| r10.o.lencr.org/ |  23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashc3d1bfb12515d2f23214f980f7a18b8c 24cc3d9048888cc7e1f4ff42b8fdc1c16c9feb46 35a446cea345dbdb2c297726a3d6cc5f1088f4f9a3f65904c3b9655056efda06
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "35A446CEA345DBDB2C297726A3D6CC5F1088F4F9A3F65904C3B9655056EFDA06"
Last-Modified: Thu, 29 Aug 2024 09:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10941
Expires: Sat, 31 Aug 2024 23:16:58 GMT
Date: Sat, 31 Aug 2024 20:14:37 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash404e3e4520c09fcce1358b1a21f6b171 040aa03460f3d7ec6f75cae0bf5a462a4bb9798d f6fc34acb6b2d60bb37dd5caf92b0988cdd52927d80d1f5e7bc23b7db9e8209a
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "F6FC34ACB6B2D60BB37DD5CAF92B0988CDD52927D80D1F5E7BC23B7DB9E8209A"
Last-Modified: Sat, 31 Aug 2024 00:20:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8289
Expires: Sat, 31 Aug 2024 22:32:46 GMT
Date: Sat, 31 Aug 2024 20:14:37 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash231aa156f55dd8497dca6a2066312be3 741432c8275492eb38bba5d0841685dc4f864fee f348affacf8e814c579ff56d592287275dcf79e2f55f1d041921833d730d2349
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "F348AFFACF8E814C579FF56D592287275DCF79E2F55F1D041921833D730D2349"
Last-Modified: Sat, 31 Aug 2024 02:34:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12993
Expires: Sat, 31 Aug 2024 23:51:10 GMT
Date: Sat, 31 Aug 2024 20:14:37 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash9d2c063731a46a7e1548540195080de0 dd1924ebf7697509a10f3f07604f28f96b4fc498 0d414ed4850119c53fae9ddd19ee1dd95783fd08f7389c3e8ec95215023e298e
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "0D414ED4850119C53FAE9DDD19EE1DD95783FD08F7389C3E8EC95215023E298E"
Last-Modified: Sat, 31 Aug 2024 02:33:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9816
Expires: Sat, 31 Aug 2024 22:58:13 GMT
Date: Sat, 31 Aug 2024 20:14:37 GMT
Connection: keep-alive
|
|
| o.pki.goog/wr2 |  142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hashe29c6b7502d56da7472a053839669971 fbb2bff28ced450ba346fc2aff09688b5b3c5358 a42b5126baefd27e31cb0001fff43b836d232437bc9b3c5de441568e5b878ca8
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 31 Aug 2024 20:14:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| sofiahalbofanimeworld.blogspot.com.br/ | 216.58.207.193 | 302 Found | 208 B |
URL User Request GET HTTP/2sofiahalbofanimeworld.blogspot.com.br/ IP216.58.207.193:443
CertificateIssuerGoogle Trust Services Subjectmisc-sni.blogspot.com Fingerprint19:1A:AB:37:46:A3:1F:05:55:E6:DD:6B:99:D8:A7:EB:F7:F6:D5:E1 ValidityMon, 05 Aug 2024 06:59:20 GMT - Mon, 28 Oct 2024 06:59:19 GMT
File typeHTML document, ASCII text Hash7a0adbaf7873135a7491c969d115c2cc 03c8bad489492afa56d2e57cd0fed15e1fba7aff 69d4a5bc1eef97a62af9468ba4df5c2f690c42c5efdce3704e5d8aa248914406
GET / HTTP/1.1
Host: sofiahalbofanimeworld.blogspot.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: https://sofiahalbofanimeworld.blogspot.com/
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Sat, 31 Aug 2024 20:14:38 GMT
expires: Sat, 31 Aug 2024 20:14:38 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 208
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hashe29c6b7502d56da7472a053839669971 fbb2bff28ced450ba346fc2aff09688b5b3c5358 a42b5126baefd27e31cb0001fff43b836d232437bc9b3c5de441568e5b878ca8
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 31 Aug 2024 20:14:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hashe29c6b7502d56da7472a053839669971 fbb2bff28ced450ba346fc2aff09688b5b3c5358 a42b5126baefd27e31cb0001fff43b836d232437bc9b3c5de441568e5b878ca8
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 31 Aug 2024 20:14:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| sofiahalbofanimeworld.blogspot.com/ | 216.58.207.193 | 200 OK | 16 kB |
URL User Request GET HTTP/2sofiahalbofanimeworld.blogspot.com/ IP216.58.207.193:443
CertificateIssuerGoogle Trust Services Subjectmisc-sni.blogspot.com Fingerprint19:1A:AB:37:46:A3:1F:05:55:E6:DD:6B:99:D8:A7:EB:F7:F6:D5:E1 ValidityMon, 05 Aug 2024 06:59:20 GMT - Mon, 28 Oct 2024 06:59:19 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (8483) Hash8c47bf2a2cf0a7a914dba12576dab9db a83deb44a204c001560ffedb4a56ad07414362ee c5f88f91dd0f5a784ef438beabb5e959c50e0cd73ae444a64dd0478b477bd2b3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: sofiahalbofanimeworld.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Sat, 31 Aug 2024 20:14:38 GMT
date: Sat, 31 Aug 2024 20:14:38 GMT
cache-control: private, max-age=0
last-modified: Sun, 25 Aug 2024 18:14:46 GMT
etag: W/"e17977b52bdd0a621448f62835cc3b0c56be75d44349539aaa142eac79732e66"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 15951
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| sofiahalbofanimeworld.blogspot.com/js/cookienotice.js | 216.58.207.193 | 200 OK | 2.0 kB |
URL GET HTTP/3sofiahalbofanimeworld.blogspot.com/js/cookienotice.js IP216.58.207.193:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subjectmisc-sni.blogspot.com Fingerprint19:1A:AB:37:46:A3:1F:05:55:E6:DD:6B:99:D8:A7:EB:F7:F6:D5:E1 ValidityMon, 05 Aug 2024 06:59:20 GMT - Mon, 28 Oct 2024 06:59:19 GMT
File typeJavaScript source, ASCII text Hasha705132a2174f88e196ec3610d68faa8 3bad57a48d973a678fec600d45933010f6edc659 068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/cookienotice.js HTTP/1.1
