200 OK 41 kB URL User Request GET HTTP/2 IP
Certificate IssuerGoogle Trust Services LLC
Subjectwww.upayki.com
Fingerprint01:6D:B9:EB:6C:59:84:5B:BC:0C:91:DF:0A:E6:C4:AA:1E:A1:4F:71
ValidityThu, 30 Nov 2023 16:25:22 GMT - Wed, 28 Feb 2024 17:16:14 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (45931)
Hash 5c10bcf8ca73fad432ef0ec8faa3bf87
cb40f2b3f3cd0f9fa2ed03e8e0dd417484764ec4
950717e36b3b7dc15dc6c057e2115a05fa715a5b784790dad58a4175e5cd91a0
GET /?m=1 HTTP/1.1
Host: www.upayki.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Fri, 01 Dec 2023 07:05:34 GMT
date: Fri, 01 Dec 2023 07:05:34 GMT
cache-control: private, max-age=0
last-modified: Wed, 29 Nov 2023 09:17:40 GMT
etag: W/"2e88094cf732c474a449ef9b32ba6a53181637f23c2b7a08b6bfd8b3cdac9773"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 40977
server: GSE
X-Firefox-Spdy: h2
www.upayki.com/js/cookienotice.js
200 OK 2.0 kB URL GET HTTP/2 www.upayki.com/js/cookienotice.js
IP
Requested by https://www.upayki.com/?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectwww.upayki.com
Fingerprint01:6D:B9:EB:6C:59:84:5B:BC:0C:91:DF:0A:E6:C4:AA:1E:A1:4F:71
ValidityThu, 30 Nov 2023 16:25:22 GMT - Wed, 28 Feb 2024 17:16:14 GMT
Hash a705132a2174f88e196ec3610d68faa8
3bad57a48d973a678fec600d45933010f6edc659
068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
GET /js/cookienotice.js HTTP/1.1
Host: www.upayki.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upayki.com/?m=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
date: Fri, 01 Dec 2023 07:05:35 GMT
expires: Fri, 08 Dec 2023 07:05:35 GMT
cache-control: public, max-age=604800
last-modified: Thu, 30 Nov 2023 12:55:18 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
200 OK 34 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
IP
Requested by https://www.upayki.com/?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (32077)
Hash 4f252523d4af0b478c810c2547a63e19
5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb
668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404
GET /ajax/libs/jquery/1.12.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upayki.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33951
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:14:46 GMT
expires: Fri, 29 Nov 2024 05:14:46 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 93049
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
apis.google.com/js/platform.js
200 OK 22 kB URL GET HTTP/2 apis.google.com/js/platform.js
IP
Requested by https://www.upayki.com/?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.apis.google.com
Fingerprint06:87:C0:63:02:21:98:02:BD:FC:A0:11:93:E9:3A:9F:51:21:06:D8
ValidityMon, 23 Oct 2023 11:25:10 GMT - Mon, 15 Jan 2024 11:25:09 GMT
File type ASCII text, with very long lines (2664)
Hash fd67324a3d81895bdf76b073089663b1
5abb1b0a36c645085e31830e6647faa790ad4e91
8eaa06f95fa0ac44c2c186f200874f2f3ebc3aaa92412f0d0c096f517d3581d1
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upayki.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-length: 21930
date: Fri, 01 Dec 2023 07:05:35 GMT
expires: Fri, 01 Dec 2023 07:05:35 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "bccfddc1dce4fb76"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
set-cookie: NID=511=eZ8W350kHDBUzj0AieqvkvRjMOHVBJ-6GPyFEkfOBW8Mnfz8k6LlKHWbuwYvsC0t-rBcj7ZaYICphrLlGko6-onm97D9EtxCOgqRWldL9FBPlT_ekuB3I2vxp533GBCZ0Q7goHe9xEGI3YC7KY1-K-g1HBBJINa9rs6bKtWhFTU; expires=Sat, 01-Jun-2024 07:05:35 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/325989852-widgets.js
200 OK 59 kB URL GET HTTP/2 www.blogger.com/static/v1/widgets/325989852-widgets.js
IP
Requested by https://www.upayki.com/?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT
File type ASCII text, with very long lines (2258)
Hash 2aaaea7286ee481cbc12cfd76e10c0cf
6e8576cb84ac125faa0bc0a5fe5508166cc4eed8
4bfa00cdbc7a40f5dad3dfc3a21dada224e61e358e78d7b262bab098bccbc580
GET /static/v1/widgets/325989852-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upayki.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 59316
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 14:08:07 GMT
expires: Fri, 29 Nov 2024 14:08:07 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 29 Nov 2023 05:57:17 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 61048
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
stackpath.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL GET HTTP/3 stackpath.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
Requested by https://www.upayki.com/?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint34:BC:91:5F:B9:EC:32:2C:D9:73:C7:88:C3:6C:FB:77:E7:70:8D:04
ValidityThu, 30 Nov 2023 00:15:17 GMT - Wed, 28 Feb 2024 00:15:16 GMT
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.upayki.com
DNT: 1
Connection: keep-alive
Referer: https://stackpath.bootstrapcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 07:05:35 GMT
content-type: font/woff2
content-length: 77160
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: "af7ae505a9eed503f8b8e6982036873e"
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 10/31/2023 19:08:24
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 752
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 482ff55cba777c4f9d56da14f9d10c93
cdn-cache: HIT
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 82e97b8c9c72b523-OSL
alt-svc: h3=":443"; ma=86400
1.bp.blogspot.com/-eKzYfktRSF8/XcLgmV7s5FI/AAAAAAAAAXg/ueYhg3OJfd4GUy4J_XcDTLqax7f37FmEACLcBGAsYHQ/w680/%25E0%25A6%25AC%25E0%25A6%25BF%25E0%25A6%2595%25E0%25A6%25BE%25E0%25A6%25B6_%25E0%25A6%25B2%25E0%25A7%258B%25E0%25A6%2597%25E0%25A7%258B.png
