r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6f313739c4c44174fc9a97ac63621b46
319da68d06694330ad9f7901bcde1ca0a6eeac0d
321236ee07769c741890815bc56fd2700ff1974b0534368b9ff2e96320ae4fee
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "321236EE07769C741890815BC56FD2700FF1974B0534368B9FF2E96320AE4FEE"
Last-Modified: Wed, 22 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9616
Expires: Fri, 24 Feb 2023 06:27:20 GMT
Date: Fri, 24 Feb 2023 03:47:04 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 67fc460ed2f69dde3c410ec607ef3510
ba9f582ec321351e5c06c9b2c381f06b685ef274
85df74fac7d59d76840b6359bac24648fede201c0048f2a8382af6468225ffb8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "85DF74FAC7D59D76840B6359BAC24648FEDE201C0048F2A8382AF6468225FFB8"
Last-Modified: Wed, 22 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10821
Expires: Fri, 24 Feb 2023 06:47:25 GMT
Date: Fri, 24 Feb 2023 03:47:04 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 7f03faaba3392caae6dae54467bfdf6d
57ea1f14e8bfbcca8190c706d708c9fda12442c1
02ac551ba61fcbc6b04f244df065948b181a8a258db5c2e197aae66fdfcea8ee
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Content-Type, Backoff, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 24 Feb 2023 02:53:58 GMT
content-type: application/json
age: 3186
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7fb59e5d3cdf08b94e5f41fdeb9aec6c
ff644039db3b9f74d7e2fab10f93581bea10614a
861573a00d75364e15783c5e448c4f8b4da48b38d9beba3ebd33a87f993489a5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "861573A00D75364E15783C5E448C4F8B4DA48B38D9BEBA3EBD33A87F993489A5"
Last-Modified: Wed, 22 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4090
Expires: Fri, 24 Feb 2023 04:55:14 GMT
Date: Fri, 24 Feb 2023 03:47:04 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash b5ba6334e73496995e3e3a9ecd0eb323
ad80d3b7718c28364e8c2004fb38a13a1747e462
aa5abb52515c6383c014aadb63a86c9f798ad64de53c0218616c1fc6d424d2e2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: lwj0noSvdtsvCp5pY69W4KW2xoUERgBo+dYzAjisVNY/Ll9hziGmYuFGvBzP+O3Ff5Jp1Dj0zeE=
x-amz-request-id: P8KP4TYCAKT4YBP2
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 24 Feb 2023 02:49:31 GMT
age: 3453
last-modified: Sat, 18 Feb 2023 20:28:27 GMT
etag: "b5ba6334e73496995e3e3a9ecd0eb323"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
homeplan-us.blogspot.com/2009/06
200 OK 12 kB URL HTTP/1.1 homeplan-us.blogspot.com/2009/06
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4395)
Hash 99023cde2718be98d9d1282f95612941
d1d112f81d13ad5647f8a0c7dcc85db867ed585f
cdd5eb65d0e42d9e326e68f526f3af71c3c3609e44c87787e44dca0c07e73c76
Analyzer Verdict Alert fortinet Malware
GET /2009/06 HTTP/1.1
Host: homeplan-us.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Fri, 24 Feb 2023 03:47:04 GMT
Date: Fri, 24 Feb 2023 03:47:04 GMT
Cache-Control: private, max-age=0
Last-Modified: Sat, 11 Dec 2021 08:02:13 GMT
ETag: W/"79981cd2795bf49c8b0667d32e335d59f7a297f7d96afcfef6276a4775bcf839"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 12478
Server: GSE
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 24 Feb 2023 03:47:04 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.6.2/jquery.min.js
200 OK 32 kB URL HTTP/1.1 ajax.googleapis.com/ajax/libs/jquery/1.6.2/jquery.min.js
IP
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32764)
Hash 548260b20981c0be2d9dcf8d01c08c24
84230120f8f1bd559eca3fb2fec6acf6cffbf4e7
2f8a612a714e5c928525fdb193f8ec12f7965a6c0d63dd8e58ccae239358c8bb
GET /ajax/libs/jquery/1.6.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://homeplan-us.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="hosted-libraries-pushers"
Report-To: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
Timing-Allow-Origin: *
Content-Length: 32245
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 23 Feb 2023 13:08:08 GMT
Expires: Fri, 23 Feb 2024 13:08:08 GMT
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 52736
Last-Modified: Tue, 03 Mar 2020 19:15:00 GMT
Content-Type: text/javascript; charset=UTF-8
Vary: Accept-Encoding
homeplan-us.blogspot.com/js/cookienotice.js
200 OK 2.0 kB URL HTTP/1.1 homeplan-us.blogspot.com/js/cookienotice.js
IP
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
Analyzer Verdict Alert fortinet Malware
GET /js/cookienotice.js HTTP/1.1
Host: homeplan-us.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://homeplan-us.blogspot.com/2009/06
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
Date: Fri, 24 Feb 2023 03:47:04 GMT
Expires: Fri, 03 Mar 2023 03:47:04 GMT
Cache-Control: public, max-age=604800
Last-Modified: Thu, 23 Feb 2023 18:55:35 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9a411a745515fddc6ccf58c960833c94
fce796b246a68259c1ecec70c762965ab9e98a9a
84a9c928c79d0723cf52ed1efe214f0b23a1ae2c08c8299b03df147f3bacd2c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Feb 2023 03:47:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b4b981fda2327f5c5f37616ee7af87d6
be6b87d2cea83786fda4f8b8ef811292a03b0994
70e485526e62a6ce0a7c0f333932a3b05b92abe332cc34316929c7f84cb177f7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Feb 2023 03:47:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b4b981fda2327f5c5f37616ee7af87d6
be6b87d2cea83786fda4f8b8ef811292a03b0994
70e485526e62a6ce0a7c0f333932a3b05b92abe332cc34316929c7f84cb177f7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Feb 2023 03:47:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
200 OK 6.6 kB URL HTTP/2 www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
IP
File type ASCII text, with very long lines (30596)
Hash 6f46e6f68353c7911fe34f31faa1518f
ea4dbfa2f87c18e9c51c59a32dfa9afb9c2c3472
0be7e26374fcff6f423b88e5f2a05d1cfdcb56abb4a78fa125e391989782ae0f
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://homeplan-us.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 17 Feb 2023 14:09:04 GMT
expires: Sat, 17 Feb 2024 14:09:04 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 16 Feb 2023 09:59:37 GMT