Host: sofiahalbofanimeworld.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 31 Aug 2024 16:58:57 GMT
expires: Sat, 07 Sep 2024 16:58:57 GMT
cache-control: public, max-age=604800
last-modified: Sat, 31 Aug 2024 11:55:14 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 11742
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hashf4e07321a2e1decf6903a3f89f5204e8 b12f2f6c6764268d2c34eefa827236e6bf1ef578 4a0a5c603f808fe115a6f6c6bee308e6244e04b1dc0289b196c8533c286242d1
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 31 Aug 2024 20:14:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash867e9e1f0661bcebc69207097daa53e0 eec433fcd15fbab80c2bf89e3329eaf373879e47 77b7be7e0dffd83fbe4df2558d4a64585d46746a940ebc35fcee889bea6b351e
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 31 Aug 2024 20:14:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| r11.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashcd17cb634dff900a1abd17dd730b0151 1c8c3d220db108bce3fa89adf307e60dedb6d1f8 258b4750ae88b4ec55c156020ceae77b64bc5042990ac9502780b59faa8f3779
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "258B4750AE88B4EC55C156020CEAE77B64BC5042990AC9502780B59FAA8F3779"
Last-Modified: Sat, 31 Aug 2024 02:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9578
Expires: Sat, 31 Aug 2024 22:54:17 GMT
Date: Sat, 31 Aug 2024 20:14:39 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashcd17cb634dff900a1abd17dd730b0151 1c8c3d220db108bce3fa89adf307e60dedb6d1f8 258b4750ae88b4ec55c156020ceae77b64bc5042990ac9502780b59faa8f3779
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "258B4750AE88B4EC55C156020CEAE77B64BC5042990AC9502780B59FAA8F3779"
Last-Modified: Sat, 31 Aug 2024 02:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9578
Expires: Sat, 31 Aug 2024 22:54:17 GMT
Date: Sat, 31 Aug 2024 20:14:39 GMT
Connection: keep-alive
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash1900e73cdcc02bede7242d709e8b9598 bb799f2039a394d2b487660860d4ebd0e035d864 8d912610a6cb07a85c6aca9d23b25d2d318971dcb90216ca9859b462626e135b
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 31 Aug 2024 20:14:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash14e44fbc79fff9130149a02877dfe5c1 507161302b283d352b59ce0a97a6f00ff3b1eaa5 44b13c462fa1e4aaa47b5f91bbebe2c37f42c788a0d10e814614ea9f1f23cedb
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 31 Aug 2024 20:14:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-5387507473582359&host=ca-host-pub-1556223355139109 | 142.250.74.98 | 200 OK | 52 kB |
URL GET HTTP/2pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-5387507473582359&host=ca-host-pub-1556223355139109 IP142.250.74.98:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.g.doubleclick.net Fingerprint6B:E4:45:BC:75:8F:CB:78:D9:D4:11:82:64:25:68:F4:30:DD:46:7B ValidityMon, 05 Aug 2024 06:37:16 GMT - Mon, 28 Oct 2024 06:37:15 GMT
File typeJavaScript source, ASCII text, with very long lines (3967) Hash5eb3640c00cfd52993eb70eb6f4d8124 b6a4d0a7d592bf3c510f6ea527d98b536de0c640 74673743ce52397f29319122719ac6b323bd2d251515974311f48075b6dfa592
GET /pagead/js/adsbygoogle.js?client=ca-pub-5387507473582359&host=ca-host-pub-1556223355139109 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sofiahalbofanimeworld.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
link: <https://googleads.g.doubleclick.net>; rel="preconnect"; crossorigin
vary: Accept-Encoding
date: Sat, 31 Aug 2024 20:14:39 GMT
expires: Sat, 31 Aug 2024 20:14:39 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
content-type: text/javascript; charset=UTF-8
etag: 13207816938632592915
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 52239
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| apis.google.com/js/platform.js | 142.250.74.110 | 200 OK | 25 kB |
URL GET HTTP/2apis.google.com/js/platform.js IP142.250.74.110:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.apis.google.com Fingerprint1E:1A:B0:76:36:C7:FD:76:2A:BF:F0:B8:6B:66:12:14:AE:B2:05:08 ValidityMon, 05 Aug 2024 07:20:18 GMT - Mon, 28 Oct 2024 07:20:17 GMT
File typeJavaScript source, ASCII text, with very long lines (2774) Hash9c971144141aa4a6599b9f0954210340 e0592bc9344b1917a2f37f0b4d163eb2a73bcdac fd147b07bdeee3792d9bf29d77d72396488b3bef3c1ef3a185f343192db704fa
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 24573
date: Sat, 31 Aug 2024 20:14:39 GMT
expires: Sat, 31 Aug 2024 20:14:39 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "155b010c76c0be57"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.blogger.com/static/v1/widgets/3566091532-css_bundle_v2.css | 142.250.74.105 | 200 OK | 7.8 kB |
URL GET HTTP/2www.blogger.com/static/v1/widgets/3566091532-css_bundle_v2.css IP142.250.74.105:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.blogger.com FingerprintE5:22:7F:76:57:F8:0E:D9:DA:51:9C:EF:6F:0A:70:00:E3:45:B4:8A ValidityMon, 05 Aug 2024 06:35:16 GMT - Mon, 28 Oct 2024 06:35:15 GMT
File typeASCII text, with very long lines (35959) Hash1e32420a7b6ddbdcb7def8b3141c4d1e a1be54d42ff1f95244c9653539f90318f5bc0580 a9ca837900b6ae007386d400f659c233120b8af7d93407fd6475c9180d9e83d2
GET /static/v1/widgets/3566091532-css_bundle_v2.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 7756
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 30 Aug 2024 03:57:50 GMT
