1jrb,VwDzFe,Uas9Hd,A7fCU,pjICDe
IP
Requested by https://www.blogger.com/comment/frame/1434394199162494526?po=8297985360320810530&hl=pt-PT&skin=emporio&blogspotRpcToken=9246565
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
FingerprintCB:2E:4E:04:8F:48:B1:A1:1A:F4:F6:E1:8A:18:2F:F9:B5:A6:DD:60
ValidityMon, 04 Sep 2023 08:16:44 GMT - Mon, 27 Nov 2023 08:16:43 GMT
File type ASCII text, with very long lines (2219)
Size 101 kB (100665 bytes)
Hash 4a5c15565e0ecd35d50fed50692bd608
3c0ec3902dc978b5710c1bb2b4b97d03b3a62030
06216fd16bdaee151ea7632cfcd95fbf2bcb75c54f1d0d4027e9b8517fa192b1
GET /_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.pt_PT.b3UStQ_DuAA.es5.O/ck=boq-blogger.BloggerCommentUi.VNxCB-Kk8vM.L.F4.O/am=AICmAxA/d=1/exm=_b,_tp/excm=_b,_tp,commentformiframeview/ed=1/wt=2/ujg=1/rs=AEy-KP1YW_FoBGxrbxlcwS6Kx8xY3bPZOQ/ee=EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=ws9Tlc,n73qwf,GkRiKb,e5qFLc,IZT63,vfuNJf,UUJqVe,O1Gjze,byfTOb,lsjVmc,xUdipf,OTA3Ae,COQbmf,fKUV3e,aurFic,U0aPgd,ZwDk9d,V3dDOb,mI3LFb,WO9ee,eD1YLc,gZjhIf,O6y8ed,PrPYRd,MpJwZc,LEikZe,NwH0H,OmgaI,lazG7b,XVMNvd,L1AAkb,KUM7Z,Mlhmy,hc6Ubd,lwddkf,gychg,w9hDv,EEDORb,RMhBfe,SdcwHb,aW3pY,SpsfSb,EFQ78c,Ulmmrd,ZfAoz,mdR7q,wmnU7d,xQtZb,Z5uLle,JNoxi,kWgXee,MI6k7c,kjKdXe,BVgquf,ovKuLd,hKSk3e,MdUzUe,yDVVkb,zbML3c,KG2eXe,zr1jrb,VwDzFe,Uas9Hd,A7fCU,pjICDe HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/boq-infra/blogger-boq-js-css-signers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="boq-infra/blogger-boq-js-css-signers"
report-to: {"group":"boq-infra/blogger-boq-js-css-signers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/boq-infra/blogger-boq-js-css-signers"}]}
content-length: 100665
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 25 Sep 2023 04:23:35 GMT
expires: Tue, 24 Sep 2024 04:23:35 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Thu, 21 Sep 2023 09:09:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 105809
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.sectigo.com/
471 B IP
Hash 1224c35ef18287350654e5cddc8fbda6
0c4a7e867842ad9d8620ca2805a7ce49b02cdff7
6744c9edaed152a3298c41dd8a389e1dff7bbe9e9976dc87e55607171f1e2850
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 26 Sep 2023 09:47:04 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 25 Sep 2023 07:38:03 GMT
Expires: Mon, 02 Oct 2023 07:38:02 GMT
Etag: "0c4a7e867842ad9d8620ca2805a7ce49b02cdff7"
Cache-Control: max-age=511455,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 80ca955abe3f0b45-OSL
www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.pt_PT.b3UStQ_DuAA.es5.O/ck=boq-blogger.BloggerCommentUi.VNxCB-Kk8vM.L.F4.O/am=AICmAxA/d=1/exm=A7fCU,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,IZT63,JNoxi,KG2eXe,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,RMhBfe,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,eD1YLc,fKUV3e,gZjhIf,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,ovKuLd,pjICDe,vfuNJf,w9hDv,wmnU7d,ws9Tlc,xQtZb,xUdipf,yDVVkb,zbML3c,zr1jrb/excm=_b,_tp,commentformiframeview/ed=1/wt=2/ujg=1/rs=AEy-KP1YW_FoBGxrbxlcwS6Kx8xY3bPZOQ/ee=EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=VXdfxd,fgib1c,YwHGTd,pxq3x
200 OK 26 kB URL GET HTTP/3 www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.pt_PT.b3UStQ_DuAA.es5.O/ck=boq-blogger.BloggerCommentUi.VNxCB-Kk8vM.L.F4.O/am=AICmAxA/d=1/exm=A7fCU,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,IZT63,JNoxi,KG2eXe,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,RMhBfe,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,eD1YLc,fKUV3e,gZjhIf,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,ovKuLd,pjICDe,vfuNJf,w9hDv,wmnU7d,ws9Tlc,xQtZb,xUdipf,yDVVkb,zbML3c,zr1jrb/excm=_b,_tp,commentformiframeview/ed=1/wt=2/ujg=1/rs=AEy-KP1YW_FoBGxrbxlcwS6Kx8xY3bPZOQ/ee=EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=VXdfxd,fgib1c,YwHGTd,pxq3x
IP
Requested by https://www.blogger.com/comment/frame/1434394199162494526?po=8297985360320810530&hl=pt-PT&skin=emporio&blogspotRpcToken=9246565
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
FingerprintCB:2E:4E:04:8F:48:B1:A1:1A:F4:F6:E1:8A:18:2F:F9:B5:A6:DD:60
ValidityMon, 04 Sep 2023 08:16:44 GMT - Mon, 27 Nov 2023 08:16:43 GMT
File type ASCII text, with very long lines (1127)
Hash df92dd83007b85134d381f6c7b9a3c9a
0aaf1fc91bf68015619b0c01f38de591c87fa6f4
c8f083eb58dc76c4657fdecb88388641fb17951eefb5558324ed06d24ffad11e
GET /_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.pt_PT.b3UStQ_DuAA.es5.O/ck=boq-blogger.BloggerCommentUi.VNxCB-Kk8vM.L.F4.O/am=AICmAxA/d=1/exm=A7fCU,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,IZT63,JNoxi,KG2eXe,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,RMhBfe,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,eD1YLc,fKUV3e,gZjhIf,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,ovKuLd,pjICDe,vfuNJf,w9hDv,wmnU7d,ws9Tlc,xQtZb,xUdipf,yDVVkb,zbML3c,zr1jrb/excm=_b,_tp,commentformiframeview/ed=1/wt=2/ujg=1/rs=AEy-KP1YW_FoBGxrbxlcwS6Kx8xY3bPZOQ/ee=EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=VXdfxd,fgib1c,YwHGTd,pxq3x HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/boq-infra/blogger-boq-js-css-signers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="boq-infra/blogger-boq-js-css-signers"
report-to: {"group":"boq-infra/blogger-boq-js-css-signers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/boq-infra/blogger-boq-js-css-signers"}]}
content-length: 26267
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 25 Sep 2023 04:23:35 GMT
expires: Tue, 24 Sep 2024 04:23:35 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Thu, 21 Sep 2023 09:09:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 105809
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
adsmediabox.com/ads.js?z=233&ad_height=300&adstrade=654871
200 OK 35 B URL GET HTTP/1.1 adsmediabox.com/ads.js?z=233&ad_height=300&adstrade=654871
IP
ASN #43350 NForce Entertainment B.V.
Requested by https://sendvid.com/embed/3mbhm8rh
Certificate IssuerLet's Encrypt
Subjectadsmediabox.com
Fingerprint49:99:E9:DA:17:02:2E:D8:AE:FF:53:99:13:55:D0:A7:39:0D:0F:22
ValidityMon, 31 Jul 2023 10:44:52 GMT - Sun, 29 Oct 2023 10:44:51 GMT
Hash ea6d68aa17481594a2ea0a316f937e6a
d733fe7912fab4a5af5c902669163767e14dd0d1
0f0638714911fd5b8c3ff86feeaa6eb7bfe8d27f52751d828b856214cbf0cc44
GET /ads.js?z=233&ad_height=300&adstrade=654871 HTTP/1.1
Host: adsmediabox.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sendvid.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Tue, 26 Sep 2023 09:47:04 GMT
Content-Type: application/javascript
Content-Length: 35
Last-Modified: Tue, 31 May 2022 11:13:19 GMT
Connection: keep-alive
ETag: "6295f84f-23"
Accept-Ranges: bytes
ocsp.sectigo.com/
471 B IP
Hash be75a7b56b3b0d810ac06bad60a15745
6e66ae2ef53629a09782d115401f46032be1423e
46781256014e392f4baf62d2842b8979c6ca9c015cbb21999b0c97e4be468410
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 26 Sep 2023 09:47:04 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 24 Sep 2023 13:18:13 GMT
Expires: Sun, 01 Oct 2023 13:18:12 GMT
Etag: "6e66ae2ef53629a09782d115401f46032be1423e"
Cache-Control: max-age=445095,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 80ca955b9ea70b45-OSL
www.googletagmanager.com/gtag/js?id=G-F9HGSB6M31
200 OK 94 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-F9HGSB6M31
IP
Requested by https://sendvid.com/embed/3mbhm8rh
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint00:ED:16:68:8D:DB:14:8B:43:01:81:CA:83:9A:AE:5B:24:AB:11:18
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type ASCII text, with very long lines (5788)
Hash eef5731411f6ea8743b2c07d03367bee
5a4e1786f5ae7f74741b33a156fe6f96d4d5b512
ce40d91e4c6fb1f1a8228a200d5de3139d5429225ff2b440e47b41fdcddd4b9b
GET /gtag/js?id=G-F9HGSB6M31 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sendvid.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 26 Sep 2023 09:47:04 GMT
expires: Tue, 26 Sep 2023 09:47:04 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 93550
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
sendvid.com/assets/player-9fec1f58351fca04074257d19bf19803.js
200 OK 877 kB URL GET HTTP/1.1 sendvid.com/assets/player-9fec1f58351fca04074257d19bf19803.js
IP
ASN #43350 NForce Entertainment B.V.