content-type: text/css
vary: Accept-Encoding
age: 567480
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
apis.google.com/js/platform.js
200 OK 21 kB URL HTTP/2 apis.google.com/js/platform.js
IP
File type ASCII text, with very long lines (1429)
Hash 2354fa28c58e16af89e7da6224aeca93
6bd3430a81730ed77c5d53f5406ddb40306ecabd
dc35ae752b7be035bd3a3bd4ae205e41afce5fa8f88e1bfe0e9524610df10f3b
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://homeplan-us.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20950
date: Fri, 24 Feb 2023 03:47:04 GMT
expires: Fri, 24 Feb 2023 03:47:04 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "03884666a30c671f"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
resources.blogblog.com/img/icon18_edit_allbkg.gif
200 OK 162 B URL HTTP/2 resources.blogblog.com/img/icon18_edit_allbkg.gif
IP
File type GIF image data, version 89a, 18 x 18\012- data
Hash c991641178ff05adf0d004298b5eafa9
d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
GET /img/icon18_edit_allbkg.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://homeplan-us.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 162
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Feb 2023 19:58:21 GMT
expires: Thu, 02 Mar 2023 19:58:21 GMT
cache-control: public, max-age=604800
last-modified: Thu, 23 Feb 2023 05:52:11 GMT
content-type: image/gif
age: 28123
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
geoloc16.geovisite.com/private/geoglobe.js?compte=862460424608
200 OK 12 kB URL HTTP/1.1 geoloc16.geovisite.com/private/geoglobe.js?compte=862460424608
IP
File type ASCII text, with very long lines (957)
Hash 0a9abe1311d9facf0a8f1fad592367cf
0c2dec149d7c48c27aa4931272c2f97c3e860845
b175de2661227a9e29737300678655c70c9c26c378d74000476e3aae1907b21c
GET /private/geoglobe.js?compte=862460424608 HTTP/1.1
Host: geoloc16.geovisite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://homeplan-us.blogspot.com/
HTTP/1.1 200 OK
Date: Fri, 24 Feb 2023 03:47:04 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips
X-Powered-By: PHP/5.4.16
Pragma: no-cache
Expires: Tue, 9 May 2000 11:11:11 GMT
p3p: CP="NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM"
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
www.blogger.com/static/v1/widgets/3455050996-widgets.js
200 OK 157 kB URL HTTP/2 www.blogger.com/static/v1/widgets/3455050996-widgets.js
IP
File type ASCII text, with very long lines (2221)
Size 157 kB (157235 bytes)
Hash e6ce13a1ababdfe296856b162daa4161
3891fe26727eb0b1f678ce46b84fc15183b0976d
8949bc9ccc884e72a4e01641de6d291b7a41110106c790b1ed95332a58dacfad
GET /static/v1/widgets/3455050996-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://homeplan-us.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 157235
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Feb 2023 02:09:57 GMT
expires: Fri, 23 Feb 2024 02:09:57 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 23 Feb 2023 01:53:28 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 92227
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.AMZ27oQJoUI.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/cb=gapi.loaded_0?le=scs
200 OK 61 kB URL HTTP/2 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.AMZ27oQJoUI.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/cb=gapi.loaded_0?le=scs
IP
File type ASCII text, with very long lines (1448)
Hash 62f98a42acaa85f40e228f65e5ee2361
a41c1755a6a2708340b74638f11ebdeed8e977db
54acbd2f18406888cbe8ee3fc76b512081c7c1c0102a4b1f7eef6cd11fc60f15
GET /_/scs/abc-static/_/js/k=gapi.lb.en.AMZ27oQJoUI.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://homeplan-us.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 60741
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
access-control-allow-origin: *
date: Thu, 23 Feb 2023 22:33:50 GMT
expires: Fri, 23 Feb 2024 22:33:50 GMT
cache-control: public, max-age=31536000
age: 18794
last-modified: Sat, 07 Jan 2023 15:19:07 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/img/share_buttons_20_3.png
200 OK 5.1 kB URL HTTP/2 www.blogger.com/img/share_buttons_20_3.png
IP
File type PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash ad9999106d5f550920b586e8e1704e5a
93fd02c51166402a41f96509cd0ca3fb917877dd
3829a5b2ade7cfc416c80b8f3df71e49e68672875f025d525223978f5cee3fd3
GET /img/share_buttons_20_3.png HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 5080
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 17 Feb 2023 14:12:34 GMT
expires: Fri, 24 Feb 2023 14:12:34 GMT
cache-control: public, max-age=604800
last-modified: Fri, 17 Feb 2023 00:56:21 GMT
content-type: image/png
age: 567270
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
200 OK 67 B URL HTTP/1.1 pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP
Hash 9bbc3ca32ec951a484589ce0e6b4db73
753d6f6183b33b2dee5dde2208fca91c17f5bb13
b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://homeplan-us.blogspot.com/
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 0
Date: Thu, 23 Feb 2023 15:19:13 GMT
Expires: Thu, 09 Mar 2023 15:19:13 GMT
Cache-Control: public, max-age=1209600
Age: 44871
ETag: 13036835877489095579
Content-Type: text/javascript; charset=UTF-8
Vary: Accept-Encoding
www.mynewcounter.com/services/wcounter/wcounter.php?s=9A164B04FDF324C452D1AECB4D7C4C5407165928F524A54A750E21C09EAC40B5C94B7AA31BA02FBEB77970
301 Moved Permanently 356 B URL HTTP/1.1 www.mynewcounter.com/services/wcounter/wcounter.php?s=9A164B04FDF324C452D1AECB4D7C4C5407165928F524A54A750E21C09EAC40B5C94B7AA31BA02FBEB77970
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 9ce94f99f339c3f7ac68fdc6eeae7d4b
0bfc5c7f1dd2050eeaabef6b2425bb0fbbb79be4
f49dbf0063b426496b0f0005c61d598dffc04a10aaf0a6f8b77d2cfcc6a65116
GET /services/wcounter/wcounter.php?s=9A164B04FDF324C452D1AECB4D7C4C5407165928F524A54A750E21C09EAC40B5C94B7AA31BA02FBEB77970 HTTP/1.1
Host: www.mynewcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://homeplan-us.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Fri, 24 Feb 2023 03:47:04 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://www.mynewcounter.com/services/wcounter/wcounter.php?s=9A164B04FDF324C452D1AECB4D7C4C5407165928F524A54A750E21C09EAC40B5C94B7AA31BA02FBEB77970