expires: Sat, 30 Aug 2025 03:57:50 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 29 Aug 2024 15:58:15 GMT
content-type: text/css
vary: Accept-Encoding
age: 145009
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hashc89d87f6f314e605db657aa731e5dad7 b39563f5cddef7b394daa5b186bad33f8909b38c df5c49c5ccd8aaab23bb8470154711b6a6dabc8ca26a29393059321f8f858389
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 31 Aug 2024 20:14:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.blogger.com/static/v1/widgets/2430006334-widgets.js | 142.250.74.105 | 200 OK | 51 kB |
URL GET HTTP/2www.blogger.com/static/v1/widgets/2430006334-widgets.js IP142.250.74.105:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.blogger.com FingerprintE5:22:7F:76:57:F8:0E:D9:DA:51:9C:EF:6F:0A:70:00:E3:45:B4:8A ValidityMon, 05 Aug 2024 06:35:16 GMT - Mon, 28 Oct 2024 06:35:15 GMT
File typeJavaScript source, ASCII text, with very long lines (3242) Hashd02b3f75b2d267ff21d74390f3c2f482 fedebac5d02a3864bb3a419756afb7a8318d0674 19ac01ff785059f6e4cd94f3caa0193f48e19086f8a3d0484cb573f2d08b5b23
GET /static/v1/widgets/2430006334-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 51391
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 30 Aug 2024 16:20:31 GMT
expires: Sat, 30 Aug 2025 16:20:31 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 29 Aug 2024 18:59:57 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 100448
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| resources.blogblog.com/img/icon18_edit_allbkg.gif | 142.250.74.105 | 200 OK | 162 B |
URL GET HTTP/2resources.blogblog.com/img/icon18_edit_allbkg.gif IP142.250.74.105:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.blogger.com FingerprintE5:22:7F:76:57:F8:0E:D9:DA:51:9C:EF:6F:0A:70:00:E3:45:B4:8A ValidityMon, 05 Aug 2024 06:35:16 GMT - Mon, 28 Oct 2024 06:35:15 GMT
File typeGIF image data, version 89a, 18 x 18 Hashc991641178ff05adf0d004298b5eafa9 d8f6ce8ecd92b86d49849360f6b81ceb10b4c941 ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
GET /img/icon18_edit_allbkg.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 162
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 30 Aug 2024 08:02:01 GMT
expires: Fri, 06 Sep 2024 08:02:01 GMT
cache-control: public, max-age=604800
last-modified: Thu, 29 Aug 2024 15:58:15 GMT
content-type: image/gif
age: 130358
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| resources.blogblog.com/img/icon18_email.gif | 142.250.74.105 | 200 OK | 164 B |
URL GET HTTP/2resources.blogblog.com/img/icon18_email.gif IP142.250.74.105:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.blogger.com FingerprintE5:22:7F:76:57:F8:0E:D9:DA:51:9C:EF:6F:0A:70:00:E3:45:B4:8A ValidityMon, 05 Aug 2024 06:35:16 GMT - Mon, 28 Oct 2024 06:35:15 GMT
File typeGIF image data, version 89a, 18 x 13 Hash36b9f993db1b953f3b9b08040aaf9af4 18248661b307586dc291fd2dff4bb59cf7579475 1258cbe1e2900ec3df11a83a6bb6008d7a833f783a6df80b0d5d45a052ac1466
GET /img/icon18_email.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 164
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 30 Aug 2024 12:23:05 GMT
expires: Fri, 06 Sep 2024 12:23:05 GMT
cache-control: public, max-age=604800
last-modified: Thu, 29 Aug 2024 21:58:10 GMT
content-type: image/gif
age: 114694
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hashc89d87f6f314e605db657aa731e5dad7 b39563f5cddef7b394daa5b186bad33f8909b38c df5c49c5ccd8aaab23bb8470154711b6a6dabc8ca26a29393059321f8f858389
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 31 Aug 2024 20:14:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hashf4e07321a2e1decf6903a3f89f5204e8 b12f2f6c6764268d2c34eefa827236e6bf1ef578 4a0a5c603f808fe115a6f6c6bee308e6244e04b1dc0289b196c8533c286242d1
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 31 Aug 2024 20:14:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hashc89d87f6f314e605db657aa731e5dad7 b39563f5cddef7b394daa5b186bad33f8909b38c df5c49c5ccd8aaab23bb8470154711b6a6dabc8ca26a29393059321f8f858389
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 31 Aug 2024 20:14:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| r11.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash2982e7793bc1b6e88534b26d5506cb88 25c733ccaaff2bf377eb9451545ea13120e6ddc0 7cddd77543a7c5fb79246488d2d9a37185d321db4863a31fa5de6d286b823753
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "7CDDD77543A7C5FB79246488D2D9A37185D321DB4863A31FA5DE6D286B823753"
Last-Modified: Sat, 31 Aug 2024 05:35:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=722
Expires: Sat, 31 Aug 2024 20:26:41 GMT
Date: Sat, 31 Aug 2024 20:14:39 GMT
Connection: keep-alive
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash14e44fbc79fff9130149a02877dfe5c1 507161302b283d352b59ce0a97a6f00ff3b1eaa5 44b13c462fa1e4aaa47b5f91bbebe2c37f42c788a0d10e814614ea9f1f23cedb
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 31 Aug 2024 20:14:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hash002bdfe1e7e83be2768cf1feaa795ffe a96ba612b38ebe5043361894a0227892147efb59 ea12007112e8753a622ec590e46f1569d79c40890df4239079a222174e2748fe
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 31 Aug 2024 20:14:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| pagead2.googlesyndication.com/pagead/js/google_top_exp.js | 142.250.74.98 | 200 OK | 42 B |