200 OK 16 kB URL GET HTTP/2 1.bp.blogspot.com/-eKzYfktRSF8/XcLgmV7s5FI/AAAAAAAAAXg/ueYhg3OJfd4GUy4J_XcDTLqax7f37FmEACLcBGAsYHQ/w680/%25E0%25A6%25AC%25E0%25A6%25BF%25E0%25A6%2595%25E0%25A6%25BE%25E0%25A6%25B6_%25E0%25A6%25B2%25E0%25A7%258B%25E0%25A6%2597%25E0%25A7%258B.png
IP
Requested by https://www.upayki.com/?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint07:E2:99:33:66:25:16:0A:1D:C3:C7:18:D8:82:4A:F0:37:40:E1:5B
ValidityMon, 23 Oct 2023 11:23:28 GMT - Mon, 15 Jan 2024 11:23:27 GMT
File type PNG image data, 417 x 244, 8-bit/color RGBA, non-interlaced\012- data
Hash 681fdc40df5060bf1ddee7b419596cda
b46beab099e470832c8290cf4452fa3061100b52
f2b5ef57c868dcdffac13043e287b976be5ed87d2f276045e38d8bbcfa510d12
GET /-eKzYfktRSF8/XcLgmV7s5FI/AAAAAAAAAXg/ueYhg3OJfd4GUy4J_XcDTLqax7f37FmEACLcBGAsYHQ/w680/%25E0%25A6%25AC%25E0%25A6%25BF%25E0%25A6%2595%25E0%25A6%25BE%25E0%25A6%25B6_%25E0%25A6%25B2%25E0%25A7%258B%25E0%25A6%2597%25E0%25A7%258B.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upayki.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v179"
expires: Sat, 02 Dec 2023 07:05:35 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="__________.png";filename*=UTF-8''%E0%A6%AC%E0%A6%BF%E0%A6%95%E0%A6%BE%E0%A6%B6_%E0%A6%B2%E0%A7%8B%E0%A6%97%E0%A7%8B.png
x-content-type-options: nosniff
date: Fri, 01 Dec 2023 07:05:35 GMT
server: fife
content-length: 15507
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
3.bp.blogspot.com/-wGXbxjwz6Qo/YDskudv0j1I/AAAAAAAAAoc/HwngVonKDdQeK-kVVNVCUbwJZeVaeObdgCK4BGAYYCw/s1600/upayki-logo.png
200 OK 49 kB URL GET HTTP/2 3.bp.blogspot.com/-wGXbxjwz6Qo/YDskudv0j1I/AAAAAAAAAoc/HwngVonKDdQeK-kVVNVCUbwJZeVaeObdgCK4BGAYYCw/s1600/upayki-logo.png
IP
Requested by https://www.upayki.com/?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint07:E2:99:33:66:25:16:0A:1D:C3:C7:18:D8:82:4A:F0:37:40:E1:5B
ValidityMon, 23 Oct 2023 11:23:28 GMT - Mon, 15 Jan 2024 11:23:27 GMT
File type PNG image data, 1600 x 559, 8-bit/color RGBA, non-interlaced\012- data
Hash 282da7cbfb49a8a6495ca341db7dc13e
9eb680a9a6884e8d5ad425d24840db2c6a4a5a1e
2045f2162cc475228b69541978f474bd922e7b37c57b53eb0f3fa64e74a9ebcd
GET /-wGXbxjwz6Qo/YDskudv0j1I/AAAAAAAAAoc/HwngVonKDdQeK-kVVNVCUbwJZeVaeObdgCK4BGAYYCw/s1600/upayki-logo.png HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upayki.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v288"
expires: Sat, 02 Dec 2023 07:05:35 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="upayki-logo.png"
x-content-type-options: nosniff
date: Fri, 01 Dec 2023 07:05:35 GMT
server: fife
content-length: 49325
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
2.bp.blogspot.com/-fpkwgBCA0nE/YDslH_sFisI/AAAAAAAAAoo/6L3ON0SejfgCfMyKakLt6IccAKQvUxNZwCK4BGAYYCw/s1600/upayki-logo.png
200 OK 49 kB URL GET HTTP/2 2.bp.blogspot.com/-fpkwgBCA0nE/YDslH_sFisI/AAAAAAAAAoo/6L3ON0SejfgCfMyKakLt6IccAKQvUxNZwCK4BGAYYCw/s1600/upayki-logo.png
IP
Requested by https://www.upayki.com/?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint07:E2:99:33:66:25:16:0A:1D:C3:C7:18:D8:82:4A:F0:37:40:E1:5B
ValidityMon, 23 Oct 2023 11:23:28 GMT - Mon, 15 Jan 2024 11:23:27 GMT
File type PNG image data, 1600 x 559, 8-bit/color RGBA, non-interlaced\012- data
Hash 282da7cbfb49a8a6495ca341db7dc13e
9eb680a9a6884e8d5ad425d24840db2c6a4a5a1e
2045f2162cc475228b69541978f474bd922e7b37c57b53eb0f3fa64e74a9ebcd
GET /-fpkwgBCA0nE/YDslH_sFisI/AAAAAAAAAoo/6L3ON0SejfgCfMyKakLt6IccAKQvUxNZwCK4BGAYYCw/s1600/upayki-logo.png HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upayki.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v28b"
expires: Sat, 02 Dec 2023 07:05:35 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="upayki-logo.png"
x-content-type-options: nosniff
date: Fri, 01 Dec 2023 07:05:35 GMT
server: fife
content-length: 49325
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.highcpmcreativeformat.com/a580d2851ec1c79c5e9874677e03e432/invoke.js
200 OK 11 kB URL GET HTTP/1.1 www.highcpmcreativeformat.com/a580d2851ec1c79c5e9874677e03e432/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.upayki.com/?m=1
Certificate IssuerLet's Encrypt
Subjecthighcpmcreativeformat.com
FingerprintDC:3C:35:A8:31:08:8E:E0:A8:24:1F:F4:A8:BE:E4:04:AE:7B:18:BD
ValidityFri, 20 Oct 2023 09:02:37 GMT - Thu, 18 Jan 2024 09:02:36 GMT
File type exported SGML document, ASCII text, with very long lines (29637), with no line terminators
Hash 49e66d9769b8e2bb8bcca1e31a0244da
3af578caf4a1f3f1d0aac135d9bcbee0387db59b
52a65c2164f4fd2bd98731127aff8bb758855f0b34e884ead200ff85032fd21b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /a580d2851ec1c79c5e9874677e03e432/invoke.js HTTP/1.1
Host: www.highcpmcreativeformat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upayki.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 01 Dec 2023 07:05:36 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 30266460f4808a561978fd97f1f6a985
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.upayki.com/responsive/sprite_v1_6.css.svg
200 OK 2.2 kB URL GET HTTP/2 www.upayki.com/responsive/sprite_v1_6.css.svg
IP
Requested by https://www.upayki.com/?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectwww.upayki.com
Fingerprint01:6D:B9:EB:6C:59:84:5B:BC:0C:91:DF:0A:E6:C4:AA:1E:A1:4F:71
ValidityThu, 30 Nov 2023 16:25:22 GMT - Wed, 28 Feb 2024 17:16:14 GMT
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (7657)
Hash d4dcfc8144f556815c7a1d84ed4e959e
22088bd6cdf970dcf7bfab9a74a4768548ca8890
73d16aca9b019e42dd2de3a10e5049b5606268ce0d8e3a167b05b37acb9b0e9c
GET /responsive/sprite_v1_6.css.svg HTTP/1.1
Host: www.upayki.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upayki.com/?m=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: image/svg+xml
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2244