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zp6o6iQPxaGw5mEwYaGYyd%2F%2FWJ58azHanTswUeh9UuE4h4oHNoJtxay8HBrZv1wW6ANywJaIpfqy2Q0S7DNo1UhrN78DWfvm%2BnhjU2TUtBgpb8ONbV3lciUhnQu2cvGz%2Bt18o0s38Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 79e537c15ff9b517-OSL
alt-svc: h2=":443"; ma=60
3.bp.blogspot.com/_KZYjBtEY_rU/TJlhU3qwXFI/AAAAAAAAFQg/dAcm3hdcW3o/w72-h72-p-k-no-nu/plano-triangular-triangulo-angulo.jpg
200 OK 2.4 kB URL HTTP/1.1 3.bp.blogspot.com/_KZYjBtEY_rU/TJlhU3qwXFI/AAAAAAAAFQg/dAcm3hdcW3o/w72-h72-p-k-no-nu/plano-triangular-triangulo-angulo.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 024eec9142f1bbb9e2eef8bdc583ea08
02b4d600e2cc6e133459c821e3b5a022ecd969fb
e1b8fc189d8dbc82c4ed8080a2f4b85b67370706a9b6980ec3ff23707e326cca
GET /_KZYjBtEY_rU/TJlhU3qwXFI/AAAAAAAAFQg/dAcm3hdcW3o/w72-h72-p-k-no-nu/plano-triangular-triangulo-angulo.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://homeplan-us.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="plano-triangular-triangulo-angulo.jpg"
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 2371
X-XSS-Protection: 0
Date: Fri, 24 Feb 2023 03:47:04 GMT
Expires: Fri, 24 Feb 2023 14:06:05 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v22db"
Content-Type: image/jpeg
Vary: Origin
Age: 0
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b4b981fda2327f5c5f37616ee7af87d6
be6b87d2cea83786fda4f8b8ef811292a03b0994
70e485526e62a6ce0a7c0f333932a3b05b92abe332cc34316929c7f84cb177f7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Feb 2023 03:47:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
3.bp.blogspot.com/_KZYjBtEY_rU/TNtALjM5GlI/AAAAAAAAFbg/zRnjkbqtB1M/w72-h72-p-k-no-nu/planos-de-casas-victorianas.gif
200 OK 1.7 kB URL HTTP/1.1 3.bp.blogspot.com/_KZYjBtEY_rU/TNtALjM5GlI/AAAAAAAAFbg/zRnjkbqtB1M/w72-h72-p-k-no-nu/planos-de-casas-victorianas.gif
IP
File type GIF image data, version 89a, 72 x 72\012- data
Hash 764461b00351e419263dab280cecdf69
2e10c9fdeb3f60d26d42ba163d44fa865b5e8f69
6a6d094c5bd9d396c0c88072daa1a003d1f7347c59dad0df7661e532008c26f9
GET /_KZYjBtEY_rU/TNtALjM5GlI/AAAAAAAAFbg/zRnjkbqtB1M/w72-h72-p-k-no-nu/planos-de-casas-victorianas.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://homeplan-us.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v2052"
Expires: Sat, 25 Feb 2023 03:47:04 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="planos-de-casas-victorianas.gif"
Content-Type: image/gif
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 24 Feb 2023 03:47:04 GMT
Server: fife
Content-Length: 1672
X-XSS-Protection: 0
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d5a81909f9ba52a4b5b4beca7189f10a
216a773aef7239d68c979f6c24013a31f085c779
79799853ac50d2c9e10b8cfab4a57150b087403209006e166af67164c2630de6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Feb 2023 03:47:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
2.bp.blogspot.com/_KZYjBtEY_rU/Sp_RJyQFaQI/AAAAAAAACG8/drepEyr5T2k/w72-h72-p-k-no-nu/plano-de-casa-52m2-3dormitorios.jpg
200 OK 3.4 kB URL HTTP/1.1 2.bp.blogspot.com/_KZYjBtEY_rU/Sp_RJyQFaQI/AAAAAAAACG8/drepEyr5T2k/w72-h72-p-k-no-nu/plano-de-casa-52m2-3dormitorios.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 4683a797b1ee0314fe986b141e9faa53
76fd6f2c07cd1dea15b28081499e2976ccacd7c9
3aa95f942e54f5102fafde3a495730199ae153b58dd016502add6818d0aa7349
GET /_KZYjBtEY_rU/Sp_RJyQFaQI/AAAAAAAACG8/drepEyr5T2k/w72-h72-p-k-no-nu/plano-de-casa-52m2-3dormitorios.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://homeplan-us.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v86f"
Expires: Sat, 25 Feb 2023 03:47:04 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="plano-de-casa-52m2-3dormitorios.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 24 Feb 2023 03:47:04 GMT
Server: fife
Content-Length: 3433
X-XSS-Protection: 0
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b4b981fda2327f5c5f37616ee7af87d6
be6b87d2cea83786fda4f8b8ef811292a03b0994
70e485526e62a6ce0a7c0f333932a3b05b92abe332cc34316929c7f84cb177f7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Feb 2023 03:47:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
2.bp.blogspot.com/_KZYjBtEY_rU/Sq2tyuAUbhI/AAAAAAAACZs/LHO4Gre9oc0/w72-h72-p-k-no-nu/planos-de-casas-132metros-3dormitorios.jpg
200 OK 4.3 kB URL HTTP/1.1 2.bp.blogspot.com/_KZYjBtEY_rU/Sq2tyuAUbhI/AAAAAAAACZs/LHO4Gre9oc0/w72-h72-p-k-no-nu/planos-de-casas-132metros-3dormitorios.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 15aa6ce2b4aaa7f24df0ac6239ee070b
b37e1ead98dd6c329019e9be2c3d0d8cbafc3e32
7006c2d2cc075dddc1e0ebce3530bced633dcc8bafc0d5855f37589a331e9718
GET /_KZYjBtEY_rU/Sq2tyuAUbhI/AAAAAAAACZs/LHO4Gre9oc0/w72-h72-p-k-no-nu/planos-de-casas-132metros-3dormitorios.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://homeplan-us.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v99b"
Expires: Sat, 25 Feb 2023 03:47:04 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="planos-de-casas-132metros-3dormitorios.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 24 Feb 2023 03:47:04 GMT
Server: fife
Content-Length: 4348
X-XSS-Protection: 0
1.bp.blogspot.com/_KZYjBtEY_rU/TOACB0LR0nI/AAAAAAAAFcE/NhMHohNtgTk/w72-h72-p-k-no-nu/planos-para-construir-departamentos.jpg
200 OK 3.2 kB URL HTTP/1.1 1.bp.blogspot.com/_KZYjBtEY_rU/TOACB0LR0nI/AAAAAAAAFcE/NhMHohNtgTk/w72-h72-p-k-no-nu/planos-para-construir-departamentos.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 575a11f7b4ac17b0ebc00543f3d0bf99
8106b4d75d158a250d37a8203883f5fa60e36141
645f186febece55305025243efef8f0b66d7f9b461b567fd62321eff87b5a438
GET /_KZYjBtEY_rU/TOACB0LR0nI/AAAAAAAAFcE/NhMHohNtgTk/w72-h72-p-k-no-nu/planos-para-construir-departamentos.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://homeplan-us.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v15c1"