Requested by https://sendvid.com/embed/3mbhm8rh
Certificate IssuerGoGetSSL
Subject*.sendvid.com
Fingerprint23:7E:CE:BB:74:A8:91:B0:31:2C:71:08:5A:32:38:34:19:B8:61:51
ValidityThu, 30 Mar 2023 00:00:00 GMT - Mon, 29 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (32776)
Size 877 kB (877017 bytes)
Hash 2d599dddadcdd7561427e818b760ff77
f68a9c62b8db0f2e0cf652caedfcbee8ce9b5b4f
3a6c1dfd638c6a25326cd533a760f170e325785873f85272e33ff2ccc65d0ab6
GET /assets/player-9fec1f58351fca04074257d19bf19803.js HTTP/1.1
Host: sendvid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sendvid.com/embed/3mbhm8rh
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Tue, 26 Sep 2023 09:47:04 GMT
Content-Type: application/javascript
Content-Length: 877017
Last-Modified: Tue, 19 Apr 2022 14:59:08 GMT
Connection: keep-alive
Expires: Wed, 25 Sep 2024 09:47:04 GMT
Cache-Control: max-age=31536000, public
Accept-Ranges: bytes
4.adsco.re/
200 OK 62 B IP
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint41:E8:B6:73:76:84:BF:F4:F7:36:CE:88:E3:48:7B:FF:4E:47:4A:43
ValidityFri, 16 Sep 2022 00:00:00 GMT - Fri, 29 Sep 2023 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 5b41cb22f84f645a103acc7bfbf084ff
bac3967b26d5ec4a0d09a580714e8219796816bd
709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.perisxxx.com
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 26 Sep 2023 09:47:05 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: https://www.perisxxx.com
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
www.blogger.com/dyn-css/authorization.css?targetBlogID=1434394199162494526&zx=893f0f83-7990-4b56-87ad-7ae4af95c732
200 OK 21 B URL GET HTTP/3 www.blogger.com/dyn-css/authorization.css?targetBlogID=1434394199162494526&zx=893f0f83-7990-4b56-87ad-7ae4af95c732
IP
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
FingerprintCB:2E:4E:04:8F:48:B1:A1:1A:F4:F6:E1:8A:18:2F:F9:B5:A6:DD:60
ValidityMon, 04 Sep 2023 08:16:44 GMT - Mon, 27 Nov 2023 08:16:43 GMT
File type very short file (no magic)
Hash 68b329da9893e34099c7d8ad5cb9c940
adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /dyn-css/authorization.css?targetBlogID=1434394199162494526&zx=893f0f83-7990-4b56-87ad-7ae4af95c732 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 26 Sep 2023 09:47:05 GMT
last-modified: Tue, 26 Sep 2023 09:47:05 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.pki.goog/gts1c3
471 B IP
Hash ca3afb7df10c01fb4a7514ea3f1493e1
7b234d99c8683384c389995c31d4b60b65ae8c53
d2c2bf4568670b4bce7bb07cdc36f0df66139b5eef889b07519607556dab1a53
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 26 Sep 2023 09:47:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash 175c22bfd0414558440a0c90af70b3f4
19acfd9436ddf4f1dd0f3efb4e1dd46acbeb90d2
9bc056a4a42d118d3e80e305557d4f523149a3e5ecbc41512231a8f6c1f2f401
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 26 Sep 2023 09:47:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.perisxxx.com/favicon.ico
200 OK 412 B URL GET HTTP/2 www.perisxxx.com/favicon.ico
IP
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerGoogle Trust Services LLC
Subjectwww.perisxxx.com
FingerprintEC:96:46:DC:BA:7F:61:84:89:AB:63:E7:BB:39:07:A7:E5:D9:BD:F2
ValidityWed, 30 Aug 2023 14:27:52 GMT - Tue, 28 Nov 2023 15:13:00 GMT
File type MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel\012- data
Hash 59a0c7b6e4848ccdabcea0636efda02b
30ef5c54b8bbc3487ea2b4c45cd11ea2932e4340
a1495da3cf3db37bf105a12658636ff628fee7b73975b9200049af7747e60b1f
GET /favicon.ico HTTP/1.1
Host: www.perisxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/x-icon
expires: Tue, 26 Sep 2023 09:47:05 GMT
date: Tue, 26 Sep 2023 09:47:05 GMT
cache-control: private, max-age=86400
last-modified: Mon, 25 Sep 2023 13:29:04 GMT
etag: W/"ade7fe4b19993522ec6b7fdba76695c784901eaa603eed258857d3ff5e7fe894"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 412
server: GSE
X-Firefox-Spdy: h2
srvkgvwcpagn.l4.adsco.re/
200 OK 0 B URL POST HTTP/1.1 srvkgvwcpagn.l4.adsco.re/
IP
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerLet's Encrypt
Subject*.l4.adsco.re
Fingerprint30:24:2D:06:44:32:CD:4B:46:E0:81:9A:CF:B1:F6:9B:D2:4F:F3:6F
ValidityMon, 25 Sep 2023 16:35:45 GMT - Sun, 24 Dec 2023 16:35:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: srvkgvwcpagn.l4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://www.perisxxx.com
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 26 Sep 2023 09:47:05 GMT
Content-Type: text/html
Content-Length: 0
Last-Modified: Fri, 02 Jun 2023 14:03:32 GMT
Connection: close
ETag: "6479f6b4-0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Accept-Ranges: bytes
6.adsco.re/
200 OK 0 B IP
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://c.adsco.re/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 26 Sep 2023 09:47:05 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
access-control-allow-origin: *
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 80ca955dfb08b517-OSL
alt-svc: h3=":443"; ma=86400
www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.pt_PT.b3UStQ_DuAA.es5.O/ck=boq-blogger.BloggerCommentUi.VNxCB-Kk8vM.L.F4.O/am=AICmAxA/d=1/exm=A7fCU,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,IZT63,JNoxi,KG2eXe,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,RMhBfe,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VXdfxd,VwDzFe,WO9ee,XVMNvd,YwHGTd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,eD1YLc,fKUV3e,fgib1c,gZjhIf,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,ovKuLd,pjICDe,pxq3x,vfuNJf,w9hDv,wmnU7d,ws9Tlc,xQtZb,xUdipf,yDVVkb,zbML3c,zr1jrb/excm=_b,_tp,commentformiframeview/ed=1/wt=2/ujg=1/rs=AEy-KP1YW_FoBGxrbxlcwS6Kx8xY3bPZOQ/ee=EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=RqjULd
200 OK 6.3 kB URL GET HTTP/3 www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.pt_PT.b3UStQ_DuAA.es5.O/ck=boq-blogger.BloggerCommentUi.VNxCB-Kk8vM.L.F4.O/am=AICmAxA/d=1/exm=A7fCU,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,IZT63,JNoxi,KG2eXe,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,RMhBfe,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VXdfxd,VwDzFe,WO9ee,XVMNvd,YwHGTd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,eD1YLc,fKUV3e,fgib1c,gZjhIf,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,ovKuLd,pjICDe,pxq3x,vfuNJf,w9hDv,wmnU7d,ws9Tlc,xQtZb,xUdipf,yDVVkb,zbML3c,zr1jrb/excm=_b,_tp,commentformiframeview/ed=1/wt=2/ujg=1/rs=AEy-KP1YW_FoBGxrbxlcwS6Kx8xY3bPZOQ/ee=EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=RqjULd
IP
Requested by https://www.blogger.com/comment/frame/1434394199162494526?po=8297985360320810530&hl=pt-PT&skin=emporio&blogspotRpcToken=9246565
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
FingerprintCB:2E:4E:04:8F:48:B1:A1:1A:F4:F6:E1:8A:18:2F:F9:B5:A6:DD:60
ValidityMon, 04 Sep 2023 08:16:44 GMT - Mon, 27 Nov 2023 08:16:43 GMT
File type ASCII text, with very long lines (2956)
Hash 88b7f73910859a6be1feb02d78efe9a5
716026ee294915edacc234fcabc399e21eb6074f
fa5a5fae0b13d5a39a981b380fbf05fc7d4fe22a60a45d297bd2ba7ad0422f05
GET /_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.pt_PT.b3UStQ_DuAA.es5.O/ck=boq-blogger.BloggerCommentUi.VNxCB-Kk8vM.L.F4.O/am=AICmAxA/d=1/exm=A7fCU,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,IZT63,JNoxi,KG2eXe,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,RMhBfe,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VXdfxd,VwDzFe,WO9ee,XVMNvd,YwHGTd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,eD1YLc,fKUV3e,fgib1c,gZjhIf,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,ovKuLd,pjICDe,pxq3x,vfuNJf,w9hDv,wmnU7d,ws9Tlc,xQtZb,xUdipf,yDVVkb,zbML3c,zr1jrb/excm=_b,_tp,commentformiframeview/ed=1/wt=2/ujg=1/rs=AEy-KP1YW_FoBGxrbxlcwS6Kx8xY3bPZOQ/ee=EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=RqjULd HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/boq-infra/blogger-boq-js-css-signers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="boq-infra/blogger-boq-js-css-signers"
report-to: {"group":"boq-infra/blogger-boq-js-css-signers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/boq-infra/blogger-boq-js-css-signers"}]}
content-length: 6257
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 25 Sep 2023 04:23:35 GMT
expires: Tue, 24 Sep 2024 04:23:35 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Thu, 21 Sep 2023 09:09:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 105810
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.pt_PT.b3UStQ_DuAA.es5.O/ck=boq-blogger.BloggerCommentUi.VNxCB-Kk8vM.L.F4.O/am=AICmAxA/d=1/exm=A7fCU,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,IZT63,JNoxi,KG2eXe,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VXdfxd,VwDzFe,WO9ee,XVMNvd,YwHGTd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,eD1YLc,fKUV3e,fgib1c,gZjhIf,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,ovKuLd,pjICDe,pxq3x,vfuNJf,w9hDv,wmnU7d,ws9Tlc,xQtZb,xUdipf,yDVVkb,zbML3c,zr1jrb/excm=_b,_tp,commentformiframeview/ed=1/wt=2/ujg=1/rs=AEy-KP1YW_FoBGxrbxlcwS6Kx8xY3bPZOQ/ee=EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=bm51tf