URL GET HTTP/3pagead2.googlesyndication.com/pagead/js/google_top_exp.js IP142.250.74.98:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.g.doubleclick.net Fingerprint6B:E4:45:BC:75:8F:CB:78:D9:D4:11:82:64:25:68:F4:30:DD:46:7B ValidityMon, 05 Aug 2024 06:37:16 GMT - Mon, 28 Oct 2024 06:37:15 GMT
Hash7f5f2be159837d73b72a4b37616bce44 c93d7f25b530b05c26440d3352213b683d03dcc3 ccecd185ac16ba0a538840f37701053fbb861f7fbbdd86039c7415fcd924d1f2
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 42
x-xss-protection: 0
date: Sat, 31 Aug 2024 09:53:16 GMT
expires: Sat, 14 Sep 2024 09:53:16 GMT
cache-control: public, max-age=1209600
age: 37283
etag: 13036835877489095579
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| resources.blogblog.com/blogblog/data/1kt/ethereal/white-fade.png | 142.250.74.105 | 200 OK | 144 B |
URL GET HTTP/2resources.blogblog.com/blogblog/data/1kt/ethereal/white-fade.png IP142.250.74.105:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.blogger.com FingerprintE5:22:7F:76:57:F8:0E:D9:DA:51:9C:EF:6F:0A:70:00:E3:45:B4:8A ValidityMon, 05 Aug 2024 06:35:16 GMT - Mon, 28 Oct 2024 06:35:15 GMT
File typePNG image data, 1 x 590, 8-bit/color RGBA, non-interlaced Hash4ba06844286b94adfc8ad7bc8a8fde94 9e1fa0c37abf7c05300b90f8938dd2458409a35e 909a47a95386ffd0420ff44c0f1278a3259b918b1bc8213afa97ad6a4bb5bb58
GET /blogblog/data/1kt/ethereal/white-fade.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 144
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 30 Aug 2024 01:29:18 GMT
expires: Fri, 06 Sep 2024 01:29:18 GMT
cache-control: public, max-age=604800
last-modified: Thu, 29 Aug 2024 23:56:19 GMT
content-type: image/png
age: 153921
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.blogger.com/img/share_buttons_20_3.png | 142.250.74.105 | 200 OK | 5.1 kB |
URL GET HTTP/2www.blogger.com/img/share_buttons_20_3.png IP142.250.74.105:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.blogger.com FingerprintE5:22:7F:76:57:F8:0E:D9:DA:51:9C:EF:6F:0A:70:00:E3:45:B4:8A ValidityMon, 05 Aug 2024 06:35:16 GMT - Mon, 28 Oct 2024 06:35:15 GMT
File typePNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced Hashad9999106d5f550920b586e8e1704e5a 93fd02c51166402a41f96509cd0ca3fb917877dd 3829a5b2ade7cfc416c80b8f3df71e49e68672875f025d525223978f5cee3fd3
GET /img/share_buttons_20_3.png HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/static/v1/widgets/3566091532-css_bundle_v2.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 5080
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 30 Aug 2024 17:32:10 GMT
expires: Fri, 06 Sep 2024 17:32:10 GMT
cache-control: public, max-age=604800
last-modified: Thu, 29 Aug 2024 15:58:15 GMT
content-type: image/png
age: 96149
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en._ShUtMH1OvQ.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/am=AABA/rs=AHpOoo9sEd_Wjj_xEtgO8qX69P7hAZI9cg/cb=gapi.loaded_0?le=scs | 142.250.74.110 | 200 OK | 62 kB |
URL GET HTTP/2apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en._ShUtMH1OvQ.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/am=AABA/rs=AHpOoo9sEd_Wjj_xEtgO8qX69P7hAZI9cg/cb=gapi.loaded_0?le=scs IP142.250.74.110:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.apis.google.com Fingerprint1E:1A:B0:76:36:C7:FD:76:2A:BF:F0:B8:6B:66:12:14:AE:B2:05:08 ValidityMon, 05 Aug 2024 07:20:18 GMT - Mon, 28 Oct 2024 07:20:17 GMT
File typeJavaScript source, ASCII text, with very long lines (2681) Hash02e3e24f15adc2bbba68bea7f59e9a3b eea8aefec8154ccb3b509e327c86ddb832f985c6 745dd4aacb59a3e1fd1dc80632d738a62dc5658ca57e8fe9a9fc921a824444fd
GET /_/scs/abc-static/_/js/k=gapi.lb.en._ShUtMH1OvQ.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/am=AABA/rs=AHpOoo9sEd_Wjj_xEtgO8qX69P7hAZI9cg/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 62532
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 29 Aug 2024 22:36:59 GMT
expires: Fri, 29 Aug 2025 22:36:59 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 08 Aug 2024 21:32:10 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 164260
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| themes.googleusercontent.com/image?id=0BwVBOzw_-hbMMDZjM2Q4YjctMTY2OC00ZGU2LWJjZDYtODVjOGRiOThlMGQ3 | 142.250.74.97 | 200 OK | 43 kB |
URL GET HTTP/2themes.googleusercontent.com/image?id=0BwVBOzw_-hbMMDZjM2Q4YjctMTY2OC00ZGU2LWJjZDYtODVjOGRiOThlMGQ3 IP142.250.74.97:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint6C:DD:E8:38:9C:56:23:58:B5:BF:84:3B:D0:2B:24:C7:10:3E:89:C3 ValidityMon, 05 Aug 2024 07:15:31 GMT - Mon, 28 Oct 2024 07:15:30 GMT
File typePNG image data, 1515 x 971, 8-bit/color RGBA, non-interlaced Hash05d2738b4dc90530c7cfab2ec6a780bd f156f3f4d6b41803bcb8704a01e38623098f09af 919e34ec42b0b8a6f9754b9e33f9faba1c20a79bc151cc03009fc0e2bb17a922
GET /image?id=0BwVBOzw_-hbMMDZjM2Q4YjctMTY2OC00ZGU2LWJjZDYtODVjOGRiOThlMGQ3 HTTP/1.1
Host: themes.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Sun, 01 Sep 2024 20:14:40 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.png"
x-content-type-options: nosniff
date: Sat, 31 Aug 2024 20:14:40 GMT
server: fife
content-length: 42869
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pagead2.googlesyndication.com/pagead/managed/js/adsense/m202408270101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-5387507473582359&plah=sofiahalbofanimeworld.blogspot.com | 142.250.74.98 | 200 OK | 146 kB |