Expires: Sat, 25 Feb 2023 03:47:04 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="planos-para-construir-departamentos.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 24 Feb 2023 03:47:04 GMT
Server: fife
Content-Length: 3177
X-XSS-Protection: 0
3.bp.blogspot.com/_KZYjBtEY_rU/Si_SZm_L7_I/AAAAAAAABV0/TvCjhbGU-Vg/s400/departamento_de_un_dormitorio.gif
200 OK 34 kB URL HTTP/1.1 3.bp.blogspot.com/_KZYjBtEY_rU/Si_SZm_L7_I/AAAAAAAABV0/TvCjhbGU-Vg/s400/departamento_de_un_dormitorio.gif
IP
File type GIF image data, version 89a, 400 x 299\012- data
Hash 9eada9f57ff6d98f99f221b72a244e3f
44510d91118a217249fc5a1a32ad0b5ee6f24aae
b93991a9902aaf82dfd35ae5770cf53d14060d2a4c5761cf671faa6f69c9d18a
GET /_KZYjBtEY_rU/Si_SZm_L7_I/AAAAAAAABV0/TvCjhbGU-Vg/s400/departamento_de_un_dormitorio.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://homeplan-us.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v20ac"
Expires: Sat, 25 Feb 2023 03:47:04 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="departamento_de_un_dormitorio.gif"
Content-Type: image/gif
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 24 Feb 2023 03:47:04 GMT
Server: fife
Content-Length: 33863
X-XSS-Protection: 0
3.bp.blogspot.com/-ypHd1ehje3c/ToMz89qTxSI/AAAAAAAAGSY/lXXwEocJttk/w72-h72-p-k-no-nu/planos-para-edificio-con-garajes-en-semisotano.jpg
200 OK 4.0 kB URL HTTP/1.1 3.bp.blogspot.com/-ypHd1ehje3c/ToMz89qTxSI/AAAAAAAAGSY/lXXwEocJttk/w72-h72-p-k-no-nu/planos-para-edificio-con-garajes-en-semisotano.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash d043f8476c948450189b86696443cc06
bfc958ccf83f915e2c25cb118b84d6fc49e9c53b
6de7897cb8c0ef8e44b3dee9e62e92386ee5cfa9a1020c462e4d7afafaed5598
GET /-ypHd1ehje3c/ToMz89qTxSI/AAAAAAAAGSY/lXXwEocJttk/w72-h72-p-k-no-nu/planos-para-edificio-con-garajes-en-semisotano.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://homeplan-us.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1926"
Expires: Sat, 25 Feb 2023 03:47:04 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="planos-para-edificio-con-garajes-en-semisotano.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 24 Feb 2023 03:47:04 GMT
Server: fife
Content-Length: 3997
X-XSS-Protection: 0
3.bp.blogspot.com/_KZYjBtEY_rU/Si_SZ3BqiAI/AAAAAAAABV8/ESpt64T82aw/s400/departamento_de_dos_dormitorios.gif
200 OK 40 kB URL HTTP/1.1 3.bp.blogspot.com/_KZYjBtEY_rU/Si_SZ3BqiAI/AAAAAAAABV8/ESpt64T82aw/s400/departamento_de_dos_dormitorios.gif
IP
File type GIF image data, version 89a, 400 x 301\012- data
Hash e963709ff50ac4fd267844db0d960497
22dc161e34177e4d9a772ff0f40078689d9cac92
fb55c735fd6ca33810fedc29cfbff9a8b6463a00c6a48c505a8d462b70211718
GET /_KZYjBtEY_rU/Si_SZ3BqiAI/AAAAAAAABV8/ESpt64T82aw/s400/departamento_de_dos_dormitorios.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://homeplan-us.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v2072"
Expires: Sat, 25 Feb 2023 03:47:04 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="departamento_de_dos_dormitorios.gif"
Content-Type: image/gif
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 24 Feb 2023 03:47:04 GMT
Server: fife
Content-Length: 40275
X-XSS-Protection: 0
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Content-Type, Last-Modified, Backoff, Alert, Cache-Control, ETag, Expires, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 24 Feb 2023 02:51:26 GMT
age: 3338
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
my.blueadvertise.com/__adserver/insertions/show.js
404 Not Found 196 B URL HTTP/1.1 my.blueadvertise.com/__adserver/insertions/show.js
IP
ASN #133618 Trellian Pty. Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
Analyzer Verdict Alert fortinet Malware
GET /__adserver/insertions/show.js HTTP/1.1
Host: my.blueadvertise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://homeplan-us.blogspot.com/
HTTP/1.1 404 Not Found
date: Fri, 24 Feb 2023 03:47:04 GMT
server: Apache/2.4.38 (Debian)
content-length: 196
content-type: text/html; charset=iso-8859-1
connection: close
2.bp.blogspot.com/_KZYjBtEY_rU/TNWI4w5vvFI/AAAAAAAAFZU/Gsuik3nrWhI/w72-h72-p-k-no-nu/planos-casa-heptagonal.jpg
200 OK 3.4 kB URL HTTP/1.1 2.bp.blogspot.com/_KZYjBtEY_rU/TNWI4w5vvFI/AAAAAAAAFZU/Gsuik3nrWhI/w72-h72-p-k-no-nu/planos-casa-heptagonal.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 3ddd90059cb1dcbd8c546be241c08d97
8b9cce1e36947df8cc544a60b745eebc75e3c7d8
bd960f261d09ee8d91e2cfbfec04ac80573123e50f1bd21cf0da7e7e3c84d42e
GET /_KZYjBtEY_rU/TNWI4w5vvFI/AAAAAAAAFZU/Gsuik3nrWhI/w72-h72-p-k-no-nu/planos-casa-heptagonal.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://homeplan-us.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v24a3"
Expires: Sat, 25 Feb 2023 03:47:04 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="planos-casa-heptagonal.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 24 Feb 2023 03:47:04 GMT
Server: fife
Content-Length: 3424
X-XSS-Protection: 0
1.bp.blogspot.com/-Y1bCp-_cGYE/TnqoLIWeyrI/AAAAAAAAGRw/e759Zg4dZGo/w72-h72-p-k-no-nu/planos-de-edificio-multiuso.jpg
200 OK 3.7 kB URL HTTP/1.1 1.bp.blogspot.com/-Y1bCp-_cGYE/TnqoLIWeyrI/AAAAAAAAGRw/e759Zg4dZGo/w72-h72-p-k-no-nu/planos-de-edificio-multiuso.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 22bef6e3ccb9d0e14d462e0ca1b115b3
867a5a4fde6ee896ccaea45cfb1b72b7c7fd94f8
5d9dc338ac8804a95905735d6ca92515a764654faf8b164ada55007c17729428
GET /-Y1bCp-_cGYE/TnqoLIWeyrI/AAAAAAAAGRw/e759Zg4dZGo/w72-h72-p-k-no-nu/planos-de-edificio-multiuso.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://homeplan-us.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v191c"
Expires: Sat, 25 Feb 2023 03:47:04 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="planos-de-edificio-multiuso.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 24 Feb 2023 03:47:04 GMT
Server: fife
Content-Length: 3701
X-XSS-Protection: 0
1.bp.blogspot.com/_KZYjBtEY_rU/S6uBJN0j_9I/AAAAAAAAEPg/uZgZus2Maf4/w72-h72-p-k-no-nu/planos3d.jpg
200 OK 3.5 kB URL HTTP/1.1 1.bp.blogspot.com/_KZYjBtEY_rU/S6uBJN0j_9I/AAAAAAAAEPg/uZgZus2Maf4/w72-h72-p-k-no-nu/planos3d.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 2b47b8e6197af2f37d801fdcf4ae21b3