200 OK 686 B URL GET HTTP/3 www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.pt_PT.b3UStQ_DuAA.es5.O/ck=boq-blogger.BloggerCommentUi.VNxCB-Kk8vM.L.F4.O/am=AICmAxA/d=1/exm=A7fCU,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,IZT63,JNoxi,KG2eXe,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VXdfxd,VwDzFe,WO9ee,XVMNvd,YwHGTd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,eD1YLc,fKUV3e,fgib1c,gZjhIf,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,ovKuLd,pjICDe,pxq3x,vfuNJf,w9hDv,wmnU7d,ws9Tlc,xQtZb,xUdipf,yDVVkb,zbML3c,zr1jrb/excm=_b,_tp,commentformiframeview/ed=1/wt=2/ujg=1/rs=AEy-KP1YW_FoBGxrbxlcwS6Kx8xY3bPZOQ/ee=EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=bm51tf
IP
Requested by https://www.blogger.com/comment/frame/1434394199162494526?po=8297985360320810530&hl=pt-PT&skin=emporio&blogspotRpcToken=9246565
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
FingerprintCB:2E:4E:04:8F:48:B1:A1:1A:F4:F6:E1:8A:18:2F:F9:B5:A6:DD:60
ValidityMon, 04 Sep 2023 08:16:44 GMT - Mon, 27 Nov 2023 08:16:43 GMT
File type ASCII text, with very long lines (756)
Hash 3ac2536dd60d15bd0043d66760a12d73
3a53e091401c706fa191364a8bb59c130f3fc83b
888c2286d657821b5e9b4fe704115b8bdc9c4d602b86c340d0147df5e525c063
GET /_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.pt_PT.b3UStQ_DuAA.es5.O/ck=boq-blogger.BloggerCommentUi.VNxCB-Kk8vM.L.F4.O/am=AICmAxA/d=1/exm=A7fCU,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,IZT63,JNoxi,KG2eXe,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VXdfxd,VwDzFe,WO9ee,XVMNvd,YwHGTd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,eD1YLc,fKUV3e,fgib1c,gZjhIf,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,ovKuLd,pjICDe,pxq3x,vfuNJf,w9hDv,wmnU7d,ws9Tlc,xQtZb,xUdipf,yDVVkb,zbML3c,zr1jrb/excm=_b,_tp,commentformiframeview/ed=1/wt=2/ujg=1/rs=AEy-KP1YW_FoBGxrbxlcwS6Kx8xY3bPZOQ/ee=EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=bm51tf HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/boq-infra/blogger-boq-js-css-signers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="boq-infra/blogger-boq-js-css-signers"
report-to: {"group":"boq-infra/blogger-boq-js-css-signers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/boq-infra/blogger-boq-js-css-signers"}]}
content-length: 686
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 25 Sep 2023 04:23:35 GMT
expires: Tue, 24 Sep 2024 04:23:35 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Thu, 21 Sep 2023 09:09:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 105810
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
srvkgvwcpagn.n4.adsco.re/
200 OK 0 B URL POST HTTP/1.1 srvkgvwcpagn.n4.adsco.re/
IP
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerLet's Encrypt
Subject*.n4.adsco.re
Fingerprint0B:49:BD:5D:8C:9D:2A:16:80:DF:AA:05:9A:0F:36:C1:AE:E9:B2:F4
ValidityTue, 19 Sep 2023 09:12:38 GMT - Mon, 18 Dec 2023 09:12:37 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: srvkgvwcpagn.n4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://www.perisxxx.com
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 26 Sep 2023 09:47:05 GMT
Content-Type: text/html
Content-Length: 0
Last-Modified: Mon, 30 Jul 2018 15:32:42 GMT
Connection: close
ETag: "5b5f2f9a-0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
471 B IP
Hash ca3afb7df10c01fb4a7514ea3f1493e1
7b234d99c8683384c389995c31d4b60b65ae8c53
d2c2bf4568670b4bce7bb07cdc36f0df66139b5eef889b07519607556dab1a53
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 26 Sep 2023 09:47:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
4.adsco.re/
200 OK 62 B IP
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint41:E8:B6:73:76:84:BF:F4:F7:36:CE:88:E3:48:7B:FF:4E:47:4A:43
ValidityFri, 16 Sep 2022 00:00:00 GMT - Fri, 29 Sep 2023 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 5b41cb22f84f645a103acc7bfbf084ff
bac3967b26d5ec4a0d09a580714e8219796816bd
709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://c.adsco.re/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 26 Sep 2023 09:47:05 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
thumbs2.sendvid.com/56/d6/3mbhm8rh.jpg
200 OK 35 kB URL GET HTTP/1.1 thumbs2.sendvid.com/56/d6/3mbhm8rh.jpg
IP
ASN #43350 NForce Entertainment B.V.
Requested by https://sendvid.com/embed/3mbhm8rh
Certificate IssuerGoGetSSL
Subject*.sendvid.com
Fingerprint23:7E:CE:BB:74:A8:91:B0:31:2C:71:08:5A:32:38:34:19:B8:61:51
ValidityThu, 30 Mar 2023 00:00:00 GMT - Mon, 29 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: "Lavc56.48.100", baseline, precision 8, 640x1200, components 3\012- data
Hash 81bc2ea6d01dea4f9da686b93f0372be
3e16901545aaa4f0d93bfd3522835a8bfd338b14
862fb02f5db4415a78325f69e338a4776a52b320e16c5ad6ce035a875d2c89b7
GET /56/d6/3mbhm8rh.jpg HTTP/1.1
Host: thumbs2.sendvid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sendvid.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
server: openresty/1.21.4.1
date: Tue, 26 Sep 2023 09:47:05 GMT
content-type: image/jpeg
content-length: 35071
last-modified: Sun, 17 Jan 2021 21:58:40 GMT
etag: "2b44c3f28-88ff-5b91fb546e400"
accept-ranges: bytes
expires: Thu, 25 Jan 2024 15:14:37 GMT
cache-control: max-age=10474052
x-cache: MISS
x-whom: cdn05
ocsp.pki.goog/gts1c3
471 B IP
Hash e7134cb422275b42551f12abb2455400
8b74099ad1ead69313ef916dc21d4a5520ff1a19
45497c6514815f02fb020dd530afc1141f39d25156915345f9e942759ed52abe
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 26 Sep 2023 09:47:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s3t3d2y8.afcdn.net/library/426059/05cd63e82aed8fbee82e53d4f1f75faa86ab0e8c.webp
200 OK 11 kB URL GET HTTP/2 s3t3d2y8.afcdn.net/library/426059/05cd63e82aed8fbee82e53d4f1f75faa86ab0e8c.webp
IP
ASN #60068 Datacamp Limited
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerLet's Encrypt
Subjectafcdn.net
FingerprintCA:9B:AA:FE:AE:52:F5:06:6F:3C:E5:8C:B7:0F:9A:60:0B:A7:00:C2
ValiditySun, 23 Jul 2023 14:03:50 GMT - Sat, 21 Oct 2023 14:03:49 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 2976cf1a22729c4839b1551347bf00e6
05cd63e82aed8fbee82e53d4f1f75faa86ab0e8c
4d6b23e26eb5b9f39c369118ffe1aa0b96b51e23ccea3828860c7e7657e4be6e
GET /library/426059/05cd63e82aed8fbee82e53d4f1f75faa86ab0e8c.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 26 Sep 2023 09:47:05 GMT
content-type: image/webp
content-length: 10822
last-modified: Tue, 19 Sep 2023 15:48:31 GMT
etag: "6509c2cf-2a46"
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
expires: Wed, 18 Sep 2024 16:05:37 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
server: CDN77-Turbo
x-77-nzt: AblMCQ2dvRr/xuEIAA
x-77-nzt-ray: c0a4cc28393d3ec799a812654a3bc332
x-accel-expires: @1726675539
x-accel-date: 1695139539
x-cache: HIT
x-age: 582086
x-77-pop: stockholmSE
x-77-cache: HIT
x-77-age: 582086
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/623611/2278481571affd0d06433855ece073cb06237a2a.webp
200 OK 6.1 kB URL GET HTTP/2 s3t3d2y8.afcdn.net/library/623611/2278481571affd0d06433855ece073cb06237a2a.webp
IP
ASN #60068 Datacamp Limited
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerLet's Encrypt
Subjectafcdn.net
FingerprintCA:9B:AA:FE:AE:52:F5:06:6F:3C:E5:8C:B7:0F:9A:60:0B:A7:00:C2
ValiditySun, 23 Jul 2023 14:03:50 GMT - Sat, 21 Oct 2023 14:03:49 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 6fa982653e11bf92f711f516bff7cc24
2278481571affd0d06433855ece073cb06237a2a
4ec89f5331b8e33f6ba993e5e835df7b3a008ee32ab12dcca448781bca935a97
GET /library/623611/2278481571affd0d06433855ece073cb06237a2a.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 26 Sep 2023 09:47:05 GMT
content-type: image/webp
content-length: 6076
last-modified: Wed, 03 Nov 2021 19:29:43 GMT
etag: "6182e327-17bc"
expires: Wed, 25 Oct 2023 01:17:49 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
server: CDN77-Turbo
x-77-nzt: AblMCQ2G+UD/B/+AAQ
x-77-nzt-ray: c0a4cc28393d3ec799a8126521d2a233
x-accel-expires: @1702026514
x-accel-date: 1670490514
x-cache: HIT
x-age: 25231111
x-77-pop: stockholmSE
x-77-cache: HIT
x-77-age: 25231111
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Montserrat:400,700
200 OK 10 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Montserrat:400,700
IP
Requested by https://sendvid.com/embed/3mbhm8rh
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintBE:40:3A:A6:DE:CC:A7:8B:75:43:68:F2:F9:56:63:71:49:61:06:49
ValidityMon, 04 Sep 2023 08:23:18 GMT - Mon, 27 Nov 2023 08:23:17 GMT
File type gzip compressed data, max compression\012- data
Hash 22bc30258e191978d2121dc1bcb0edeb
c03cc543d6efc7e01a0bf4b61032c4a219526724
69ecb95217cc2e1bc25383c5b51e462d7f78fed1bacec10ff51aaccac000236d
GET /css?family=Montserrat:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sendvid.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 26 Sep 2023 09:47:05 GMT
date: Tue, 26 Sep 2023 09:47:05 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.embed.ly/player-0.0.10.min.js