date: Fri, 01 Dec 2023 07:05:36 GMT
expires: Fri, 08 Dec 2023 07:05:36 GMT
cache-control: public, max-age=604800
last-modified: Fri, 01 Dec 2023 01:12:44 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
X-Firefox-Spdy: h2
ocsp.r2m03.amazontrust.com/
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash 1f5ea1de01644aecc419ef2fd3b7052c
1ec2b3adee6069d46937a34cf5d25d3b2566a9e0
dbd64cba305c05822c6c2b6f98eeae215c443e4370856624be3e3b7a5897e7b5
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Fri, 01 Dec 2023 07:05:36 GMT
Last-Modified: Fri, 01 Dec 2023 05:53:22 GMT
Server: ECAcc (ska/F6ED)
X-Cache: Miss from cloudfront
Via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: fqpJo6o2cl3nGbZTfI18ZS0luAjn_Demk_nV10HRrN_OzZ1aKerZKQ==
Age: 4334
proftrafficcounter.com/stats
200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP
Requested by https://www.upayki.com/?m=1
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 5e28843e23d8ae9a2dfef4a1ae780551
dd5e30e62b0426a2be1b7a35661f10954e08ae2c
8a20242cb73d20fb76ca86a5c7c4563c2926c719df297a6ffc19efc5a620b7ef
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.upayki.com
DNT: 1
Connection: keep-alive
Referer: https://www.upayki.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 07:05:36 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.upayki.com
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=20d055bd-29fa-448c-a125-785d9d1f7cd4:2:1; expires=Mon, 28 Nov 2033 07:05:36 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
www.upayki.com/feeds/posts/summary?max-results=1&alt=json-in-script&callback=dataFeed
200 OK 2.0 kB URL GET HTTP/2 www.upayki.com/feeds/posts/summary?max-results=1&alt=json-in-script&callback=dataFeed
IP
Requested by https://www.upayki.com/?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectwww.upayki.com
Fingerprint01:6D:B9:EB:6C:59:84:5B:BC:0C:91:DF:0A:E6:C4:AA:1E:A1:4F:71
ValidityThu, 30 Nov 2023 16:25:22 GMT - Wed, 28 Feb 2024 17:16:14 GMT
File type Unicode text, UTF-8 text, with very long lines (5078)
Hash b5b9fb6dfc11896e0b88c83e777c1123
a343a612decc788f87719af14403baa1f67938b3
5e069988cde6c6bbaa17f93215c690ccd605672decc8bcd26423d1f9c5d3a234
GET /feeds/posts/summary?max-results=1&alt=json-in-script&callback=dataFeed HTTP/1.1
Host: www.upayki.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upayki.com/?m=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
etag: W/"e209a71dd6412d93fca449b12d0f702b9cab842ea3cad79211a9fa4a7429e0eb"
date: Fri, 01 Dec 2023 07:05:36 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
expires: Fri, 01 Dec 2023 07:05:37 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Wed, 29 Nov 2023 09:17:40 GMT
content-encoding: gzip
content-length: 1953
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs
200 OK 61 kB URL GET HTTP/3 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs
IP
Requested by https://www.upayki.com/?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (1505)
Hash 71aaa92f748ba3c48d6edfb40204d614
ad1ca8c338494256d564ee7857707f758e03948b
215f3b01f5decd286eb88ac2dc56b997e6cd2ce8f47998dfa9e2917f8b890982
GET /_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upayki.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 60962
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 02:45:42 GMT
expires: Fri, 29 Nov 2024 02:45:42 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 08 Nov 2023 22:37:21 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 101995
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
admissiblecontradictthrone.com/watch.278742953720.js?key=a580d2851ec1c79c5e9874677e03e432&kw=%5B%22upayki%22%5D&refer=https%3A%2F%2Fwww.upayki.com%2F%3Fm%3D1&tz=0&dev=e&res=14.3095&uuid=20d055bd-29fa-448c-a125-785d9d1f7cd4%3A2%3A1
307 Temporary Redirect 0 B URL GET HTTP/1.1 admissiblecontradictthrone.com/watch.278742953720.js?key=a580d2851ec1c79c5e9874677e03e432&kw=%5B%22upayki%22%5D&refer=https%3A%2F%2Fwww.upayki.com%2F%3Fm%3D1&tz=0&dev=e&res=14.3095&uuid=20d055bd-29fa-448c-a125-785d9d1f7cd4%3A2%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.upayki.com/?m=1
Certificate IssuerLet's Encrypt
Subjectadmissiblecontradictthrone.com
Fingerprint90:54:BF:2D:0E:36:25:A2:57:CF:C9:5B:86:C3:FA:F2:03:14:94:09
ValidityTue, 28 Nov 2023 10:38:30 GMT - Mon, 26 Feb 2024 10:38:29 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.278742953720.js?key=a580d2851ec1c79c5e9874677e03e432&kw=%5B%22upayki%22%5D&refer=https%3A%2F%2Fwww.upayki.com%2F%3Fm%3D1&tz=0&dev=e&res=14.3095&uuid=20d055bd-29fa-448c-a125-785d9d1f7cd4%3A2%3A1 HTTP/1.1
Host: admissiblecontradictthrone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.upayki.com
DNT: 1
Connection: keep-alive
Referer: https://www.upayki.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Fri, 01 Dec 2023 07:05:37 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.upayki.com
Access-Control-Allow-Origin: https://www.upayki.com
Access-Control-Allow-Credentials: true
Location: https://admissiblecontradictthrone.com/watch.278742953720.js?key=a580d2851ec1c79c5e9874677e03e432&kw=%5B%22upayki%22%5D&refer=https%3A%2F%2Fwww.upayki.com%2F%3Fm%3D1&tz=0&dev=e&res=14.3095&uuid=20d055bd-29fa-448c-a125-785d9d1f7cd4%3A2%3A1&shu=03e648c340cb6b94fe0a8d94168aca2591a2806d44726ee6d06127f40b8975f52a28fd2e9171b7d84bdad36e259b13508151e4c7751dc29981fe5f902b203fab8cb3af6a313815af1f378d054394f6e87ebba8df30624664561ddb8e42&pst=1701414397&rmtc=t
Set-Cookie: u_pl=21318136; expires=Sat, 02 Dec 2023 07:05:37 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.YpMGZqxrJwJZ2LPfM-1gXc1FveoliXK5lVJUF597i_Y; expires=Fri, 01 Dec 2023 07:06:37 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a38f4792398b0ac49e189fbaae69d4ea
Strict-Transport-Security: max-age=0; includeSubdomains