007afb12e183cb5cad96cfb5d80d2498cb22afa2
d8eb4731183ea1850913c6bc2c8791dd5d8e5ad7ad50c0e7d03fc8fbfbb5905e
GET /_KZYjBtEY_rU/S6uBJN0j_9I/AAAAAAAAEPg/uZgZus2Maf4/w72-h72-p-k-no-nu/planos3d.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://homeplan-us.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v10f8"
Expires: Sat, 25 Feb 2023 03:47:04 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="planos3d.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 24 Feb 2023 03:47:04 GMT
Server: fife
Content-Length: 3471
X-XSS-Protection: 0
i155.photobucket.com/albums/s282/theviejo/recurso_1_1.jpg
200 OK 4.4 kB URL HTTP/2 i155.photobucket.com/albums/s282/theviejo/recurso_1_1.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 51f93d008cc603a20f298017bce3def1
f5dc35bbb2346eb497f69f906a07b5585ba66080
7d799f921b431f811abfe2e846fcc17ad0f9b419cc2ee22a573f203318ca4dc7
GET /albums/s282/theviejo/recurso_1_1.jpg HTTP/1.1
Host: i155.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://homeplan-us.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/webp
content-length: 4422
date: Fri, 24 Feb 2023 03:47:04 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="recurso_1_1.webp"
content-security-policy: script-src 'none'
expires: Sat, 24 Feb 2024 03:47:04 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f83338-6e3574e641dc58de7d8a3cb5
x-request-id: TbIeU3ND9kGlXpHCfQ0Wp
x-cache: Miss from cloudfront
via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: AFvMO8N_Ov8gOdiJLCMbDMgnrfgzs3bky3xsm1wsCyBx9StD0OFa9g==
vary: Accept, Origin
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4aaa1f1be68ba53b441e577dcbf8b7c1
618b2e62b7f2feb82093a3706573e18ff9f69827
8d3978b35fd96458b8fff71c9dbb47ab616dfd49d669027fd6c5a52a4e9bafa0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8D3978B35FD96458B8FFF71C9DBB47AB616DFD49D669027FD6C5A52A4E9BAFA0"
Last-Modified: Wed, 22 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19058
Expires: Fri, 24 Feb 2023 09:04:43 GMT
Date: Fri, 24 Feb 2023 03:47:05 GMT
Connection: keep-alive
geoloc16.geovisite.com/private/geoglobe_iframe_css_64.php?compte=862460424608&fc=000000&p=&tp=Click%20for%20detail&skin=0&anim=1&f=Verdana&s=10&ca=00FF00&ci=FF0000&onl=Online&ofl=undefined&ttot=Total&cbg=FFFFFF&cbg2=000000&cbg3=undefined&cbg4=undefined&b=1&dn=0&wci=&wcc=&wcn=&bgskin=16&ts=150
200 OK 53 kB URL HTTP/1.1 geoloc16.geovisite.com/private/geoglobe_iframe_css_64.php?compte=862460424608&fc=000000&p=&tp=Click%20for%20detail&skin=0&anim=1&f=Verdana&s=10&ca=00FF00&ci=FF0000&onl=Online&ofl=undefined&ttot=Total&cbg=FFFFFF&cbg2=000000&cbg3=undefined&cbg4=undefined&b=1&dn=0&wci=&wcc=&wcn=&bgskin=16&ts=150
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (24662)
Hash 4ca742361986224b115880fa69b5c705
a11582e2b5407c95c5c0943f3b8d1b05cff8f1a2
c1d882f54a0aee0b9a71676448c39be1f3092c35b5c2ac5beffc4907e28c6fb9
GET /private/geoglobe_iframe_css_64.php?compte=862460424608&fc=000000&p=&tp=Click%20for%20detail&skin=0&anim=1&f=Verdana&s=10&ca=00FF00&ci=FF0000&onl=Online&ofl=undefined&ttot=Total&cbg=FFFFFF&cbg2=000000&cbg3=undefined&cbg4=undefined&b=1&dn=0&wci=&wcc=&wcn=&bgskin=16&ts=150 HTTP/1.1
Host: geoloc16.geovisite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://homeplan-us.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Fri, 24 Feb 2023 03:47:04 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips
X-Powered-By: PHP/5.4.16
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
4.bp.blogspot.com/_KZYjBtEY_rU/TPbAZ6ocerI/AAAAAAAAFfM/kAF25fROwzE/w72-h72-p-k-no-nu/plano-casa-gratis-85m2.gif
200 OK 2.2 kB URL HTTP/1.1 4.bp.blogspot.com/_KZYjBtEY_rU/TPbAZ6ocerI/AAAAAAAAFfM/kAF25fROwzE/w72-h72-p-k-no-nu/plano-casa-gratis-85m2.gif
IP
File type GIF image data, version 89a, 72 x 72\012- data
Hash 73fc6379ca795a786aceea2eca86df89
10d6274f102dd387811050540bea802216a13aec
38f5274b8c8a7823d31a4cbfd805a38495c81179bf9aadfb733108267a94da2a
GET /_KZYjBtEY_rU/TPbAZ6ocerI/AAAAAAAAFfM/kAF25fROwzE/w72-h72-p-k-no-nu/plano-casa-gratis-85m2.gif HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://homeplan-us.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v20c5"
Expires: Sat, 25 Feb 2023 03:47:05 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="plano-casa-gratis-85m2.gif"
Content-Type: image/gif
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 24 Feb 2023 03:47:05 GMT
Server: fife
Content-Length: 2191
X-XSS-Protection: 0
www.blogger.com/dyn-css/authorization.css?targetBlogID=6721080126920848754&zx=c45b8881-88cf-48d7-97aa-e4c8d6a95f71
200 OK 21 B URL HTTP/2 www.blogger.com/dyn-css/authorization.css?targetBlogID=6721080126920848754&zx=c45b8881-88cf-48d7-97aa-e4c8d6a95f71
IP
File type very short file (no magic)
Hash a62e4d501434033d5d177e67d3aafdd0
34f7300c9ed47334cf10826d57af785321e3138b
b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522
GET /dyn-css/authorization.css?targetBlogID=6721080126920848754&zx=c45b8881-88cf-48d7-97aa-e4c8d6a95f71 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://homeplan-us.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 24 Feb 2023 03:47:05 GMT
last-modified: Fri, 24 Feb 2023 03:47:05 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/navbar.g?targetBlogID=6721080126920848754&blogName=home+plan+-+PLANOS+DE+CASAS++Y+DEPART...&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://homeplan-us.blogspot.com/search&blogLocale=en&v=2&homepageUrl=http://homeplan-us.blogspot.com/&vt=2967836989439648742&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.AMZ27oQJoUI.O%2Fd%3D1%2Frs%3DAHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g%2Fm%3D__features__
200 OK 2.6 kB URL HTTP/2 www.blogger.com/navbar.g?targetBlogID=6721080126920848754&blogName=home+plan+-+PLANOS+DE+CASAS++Y+DEPART...&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://homeplan-us.blogspot.com/search&blogLocale=en&v=2&homepageUrl=http://homeplan-us.blogspot.com/&vt=2967836989439648742&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.AMZ27oQJoUI.O%2Fd%3D1%2Frs%3DAHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g%2Fm%3D__features__