URL GET HTTP/3pagead2.googlesyndication.com/pagead/managed/js/adsense/m202408270101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-5387507473582359&plah=sofiahalbofanimeworld.blogspot.com IP142.250.74.98:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.g.doubleclick.net Fingerprint6B:E4:45:BC:75:8F:CB:78:D9:D4:11:82:64:25:68:F4:30:DD:46:7B ValidityMon, 05 Aug 2024 06:37:16 GMT - Mon, 28 Oct 2024 06:37:15 GMT
File typeJavaScript source, ASCII text, with very long lines (1876) Size146 kB (146444 bytes) Hashf6b486c1fda0a19e107c9ce98e94a6fe 5e8ed1911552334fb0a2cfbca7be49f46bd52b7b ceb0b93fccbe4ab0178535e0bc603e3fb327cc100fded8bdd8fb2835d20e12aa
GET /pagead/managed/js/adsense/m202408270101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-5387507473582359&plah=sofiahalbofanimeworld.blogspot.com HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Sat, 31 Aug 2024 20:14:39 GMT
expires: Sat, 31 Aug 2024 20:14:39 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
content-type: text/javascript; charset=UTF-8
etag: 12373892298724324567
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 146444
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hashc89d87f6f314e605db657aa731e5dad7 b39563f5cddef7b394daa5b186bad33f8909b38c df5c49c5ccd8aaab23bb8470154711b6a6dabc8ca26a29393059321f8f858389
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 31 Aug 2024 20:14:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.blogger.com/img/logo-16.png | 142.250.74.105 | 200 OK | 279 B |
URL GET HTTP/3www.blogger.com/img/logo-16.png IP142.250.74.105:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.blogger.com FingerprintE5:22:7F:76:57:F8:0E:D9:DA:51:9C:EF:6F:0A:70:00:E3:45:B4:8A ValidityMon, 05 Aug 2024 06:35:16 GMT - Mon, 28 Oct 2024 06:35:15 GMT
File typePNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced Hash5ffecab6c722bb0adc3fce8d83b27993 0e59b05d3da526e82bb4f5d47c5d94e2a318dafb cca664ca16fde285160e80eae6ba4501c27b1dd1ce09aec1e84caa74b5baff53
GET /img/logo-16.png HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 279
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 30 Aug 2024 01:06:58 GMT
expires: Fri, 06 Sep 2024 01:06:58 GMT
cache-control: public, max-age=604800
last-modified: Thu, 29 Aug 2024 21:58:10 GMT
content-type: image/png
age: 155262
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.blogger.com/dyn-css/authorization.css?targetBlogID=3405693820859981231&zx=7bca273e-c626-4618-a336-4a507e05be1a | 142.250.74.105 | 200 OK | 21 B |
URL GET HTTP/2www.blogger.com/dyn-css/authorization.css?targetBlogID=3405693820859981231&zx=7bca273e-c626-4618-a336-4a507e05be1a IP142.250.74.105:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.blogger.com FingerprintE5:22:7F:76:57:F8:0E:D9:DA:51:9C:EF:6F:0A:70:00:E3:45:B4:8A ValidityMon, 05 Aug 2024 06:35:16 GMT - Mon, 28 Oct 2024 06:35:15 GMT
File typevery short file (no magic) Hash68b329da9893e34099c7d8ad5cb9c940 adc83b19e793491b1c6ea0fd8b46cd9f32e592fc 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /dyn-css/authorization.css?targetBlogID=3405693820859981231&zx=7bca273e-c626-4618-a336-4a507e05be1a HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 31 Aug 2024 20:14:40 GMT
last-modified: Sat, 31 Aug 2024 20:14:40 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.blogger.com/navbar.g?targetBlogID=3405693820859981231&blogName=sofiahalbof+anime+world+&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://sofiahalbofanimeworld.blogspot.com/search&blogLocale=en&v=2&homepageUrl=https://sofiahalbofanimeworld.blogspot.com/&vt=-5639291567810939189&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en._ShUtMH1OvQ.O%2Fam%3DAABA%2Fd%3D1%2Frs%3DAHpOoo9sEd_Wjj_xEtgO8qX69P7hAZI9cg%2Fm%3D__features__ | 142.250.74.105 | | 2.2 kB |
URL www.blogger.com/navbar.g?targetBlogID=3405693820859981231&blogName=sofiahalbof+anime+world+&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://sofiahalbofanimeworld.blogspot.com/search&blogLocale=en&v=2&homepageUrl=https://sofiahalbofanimeworld.blogspot.com/&vt=-5639291567810939189&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en._ShUtMH1OvQ.O%2Fam%3DAABA%2Fd%3D1%2Frs%3DAHpOoo9sEd_Wjj_xEtgO8qX69P7hAZI9cg%2Fm%3D__features__ IP142.250.74.105:0
CertificateIssuerGoogle Trust Services Subject*.blogger.com FingerprintE5:22:7F:76:57:F8:0E:D9:DA:51:9C:EF:6F:0A:70:00:E3:45:B4:8A ValidityMon, 05 Aug 2024 06:35:16 GMT - Mon, 28 Oct 2024 06:35:15 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1963) Hash21ce1dca825bede0442f1e8c1a2c5595 8c545ab22ba7c599a6e4b1f60b98372bf1a3fccf 56c55111bddf029bd24aa0507a17c1a77ca29804ff21c4b150d2dfd674d88258
GET /navbar.g?targetBlogID=3405693820859981231&blogName=sofiahalbof+anime+world+&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://sofiahalbofanimeworld.blogspot.com/search&blogLocale=en&v=2&homepageUrl=https://sofiahalbofanimeworld.blogspot.com/&vt=-5639291567810939189&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en._ShUtMH1OvQ.O%2Fam%3DAABA%2Fd%3D1%2Frs%3DAHpOoo9sEd_Wjj_xEtgO8qX69P7hAZI9cg%2Fm%3D__features__ HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 31 Aug 2024 20:14:40 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 2191
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| pagead2.googlesyndication.com/pagead/html/r20240828/r20110914/zrt_lookup_fy2021.html | 142.250.74.98 | 200 OK | 4.1 kB |