fonts.googleapis.com/css2?display=swap&family=Mina
200 OK 926 B URL GET HTTP/2 fonts.googleapis.com/css2?display=swap&family=Mina
IP
Requested by https://www.upayki.com/?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
Hash 8e07604e7520c415ec9de0b8ccc1f4b6
92b80021d62bf6df9370908ad997e369b58b8347
4f92a43de7c8485dee21d66db2a0bb27231976337bf79f18f87e56585bd6930f
GET /css2?display=swap&family=Mina HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upayki.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 01 Dec 2023 07:05:35 GMT
date: Fri, 01 Dec 2023 07:05:35 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
admissiblecontradictthrone.com/watch.278742953720.js?key=a580d2851ec1c79c5e9874677e03e432&kw=%5B%22upayki%22%5D&refer=https%3A%2F%2Fwww.upayki.com%2F%3Fm%3D1&tz=0&dev=e&res=14.3095&uuid=20d055bd-29fa-448c-a125-785d9d1f7cd4%3A2%3A1&shu=03e648c340cb6b94fe0a8d94168aca2591a2806d44726ee6d06127f40b8975f52a28fd2e9171b7d84bdad36e259b13508151e4c7751dc29981fe5f902b203fab8cb3af6a313815af1f378d054394f6e87ebba8df30624664561ddb8e42&pst=1701414397&rmtc=t
200 OK 644 B URL GET HTTP/1.1 admissiblecontradictthrone.com/watch.278742953720.js?key=a580d2851ec1c79c5e9874677e03e432&kw=%5B%22upayki%22%5D&refer=https%3A%2F%2Fwww.upayki.com%2F%3Fm%3D1&tz=0&dev=e&res=14.3095&uuid=20d055bd-29fa-448c-a125-785d9d1f7cd4%3A2%3A1&shu=03e648c340cb6b94fe0a8d94168aca2591a2806d44726ee6d06127f40b8975f52a28fd2e9171b7d84bdad36e259b13508151e4c7751dc29981fe5f902b203fab8cb3af6a313815af1f378d054394f6e87ebba8df30624664561ddb8e42&pst=1701414397&rmtc=t
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.upayki.com/?m=1
Certificate IssuerLet's Encrypt
Subjectadmissiblecontradictthrone.com
Fingerprint90:54:BF:2D:0E:36:25:A2:57:CF:C9:5B:86:C3:FA:F2:03:14:94:09
ValidityTue, 28 Nov 2023 10:38:30 GMT - Mon, 26 Feb 2024 10:38:29 GMT
File type HTML document text\012- HTML document, ASCII text, with very long lines (604)
Hash 035ff2ee8ab7bdfcf0a824f720d174b8
33b3f0deb232665487cd6c71bfe487237392d40f
dd9794cdaeab48374048f2317e4b1252789dbd8999996e971a830229ad7f174c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.278742953720.js?key=a580d2851ec1c79c5e9874677e03e432&kw=%5B%22upayki%22%5D&refer=https%3A%2F%2Fwww.upayki.com%2F%3Fm%3D1&tz=0&dev=e&res=14.3095&uuid=20d055bd-29fa-448c-a125-785d9d1f7cd4%3A2%3A1&shu=03e648c340cb6b94fe0a8d94168aca2591a2806d44726ee6d06127f40b8975f52a28fd2e9171b7d84bdad36e259b13508151e4c7751dc29981fe5f902b203fab8cb3af6a313815af1f378d054394f6e87ebba8df30624664561ddb8e42&pst=1701414397&rmtc=t HTTP/1.1
Host: admissiblecontradictthrone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.upayki.com
Referer: https://www.upayki.com/
DNT: 1
Connection: keep-alive
Cookie: u_pl=21318136; ain=eyJhbGciOiJIUzI1NiJ9.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.YpMGZqxrJwJZ2LPfM-1gXc1FveoliXK5lVJUF597i_Y
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 01 Dec 2023 07:05:37 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.upayki.com
Access-Control-Allow-Origin: https://www.upayki.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=20d055bd-29fa-448c-a125-785d9d1f7cd4:2:1; expires=Fri, 08 Dec 2023 07:05:37 GMT; secure; SameSite=None
iprc432768e73193e6e4e4a63d5097d1e7a8=2717340; expires=Sat, 02 Dec 2023 09:05:37 GMT; secure; SameSite=None
pdhtkv=true; expires=Sat, 02 Dec 2023 07:05:37 GMT; secure; SameSite=None
uncs=1; expires=Sat, 02 Dec 2023 07:05:37 GMT; secure; SameSite=None
pdhtkv5=true; expires=Sat, 02 Dec 2023 07:05:37 GMT; secure; SameSite=None
uncs5=1; expires=Sat, 02 Dec 2023 07:05:37 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 9afae1b5f68b4ef43c023ae570967b9e
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.blogger.com/navbar.g?targetBlogID=954420004606030841&blogName=Upayki&publishMode=PUBLISH_MODE_HOSTED&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://www.upayki.com/search&blogLocale=en&v=2&homepageUrl=https://www.upayki.com/&vt=-1427643499120700612&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__
2.5 kB URL www.blogger.com/navbar.g?targetBlogID=954420004606030841&blogName=Upayki&publishMode=PUBLISH_MODE_HOSTED&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://www.upayki.com/search&blogLocale=en&v=2&homepageUrl=https://www.upayki.com/&vt=-1427643499120700612&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3170)
Hash fdbe75d9f8b166fcc29b7e09f47d39b8
3d0355a8d0b1a8c2319af21a4b100204701d0262
50f1dcc8948c296ba35c0d03de2ce381fac33832a8c78ee8d752be7feac90f64
GET /navbar.g?targetBlogID=954420004606030841&blogName=Upayki&publishMode=PUBLISH_MODE_HOSTED&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://www.upayki.com/search&blogLocale=en&v=2&homepageUrl=https://www.upayki.com/&vt=-1427643499120700612&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__ HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upayki.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 01 Dec 2023 07:05:37 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 2549
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
apis.google.com/js/platform:gapi.iframes.style.common.js
200 OK 22 kB URL GET HTTP/3 apis.google.com/js/platform:gapi.iframes.style.common.js
IP
Requested by https://www.blogger.com/navbar.g?targetBlogID=954420004606030841&blogName=Upayki&publishMode=PUBLISH_MODE_HOSTED&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://www.upayki.com/search&blogLocale=en&v=2&homepageUrl=https://www.upayki.com/&vt=-1427643499120700612&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Fwww.upayki.com&pfname=&rpctoken=19464082
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (2664)
Hash b970f4ece0f21dae7d57dcbbbe1eb48b
52ab98370d3fc4bfd4c1b23cb3ed5dc1e37d779a