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3172)
Hash c1e0834a7aae495f3da848c08cddccf0
dc7130904216979d8b043338776fc233b87dd485
115583c05f130c72dba62185a2ec40e9196b435f5a6b53dec2a8d26db9e400d2
GET /navbar.g?targetBlogID=6721080126920848754&blogName=home+plan+-+PLANOS+DE+CASAS++Y+DEPART...&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://homeplan-us.blogspot.com/search&blogLocale=en&v=2&homepageUrl=http://homeplan-us.blogspot.com/&vt=2967836989439648742&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.AMZ27oQJoUI.O%2Fd%3D1%2Frs%3DAHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g%2Fm%3D__features__ HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://homeplan-us.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 24 Feb 2023 03:47:05 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 2592
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: QkUwBbA6P5mL0rfXU2Icfw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 7ZPvoAK3RY066ihOezwgSeZ91pA=
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6c27dc8b124493de1831a83e287d1428
8cbcc7437171c33d06fa025e4c470226a73eeb28
d5eb3bb3fabe6eceeec57988ff6f99fe2fe03c954b12cf8108088a9be4485c29
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Feb 2023 03:47:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D6721080126920848754%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2NjY2NjYiByNjY2NjY2MqByMwMDAwMDAyByNmZmZmZmY6ByM2NjY2NjZCByNjY2NjY2NKByNmZmZmZmZSByNjY2NjY2NaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://homeplan-us.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.AMZ27oQJoUI.O/d%253D1/rs%253DAHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D6721080126920848754%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2NjY2NjYiByNjY2NjY2MqByMwMDAwMDAyByNmZmZmZmY6ByM2NjY2NjZCByNjY2NjY2NKByNmZmZmZmZSByNjY2NjY2NaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://homeplan-us.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.AMZ27oQJoUI.O/d%253D1/rs%253DAHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/m%253D__features__%26bpli%3D1&go=true
302 Found 462 B URL HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D6721080126920848754%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2NjY2NjYiByNjY2NjY2MqByMwMDAwMDAyByNmZmZmZmY6ByM2NjY2NjZCByNjY2NjY2NKByNmZmZmZmZSByNjY2NjY2NaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://homeplan-us.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.AMZ27oQJoUI.O/d%253D1/rs%253DAHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D6721080126920848754%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2NjY2NjYiByNjY2NjY2MqByMwMDAwMDAyByNmZmZmZmY6ByM2NjY2NjZCByNjY2NjY2NKByNmZmZmZmZSByNjY2NjY2NaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://homeplan-us.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.AMZ27oQJoUI.O/d%253D1/rs%253DAHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/m%253D__features__%26bpli%3D1&go=true
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (503)
Hash 6b7532cf7ea1849a35bbc99e3115b457
91d336cd1cbcd8ffd74c71abf053a5e58db02250
a6207574cef4f18c40fa3d5eab8002bb99956a58f9bcb2fc8b7ae1b9e8ac4703
GET /ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D6721080126920848754%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2NjY2NjYiByNjY2NjY2MqByMwMDAwMDAyByNmZmZmZmY6ByM2NjY2NjZCByNjY2NjY2NKByNmZmZmZmZSByNjY2NjY2NaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://homeplan-us.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.AMZ27oQJoUI.O/d%253D1/rs%253DAHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D6721080126920848754%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2NjY2NjYiByNjY2NjY2MqByMwMDAwMDAyByNmZmZmZmY6ByM2NjY2NjZCByNjY2NjY2NKByNmZmZmZmZSByNjY2NjY2NaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://homeplan-us.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.AMZ27oQJoUI.O/d%253D1/rs%253DAHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/m%253D__features__%26bpli%3D1&go=true HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://homeplan-us.blogspot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 24 Feb 2023 03:47:05 GMT
location: https://www.blogger.com/followers.g?blogID=6721080126920848754&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2NjY2NjYiByNjY2NjY2MqByMwMDAwMDAyByNmZmZmZmY6ByM2NjY2NjZCByNjY2NjY2NKByNmZmZmZmZSByNjY2NjY2NaC3RyYW5zcGFyZW50&pageSize=21&origin=http%3A%2F%2Fhomeplan-us.blogspot.com%2F&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.AMZ27oQJoUI.O%2Fd%3D1%2Frs%3DAHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g%2Fm%3D__features__&bpli=1
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-security-policy: script-src 'nonce-GE58YUHLlJg6Zyec9cXbIg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 462
server: GSE
set-cookie: __Host-GAPS=1:PeCX3YpnhtH_DDklTfg4vHfZPSw1nA:gUmwLfDeHjQb4GaE;Path=/;Expires=Sun, 23-Feb-2025 03:47:05 GMT;Secure;HttpOnly;Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 4fbcbe462dc853c991feb5d41e7cb9bb
8c8de461e9300d5170dd84a0b2478ae7bf3d5005
be6750f1ed38d6d4824b9df8eeda120d21cedcde7801a357ce91acc71b20bdfc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Feb 2023 03:47:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 4fbcbe462dc853c991feb5d41e7cb9bb
8c8de461e9300d5170dd84a0b2478ae7bf3d5005
be6750f1ed38d6d4824b9df8eeda120d21cedcde7801a357ce91acc71b20bdfc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Feb 2023 03:47:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cd04d923e6b3cbd7cac3c56d18ca9016
7d3205fb454124635afcbfcf2265ce504c778ef1
fc857fad800eb3c6f2a3f28007b1b81f2a95e4968d376f47238a681f9c958475
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC857FAD800EB3C6F2A3F28007B1B81F2A95E4968D376F47238A681F9C958475"
Last-Modified: Wed, 22 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14869
Expires: Fri, 24 Feb 2023 07:54:55 GMT
Date: Fri, 24 Feb 2023 03:47:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cd04d923e6b3cbd7cac3c56d18ca9016