URL GET HTTP/3pagead2.googlesyndication.com/pagead/html/r20240828/r20110914/zrt_lookup_fy2021.html IP142.250.74.98:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.g.doubleclick.net Fingerprint6B:E4:45:BC:75:8F:CB:78:D9:D4:11:82:64:25:68:F4:30:DD:46:7B ValidityMon, 05 Aug 2024 06:37:16 GMT - Mon, 28 Oct 2024 06:37:15 GMT
File typeHTML document, ASCII text, with very long lines (2331) Hashb054fadc6a5681da390ab036238878df 0d3cbd97e79d4e92b4074316930ee67067501c24 cd4484344d561139196394e13155108ff98c9e264c1292f8289469b423e74eb9
GET /pagead/html/r20240828/r20110914/zrt_lookup_fy2021.html HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 4111
x-xss-protection: 0
date: Sat, 31 Aug 2024 01:42:08 GMT
expires: Sat, 14 Sep 2024 01:42:08 GMT
cache-control: public, max-age=1209600
age: 66752
etag: 5947459844715414650
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| pagead2.googlesyndication.com/pagead/gen_204?id=ach_evt&tn=DIV&id=cookieChoiceInfo&cls=cookie-choices-info%20singleton-element&ign=false&pw=1280&ph=1024&x=0&y=0 | 142.250.74.98 | 204 No Content | 0 B |
URL GET HTTP/3pagead2.googlesyndication.com/pagead/gen_204?id=ach_evt&tn=DIV&id=cookieChoiceInfo&cls=cookie-choices-info%20singleton-element&ign=false&pw=1280&ph=1024&x=0&y=0 IP142.250.74.98:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.g.doubleclick.net Fingerprint6B:E4:45:BC:75:8F:CB:78:D9:D4:11:82:64:25:68:F4:30:DD:46:7B ValidityMon, 05 Aug 2024 06:37:16 GMT - Mon, 28 Oct 2024 06:37:15 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/gen_204?id=ach_evt&tn=DIV&id=cookieChoiceInfo&cls=cookie-choices-info%20singleton-element&ign=false&pw=1280&ph=1024&x=0&y=0 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 31 Aug 2024 20:14:40 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDlyDEDjyxiF96KQfJE8879Q4Qr3I2-pXDF6f2QHMsnUOPmbucZeiWG6uNTjgyWXQw2RnaRjIh0JBTVYHciTDT8qPFXBdsj2vn2vonN6ofQ5iomWcohBHqCZxs1wju2uU8jCHANUerd4k/w400-h319-rw/tumblr_pay8m5quBt1x58jt2o1_500.jpg | 142.250.74.97 | 200 OK | 22 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDlyDEDjyxiF96KQfJE8879Q4Qr3I2-pXDF6f2QHMsnUOPmbucZeiWG6uNTjgyWXQw2RnaRjIh0JBTVYHciTDT8qPFXBdsj2vn2vonN6ofQ5iomWcohBHqCZxs1wju2uU8jCHANUerd4k/w400-h319-rw/tumblr_pay8m5quBt1x58jt2o1_500.jpg IP142.250.74.97:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint6C:DD:E8:38:9C:56:23:58:B5:BF:84:3B:D0:2B:24:C7:10:3E:89:C3 ValidityMon, 05 Aug 2024 07:15:31 GMT - Mon, 28 Oct 2024 07:15:30 GMT
File typeRIFF (little-endian) data, Web/P image Hashaf15e7f1c8524a74490c45c690dceeb3 4da4a90be029c7cb62d1e1542e6f5b169506bb4c a9c1fc9b2035889d12a487b54e55a719b4e54842ae2bac7536ddf95960ec9fa5
GET /img/b/R29vZ2xl/AVvXsEhDlyDEDjyxiF96KQfJE8879Q4Qr3I2-pXDF6f2QHMsnUOPmbucZeiWG6uNTjgyWXQw2RnaRjIh0JBTVYHciTDT8qPFXBdsj2vn2vonN6ofQ5iomWcohBHqCZxs1wju2uU8jCHANUerd4k/w400-h319-rw/tumblr_pay8m5quBt1x58jt2o1_500.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
vary: Origin
access-control-expose-headers: Content-Length
etag: "v4ff"
expires: Sun, 01 Sep 2024 20:14:40 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="tumblr_pay8m5quBt1x58jt2o1_500.webp"
x-content-type-options: nosniff
date: Sat, 31 Aug 2024 20:14:40 GMT
server: fife
content-length: 22108
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ad2bitcoin.com/ad.php?ref=sofiahalbof&width=300 | 162.0.208.108 | 200 OK | 1.5 kB |
URL GET HTTP/1.1ad2bitcoin.com/ad.php?ref=sofiahalbof&width=300 IP162.0.208.108:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerLet's Encrypt Subjectad2bitcoin.com.traffic2bitcoin.com Fingerprint5C:2B:40:7E:5B:1B:1F:33:93:73:67:81:49:A3:F7:73:C4:8A:EB:46 ValidityWed, 21 Aug 2024 00:57:57 GMT - Tue, 19 Nov 2024 00:57:56 GMT
File typeJavaScript source, ASCII text, with very long lines (1162) Hash974268a971776cbae68c7d72944e431c 5b2695325d1da4a1f10834366925316bbc541e39 9360611b685e8672ca1d08a931a0a19b257b7bc4030318a90a61cda9cdb76023
GET /ad.php?ref=sofiahalbof&width=300 HTTP/1.1
Host: ad2bitcoin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 31 Aug 2024 20:14:40 GMT
Server: Apache
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1521
Keep-Alive: timeout=5, max=50
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhseTpUxkcdHqsidRBkMaLVFAmLGSBygwPxwJ6s7vr7go-Ee9TkilI213RIDQBF618qFHscAZc0z3EMww7XjSsTn5PgqholxWnHEhw9e48EJR23kEu8Nt4EZJ3X3uA_8XhpO5DnzJhDFKU/w635-h640/original+%25284%2529.jpg | 142.250.74.97 | 200 OK | 25 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhseTpUxkcdHqsidRBkMaLVFAmLGSBygwPxwJ6s7vr7go-Ee9TkilI213RIDQBF618qFHscAZc0z3EMww7XjSsTn5PgqholxWnHEhw9e48EJR23kEu8Nt4EZJ3X3uA_8XhpO5DnzJhDFKU/w635-h640/original+%25284%2529.jpg IP142.250.74.97:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint6C:DD:E8:38:9C:56:23:58:B5:BF:84:3B:D0:2B:24:C7:10:3E:89:C3 ValidityMon, 05 Aug 2024 07:15:31 GMT - Mon, 28 Oct 2024 07:15:30 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], progressive, precision 8, 500x504, components 3 Hash4112a2265f97c15c59d8c48c0d07e556 0ee3839d780347edf08fd5f4a52388dd46bc3ad2 74477a6ab562eaaf23b770ae8a9bb469444d9e2a09fe75a229c163593e2ad518
GET /img/b/R29vZ2xl/AVvXsEhseTpUxkcdHqsidRBkMaLVFAmLGSBygwPxwJ6s7vr7go-Ee9TkilI213RIDQBF618qFHscAZc0z3EMww7XjSsTn5PgqholxWnHEhw9e48EJR23kEu8Nt4EZJ3X3uA_8XhpO5DnzJhDFKU/w635-h640/original+%25284%2529.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-expose-headers: Content-Length