200 OK 37 kB URL GET HTTP/2 cdn.embed.ly/player-0.0.10.min.js
IP
Requested by https://sendvid.com/embed/3mbhm8rh
Certificate IssuerSectigo Limited
Subject*.embed.ly
Fingerprint74:24:62:28:4D:19:49:4D:37:77:82:34:94:38:56:03:D4:0F:E0:50
ValidityTue, 06 Dec 2022 00:00:00 GMT - Wed, 06 Dec 2023 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash ecee22883bf84c494a819533d62c32c8
352a414762895778f3d72e3fe2899e203297edc1
4af0c0475834c9eb71964c509730cd152f8ea2d7853b6813a1640baeeeca3233
GET /player-0.0.10.min.js HTTP/1.1
Host: cdn.embed.ly
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sendvid.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 26 Sep 2023 09:47:04 GMT
content-type: application/javascript
x-amz-id-2: 2ekDMzp17cq+gx1XMEIjDm/2Yqub/sluON7pfkIdmWy0/vD4wg7dmdpaKc19xTumUNMmib4Juf8=
x-amz-request-id: 52W0RSDB5W1CQYN1
cache-control: public, max-age=14400
last-modified: Wed, 07 May 2014 11:38:57 GMT
x-amz-version-id: null
etag: W/"c613d6445cca8cf218e42bc06f189b3b"
cf-cache-status: HIT
age: 50
expires: Tue, 26 Sep 2023 13:47:04 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 80ca955c19e3b50c-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
200 OK 1.1 kB URL GET HTTP/2 www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
IP
Requested by https://www.blogger.com/comment/frame/1434394199162494526?po=8297985360320810530&hl=pt-PT&skin=emporio&blogspotRpcToken=9246565
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintD2:77:FE:08:C6:61:6A:42:5C:1F:85:13:DA:23:B2:B8:46:20:45:88
ValidityMon, 04 Sep 2023 08:23:29 GMT - Mon, 27 Nov 2023 08:23:28 GMT
File type gzip compressed data\012- data
Hash 25c7be5b8a709e545ca2d1265a27f8a4
c33d1f6dd9aab3ceb3f83f8a6fa07b8dc2fd3cdb
b398ef7becb14acaee742847d0dd84648b01fa41a6b3a523b583e49685350959
GET /recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
expires: Tue, 26 Sep 2023 09:47:05 GMT
date: Tue, 26 Sep 2023 09:47:05 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/802424/e767d8f630d3e31c569c7e2111f9a6c816bff6dd.webp
200 OK 5.2 kB URL GET HTTP/2 s3t3d2y8.afcdn.net/library/802424/e767d8f630d3e31c569c7e2111f9a6c816bff6dd.webp
IP
ASN #60068 Datacamp Limited
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerLet's Encrypt
Subjectafcdn.net
FingerprintCA:9B:AA:FE:AE:52:F5:06:6F:3C:E5:8C:B7:0F:9A:60:0B:A7:00:C2
ValiditySun, 23 Jul 2023 14:03:50 GMT - Sat, 21 Oct 2023 14:03:49 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash befaeb747cf664f8ba60650faf70d64e
e767d8f630d3e31c569c7e2111f9a6c816bff6dd
7889676654d8669c2a0ddab1635667eb29797da54f67064afc05a2396f9c72b9
GET /library/802424/e767d8f630d3e31c569c7e2111f9a6c816bff6dd.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 26 Sep 2023 09:47:05 GMT
content-type: image/webp
content-length: 5172
last-modified: Mon, 19 Sep 2022 10:30:02 GMT
etag: "632844aa-1434"
expires: Tue, 19 Sep 2023 10:32:38 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
server: CDN77-Turbo
x-77-nzt: AblMCQ0SnM7/likJAA
x-77-nzt-ray: c0a4cc28393d3ec799a81265810a1536
x-accel-expires: @1726657155
x-accel-date: 1695121155
x-cache: HIT
x-age: 600470
x-77-pop: stockholmSE
x-77-cache: HIT
x-77-age: 600470
accept-ranges: bytes
X-Firefox-Spdy: h2
srvkgvwcpagn.s4.adsco.re/
200 OK 0 B URL POST HTTP/1.1 srvkgvwcpagn.s4.adsco.re/
IP
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerLet's Encrypt
Subject*.s4.adsco.re
FingerprintCB:12:6C:25:76:1C:4C:BB:2A:39:0A:A8:C9:9F:61:98:79:FF:9A:10
ValidityTue, 19 Sep 2023 09:12:39 GMT - Mon, 18 Dec 2023 09:12:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: srvkgvwcpagn.s4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://www.perisxxx.com
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 26 Sep 2023 09:47:05 GMT
Content-Type: text/html
Content-Length: 0
Last-Modified: Mon, 30 Jul 2018 15:38:01 GMT
Connection: close
ETag: "5b5f30d9-0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
472 B IP
Hash e5f9f802e548a076e6066ecff6aa5bbb
fb8dfabace38ae24e462d84eddc3d25b48b23a20
20dbe13a82e0d8f734ff3b0e89a008ef31f3523d410957da15a9578c0f68afce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 26 Sep 2023 09:47:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash e5f9f802e548a076e6066ecff6aa5bbb
fb8dfabace38ae24e462d84eddc3d25b48b23a20
20dbe13a82e0d8f734ff3b0e89a008ef31f3523d410957da15a9578c0f68afce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 26 Sep 2023 09:47:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
200 OK 33 kB URL GET HTTP/3 fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
Requested by https://sendvid.com/embed/3mbhm8rh
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 33092, version 1.0\012- data
Hash 057478083c1d55ea0c2182b24f6dd72f
caf557cd276a76992084efc4c8857b66791a6b7f
bb2f90081933c0f2475883ca2c5cfee94e96d7314a09433fffc42e37f4cffd3b
GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://sendvid.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33092
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 22 Sep 2023 12:01:36 GMT
expires: Sat, 21 Sep 2024 12:01:36 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 22:51:58 GMT
content-type: font/woff2
age: 337530
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__en.js
200 OK 186 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__en.js
IP
Requested by https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=Ai7lOI0zKMDPHxlv62g7oMoJ
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type ASCII text, with very long lines (549)
Size 186 kB (185934 bytes)
Hash b9fa78b438652d549f20ad262bffa843
ac85e9636a3cf1c7a935ad2b1a7eeefcf2799feb
97ac5eba21b58460149454c9115b09ed01937650647fdcfe405d5d61d85b72e5
GET /recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 185934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 26 Sep 2023 01:37:32 GMT
expires: Wed, 25 Sep 2024 01:37:32 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 18 Sep 2023 04:01:58 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 29374
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
thumbs2.sendvid.com/56/d6/3mbhm8rh-storyboard.jpg
200 OK 14 kB URL GET HTTP/1.1 thumbs2.sendvid.com/56/d6/3mbhm8rh-storyboard.jpg
IP
ASN #43350 NForce Entertainment B.V.
Requested by https://sendvid.com/embed/3mbhm8rh
Certificate IssuerGoGetSSL
Subject*.sendvid.com
Fingerprint23:7E:CE:BB:74:A8:91:B0:31:2C:71:08:5A:32:38:34:19:B8:61:51
ValidityThu, 30 Mar 2023 00:00:00 GMT - Mon, 29 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 535x200, components 3\012- data
Hash 3452f827fb67951222b131ad4a572e23
8fd2107bac247d0ed7bf635c85472aa3ad55c359
0317269d4d089acc71983b82bc55c90b9c0627da52a912b454c38320a9c2ca4f
GET /56/d6/3mbhm8rh-storyboard.jpg HTTP/1.1
Host: thumbs2.sendvid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sendvid.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
server: openresty/1.21.4.1
date: Tue, 26 Sep 2023 09:47:06 GMT
content-type: image/jpeg
content-length: 13482
last-modified: Sun, 17 Jan 2021 21:58:42 GMT
etag: "2b44e5bc4-34aa-5b91fb5656880"
accept-ranges: bytes
expires: Mon, 29 Jan 2024 03:20:46 GMT
cache-control: max-age=10776820
x-cache: MISS
x-whom: cdn03
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL OPTIONS HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Requested by https://www.blogger.com/comment/frame/1434394199162494526?po=8297985360320810530&hl=pt-PT&skin=emporio&blogspotRpcToken=9246565
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://www.blogger.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Tue, 26 Sep 2023 09:47:06 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+884; expires=Thu, 25-Sep-2025 09:47:06 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Tue, 26 Sep 2023 09:47:06 GMT
cache-control: private
X-Firefox-Spdy: h2
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 131 B URL OPTIONS HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Requested by https://www.blogger.com/comment/frame/1434394199162494526?po=8297985360320810530&hl=pt-PT&skin=emporio&blogspotRpcToken=9246565
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash ca0b7e866005f6774d284b9f438ebfd2
53644f5ee3640189bdb223473ba6a2d46606c556
502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 872
Origin: https://www.blogger.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.blogger.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Tue, 26 Sep 2023 09:47:06 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+650; expires=Thu, 25-Sep-2025 09:47:06 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Tue, 26 Sep 2023 09:47:06 GMT
X-Firefox-Spdy: h2
videos2-h.sendvid.com/hls/56/d6/3mbhm8rh.mp4/master.m3u8?validfrom=1695714423&validto=1695728823&rate=160k&ip=91.90.42.154&hdl=-1&hash=Sl7wDwjjLMI4K5WjMxaXdk%2FhdC8%3D
200 OK 472 B URL GET HTTP/1.1 videos2-h.sendvid.com/hls/56/d6/3mbhm8rh.mp4/master.m3u8?validfrom=1695714423&validto=1695728823&rate=160k&ip=91.90.42.154&hdl=-1&hash=Sl7wDwjjLMI4K5WjMxaXdk%2FhdC8%3D
IP
ASN #43350 NForce Entertainment B.V.