53dbcf2ac8d4a8d0a0fc4d5a15778fd36664923c87a60891a87bf8ec45535a91
GET /js/platform:gapi.iframes.style.common.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-length: 21940
date: Fri, 01 Dec 2023 07:05:37 GMT
expires: Fri, 01 Dec 2023 07:05:37 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "f3d0fc258127dfc5"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
set-cookie: NID=511=TaIhl_78Ys_KcFU6GCZpz0k7ghV_-EVHuZCygvmpECXoB-_Rdvi6n9mm_NCqxTKdON9Eu0rtmY6q9gQUXaPUtAWmM2ZCW17YZEYzcrVGIl6ix4A4-tyBe-fDjmE6I6RmD7izPRTukBhfNUPCk2T_cfHiYsKADkR91V31jCorzWE; expires=Sat, 01-Jun-2024 07:05:37 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
resources.blogblog.com/img/navbar/arrows-light.png
200 OK 117 B URL GET HTTP/3 resources.blogblog.com/img/navbar/arrows-light.png
IP
Requested by https://www.blogger.com/navbar.g?targetBlogID=954420004606030841&blogName=Upayki&publishMode=PUBLISH_MODE_HOSTED&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://www.upayki.com/search&blogLocale=en&v=2&homepageUrl=https://www.upayki.com/&vt=-1427643499120700612&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Fwww.upayki.com&pfname=&rpctoken=19464082
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT
File type PNG image data, 19 x 4, 8-bit/color RGBA, non-interlaced\012- data
Hash 25c2b0cfe0ad4dcda4a0e3727d091d80
b9d16f4311e64648b7970baf00cb9841e3c3351b
bb6685107846b4c25384202730b84ec168fecee197e5f9e3fe8ffdd5bed6749d
GET /img/navbar/arrows-light.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 117
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 02:02:35 GMT
expires: Thu, 07 Dec 2023 02:02:35 GMT
cache-control: public, max-age=604800
last-modified: Wed, 29 Nov 2023 17:00:16 GMT
content-type: image/png
age: 104582
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
resources.blogblog.com/img/navbar/icons_peach.png
200 OK 907 B URL GET HTTP/3 resources.blogblog.com/img/navbar/icons_peach.png
IP
Requested by https://www.blogger.com/navbar.g?targetBlogID=954420004606030841&blogName=Upayki&publishMode=PUBLISH_MODE_HOSTED&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://www.upayki.com/search&blogLocale=en&v=2&homepageUrl=https://www.upayki.com/&vt=-1427643499120700612&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Fwww.upayki.com&pfname=&rpctoken=19464082
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT
File type PNG image data, 46 x 20, 8-bit colormap, non-interlaced\012- data
Hash 3718077fe5eb689b0ded987a52881d06
f0ce5596ef43f850c400cbbc0556697fb3e7b232
72be8098b87d7e2d7fbc6eb0a3eaebcf1013186d7733cd340549f9e1701a4865
GET /img/navbar/icons_peach.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 907
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 11:28:24 GMT
expires: Thu, 07 Dec 2023 11:28:24 GMT
cache-control: public, max-age=604800
last-modified: Thu, 30 Nov 2023 06:30:42 GMT
content-type: image/png
age: 70633
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs
200 OK 46 kB URL GET HTTP/3 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs
IP
Requested by https://www.blogger.com/navbar.g?targetBlogID=954420004606030841&blogName=Upayki&publishMode=PUBLISH_MODE_HOSTED&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://www.upayki.com/search&blogLocale=en&v=2&homepageUrl=https://www.upayki.com/&vt=-1427643499120700612&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Fwww.upayki.com&pfname=&rpctoken=19464082
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (1505)
Hash a5139ae5276fac825f580dd8b48d0f72
2820e165c330673129cebdc8e7cf806e1620c0a0
2170ad362c9ba9f7ff9b642d2a9d72a263fff1cd47de3664c55d6a7462c4cbc3
GET /_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 45499
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 23:12:04 GMT
expires: Thu, 28 Nov 2024 23:12:04 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 08 Nov 2023 22:37:21 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 114813
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh-UQJnJtRoRQEzbvAe2NqHPb3sZusu2TfwN0steZuFaYjmup8s54l6cUHufyf6GnPi0e-ZmdOsh_LA9cONiG6avP9caVwVls9mcI_goegk6LAOpwFWUMHrpSoaXVDYsqYPRMiKEwCMG_0iIEKqRKcuAZd7dMXMtjxWl-xRu3-YCjU0VFmdA-ToP8NxTA/w680/%20how%20to%20cancel%20youtube%20tv.jpg
200 OK 24 kB URL GET HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh-UQJnJtRoRQEzbvAe2NqHPb3sZusu2TfwN0steZuFaYjmup8s54l6cUHufyf6GnPi0e-ZmdOsh_LA9cONiG6avP9caVwVls9mcI_goegk6LAOpwFWUMHrpSoaXVDYsqYPRMiKEwCMG_0iIEKqRKcuAZd7dMXMtjxWl-xRu3-YCjU0VFmdA-ToP8NxTA/w680/%20how%20to%20cancel%20youtube%20tv.jpg
IP
Requested by https://www.upayki.com/?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 680x382, components 3\012- data
Hash ca3271c81f99085a492b8c556e595c69
efc9286b4299f635ec024734ad296620b4f4aeb6
ea04ee013059525ec6c98820f56333dd56340f2fabf9aa4e71d5efc7fcfb085d
GET /img/b/R29vZ2xl/AVvXsEh-UQJnJtRoRQEzbvAe2NqHPb3sZusu2TfwN0steZuFaYjmup8s54l6cUHufyf6GnPi0e-ZmdOsh_LA9cONiG6avP9caVwVls9mcI_goegk6LAOpwFWUMHrpSoaXVDYsqYPRMiKEwCMG_0iIEKqRKcuAZd7dMXMtjxWl-xRu3-YCjU0VFmdA-ToP8NxTA/w680/%20how%20to%20cancel%20youtube%20tv.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upayki.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-expose-headers: Content-Length
etag: "v3da"
expires: Sat, 02 Dec 2023 07:05:38 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename=" how to cancel youtube tv.jpg"
x-content-type-options: nosniff
date: Fri, 01 Dec 2023 07:05:38 GMT
server: fife
content-length: 24247
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjZ4BaSuh9xzlDUuY8xSDsdWfyRaqov4lxbFmA9WD-h7u7YuXtgK50dalM7VVJ7IUMWYrPDFMBtJmixoKqZuTz59Ibfx5WnYY5NXAJL4Yyn-XdhI132kL0zueGLIvmzkvRhcqauz4zROOAQzlj0g32etbB2L6eR9jiiLR7ITto9t4RdvG3uv4h2VWPdsQ/w680/tomatoes-g9f65fffee_1280.jpg