etag: "v51c"
expires: Sun, 01 Sep 2024 20:14:40 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="original (4).jpg"
x-content-type-options: nosniff
date: Sat, 31 Aug 2024 20:14:40 GMT
server: fife
content-length: 24947
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pagead2.googlesyndication.com/pagead/ads?npa=1&client=ca-pub-5387507473582359&output=html&adk=1812271804&adf=3025194257&abgtt=7&lmt=1724609686&plat=2%3A16777216%2C3%3A16%2C4%3A16%2C9%3A134250504%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fsofiahalbofanimeworld.blogspot.com%2F&host=ca-host-pub-1556223355139109&pra=5&wgl=1&aihb=0&asro=0&ailel=32~1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=32~1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aifxl=32_25~29_18~30_19&aiixl=32_9~29_5~30_6&aslmct=0.7&asamct=0.7&itsi=-1&aiombap=1&dt=1725135279795&bpp=16&bdt=390&idt=462&shv=r20240828&mjsv=m202408270101&ptt=9&saldr=aa&abxe=1&eoidce=1&nras=1&correlator=4586400182608&frm=20&pv=2&u_tz=0&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_sd=1&adx=-12245933&ady=-12245933&biw=1280&bih=1024&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31086549%2C95338227%2C95341664%2C95340844%2C95341514%2C95341519&oid=2&pvsid=648894224547398&tmod=1811412233&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C1024&vis=1&rsz=%7C%7Cs%7C&abl=NS&cms=1&fu=32768&bc=31&bz=1&ifi=1&uci=a!1&fsb=1&dtd=507 | 142.250.74.98 | 200 OK | 46 B |
URL GET HTTP/3pagead2.googlesyndication.com/pagead/ads?npa=1&client=ca-pub-5387507473582359&output=html&adk=1812271804&adf=3025194257&abgtt=7&lmt=1724609686&plat=2%3A16777216%2C3%3A16%2C4%3A16%2C9%3A134250504%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fsofiahalbofanimeworld.blogspot.com%2F&host=ca-host-pub-1556223355139109&pra=5&wgl=1&aihb=0&asro=0&ailel=32~1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=32~1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aifxl=32_25~29_18~30_19&aiixl=32_9~29_5~30_6&aslmct=0.7&asamct=0.7&itsi=-1&aiombap=1&dt=1725135279795&bpp=16&bdt=390&idt=462&shv=r20240828&mjsv=m202408270101&ptt=9&saldr=aa&abxe=1&eoidce=1&nras=1&correlator=4586400182608&frm=20&pv=2&u_tz=0&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_sd=1&adx=-12245933&ady=-12245933&biw=1280&bih=1024&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31086549%2C95338227%2C95341664%2C95340844%2C95341514%2C95341519&oid=2&pvsid=648894224547398&tmod=1811412233&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C1024&vis=1&rsz=%7C%7Cs%7C&abl=NS&cms=1&fu=32768&bc=31&bz=1&ifi=1&uci=a!1&fsb=1&dtd=507 IP142.250.74.98:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.g.doubleclick.net Fingerprint6B:E4:45:BC:75:8F:CB:78:D9:D4:11:82:64:25:68:F4:30:DD:46:7B ValidityMon, 05 Aug 2024 06:37:16 GMT - Mon, 28 Oct 2024 06:37:15 GMT
File typeHTML document, ASCII text, with very long lines (603), with no line terminators Hash2c739853e3edfa26869416e3d4e5d369 c263dc1c36c954b252bc7e775e6e82865d9b29b8 00daef3b4a945d15f73efa05e0ce2ca51f2f8252e1da8fae5c2efb0f6dddacce
GET /pagead/ads?npa=1&client=ca-pub-5387507473582359&output=html&adk=1812271804&adf=3025194257&abgtt=7&lmt=1724609686&plat=2%3A16777216%2C3%3A16%2C4%3A16%2C9%3A134250504%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fsofiahalbofanimeworld.blogspot.com%2F&host=ca-host-pub-1556223355139109&pra=5&wgl=1&aihb=0&asro=0&ailel=32~1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=32~1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aifxl=32_25~29_18~30_19&aiixl=32_9~29_5~30_6&aslmct=0.7&asamct=0.7&itsi=-1&aiombap=1&dt=1725135279795&bpp=16&bdt=390&idt=462&shv=r20240828&mjsv=m202408270101&ptt=9&saldr=aa&abxe=1&eoidce=1&nras=1&correlator=4586400182608&frm=20&pv=2&u_tz=0&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_sd=1&adx=-12245933&ady=-12245933&biw=1280&bih=1024&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31086549%2C95338227%2C95341664%2C95340844%2C95341514%2C95341519&oid=2&pvsid=648894224547398&tmod=1811412233&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C1024&vis=1&rsz=%7C%7Cs%7C&abl=NS&cms=1&fu=32768&bc=31&bz=1&ifi=1&uci=a!1&fsb=1&dtd=507 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
date: Sat, 31 Aug 2024 20:14:40 GMT
server: cafe
content-length: 46
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhseTpUxkcdHqsidRBkMaLVFAmLGSBygwPxwJ6s7vr7go-Ee9TkilI213RIDQBF618qFHscAZc0z3EMww7XjSsTn5PgqholxWnHEhw9e48EJR23kEu8Nt4EZJ3X3uA_8XhpO5DnzJhDFKU/w635-h640-rw/original+%25284%2529.jpg | 142.250.74.97 | 200 OK | 24 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhseTpUxkcdHqsidRBkMaLVFAmLGSBygwPxwJ6s7vr7go-Ee9TkilI213RIDQBF618qFHscAZc0z3EMww7XjSsTn5PgqholxWnHEhw9e48EJR23kEu8Nt4EZJ3X3uA_8XhpO5DnzJhDFKU/w635-h640-rw/original+%25284%2529.jpg IP142.250.74.97:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint6C:DD:E8:38:9C:56:23:58:B5:BF:84:3B:D0:2B:24:C7:10:3E:89:C3 ValidityMon, 05 Aug 2024 07:15:31 GMT - Mon, 28 Oct 2024 07:15:30 GMT
File typeRIFF (little-endian) data, Web/P image Hash0486a0e5405a90fc0528d411f15bacfb f9bfa4be241b5dcb1d08521f2e450e6b5d60c267 047cafbd80a22fe50f919e0be95c387e2bfb3dab555eeeb1b0b3c59157b61687
GET /img/b/R29vZ2xl/AVvXsEhseTpUxkcdHqsidRBkMaLVFAmLGSBygwPxwJ6s7vr7go-Ee9TkilI213RIDQBF618qFHscAZc0z3EMww7XjSsTn5PgqholxWnHEhw9e48EJR23kEu8Nt4EZJ3X3uA_8XhpO5DnzJhDFKU/w635-h640-rw/original+%25284%2529.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