Requested by https://sendvid.com/embed/3mbhm8rh
Certificate IssuerGoGetSSL
Subject*.sendvid.com
Fingerprint23:7E:CE:BB:74:A8:91:B0:31:2C:71:08:5A:32:38:34:19:B8:61:51
ValidityThu, 30 Mar 2023 00:00:00 GMT - Mon, 29 Apr 2024 23:59:59 GMT
Hash 5fed98c0a8d1af48763d4d3d8fd9c2c5
c0df88e7204d5027f72d05e145090f6b249002b3
e341fc305f9b1eae1deafae8d478f48b7937a260c0ad29baa3a56c900d6be14e
GET /hls/56/d6/3mbhm8rh.mp4/master.m3u8?validfrom=1695714423&validto=1695728823&rate=160k&ip=91.90.42.154&hdl=-1&hash=Sl7wDwjjLMI4K5WjMxaXdk%2FhdC8%3D HTTP/1.1
Host: videos2-h.sendvid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sendvid.com
DNT: 1
Connection: keep-alive
Referer: https://sendvid.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
server: openresty/1.21.4.1
date: Tue, 26 Sep 2023 09:47:06 GMT
content-type: application/vnd.apple.mpegurl
content-length: 472
etag: "-1-fa"
access-control-allow-headers: Server,Range,Content-Length,Content-Range,x-cdn-diag
access-control-expose-headers: Server,Range,Content-Length,Content-Range,x-cdn-diag
access-control-allow-methods: GET, HEAD, OPTIONS
expires: Tue, 26 Sep 2023 09:47:05 GMT
cache-control: no-cache
access-control-allow-origin: *
x-avs-status: MISS
x-cache: BYPASS
x-whom: cdn03
accept-ranges: bytes
maxcdn.bootstrapcdn.com/font-awesome/4.2.0/fonts/fontawesome-webfont.woff?v=4.2.0
200 OK 66 kB URL GET HTTP/3 maxcdn.bootstrapcdn.com/font-awesome/4.2.0/fonts/fontawesome-webfont.woff?v=4.2.0
IP
Requested by https://sendvid.com/embed/3mbhm8rh
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint5B:F7:8F:50:AD:E5:5B:5E:8C:4A:39:3D:0C:98:E8:8C:18:4B:3D:8A
ValidityFri, 30 Dec 2022 00:00:00 GMT - Sat, 30 Dec 2023 23:59:59 GMT
File type Web Open Font Format, TrueType, length 65452, version 1.0\012- data
Hash d95d6f5d5ab7cfefd09651800b69bd54
7d65e0227d0d7cdc1718119cd2a7dce0638f151c
199411f659f41aaccb959bacb1b0de30e54f244352a48c6f9894e65ae0f8a9a1
GET /font-awesome/4.2.0/fonts/fontawesome-webfont.woff?v=4.2.0 HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://sendvid.com
DNT: 1
Connection: keep-alive
Referer: https://maxcdn.bootstrapcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 26 Sep 2023 09:47:07 GMT
content-type: font/woff
content-length: 65452
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
cdn-edgestorageid: 617, 617
last-modified: Mon, 25 Jan 2021 22:04:53 GMT
cdn-cachedat: 2021-06-08 14:35:25
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: 35f44b3b222fac0ea78c4274723e436d
cdn-cache: HIT
cf-cache-status: HIT
age: 2228285
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 80ca956978c10b49-OSL
alt-svc: h3=":443"; ma=86400
www.google.com/recaptcha/api2/anchor?ar=1&k=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu&co=aHR0cHM6Ly93d3cuYmxvZ2dlci5jb206NDQz&hl=en&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=bf0z3b11m095
200 OK 29 kB URL GET HTTP/3 www.google.com/recaptcha/api2/anchor?ar=1&k=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu&co=aHR0cHM6Ly93d3cuYmxvZ2dlci5jb206NDQz&hl=en&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=bf0z3b11m095
IP
Requested by https://www.blogger.com/comment/frame/1434394199162494526?po=8297985360320810530&hl=pt-PT&skin=emporio&blogspotRpcToken=9246565
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type gzip compressed data\012- data
Hash bb18cf2924c61729d47e62cda627c3cf
f4d3755dbed4b294750f630d3c74a7808a21b636
3314eda65e16af3430ae05fc58876624b1df29a922704b4314fd233612985609
GET /recaptcha/api2/anchor?ar=1&k=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu&co=aHR0cHM6Ly93d3cuYmxvZ2dlci5jb206NDQz&hl=en&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=bf0z3b11m095 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 26 Sep 2023 09:47:07 GMT
content-security-policy: script-src 'nonce-wMoDe3liblueR_aR_8Y83w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
adsco.re/p
200 OK 811 B IP
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint41:E8:B6:73:76:84:BF:F4:F7:36:CE:88:E3:48:7B:FF:4E:47:4A:43
ValidityFri, 16 Sep 2022 00:00:00 GMT - Fri, 29 Sep 2023 23:59:59 GMT
File type ASCII text, with very long lines (1020), with no line terminators
Hash 14fe5a5fbdefc4cdf07cf0151c704ad4
5b012ce3d0943b531b4b3615b03a02a9a46863ef
ce2adde7307a40caf74aa208580f36acf227fce18dff8864bf4c999b5d0d6006
POST /p HTTP/1.1
Host: adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2566
Origin: https://www.perisxxx.com
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 26 Sep 2023 09:47:07 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
AS-P-1: OK lon123
AS-P-2: OK
AS-P-3: OK
Access-Control-Max-Age: 2592000
Cache-Control: no-transform
Accept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
Critical-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
Permissions-Policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
Access-Control-Allow-Origin: https://www.perisxxx.com
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/styles__ltr.css
200 OK 25 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/styles__ltr.css
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu&co=aHR0cHM6Ly93d3cuYmxvZ2dlci5jb206NDQz&hl=en&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=bf0z3b11m095
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type ASCII text, with very long lines (56398), with no line terminators
Hash eb4bc511f79f7a1573b45f5775b3a99b
d910fb51ad7316aa54f055079374574698e74b35
7859a62e04b0acb06516eb12454de6673883ecfaeaed6c254659bca7cd59c050
GET /recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24606
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 25 Sep 2023 16:31:23 GMT
expires: Tue, 24 Sep 2024 16:31:23 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 18 Sep 2023 04:01:58 GMT
content-type: text/css
vary: Accept-Encoding
age: 62144
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__en.js
200 OK 186 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__en.js
IP
Requested by https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=Ai7lOI0zKMDPHxlv62g7oMoJ
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type ASCII text, with very long lines (549)
Size 186 kB (185934 bytes)
Hash b9fa78b438652d549f20ad262bffa843
ac85e9636a3cf1c7a935ad2b1a7eeefcf2799feb
97ac5eba21b58460149454c9115b09ed01937650647fdcfe405d5d61d85b72e5
GET /recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 185934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 26 Sep 2023 01:37:32 GMT
expires: Wed, 25 Sep 2024 01:37:32 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 18 Sep 2023 04:01:58 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 29375
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu&co=aHR0cHM6Ly93d3cuYmxvZ2dlci5jb206NDQz&hl=en&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=bf0z3b11m095
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 21 Sep 2023 15:24:26 GMT
expires: Fri, 20 Sep 2024 15:24:26 GMT
cache-control: public, max-age=31536000
age: 411762
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu&co=aHR0cHM6Ly93d3cuYmxvZ2dlci5jb206NDQz&hl=en&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=bf0z3b11m095
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 26 Sep 2023 05:45:56 GMT
expires: Wed, 25 Sep 2024 05:45:56 GMT
cache-control: public, max-age=31536000
age: 14472
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/api2/logo_48.png
200 OK 2.2 kB URL GET HTTP/3 www.gstatic.com/recaptcha/api2/logo_48.png
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu&co=aHR0cHM6Ly93d3cuYmxvZ2dlci5jb206NDQz&hl=en&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=bf0z3b11m095
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash ef9941290c50cd3866e2ba6b793f010d
4736508c795667dcea21f8d864233031223b7832
1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 22 Sep 2023 14:42:45 GMT
expires: Fri, 29 Sep 2023 14:42:45 GMT
cache-control: public, max-age=604800
age: 327863
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.sectigo.com/
471 B IP
Hash 535968fdbbdb01343b4a9b123a2fb31c
d7c8d8960c2ed17065bb64bf61cda839573e810a
c2f43ba83b5be6915b3fdd462c8c317d2ddf9b81585dac0b823f1676a0828ca4
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 26 Sep 2023 09:47:08 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 25 Sep 2023 10:42:41 GMT
Expires: Mon, 02 Oct 2023 10:42:40 GMT
Etag: "d7c8d8960c2ed17065bb64bf61cda839573e810a"