200 OK 99 kB URL GET HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjZ4BaSuh9xzlDUuY8xSDsdWfyRaqov4lxbFmA9WD-h7u7YuXtgK50dalM7VVJ7IUMWYrPDFMBtJmixoKqZuTz59Ibfx5WnYY5NXAJL4Yyn-XdhI132kL0zueGLIvmzkvRhcqauz4zROOAQzlj0g32etbB2L6eR9jiiLR7ITto9t4RdvG3uv4h2VWPdsQ/w680/tomatoes-g9f65fffee_1280.jpg
IP
Requested by https://www.upayki.com/?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 680x503, components 3\012- data
Hash eef5b18c5e83a259e8a31c568c4edd56
28a5f668260aa6e6493bd8422c519393ea6309a0
12bda356425d6e63d5bf7bd616620f952458c254b17c27954de8c90031885c0f
GET /img/b/R29vZ2xl/AVvXsEjZ4BaSuh9xzlDUuY8xSDsdWfyRaqov4lxbFmA9WD-h7u7YuXtgK50dalM7VVJ7IUMWYrPDFMBtJmixoKqZuTz59Ibfx5WnYY5NXAJL4Yyn-XdhI132kL0zueGLIvmzkvRhcqauz4zROOAQzlj0g32etbB2L6eR9jiiLR7ITto9t4RdvG3uv4h2VWPdsQ/w680/tomatoes-g9f65fffee_1280.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upayki.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-expose-headers: Content-Length
etag: "v3d6"
expires: Sat, 02 Dec 2023 07:05:38 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="tomatoes-g9f65fffee_1280.jpg"
x-content-type-options: nosniff
date: Fri, 01 Dec 2023 07:05:38 GMT
server: fife
content-length: 98992
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi6kY3Ca6dgRuHJT_zaveqcsPJaPhpnv4O0fXs4iekrBFytyjwcF-n4QhnmCU3JTc4iIZeejLDlV58sWIisTRYkFr8BD7quPgOZ8q49vneE-K6PFQIrjnaAti7I5tAafvoPzvvdoZe6aaw9AuTMgo8FdBuU03B2qeBurlPImcnqkPB0pZfA1V3PgtRratWd/w680/20231113_013244_0000.png
200 OK 272 kB URL GET HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi6kY3Ca6dgRuHJT_zaveqcsPJaPhpnv4O0fXs4iekrBFytyjwcF-n4QhnmCU3JTc4iIZeejLDlV58sWIisTRYkFr8BD7quPgOZ8q49vneE-K6PFQIrjnaAti7I5tAafvoPzvvdoZe6aaw9AuTMgo8FdBuU03B2qeBurlPImcnqkPB0pZfA1V3PgtRratWd/w680/20231113_013244_0000.png
IP
Requested by https://www.upayki.com/?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type PNG image data, 680 x 382, 8-bit/color RGB, non-interlaced\012- data
Size 272 kB (271660 bytes)
Hash 4d9e4a9518e1fda577ea5dd62a3e9436
9988c8ffae2385ccfeb131c6ba58dc26d5035d29
968e340a991adcb550b2c23aea161b643cf598967544a6f44e870c4c8e61df54
GET /img/b/R29vZ2xl/AVvXsEi6kY3Ca6dgRuHJT_zaveqcsPJaPhpnv4O0fXs4iekrBFytyjwcF-n4QhnmCU3JTc4iIZeejLDlV58sWIisTRYkFr8BD7quPgOZ8q49vneE-K6PFQIrjnaAti7I5tAafvoPzvvdoZe6aaw9AuTMgo8FdBuU03B2qeBurlPImcnqkPB0pZfA1V3PgtRratWd/w680/20231113_013244_0000.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upayki.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-expose-headers: Content-Length
etag: "v4c1"
expires: Sat, 02 Dec 2023 07:05:38 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="20231113_013244_0000.png"
x-content-type-options: nosniff
date: Fri, 01 Dec 2023 07:05:38 GMT
server: fife
content-length: 271660
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgCPamWzmnEgdpHfB1Gqb8CbrsauscxNAidt1-gsTCcoNjDafAG1Cl7mSwE2EzVkGr6emfY8UGJDYqBZhLMWwm001QYmYgz5qbsMDaNgdH9RQzieIPc789z4tKChsd0x-W8cg7Ac5iMMXQuExRKn49PC9lj-RUrkH8YrkqcWoYbueFJiXq1WaJ5hke5QQ/w680/%E0%A4%86%E0%A4%AF%E0%A5%81%20%E0%A4%95%E0%A5%88%E0%A4%B2%E0%A4%95%E0%A5%81%E0%A4%B2%E0%A5%87%E0%A4%9F%E0%A4%B0.png
200 OK 13 kB URL GET HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgCPamWzmnEgdpHfB1Gqb8CbrsauscxNAidt1-gsTCcoNjDafAG1Cl7mSwE2EzVkGr6emfY8UGJDYqBZhLMWwm001QYmYgz5qbsMDaNgdH9RQzieIPc789z4tKChsd0x-W8cg7Ac5iMMXQuExRKn49PC9lj-RUrkH8YrkqcWoYbueFJiXq1WaJ5hke5QQ/w680/%E0%A4%86%E0%A4%AF%E0%A5%81%20%E0%A4%95%E0%A5%88%E0%A4%B2%E0%A4%95%E0%A5%81%E0%A4%B2%E0%A5%87%E0%A4%9F%E0%A4%B0.png
IP
Requested by https://www.upayki.com/?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type PNG image data, 680 x 382, 8-bit/color RGB, non-interlaced\012- data
Hash 590a755667f24a68245945479e2bbba9
4f6c463e2cdc7058f06f6562fb51441c05e4f2e2
004dc4684c6373924fbcef7cf36d1e4aa7079b9c329950a2916655a6118d9252
GET /img/b/R29vZ2xl/AVvXsEgCPamWzmnEgdpHfB1Gqb8CbrsauscxNAidt1-gsTCcoNjDafAG1Cl7mSwE2EzVkGr6emfY8UGJDYqBZhLMWwm001QYmYgz5qbsMDaNgdH9RQzieIPc789z4tKChsd0x-W8cg7Ac5iMMXQuExRKn49PC9lj-RUrkH8YrkqcWoYbueFJiXq1WaJ5hke5QQ/w680/%E0%A4%86%E0%A4%AF%E0%A5%81%20%E0%A4%95%E0%A5%88%E0%A4%B2%E0%A4%95%E0%A5%81%E0%A4%B2%E0%A5%87%E0%A4%9F%E0%A4%B0.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upayki.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-expose-headers: Content-Length
etag: "v3d8"
expires: Sat, 02 Dec 2023 07:05:38 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="___ _________.png";filename*=UTF-8''%E0%A4%86%E0%A4%AF%E0%A5%81%20%E0%A4%95%E0%A5%88%E0%A4%B2%E0%A4%95%E0%A5%81%E0%A4%B2%E0%A5%87%E0%A4%9F%E0%A4%B0.png
x-content-type-options: nosniff
date: Fri, 01 Dec 2023 07:05:38 GMT
server: fife
content-length: 12553
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
200 OK 466 kB URL GET HTTP/2 stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
IP
Requested by https://www.upayki.com/?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint34:BC:91:5F:B9:EC:32:2C:D9:73:C7:88:C3:6C:FB:77:E7:70:8D:04
ValidityThu, 30 Nov 2023 00:15:17 GMT - Wed, 28 Feb 2024 00:15:16 GMT
File type ASCII text, with very long lines (30837)
Size 466 kB (466141 bytes)
Hash 269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upayki.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 07:05:35 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"269550530cc127b6aa5a35925a7de6ce"
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 10/31/2023 18:48:06
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 722
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: dd809c84048d5afa8e77adc8acacd559
cdn-cache: HIT
cf-cache-status: HIT
age: 788510
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 82e97b8a780f568d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhUjw-kRYk56HfdjsyEbDzkXOPjQR7sR-pF_4f4J1B7I0T7-fLrbamRy9G5-5yxIg3eqPerBw50k-ph0wVRJb2IkWbEMML5lb3KOH816HFdmjib2mEdldUE1YWmxfoP0Aa2pEaom-ajd0IrehWg9J8kGj0TlBWLx9I5bT1NlgO_kiJezutIX8YFy1oHdA/w680/%E0%A6%88%E0%A6%A6%20%E0%A6%AE%E0%A7%8B%E0%A6%AC%E0%A6%BE%E0%A6%B0%E0%A6%95.png