7d3205fb454124635afcbfcf2265ce504c778ef1
fc857fad800eb3c6f2a3f28007b1b81f2a95e4968d376f47238a681f9c958475
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC857FAD800EB3C6F2A3F28007B1B81F2A95E4968D376F47238A681F9C958475"
Last-Modified: Wed, 22 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14869
Expires: Fri, 24 Feb 2023 07:54:55 GMT
Date: Fri, 24 Feb 2023 03:47:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cd04d923e6b3cbd7cac3c56d18ca9016
7d3205fb454124635afcbfcf2265ce504c778ef1
fc857fad800eb3c6f2a3f28007b1b81f2a95e4968d376f47238a681f9c958475
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC857FAD800EB3C6F2A3F28007B1B81F2A95E4968D376F47238A681F9C958475"
Last-Modified: Wed, 22 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14869
Expires: Fri, 24 Feb 2023 07:54:55 GMT
Date: Fri, 24 Feb 2023 03:47:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cd04d923e6b3cbd7cac3c56d18ca9016
7d3205fb454124635afcbfcf2265ce504c778ef1
fc857fad800eb3c6f2a3f28007b1b81f2a95e4968d376f47238a681f9c958475
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC857FAD800EB3C6F2A3F28007B1B81F2A95E4968D376F47238A681F9C958475"
Last-Modified: Wed, 22 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14869
Expires: Fri, 24 Feb 2023 07:54:55 GMT
Date: Fri, 24 Feb 2023 03:47:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cd04d923e6b3cbd7cac3c56d18ca9016
7d3205fb454124635afcbfcf2265ce504c778ef1
fc857fad800eb3c6f2a3f28007b1b81f2a95e4968d376f47238a681f9c958475
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC857FAD800EB3C6F2A3F28007B1B81F2A95E4968D376F47238A681F9C958475"
Last-Modified: Wed, 22 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14869
Expires: Fri, 24 Feb 2023 07:54:55 GMT
Date: Fri, 24 Feb 2023 03:47:06 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb97e8f2e-6da0-4f8b-b12c-1af676e3e4da.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb97e8f2e-6da0-4f8b-b12c-1af676e3e4da.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2a5f3d376fe6a3a78a5d1fe136f962fb
3e9b03cc296e954d63526a4e7e75beea3130fc3b
c8cf4f1c0352102764247e4dc5a2076921e0eaa18bfd110e5b0b97a55c706690
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb97e8f2e-6da0-4f8b-b12c-1af676e3e4da.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9093
x-amzn-requestid: 3fd9f8c8-cf10-4222-a2cc-5f18ff7b2e9f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Az9D3HqmoAMFeBQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f7dbb2-352315613cc0c2bc7eb28e05;Sampled=0
x-amzn-remapped-date: Thu, 23 Feb 2023 21:33:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Mn6TjisRzQNNHhkTMjHjsiOQosH9A5TZVtJypfHstcjuAG-DLUbIag==
via: 1.1 23206a1c229d8877bdd053c4b05f9d12.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Feb 2023 21:34:54 GMT
age: 22332
etag: "3e9b03cc296e954d63526a4e7e75beea3130fc3b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99566e26-5cf6-488d-a6e5-b530ba2d6abd.jpeg
200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99566e26-5cf6-488d-a6e5-b530ba2d6abd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 24a0eb4167db217d5a1f4e43e7e8ec59
6f68ec9885f665154245aa488b3317b1fc4fe5df
f9b4afbe9c3d7f20cbd6a9be972c25e7c9d4c0abbee67c312b7f77e04cb43731
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99566e26-5cf6-488d-a6e5-b530ba2d6abd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5437
x-amzn-requestid: 96c456f0-9a0e-402e-996b-37d6a3396ec7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Az9IkGpQoAMFhMQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f7dbd0-2229ed167c3d2be8237d0b6b;Sampled=0
x-amzn-remapped-date: Thu, 23 Feb 2023 21:34:08 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: BrFEMFJgc529-Y7Vpt6jlsr8mBuQClRAy1l-pV31A87UsVU2-UlCvw==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Feb 2023 22:22:41 GMT
age: 19465
etag: "6f68ec9885f665154245aa488b3317b1fc4fe5df"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60f1f3ff-2b4c-445e-ae15-cc9bea5b8242.jpeg
200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60f1f3ff-2b4c-445e-ae15-cc9bea5b8242.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 72e7f106688b58f6d0eefabeee225a2f
a278c194fed93f4c3f9bd0f527325f2d2a634198
4c08aa5efad72eeff4f32cd7d3c79b14dd2f24e92c6cb3b19f1a371bba019061
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60f1f3ff-2b4c-445e-ae15-cc9bea5b8242.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6282
x-amzn-requestid: 39074e52-a7ac-429b-b003-2ef88e4fb212
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Az9N3GeNIAMFZHg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f7dbf2-0d7bb7b254aab31d211027cb;Sampled=0
x-amzn-remapped-date: Thu, 23 Feb 2023 21:34:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YjR6KGyH5zRGC4rmhFD_L9F9ORpRQ6mJOhH_4SJREmFSKdDtC7oQRw==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Feb 2023 21:53:22 GMT
age: 21224
etag: "a278c194fed93f4c3f9bd0f527325f2d2a634198"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F852f08d0-4a83-4677-b377-76b142ad7809.jpeg
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F852f08d0-4a83-4677-b377-76b142ad7809.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 39c96c987141e7fd26794720cb5e404e
1f653fa921331acfe500fba81419fa493087ff0b
d208290a18dea1dd2197b29b14cc5a2579ad6037bb09b58cb3df6c4da51c272a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F852f08d0-4a83-4677-b377-76b142ad7809.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9030
x-amzn-requestid: b58cb7ae-a7fb-4a65-9c13-2840a2004289
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Az9JnGA9oAMF6YQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f7dbd6-5a548466075d66e10fe6f3b3;Sampled=0
x-amzn-remapped-date: Thu, 23 Feb 2023 21:34:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Q6S0LDEUkXL-EIl2WVK-tJJJWo3U5NAlObE8vI--ais0g6vSNeRNSA==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Feb 2023 22:26:17 GMT
age: 19249
etag: "1f653fa921331acfe500fba81419fa493087ff0b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbaa41846-2966-47c9-ac1f-845e6507fe21.jpeg