Cache-Control: max-age=522756,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 80ca9571085f0b45-OSL
www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__en.js
200 OK 186 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__en.js
IP
Requested by https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=Ai7lOI0zKMDPHxlv62g7oMoJ
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type ASCII text, with very long lines (549)
Size 186 kB (185934 bytes)
Hash b9fa78b438652d549f20ad262bffa843
ac85e9636a3cf1c7a935ad2b1a7eeefcf2799feb
97ac5eba21b58460149454c9115b09ed01937650647fdcfe405d5d61d85b72e5
GET /recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 185934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 26 Sep 2023 01:37:32 GMT
expires: Wed, 25 Sep 2024 01:37:32 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 18 Sep 2023 04:01:58 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 29376
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.pt_PT.b3UStQ_DuAA.es5.O/ck=boq-blogger.BloggerCommentUi.VNxCB-Kk8vM.L.F4.O/am=AICmAxA/d=1/exm=A7fCU,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,IZT63,JNoxi,KG2eXe,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VXdfxd,VwDzFe,WO9ee,XVMNvd,YwHGTd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,e5qFLc,eD1YLc,fKUV3e,fgib1c,gZjhIf,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,ovKuLd,pjICDe,pxq3x,vfuNJf,w9hDv,wmnU7d,ws9Tlc,xQtZb,xUdipf,yDVVkb,zbML3c,zr1jrb/excm=_b,_tp,commentformiframeview/ed=1/wt=2/ujg=1/rs=AEy-KP1YW_FoBGxrbxlcwS6Kx8xY3bPZOQ/ee=EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=Wt6vjf,hhhU8,FCpbqb,WhJNk
200 OK 1.7 kB URL GET HTTP/3 www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.pt_PT.b3UStQ_DuAA.es5.O/ck=boq-blogger.BloggerCommentUi.VNxCB-Kk8vM.L.F4.O/am=AICmAxA/d=1/exm=A7fCU,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,IZT63,JNoxi,KG2eXe,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VXdfxd,VwDzFe,WO9ee,XVMNvd,YwHGTd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,e5qFLc,eD1YLc,fKUV3e,fgib1c,gZjhIf,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,ovKuLd,pjICDe,pxq3x,vfuNJf,w9hDv,wmnU7d,ws9Tlc,xQtZb,xUdipf,yDVVkb,zbML3c,zr1jrb/excm=_b,_tp,commentformiframeview/ed=1/wt=2/ujg=1/rs=AEy-KP1YW_FoBGxrbxlcwS6Kx8xY3bPZOQ/ee=EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=Wt6vjf,hhhU8,FCpbqb,WhJNk
IP
Requested by https://www.blogger.com/comment/frame/1434394199162494526?po=8297985360320810530&hl=pt-PT&skin=emporio&blogspotRpcToken=9246565
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
FingerprintCB:2E:4E:04:8F:48:B1:A1:1A:F4:F6:E1:8A:18:2F:F9:B5:A6:DD:60
ValidityMon, 04 Sep 2023 08:16:44 GMT - Mon, 27 Nov 2023 08:16:43 GMT
File type ASCII text, with very long lines (732)
Hash 2bb677b166af2dd439cb940ca73cb784
9bb6c527b9cdf51de37784bb49557ac3e493be26
c2c25e5eefc2e58c6ca23b3d195394b19910ff9b2c269760c393464765f1a7b4
GET /_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.pt_PT.b3UStQ_DuAA.es5.O/ck=boq-blogger.BloggerCommentUi.VNxCB-Kk8vM.L.F4.O/am=AICmAxA/d=1/exm=A7fCU,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,IZT63,JNoxi,KG2eXe,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VXdfxd,VwDzFe,WO9ee,XVMNvd,YwHGTd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,e5qFLc,eD1YLc,fKUV3e,fgib1c,gZjhIf,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,ovKuLd,pjICDe,pxq3x,vfuNJf,w9hDv,wmnU7d,ws9Tlc,xQtZb,xUdipf,yDVVkb,zbML3c,zr1jrb/excm=_b,_tp,commentformiframeview/ed=1/wt=2/ujg=1/rs=AEy-KP1YW_FoBGxrbxlcwS6Kx8xY3bPZOQ/ee=EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=Wt6vjf,hhhU8,FCpbqb,WhJNk HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/boq-infra/blogger-boq-js-css-signers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="boq-infra/blogger-boq-js-css-signers"
report-to: {"group":"boq-infra/blogger-boq-js-css-signers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/boq-infra/blogger-boq-js-css-signers"}]}
content-length: 1669
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 25 Sep 2023 04:23:38 GMT
expires: Tue, 24 Sep 2024 04:23:38 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Thu, 21 Sep 2023 09:09:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 105810
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn4ads.com/lphlsxzfjijukk?_=BQLyAAAAAAAACZUAArW9su7MKhruFmB50bUUukYUhjXa07OqcNEw-Rlqi0oNKqJjyVDj51SvzO5rAaTaLA6X9b-fx4vb3Pu6UJ516_hxaLoiTttmpwz9-8SIFUTpt1TF9_gLKWz_7i1o701MElPV-lUUWhHUJYwEwrANcCCKV8ZEiVxUah59uQ47x2FFIvbqccrIkOwDULO23kxq9vDDeDZQ5zBzCieZREbYPtiD-nHys-rKKGPkz7cFz-oiS37WF8pVO27LFqFItVc9W37QgIYtHlXyb0JwwqLJIZcqXl0W61EvBWfGGtwTCKs1YsWqOQNkmKmzfbjUZqti5D473zaCcrs3_66Wv2i4MD9gPGEhLB5VHmNDqRZuUL38kW_Ki6kQvLNr38n1FsypmuIQl4rWxlvEK5fW2uXatQHwF8Lsb9rpss5BE8i8rKOfFNOp7cUzPZ4L8UIdN40fZsa8SQSU5149ZrVrwSMKW-I75jg2hH-T7ziW_jvXSigrFUrI5pKAIbSQW2P9qvnPXMtCw43jhzR67yZY0C1xQt2JkjS4MF0yh_m824nSPhLwiHbgA3iE_qaN3JUY9_o80Ga_N8Ar92pSg01PPASCenP9RKfiimeM7Q8tRGLOn1aMLjW-tmZlC-WYDbpMnjpiOti5lxNh_4IK1W79NVqKP9fN09FQ2Pqh0mQ5DgfVEWu7pWBF2AEoS1_6r6XtI6pr0IO6FWk-d3FMqg_VJld0oW4bAX-UvVQQRAOX0zztDcnxQx-D4t5ZfWVxNBL0T5zthSog36762CoNcgwB24dK3AKAIOMd0LnQhfsxhh0_OtePKvvgqLrcz-qo6QccGsWY8ViIceW9PK4TZIKsIaJ6c2iSYy4dhcZzvkSp63svP_Oim0v7ubHIBYrA_eUMMkMfpXARMMYkQSznIwcHhxBq_rUoINwj2nVdy8-i7qH3ZWLTBEt8k-jA4jreo2EwJQxlYNHJhMEgVCJ7foMMaqniekwFhlSbzQw96fdtLQs3wfWw&v=4&lIBLdKjo=4342589&viaYNwkV=0.0005&sLbiJBKF=0,0&PjtuLegQ=&zbZrJOgB=&s=1280,1024,1,1280,1024,0
200 OK 44 B URL GET HTTP/2 cdn4ads.com/lphlsxzfjijukk?_=BQLyAAAAAAAACZUAArW9su7MKhruFmB50bUUukYUhjXa07OqcNEw-Rlqi0oNKqJjyVDj51SvzO5rAaTaLA6X9b-fx4vb3Pu6UJ516_hxaLoiTttmpwz9-8SIFUTpt1TF9_gLKWz_7i1o701MElPV-lUUWhHUJYwEwrANcCCKV8ZEiVxUah59uQ47x2FFIvbqccrIkOwDULO23kxq9vDDeDZQ5zBzCieZREbYPtiD-nHys-rKKGPkz7cFz-oiS37WF8pVO27LFqFItVc9W37QgIYtHlXyb0JwwqLJIZcqXl0W61EvBWfGGtwTCKs1YsWqOQNkmKmzfbjUZqti5D473zaCcrs3_66Wv2i4MD9gPGEhLB5VHmNDqRZuUL38kW_Ki6kQvLNr38n1FsypmuIQl4rWxlvEK5fW2uXatQHwF8Lsb9rpss5BE8i8rKOfFNOp7cUzPZ4L8UIdN40fZsa8SQSU5149ZrVrwSMKW-I75jg2hH-T7ziW_jvXSigrFUrI5pKAIbSQW2P9qvnPXMtCw43jhzR67yZY0C1xQt2JkjS4MF0yh_m824nSPhLwiHbgA3iE_qaN3JUY9_o80Ga_N8Ar92pSg01PPASCenP9RKfiimeM7Q8tRGLOn1aMLjW-tmZlC-WYDbpMnjpiOti5lxNh_4IK1W79NVqKP9fN09FQ2Pqh0mQ5DgfVEWu7pWBF2AEoS1_6r6XtI6pr0IO6FWk-d3FMqg_VJld0oW4bAX-UvVQQRAOX0zztDcnxQx-D4t5ZfWVxNBL0T5zthSog36762CoNcgwB24dK3AKAIOMd0LnQhfsxhh0_OtePKvvgqLrcz-qo6QccGsWY8ViIceW9PK4TZIKsIaJ6c2iSYy4dhcZzvkSp63svP_Oim0v7ubHIBYrA_eUMMkMfpXARMMYkQSznIwcHhxBq_rUoINwj2nVdy8-i7qH3ZWLTBEt8k-jA4jreo2EwJQxlYNHJhMEgVCJ7foMMaqniekwFhlSbzQw96fdtLQs3wfWw&v=4&lIBLdKjo=4342589&viaYNwkV=0.0005&sLbiJBKF=0,0&PjtuLegQ=&zbZrJOgB=&s=1280,1024,1,1280,1024,0
IP
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerSectigo Limited
Subjectcdn4ads.com
Fingerprint68:D8:58:BD:34:E8:B3:D8:CA:10:F2:9A:EA:B3:4E:27:B5:5C:87:B1
ValidityMon, 14 Aug 2023 00:00:00 GMT - Fri, 13 Sep 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash d5f0a25e4d3522d56d48ce7bc3e518fb
86794caff58f7fee6e684c2ba7195f970a8d6f4c
9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5
GET /lphlsxzfjijukk?_=BQLyAAAAAAAACZUAArW9su7MKhruFmB50bUUukYUhjXa07OqcNEw-Rlqi0oNKqJjyVDj51SvzO5rAaTaLA6X9b-fx4vb3Pu6UJ516_hxaLoiTttmpwz9-8SIFUTpt1TF9_gLKWz_7i1o701MElPV-lUUWhHUJYwEwrANcCCKV8ZEiVxUah59uQ47x2FFIvbqccrIkOwDULO23kxq9vDDeDZQ5zBzCieZREbYPtiD-nHys-rKKGPkz7cFz-oiS37WF8pVO27LFqFItVc9W37QgIYtHlXyb0JwwqLJIZcqXl0W61EvBWfGGtwTCKs1YsWqOQNkmKmzfbjUZqti5D473zaCcrs3_66Wv2i4MD9gPGEhLB5VHmNDqRZuUL38kW_Ki6kQvLNr38n1FsypmuIQl4rWxlvEK5fW2uXatQHwF8Lsb9rpss5BE8i8rKOfFNOp7cUzPZ4L8UIdN40fZsa8SQSU5149ZrVrwSMKW-I75jg2hH-T7ziW_jvXSigrFUrI5pKAIbSQW2P9qvnPXMtCw43jhzR67yZY0C1xQt2JkjS4MF0yh_m824nSPhLwiHbgA3iE_qaN3JUY9_o80Ga_N8Ar92pSg01PPASCenP9RKfiimeM7Q8tRGLOn1aMLjW-tmZlC-WYDbpMnjpiOti5lxNh_4IK1W79NVqKP9fN09FQ2Pqh0mQ5DgfVEWu7pWBF2AEoS1_6r6XtI6pr0IO6FWk-d3FMqg_VJld0oW4bAX-UvVQQRAOX0zztDcnxQx-D4t5ZfWVxNBL0T5zthSog36762CoNcgwB24dK3AKAIOMd0LnQhfsxhh0_OtePKvvgqLrcz-qo6QccGsWY8ViIceW9PK4TZIKsIaJ6c2iSYy4dhcZzvkSp63svP_Oim0v7ubHIBYrA_eUMMkMfpXARMMYkQSznIwcHhxBq_rUoINwj2nVdy8-i7qH3ZWLTBEt8k-jA4jreo2EwJQxlYNHJhMEgVCJ7foMMaqniekwFhlSbzQw96fdtLQs3wfWw&v=4&lIBLdKjo=4342589&viaYNwkV=0.0005&sLbiJBKF=0,0&PjtuLegQ=&zbZrJOgB=&s=1280,1024,1,1280,1024,0 HTTP/1.1
Host: cdn4ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
asf: 6
cache-control: private, no-store, no-cache, must-revalidate, no-transform, max-age=0
pragma: no-cache
set-cookie: PP_CV=yes; expires=Tue, 26-Sep-2023 10:47:08 GMT; Max-Age=3600