200 OK 401 kB URL GET HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhUjw-kRYk56HfdjsyEbDzkXOPjQR7sR-pF_4f4J1B7I0T7-fLrbamRy9G5-5yxIg3eqPerBw50k-ph0wVRJb2IkWbEMML5lb3KOH816HFdmjib2mEdldUE1YWmxfoP0Aa2pEaom-ajd0IrehWg9J8kGj0TlBWLx9I5bT1NlgO_kiJezutIX8YFy1oHdA/w680/%E0%A6%88%E0%A6%A6%20%E0%A6%AE%E0%A7%8B%E0%A6%AC%E0%A6%BE%E0%A6%B0%E0%A6%95.png
IP
Requested by https://www.upayki.com/?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type PNG image data, 680 x 382, 8-bit/color RGB, non-interlaced\012- data
Size 401 kB (400779 bytes)
Hash ef78e637c295b98b2e0e5f679260580c
82fc60089ba5343163aeec28bdcebd56ed1da1f2
b4a8840f47791fdf281e2c0494f0e094adcaee97231d387c157e25d78d4e90b0
GET /img/b/R29vZ2xl/AVvXsEhUjw-kRYk56HfdjsyEbDzkXOPjQR7sR-pF_4f4J1B7I0T7-fLrbamRy9G5-5yxIg3eqPerBw50k-ph0wVRJb2IkWbEMML5lb3KOH816HFdmjib2mEdldUE1YWmxfoP0Aa2pEaom-ajd0IrehWg9J8kGj0TlBWLx9I5bT1NlgO_kiJezutIX8YFy1oHdA/w680/%E0%A6%88%E0%A6%A6%20%E0%A6%AE%E0%A7%8B%E0%A6%AC%E0%A6%BE%E0%A6%B0%E0%A6%95.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upayki.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-expose-headers: Content-Length
etag: "v36e"
expires: Sat, 02 Dec 2023 07:05:38 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="__ ______.png";filename*=UTF-8''%E0%A6%88%E0%A6%A6%20%E0%A6%AE%E0%A7%8B%E0%A6%AC%E0%A6%BE%E0%A6%B0%E0%A6%95.png
x-content-type-options: nosniff
date: Fri, 01 Dec 2023 07:05:38 GMT
server: fife
content-length: 400779
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhpJzJpWutZA6S3gQgd2qoXxVzHRHlyVqwvUriEfZV_mWUv2AgAsWfMUiaNTLNgBtCct_KiHybfVpLwWVE3af5vaxvjOSC6cFSKyl9m9av8CAoJ9iUj5xYPsLUBjkTik6NoI3WYgm6LIeJEaqQbenqlpW1w1VT7O5xKYwq9x9gqgzjr10JZcppOfKwPkQ/w680/%E0%A6%9B%E0%A7%87%E0%A6%B2%E0%A7%87%E0%A6%A6%E0%A7%87%E0%A6%B0%20%E0%A6%95%E0%A6%B7%E0%A7%8D%E0%A6%9F%E0%A7%87%E0%A6%B0%20%E0%A6%9B%E0%A6%AC%E0%A6%BF.png
200 OK 601 kB URL GET HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhpJzJpWutZA6S3gQgd2qoXxVzHRHlyVqwvUriEfZV_mWUv2AgAsWfMUiaNTLNgBtCct_KiHybfVpLwWVE3af5vaxvjOSC6cFSKyl9m9av8CAoJ9iUj5xYPsLUBjkTik6NoI3WYgm6LIeJEaqQbenqlpW1w1VT7O5xKYwq9x9gqgzjr10JZcppOfKwPkQ/w680/%E0%A6%9B%E0%A7%87%E0%A6%B2%E0%A7%87%E0%A6%A6%E0%A7%87%E0%A6%B0%20%E0%A6%95%E0%A6%B7%E0%A7%8D%E0%A6%9F%E0%A7%87%E0%A6%B0%20%E0%A6%9B%E0%A6%AC%E0%A6%BF.png
IP
Requested by https://www.upayki.com/?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type PNG image data, 680 x 570, 8-bit/color RGB, non-interlaced\012- data
Size 601 kB (601232 bytes)
Hash fb5f4d30a57f165b9bf9acf389cc78fa
1b8a67dbe6ac40f13671d0b052edfada062ed05c
805615995109b811378f8053aa1bc095204546cea3bf88cf60644b127ae48f38
GET /img/b/R29vZ2xl/AVvXsEhpJzJpWutZA6S3gQgd2qoXxVzHRHlyVqwvUriEfZV_mWUv2AgAsWfMUiaNTLNgBtCct_KiHybfVpLwWVE3af5vaxvjOSC6cFSKyl9m9av8CAoJ9iUj5xYPsLUBjkTik6NoI3WYgm6LIeJEaqQbenqlpW1w1VT7O5xKYwq9x9gqgzjr10JZcppOfKwPkQ/w680/%E0%A6%9B%E0%A7%87%E0%A6%B2%E0%A7%87%E0%A6%A6%E0%A7%87%E0%A6%B0%20%E0%A6%95%E0%A6%B7%E0%A7%8D%E0%A6%9F%E0%A7%87%E0%A6%B0%20%E0%A6%9B%E0%A6%AC%E0%A6%BF.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upayki.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-expose-headers: Content-Length
etag: "v398"
expires: Sat, 02 Dec 2023 07:05:38 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="_______ ______ ___.png";filename*=UTF-8''%E0%A6%9B%E0%A7%87%E0%A6%B2%E0%A7%87%E0%A6%A6%E0%A7%87%E0%A6%B0%20%E0%A6%95%E0%A6%B7%E0%A7%8D%E0%A6%9F%E0%A7%87%E0%A6%B0%20%E0%A6%9B%E0%A6%AC%E0%A6%BF.png
x-content-type-options: nosniff
date: Fri, 01 Dec 2023 07:05:38 GMT
server: fife
content-length: 601232
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjhh5FT8OXtOQyoTlFII6uGnIRxph65z2ZbQb1re6oYH5Wke8_F0bk2Wo-7Qga7Gz7TgKdmaED0DPoTVRtLuTv-pQtsaamVYsAPdoUFEPXHf2UOXErmfTo8nAyu2LqL_823rdeq1HLuxtIeg92ay0ZE9RoQI59MUZmAz29XnsTBcutrzLX9DuvII2gfEg/w680/Logopit_1674592717201.png
200 OK 436 kB URL GET HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjhh5FT8OXtOQyoTlFII6uGnIRxph65z2ZbQb1re6oYH5Wke8_F0bk2Wo-7Qga7Gz7TgKdmaED0DPoTVRtLuTv-pQtsaamVYsAPdoUFEPXHf2UOXErmfTo8nAyu2LqL_823rdeq1HLuxtIeg92ay0ZE9RoQI59MUZmAz29XnsTBcutrzLX9DuvII2gfEg/w680/Logopit_1674592717201.png
IP
Requested by https://www.upayki.com/?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type PNG image data, 680 x 382, 8-bit/color RGB, non-interlaced\012- data
Size 436 kB (436441 bytes)
Hash 3a94ad8227f72b92f8c23246ba5d5c69
18c8cafa3120d8e018f43d92fabf7b5ed2aec37c
5af360f8ff1937c8af6236b46a7f75de26da19de57218e49be2b67da45b12c48
GET /img/b/R29vZ2xl/AVvXsEjhh5FT8OXtOQyoTlFII6uGnIRxph65z2ZbQb1re6oYH5Wke8_F0bk2Wo-7Qga7Gz7TgKdmaED0DPoTVRtLuTv-pQtsaamVYsAPdoUFEPXHf2UOXErmfTo8nAyu2LqL_823rdeq1HLuxtIeg92ay0ZE9RoQI59MUZmAz29XnsTBcutrzLX9DuvII2gfEg/w680/Logopit_1674592717201.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upayki.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-expose-headers: Content-Length
etag: "v3dc"
expires: Sat, 02 Dec 2023 07:05:38 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Logopit_1674592717201.png"
x-content-type-options: nosniff
date: Fri, 01 Dec 2023 07:05:38 GMT
server: fife
content-length: 436441
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjzA_pi5nzHt_do_InoVGEqSHJ1iyzgovVh3SfYfpp7kzaz49hahkrWJaoeXrCm3ZFIqM_PwHC_oH93XVPleGT2PUtjZ_io3h9lZfZuQplAVcTDaVVi0swYXsJdY-V7dm06kjzKkYGqHDPw05HMQOeGWC_J7kdY9yQCh3m2UgS3MPayJ1REs81HS1N5Vw/w680/Clint%20Eastwood%20Lifestyle.png
200 OK 459 kB URL GET HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjzA_pi5nzHt_do_InoVGEqSHJ1iyzgovVh3SfYfpp7kzaz49hahkrWJaoeXrCm3ZFIqM_PwHC_oH93XVPleGT2PUtjZ_io3h9lZfZuQplAVcTDaVVi0swYXsJdY-V7dm06kjzKkYGqHDPw05HMQOeGWC_J7kdY9yQCh3m2UgS3MPayJ1REs81HS1N5Vw/w680/Clint%20Eastwood%20Lifestyle.png