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbaa41846-2966-47c9-ac1f-845e6507fe21.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d434142b05e07062707138da8999445e
d4796a582b28b1afcb1d7c8d06d78664a62bc880
0baf0e2b4c5975bac7d8543156bdb412cb8a703a768c765a90eedb95fb8ab1ec
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbaa41846-2966-47c9-ac1f-845e6507fe21.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6979
x-amzn-requestid: 19ffbbf5-7950-405e-b558-43c6c011785c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Az9M7FrMIAMFzCg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f7dbec-7c65361d479d30c129f9d1d0;Sampled=0
x-amzn-remapped-date: Thu, 23 Feb 2023 21:34:36 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: fTd1tIJwblI78XgGewWZ-cmhWhuzELJ9aSKMgTOpTAys_Mehu5mejQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Feb 2023 21:34:54 GMT
etag: "d4796a582b28b1afcb1d7c8d06d78664a62bc880"
content-type: image/jpeg
age: 22332
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0ea4a584-48cb-47f9-b1a1-2f7ad3191105.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0ea4a584-48cb-47f9-b1a1-2f7ad3191105.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8e25e8d8dc182454d1977519b9ca1901
9e477e320d6982a734b2d6ac0517cce246173ddf
c4a00609fa03a42e4fc919e89d5ebc0df8718ab5b533952f20fc46332a83c973
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0ea4a584-48cb-47f9-b1a1-2f7ad3191105.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8334
x-amzn-requestid: 9a229987-a649-4d3b-ad76-d6d37b4d82b2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Az9dPFv3oAMFchQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f7dc54-7877c44f45e497c50f21fa02;Sampled=0
x-amzn-remapped-date: Thu, 23 Feb 2023 21:36:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: i7Y9OarXsKFXLTe0LupSY3Bi1TFFJxpf6B46fKHpSDCIDT4EfdA29Q==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 981753271eb5b6d11bc29d52f173a5da.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Feb 2023 22:05:48 GMT
age: 20478
etag: "9e477e320d6982a734b2d6ac0517cce246173ddf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
lh3.googleusercontent.com/p/AF1QipN7kymsmO9ZZ2e6DybQOA7NdIncEy4RvzYyG6uI=s45-c?key=COjM2fGLhN2tdQ
200 OK 5.4 kB URL HTTP/2 lh3.googleusercontent.com/p/AF1QipN7kymsmO9ZZ2e6DybQOA7NdIncEy4RvzYyG6uI=s45-c?key=COjM2fGLhN2tdQ
IP
File type PNG image data, 45 x 45, 8-bit/color RGB, non-interlaced\012- data
Hash 2153ed97f85fab251ee54f1fc10eeb56
9b3c262ca3b425ff612e6eb76b3b73f948e191ec
fa4beb3049421c0e2eaf707f4a64a2ee14bf3ecbe73f3d5c753c88afd5ee89df
GET /p/AF1QipN7kymsmO9ZZ2e6DybQOA7NdIncEy4RvzYyG6uI=s45-c?key=COjM2fGLhN2tdQ HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "va1a7"
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: private, max-age=86400, no-transform
content-disposition: inline;filename="Profile picture.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Fri, 24 Feb 2023 03:47:06 GMT
server: fife
content-length: 5367
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/p/AF1QipPo5dZmATCDDWYFVuWcyJq1ow_fIWZevfKQMTDX=s45-c?key=CNXNgta2q-ffxwE
200 OK 3.9 kB URL HTTP/2 lh3.googleusercontent.com/p/AF1QipPo5dZmATCDDWYFVuWcyJq1ow_fIWZevfKQMTDX=s45-c?key=CNXNgta2q-ffxwE
IP
File type PNG image data, 45 x 45, 8-bit/color RGB, non-interlaced\012- data
Hash 009f5ae7a4a65bbd37e9f6d34655428b
2d0d259d471cda4faf791d3033f9613433128892
54c20a9cf6438816bc46f4ff6ef79246a817d4fe4e8b951d0a7b43406c738863
GET /p/AF1QipPo5dZmATCDDWYFVuWcyJq1ow_fIWZevfKQMTDX=s45-c?key=CNXNgta2q-ffxwE HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v7d"
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: private, max-age=86400, no-transform
content-disposition: inline;filename="Profile picture.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Fri, 24 Feb 2023 03:47:06 GMT
server: fife
content-length: 3887
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 4fbcbe462dc853c991feb5d41e7cb9bb
8c8de461e9300d5170dd84a0b2478ae7bf3d5005
be6750f1ed38d6d4824b9df8eeda120d21cedcde7801a357ce91acc71b20bdfc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Feb 2023 03:47:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
homeplan-us.blogspot.com/favicon.ico
200 OK 412 B URL HTTP/1.1 homeplan-us.blogspot.com/favicon.ico
IP
File type MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel\012- data
Hash 501c61a70f5c41181aa050d9110909ca
5b985d5671a7caf686fdfb1df13488c4407f6c9f
c4aaf001607ee331f6871b4dbbf45942b1e197726714fd106e46d70cc10ee97e
GET /favicon.ico HTTP/1.1
Host: homeplan-us.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://homeplan-us.blogspot.com/2009/06
Cookie: acceptcookie=ok
HTTP/1.1 200 OK
Content-Type: image/x-icon; charset=UTF-8
Expires: Fri, 24 Feb 2023 03:47:07 GMT
Date: Fri, 24 Feb 2023 03:47:07 GMT
Cache-Control: private, max-age=86400
Last-Modified: Sat, 11 Dec 2021 08:02:13 GMT
ETag: W/"79981cd2795bf49c8b0667d32e335d59f7a297f7d96afcfef6276a4775bcf839"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 412
Server: GSE
www.mynewcounter.com/services/wcounter/wcounter.php?s=9A164B04FDF324C452D1AECB4D7C4C5407165928F524A54A750E21C09EAC40B5C94B7AA31BA02FBEB77970
200 OK 0 B URL HTTP/2 www.mynewcounter.com/services/wcounter/wcounter.php?s=9A164B04FDF324C452D1AECB4D7C4C5407165928F524A54A750E21C09EAC40B5C94B7AA31BA02FBEB77970
IP
GET /services/wcounter/wcounter.php?s=9A164B04FDF324C452D1AECB4D7C4C5407165928F524A54A750E21C09EAC40B5C94B7AA31BA02FBEB77970 HTTP/1.1
Host: www.mynewcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://homeplan-us.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 24 Feb 2023 03:47:04 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=n6Qm2JiUNFUycTCfadtNrxEo1brnPqly%2FjvPknFO2fh0JVuDL5V4TMbmLN10nNfmVgLOOElDc9kECMYG1GYBGxXAqqTLJj3bIcA2k6ya%2FMbnvX2WI0GXiM%2FHSokL6z3qbyGeyMX7fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79e537c21836b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
216.58.207.193
188.114.97.1
95.101.11.115
103.224.182.251
54.36.176.112
0.0.0.0