fraudcheck=24839a67f0a63e2919a5938969eef2d0; expires=Thu, 26-Oct-2023 09:47:08 GMT; Max-Age=2592000; path=/; domain=.popads.net
popads-ec: 5
content-type: text/javascript;charset=UTF-8
content-length: 44
date: Tue, 26 Sep 2023 09:47:08 GMT
X-Firefox-Spdy: h2
www.blogger.com/static/v1/v-css/3268905543-lightbox_bundle.css
200 OK 6.5 kB URL GET HTTP/3 www.blogger.com/static/v1/v-css/3268905543-lightbox_bundle.css
IP
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
FingerprintCB:2E:4E:04:8F:48:B1:A1:1A:F4:F6:E1:8A:18:2F:F9:B5:A6:DD:60
ValidityMon, 04 Sep 2023 08:16:44 GMT - Mon, 27 Nov 2023 08:16:43 GMT
File type ASCII text, with very long lines (35889), with no line terminators
Hash e287450e0a5c5a5625f7ba3716c1b0cf
3287eee808b2a77f7e4ea16b148f4cd173cddb66
5ee6fb081a76cfc34678b67e894a1fa91ed96857c4d94710cb1a8cea5ea1d76b
GET /static/v1/v-css/3268905543-lightbox_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6501
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 26 Sep 2023 04:10:18 GMT
expires: Wed, 25 Sep 2024 04:10:18 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 25 Sep 2023 06:52:50 GMT
content-type: text/css
vary: Accept-Encoding
age: 20210
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.blogger.com/static/v1/jsbin/349333712-lbx__pt_pt.js
200 OK 123 kB URL GET HTTP/3 www.blogger.com/static/v1/jsbin/349333712-lbx__pt_pt.js
IP
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
FingerprintCB:2E:4E:04:8F:48:B1:A1:1A:F4:F6:E1:8A:18:2F:F9:B5:A6:DD:60
ValidityMon, 04 Sep 2023 08:16:44 GMT - Mon, 27 Nov 2023 08:16:43 GMT
File type HTML document, ASCII text, with very long lines (1308)
Size 123 kB (122746 bytes)
Hash e9753a5916c0a11989e30aa784c18217
bdb11a9c7fd0bcc884f811aebc8055348c34329c
fb489b5b234fb2408614692b94f6eb9117239dcaff15911d131d0e9c213aebe5
GET /static/v1/jsbin/349333712-lbx__pt_pt.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 122746
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 23 Sep 2023 05:54:09 GMT
expires: Sun, 22 Sep 2024 05:54:09 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 21 Sep 2023 19:59:10 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 273180
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
c.adsco.re/
0 B IP
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 26 Sep 2023 09:47:03 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Fri, 27 Oct 2023 09:47:03 GMT
etag: W/"tzC4PKSya+MBjBSpOR6Q3w=="
cf-cache-status: HIT
age: 149439
vary: Accept-Encoding
server: cloudflare
cf-ray: 80ca95524c1b56bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.blogger.com/comment/frame/1434394199162494526?po=8297985360320810530&hl=pt-PT&skin=emporio&blogspotRpcToken=9246565
200 OK 89 kB URL GET HTTP/3 www.blogger.com/comment/frame/1434394199162494526?po=8297985360320810530&hl=pt-PT&skin=emporio&blogspotRpcToken=9246565
IP
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
FingerprintCB:2E:4E:04:8F:48:B1:A1:1A:F4:F6:E1:8A:18:2F:F9:B5:A6:DD:60
ValidityMon, 04 Sep 2023 08:16:44 GMT - Mon, 27 Nov 2023 08:16:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /comment/frame/1434394199162494526?po=8297985360320810530&hl=pt-PT&skin=emporio&blogspotRpcToken=9246565 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
x-ua-compatible: IE=edge
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 26 Sep 2023 09:47:03 GMT
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: script-src 'nonce-cxSW8z-iJXqMSwP7SttzOg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/BloggerCommentUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/BloggerCommentUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/BloggerCommentUi/cspreport
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: same-site
cross-origin-opener-policy: same-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
set-cookie: NID=511=squlbtjlzuSqrpXSol83kfLRuJqR5clFw5BKXtojFMfLtzrv1uSs_sA7lsim64oshw181NaPJ85JYrtt9RC0O6GR-cIDtg8EMHXHNl6FrCwrCl9SEJczT95rziY7UVHZ-Q-GkJb-6_b2JAoVFSxgnAs-p8ezH3E8A_k9-xMDyBg; expires=Wed, 27-Mar-2024 09:47:03 GMT; path=/; domain=.blogger.com; Secure; HttpOnly
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
videos2-h.sendvid.com/hls/56/d6/3mbhm8rh.mp4/index-v1-a1.m3u8?validfrom=1695714423&validto=1695728823&rate=160k&ip=91.90.42.154&hdl=-1&hash=Sl7wDwjjLMI4K5WjMxaXdk%2FhdC8%3D
200 OK 277 B URL GET HTTP/1.1 videos2-h.sendvid.com/hls/56/d6/3mbhm8rh.mp4/index-v1-a1.m3u8?validfrom=1695714423&validto=1695728823&rate=160k&ip=91.90.42.154&hdl=-1&hash=Sl7wDwjjLMI4K5WjMxaXdk%2FhdC8%3D
IP
ASN #43350 NForce Entertainment B.V.
Requested by https://sendvid.com/embed/3mbhm8rh
Certificate IssuerGoGetSSL
Subject*.sendvid.com
Fingerprint23:7E:CE:BB:74:A8:91:B0:31:2C:71:08:5A:32:38:34:19:B8:61:51
ValidityThu, 30 Mar 2023 00:00:00 GMT - Mon, 29 Apr 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with no line terminators
Hash 29723574b912b7a80c3d6942b4dff3bc
a5c11252e4763e6b7abf6e180ac300bf5060d820
e08e2b8582c386aef04fb5302383d0ea0cc969641909395ed406f0aecefe50c9
GET /hls/56/d6/3mbhm8rh.mp4/index-v1-a1.m3u8?validfrom=1695714423&validto=1695728823&rate=160k&ip=91.90.42.154&hdl=-1&hash=Sl7wDwjjLMI4K5WjMxaXdk%2FhdC8%3D HTTP/1.1
Host: videos2-h.sendvid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sendvid.com
DNT: 1
Connection: keep-alive
Referer: https://sendvid.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
server: openresty/1.21.4.1
date: Tue, 26 Sep 2023 09:47:07 GMT
content-type: application/vnd.apple.mpegurl
content-length: 277
access-control-allow-methods: GET, HEAD, OPTIONS
etag: "-1-a6"
access-control-allow-headers: Server,Range,Content-Length,Content-Range,x-cdn-diag
access-control-expose-headers: Server,Range,Content-Length,Content-Range,x-cdn-diag
expires: Tue, 26 Sep 2023 09:47:06 GMT
cache-control: no-cache
access-control-allow-origin: *
x-avs-status: MISS
x-cache: BYPASS
x-whom: cdn01
accept-ranges: bytes
maxcdn.bootstrapcdn.com/font-awesome/4.2.0/css/font-awesome.min.css
200 OK 22 kB URL GET HTTP/2 maxcdn.bootstrapcdn.com/font-awesome/4.2.0/css/font-awesome.min.css
IP
Requested by https://sendvid.com/embed/3mbhm8rh
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint5B:F7:8F:50:AD:E5:5B:5E:8C:4A:39:3D:0C:98:E8:8C:18:4B:3D:8A
ValidityFri, 30 Dec 2022 00:00:00 GMT - Sat, 30 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (21822)
Hash feda974a77ea5783b8be673f142b7c88
b71d1c7c315b67c614563382d1c2a868ac14d729
0fb1bbca73646e8e2b93c82e8d8b219647b13d4b440c48e338290b9a685b8de1
GET /font-awesome/4.2.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sendvid.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 26 Sep 2023 09:47:06 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
cdn-edgestorageid: 718, 718
last-modified: Mon, 25 Jan 2021 22:04:53 GMT
cdn-cachedat: 2021-04-13 02:36:00
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: 357c5298f2849c0ce9712c57ec240f4e
cdn-cache: HIT
cf-cache-status: HIT
age: 21618070
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 80ca9563a916b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.google.com/recaptcha/api2/webworker.js?hl=en&v=Ai7lOI0zKMDPHxlv62g7oMoJ
200 OK 102 B URL GET HTTP/3 www.google.com/recaptcha/api2/webworker.js?hl=en&v=Ai7lOI0zKMDPHxlv62g7oMoJ
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu&co=aHR0cHM6Ly93d3cuYmxvZ2dlci5jb206NDQz&hl=en&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=bf0z3b11m095
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type ASCII text, with no line terminators
Hash 0669f1f6e5dde93c6ce614ae19c078b6
210865ea713bc04a2befb28224ef4502ed049b20
e65be61e734df82e8aaa5503c9bbb29b4125f52311cb8f57efa4db12bb1f7d65
GET /recaptcha/api2/webworker.js?hl=en&v=Ai7lOI0zKMDPHxlv62g7oMoJ HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu&co=aHR0cHM6Ly93d3cuYmxvZ2dlci5jb206NDQz&hl=en&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=bf0z3b11m095
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
expires: Tue, 26 Sep 2023 09:47:08 GMT
date: Tue, 26 Sep 2023 09:47:08 GMT
cache-control: private, max-age=300
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
a.realsrv.com/nativeads-v2.js
200 OK 45 kB URL GET HTTP/2 a.realsrv.com/nativeads-v2.js
IP
ASN #60068 Datacamp Limited
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerLet's Encrypt
Subjectrealsrv.com
FingerprintCC:B9:27:44:89:99:7C:9F:94:A5:01:B6:FD:90:95:3E:AA:18:D8:7B
ValiditySun, 23 Jul 2023 14:21:20 GMT - Sat, 21 Oct 2023 14:21:19 GMT