IP
Requested by https://www.upayki.com/?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type PNG image data, 680 x 382, 8-bit/color RGB, non-interlaced\012- data
Size 459 kB (459164 bytes)
Hash bdd0dd4e91583b05a02763920cea668a
0e6f463044e5318e433ac7db54fcaf150ce4c8aa
460f87c31f6b8bcb483c5e644694c58a99af688d28e7e67f9e5b06baa4df77a7
GET /img/b/R29vZ2xl/AVvXsEjzA_pi5nzHt_do_InoVGEqSHJ1iyzgovVh3SfYfpp7kzaz49hahkrWJaoeXrCm3ZFIqM_PwHC_oH93XVPleGT2PUtjZ_io3h9lZfZuQplAVcTDaVVi0swYXsJdY-V7dm06kjzKkYGqHDPw05HMQOeGWC_J7kdY9yQCh3m2UgS3MPayJ1REs81HS1N5Vw/w680/Clint%20Eastwood%20Lifestyle.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upayki.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-expose-headers: Content-Length
etag: "v3e9"
expires: Sat, 02 Dec 2023 07:05:38 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Clint Eastwood Lifestyle.png"
x-content-type-options: nosniff
date: Fri, 01 Dec 2023 07:05:38 GMT
server: fife
content-length: 459164
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/navbar.g?targetBlogID=954420004606030841&blogName=Upayki&publishMode=PUBLISH_MODE_HOSTED&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://www.upayki.com/search&blogLocale=en&v=2&homepageUrl=https://www.upayki.com/&vt=-1427643499120700612&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__
200 OK 6.6 kB URL GET HTTP/3 www.blogger.com/navbar.g?targetBlogID=954420004606030841&blogName=Upayki&publishMode=PUBLISH_MODE_HOSTED&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://www.upayki.com/search&blogLocale=en&v=2&homepageUrl=https://www.upayki.com/&vt=-1427643499120700612&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__
IP
Requested by https://www.upayki.com/?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6836), with no line terminators
Hash b3e099566a5bc1b35009e1b7ec188807
a9725fd4e86e133faa0536709ec83a38ac466a8d
e99e2dce707e48dce54dbb5a4f7751cb9658a3438ae65e5fc134e00764262e05
GET /navbar.g?targetBlogID=954420004606030841&blogName=Upayki&publishMode=PUBLISH_MODE_HOSTED&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://www.upayki.com/search&blogLocale=en&v=2&homepageUrl=https://www.upayki.com/&vt=-1427643499120700612&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__ HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upayki.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 01 Dec 2023 07:05:37 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 2549
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
rawcdn.githack.com/mhdfasilwyd/script/b5ef06b19b4dcfe84de574c318ccb65a439bb182/adsense-click.js
200 OK 828 B URL GET HTTP/2 rawcdn.githack.com/mhdfasilwyd/script/b5ef06b19b4dcfe84de574c318ccb65a439bb182/adsense-click.js
IP
Requested by https://www.upayki.com/?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectgithack.com
FingerprintE0:4C:6A:3D:28:60:EF:AD:74:3C:0F:96:F0:1E:27:17:61:4F:F6:1E
ValiditySat, 04 Nov 2023 09:58:56 GMT - Fri, 02 Feb 2024 09:58:55 GMT
File type ASCII text, with very long lines (859), with no line terminators
Hash 4ed23d8ac4d3691fe4db521882bb2445
f0092be42c8233e7939c2acb8d039e01d29def23
83dee11756fde45af45c9ddc12b69767fe4ec1f4fcd0e349297863499dcbcca0
GET /mhdfasilwyd/script/b5ef06b19b4dcfe84de574c318ccb65a439bb182/adsense-click.js HTTP/1.1
Host: rawcdn.githack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upayki.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 07:05:38 GMT
content-type: application/javascript; charset=utf-8
etag: W/"6da6f913d4b77225b39e11c4948421d1ac03b25afd1cce172f44c90b16f69d1b"
x-content-type-options: nosniff
x-github-request-id: BC6E:CD28:65E350:6B4225:65409E6D
via: 1.1 varnish
x-served-by: cache-hel1410034-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1698733677.437682,VS0,VE187
vary: Authorization,Accept-Encoding,Origin
cross-origin-resource-policy: cross-origin
x-fastly-request-id: 0ce136eb3a27907b9bf9c32d5e843ad8c384c0a4
source-age: 0
expires: Wed, 30 Oct 2024 06:27:57 GMT
cache-control: max-age=31536000, public, immutable
x-robots-tag: none
access-control-allow-origin: *
x-githack-cache-status: MISS
cf-cache-status: HIT
age: 611053
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eO9RzNimHVkKt5AQLiZlt0LRKjS%2B3bfXIATbHzUuPoZ60lf3mrTvcPCGCkTWusk4ToTyvCh%2B4Hn12Wvu8cw5WoKSfw3Ru4eTJBv0cDk7XuiAbQ2FNxLswJR03a42sEQDaYCPvHc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e97ba1af0b4c7b-HEL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.upayki.com/favicon.ico
200 OK 1.2 kB URL GET HTTP/2 www.upayki.com/favicon.ico
IP
Requested by https://www.upayki.com/?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectwww.upayki.com
Fingerprint01:6D:B9:EB:6C:59:84:5B:BC:0C:91:DF:0A:E6:C4:AA:1E:A1:4F:71
ValidityThu, 30 Nov 2023 16:25:22 GMT - Wed, 28 Feb 2024 17:16:14 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash b0472cb9ed76178b2cce4489694f5e05
8c249b8805183d2d7b5ec0ae4bd7bcb2fbea10a3
d859da11502d7f97e184179aef1e8065febbbe316bd0cd11ded97a59b59d2fc5
GET /favicon.ico HTTP/1.1
Host: www.upayki.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upayki.com/?m=1
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=20d055bd-29fa-448c-a125-785d9d1f7cd4%3A2%3A1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/x-icon; charset=UTF-8
expires: Fri, 01 Dec 2023 07:05:37 GMT
date: Fri, 01 Dec 2023 07:05:37 GMT
cache-control: private, max-age=86400
last-modified: Wed, 29 Nov 2023 09:17:40 GMT
etag: W/"2e88094cf732c474a449ef9b32ba6a53181637f23c2b7a08b6bfd8b3cdac9773"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 527
server: GSE
X-Firefox-Spdy: h2
142.250.74.147
104.21.234.230
18.185.191.211
0.0.0.0