File type C source, ASCII text, with very long lines (45113), with no line terminators
Hash 0a128366c7602cbe2c595077f69ff177
6bb4324d11390cf5846f680a86f0af3e6d11a868
3d0c91e2041f64eadb079287c1ebdcbd7209b7ec359248f7d2eb4a02a5490457
GET /nativeads-v2.js HTTP/1.1
Host: a.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 26 Sep 2023 09:47:02 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"6bb4324d11390cf5846f680a86f"
accept-ch:
expires: Tue, 19 Sep 2023 18:49:07 GMT
cache-control: max-age=10800
x-robots-tag: noindex, follow
access-control-allow-origin: *
x-cache-op: HIT
server: CDN77-Turbo
x-77-nzt: AblMCQ0M1I3/fygAAA
x-77-nzt-ray: c0a4cc28d73bd4af96a8126575c5d922
x-accel-expires: @1695722055
x-accel-date: 1695711255
x-cache: HIT
x-age: 10367
x-77-pop: stockholmSE
x-77-cache: HIT
x-77-age: 10367
content-encoding: gzip
X-Firefox-Spdy: h2
u3y8v8u4.aucdn.net/library/141372/3eb964732256939f2e5bebbc2ac032e4c93e6f45.mp4
206 Partial Content 1.6 MB URL GET HTTP/2 u3y8v8u4.aucdn.net/library/141372/3eb964732256939f2e5bebbc2ac032e4c93e6f45.mp4
IP
ASN #60068 Datacamp Limited
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerLet's Encrypt
Subjectafcdn.net
FingerprintCA:9B:AA:FE:AE:52:F5:06:6F:3C:E5:8C:B7:0F:9A:60:0B:A7:00:C2
ValiditySun, 23 Jul 2023 14:03:50 GMT - Sat, 21 Oct 2023 14:03:49 GMT
Size 1.6 MB (1572864 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /library/141372/3eb964732256939f2e5bebbc2ac032e4c93e6f45.mp4 HTTP/1.1
Host: u3y8v8u4.aucdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Tue, 26 Sep 2023 09:47:04 GMT
content-type: video/mp4
content-length: 6195488
last-modified: Tue, 07 Feb 2023 05:35:18 GMT
etag: "63e1e316-5e8920"
expires: Mon, 29 Apr 2024 13:25:33 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
server: CDN77-Turbo
x-77-nzt: AblMCRRlv/D/tTfEAA
x-77-nzt-ray: af5856300ec66b8f98a8126515147d02
x-accel-expires: @1714398307
x-accel-date: 1682862307
x-cache: HIT
x-age: 12859317
x-77-pop: stockholmSE
x-77-cache: HIT
x-77-age: 12859317
content-range: bytes 0-6195487/6195488
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/140058/b69b0ad953e27d2318d3b7783f89b2f03cac130e.webp
200 OK 9.6 kB URL GET HTTP/2 s3t3d2y8.afcdn.net/library/140058/b69b0ad953e27d2318d3b7783f89b2f03cac130e.webp
IP
ASN #60068 Datacamp Limited
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerLet's Encrypt
Subjectafcdn.net
FingerprintCA:9B:AA:FE:AE:52:F5:06:6F:3C:E5:8C:B7:0F:9A:60:0B:A7:00:C2
ValiditySun, 23 Jul 2023 14:03:50 GMT - Sat, 21 Oct 2023 14:03:49 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 070a232d0b0e025bfc65d90c1f5ece91
b69b0ad953e27d2318d3b7783f89b2f03cac130e
bd774d7c7edcc81fd3f49a59ed1ef48868b2531bba2ee9762213e2b023f4c5de
GET /library/140058/b69b0ad953e27d2318d3b7783f89b2f03cac130e.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 26 Sep 2023 09:47:05 GMT
content-type: image/webp
content-length: 9562
last-modified: Wed, 03 Nov 2021 11:53:34 GMT
etag: "6182783e-255a"
expires: Fri, 30 Jun 2023 11:09:49 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ0oLZD/X9dyAA
x-77-nzt-ray: c0a4cc28393d3ec799a81265e5a4aa34
x-accel-expires: @1719731386
x-accel-date: 1688195386
x-cache: HIT
x-age: 7526239
x-77-pop: stockholmSE
x-77-cache: HIT
x-77-age: 7526239
accept-ranges: bytes
X-Firefox-Spdy: h2
c.adsco.re/
200 OK 80 kB IP
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (689)
Hash b730b83ca4b26be3018c14a9391e90df
e7409eaa74553470e6e83a3246b00b7692133675
4b3c590f5d3d08850e02431617eaf361cdffdf61964ab358be6c401804a6aea3
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 26 Sep 2023 09:47:04 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Fri, 27 Oct 2023 09:47:04 GMT
etag: W/"tzC4PKSya+MBjBSpOR6Q3w=="
cf-cache-status: HIT
age: 149440
vary: Accept-Encoding
server: cloudflare
cf-ray: 80ca95598f07b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-fCZM.woff2
200 OK 20 kB URL GET HTTP/2 fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-fCZM.woff2
IP
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 20028, version 1.0\012- data
Hash 2bfde17b9a1384ce64af78db1b87a82f
8effd23e482511e249c3f8e91cdc503729b93598
5c2d662e92bcbf1a5970b97040f901031295e79a96314db8302f549003022087
GET /s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-fCZM.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.perisxxx.com
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 21 Sep 2023 15:16:09 GMT
expires: Fri, 20 Sep 2024 15:16:09 GMT
cache-control: public, max-age=31536000
age: 412254
last-modified: Tue, 26 Apr 2022 16:41:08 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
a.pemsrv.com/popunder1000.js
200 OK 98 kB URL GET HTTP/2 a.pemsrv.com/popunder1000.js
IP
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerLet's Encrypt
Subjectpemsrv.com
Fingerprint6A:BE:92:41:5D:8D:0E:9B:62:8C:CC:18:7C:41:8B:66:F4:F7:6B:15
ValidityTue, 01 Aug 2023 11:24:47 GMT - Mon, 30 Oct 2023 11:24:46 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /popunder1000.js HTTP/1.1
Host: a.pemsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 26 Sep 2023 09:47:03 GMT
content-encoding: gzip
content-length: 41100
content-type: application/javascript
accept-ranges: bytes
server: nginx
etag: W/"6462861dac2e776aab813526140"
accept-ch:
cache-control: max-age=10800
x-robots-tag: noindex, follow
access-control-allow-origin: *
x-hw: 1695721623.dop209.sk1.t,1695721623.cds209.sk1.hn,1695721623.cds261.sk1.c
X-Firefox-Spdy: h2
cdn.jsdelivr.net/gh/Arlina-Design/quasar@master/arlinablock.js
200 OK 91 kB URL GET HTTP/2 cdn.jsdelivr.net/gh/Arlina-Design/quasar@master/arlinablock.js
IP
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintDD:2E:D1:50:F1:3B:79:16:36:22:E7:0A:FD:E6:E7:35:C7:1A:42:6E
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 2b77703699738a0afe4785cb1b853a75
27b1ae11bc11f614ed04ed5221ca3203775d1f0f
7479748bad5793b25b90b43aec31d698a6dc56b094c4b5d26ac884bce952931c
GET /gh/Arlina-Design/quasar@master/arlinablock.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 26 Sep 2023 09:47:08 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: master
x-jsd-version-type: branch
etag: W/"162b7-J7GuEbwR9hTtBO1SIcoyA3ddHw8"
x-served-by: cache-fra-eddf8230048-FRA, cache-yyz4545-YYZ
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 10780
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DqJ2kVgzGuRLuDxhNjbiCqUff18S2k9G%2FBt4os9yVyIO9LficpepK0zpNZUPMlQBSgo79so4ewgHT2eikKOyYHKbydz1ceuOhX%2BwgrBPYuiHyXJPAcgy9Oruc%2FXp%2BEK4yt4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80ca9574aa210b4d-OSL
content-encoding: br
X-Firefox-Spdy: h2
syndication.realsrv.com/splash.php?idzone=4347984&cookieconsent=true
200 OK 5.8 kB URL GET HTTP/1.1 syndication.realsrv.com/splash.php?idzone=4347984&cookieconsent=true
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://www.perisxxx.com/2021/01/sandra-on-periscope.html
Certificate IssuerLet's Encrypt
Subjectrealsrv.com
FingerprintCC:B9:27:44:89:99:7C:9F:94:A5:01:B6:FD:90:95:3E:AA:18:D8:7B
ValiditySun, 23 Jul 2023 14:21:20 GMT - Sat, 21 Oct 2023 14:21:19 GMT
File type XML document, ASCII text, with very long lines (5837), with no line terminators
Hash cb1246d3b43cf61be94b66f5b31a9cf5
cd97cd98d849f42bd4989680831a35511121ae1b
35d9a71571d897d9b270ec8518f707b10d9300e0b269e734c1da0d5020380f9d
GET /splash.php?idzone=4347984&cookieconsent=true HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.perisxxx.com
DNT: 1
Connection: keep-alive
Referer: https://www.perisxxx.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 09:47:03 GMT
Content-Type: text/xml;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Headers: X-CH-VALUES
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226512a8976a2389.375483923105795118%22%3B%7D; expires=Thu, 25 Sep 2025 09:47:03 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-video%22%3A%22v4%7C%7CNOR%7C4347984%7C81873080%7C0%7C%7C97%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C%7C0%7Cperisxxx.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1695721623%7C6fa620243b14475aa9fedcaa8cbc59d6%7Cok%22%7D; expires=Wed, 27 Sep 2023 09:47:03 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
Cache-Control: no-store
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: https://www.perisxxx.com
Access-Control-Allow-Credentials: true
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
142.250.74.179
104.18.14.101
185.76.9.25
185.107.82.195
185.200.118.51
185.200.116.90
0.0.0.0