vary: Origin
access-control-expose-headers: Content-Length
etag: "v51c"
expires: Sun, 01 Sep 2024 20:14:40 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="original (4).webp"
x-content-type-options: nosniff
date: Sat, 31 Aug 2024 20:14:40 GMT
server: fife
content-length: 23620
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgeaoNsjDNQ-ft3m51CUPvtToBCbzwdc07wA-SfDPeT-QYmEmsTDzvY8IT9fbty0vA7cQw0i0FVu0FF2ondR7f191Nf0ZSiKTH-boMuR4uzVZYnx-uy132RLaT3OwItBoytd6eLbHjhJnk/s1600/tumblr_p9sx9t6ITy1tji7wmo1_640.png | 142.250.74.97 | 200 OK | 19 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgeaoNsjDNQ-ft3m51CUPvtToBCbzwdc07wA-SfDPeT-QYmEmsTDzvY8IT9fbty0vA7cQw0i0FVu0FF2ondR7f191Nf0ZSiKTH-boMuR4uzVZYnx-uy132RLaT3OwItBoytd6eLbHjhJnk/s1600/tumblr_p9sx9t6ITy1tji7wmo1_640.png IP142.250.74.97:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint6C:DD:E8:38:9C:56:23:58:B5:BF:84:3B:D0:2B:24:C7:10:3E:89:C3 ValidityMon, 05 Aug 2024 07:15:31 GMT - Mon, 28 Oct 2024 07:15:30 GMT
File typePNG image data, 627 x 348, 8-bit/color RGB, non-interlaced Hash08b8c241415eb845471a6cdc24e86d3d 4a67fd9185985c5eb0f690a81e4723e9fd10991e e20d7cd5eded37c6539062e9a67b2674b0c52f8149c9880c8ea6ca366fe7df00
GET /img/b/R29vZ2xl/AVvXsEgeaoNsjDNQ-ft3m51CUPvtToBCbzwdc07wA-SfDPeT-QYmEmsTDzvY8IT9fbty0vA7cQw0i0FVu0FF2ondR7f191Nf0ZSiKTH-boMuR4uzVZYnx-uy132RLaT3OwItBoytd6eLbHjhJnk/s1600/tumblr_p9sx9t6ITy1tji7wmo1_640.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-expose-headers: Content-Length
etag: "v358"
expires: Sun, 01 Sep 2024 20:14:40 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="tumblr_p9sx9t6ITy1tji7wmo1_640.png"
x-content-type-options: nosniff
date: Sat, 31 Aug 2024 20:14:40 GMT
server: fife
content-length: 19422
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh6kaW-7d1n_knS7D0gts1sm7q3GI2VxpDcqirBS3RRkwqLymP9S-CLby0v0mdaLdhNxHeN1PWsRxofb3irqBs7Xb5V53wsWhvxHvd80o4cYfGzJSjvjBUF5Emhf_iCmpHTaWeeTZgpgj0/w640-h464-rw/original.png | 142.250.74.97 | 200 OK | 356 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh6kaW-7d1n_knS7D0gts1sm7q3GI2VxpDcqirBS3RRkwqLymP9S-CLby0v0mdaLdhNxHeN1PWsRxofb3irqBs7Xb5V53wsWhvxHvd80o4cYfGzJSjvjBUF5Emhf_iCmpHTaWeeTZgpgj0/w640-h464-rw/original.png IP142.250.74.97:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint6C:DD:E8:38:9C:56:23:58:B5:BF:84:3B:D0:2B:24:C7:10:3E:89:C3 ValidityMon, 05 Aug 2024 07:15:31 GMT - Mon, 28 Oct 2024 07:15:30 GMT
File typeRIFF (little-endian) data, Web/P image Size356 kB (356470 bytes) Hash8cb64aca43dc616fe46f8c460a7f540c 22f08a1dc49e138505a579a221e29ff76e0755f5 3029858fc20d15536338c1d7953414a2169270c68d54bfec10b8c2e2d09b9b47
GET /img/b/R29vZ2xl/AVvXsEh6kaW-7d1n_knS7D0gts1sm7q3GI2VxpDcqirBS3RRkwqLymP9S-CLby0v0mdaLdhNxHeN1PWsRxofb3irqBs7Xb5V53wsWhvxHvd80o4cYfGzJSjvjBUF5Emhf_iCmpHTaWeeTZgpgj0/w640-h464-rw/original.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
vary: Origin
access-control-expose-headers: Content-Length
etag: "v511"
expires: Sun, 01 Sep 2024 20:14:40 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="original.webp"
x-content-type-options: nosniff
date: Sat, 31 Aug 2024 20:14:40 GMT
server: fife
content-length: 356470
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh7fcYQFvmcsxILGN2A-Klm-89NibSuf47QG-CQO8afqUq-z0N6qgBPvqmkGoglcjDmnAIIl8-msciHEp7TqEFeh65vt1g-VaUvDyR80b6rWOZKpSZ48fnWDMO0pb2fpB4PU07uy42AA3M/s640-rw/20181010-irozuku01-01.jpg | 142.250.74.97 | 200 OK | 41 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh7fcYQFvmcsxILGN2A-Klm-89NibSuf47QG-CQO8afqUq-z0N6qgBPvqmkGoglcjDmnAIIl8-msciHEp7TqEFeh65vt1g-VaUvDyR80b6rWOZKpSZ48fnWDMO0pb2fpB4PU07uy42AA3M/s640-rw/20181010-irozuku01-01.jpg IP142.250.74.97:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint6C:DD:E8:38:9C:56:23:58:B5:BF:84:3B:D0:2B:24:C7:10:3E:89:C3 ValidityMon, 05 Aug 2024 07:15:31 GMT - Mon, 28 Oct 2024 07:15:30 GMT
File typeRIFF (little-endian) data, Web/P image Hash1c4adc214668b0e0062dba212a9308a4 5edb78bca0a9de6430767c95fbbdd122edb49a42 801649aeb2ccb54c1bc4cd6bcb070fa5198547584258ae7bbf68fdef2f752ed1
GET /img/b/R29vZ2xl/AVvXsEh7fcYQFvmcsxILGN2A-Klm-89NibSuf47QG-CQO8afqUq-z0N6qgBPvqmkGoglcjDmnAIIl8-msciHEp7TqEFeh65vt1g-VaUvDyR80b6rWOZKpSZ48fnWDMO0pb2fpB4PU07uy42AA3M/s640-rw/20181010-irozuku01-01.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
vary: Origin
access-control-expose-headers: Content-Length
etag: "v39b"
expires: Sun, 01 Sep 2024 20:14:40 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="20181010-irozuku01-01.webp"
x-content-type-options: nosniff
date: Sat, 31 Aug 2024 20:14:40 GMT
server: fife
content-length: 40636
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhrYCsoyj7mlP_5ylo6DufSU4akzQjLvXINwbrmXsVijd6zWJwNFD5dmJz4xBcwT8qszsuzcMyGOHNoOlJZWwBa2EvDuhkaJE_zsrI77a_NqviG6nEgjEp1BAwBAY3DNHrrPM-UHWyP9KI/w640-h360-rw/image.png | 142.250.74.97 | 200 OK | 60 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhrYCsoyj7mlP_5ylo6DufSU4akzQjLvXINwbrmXsVijd6zWJwNFD5dmJz4xBcwT8qszsuzcMyGOHNoOlJZWwBa2EvDuhkaJE_zsrI77a_NqviG6nEgjEp1BAwBAY3DNHrrPM-UHWyP9KI/w640-h360-rw/image.png IP142.250.74.97:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint6C:DD:E8:38:9C:56:23:58:B5:BF:84:3B:D0:2B:24:C7:10:3E:89:C3 ValidityMon, 05 Aug 2024 07:15:31 GMT - Mon, 28 Oct 2024 07:15:30 GMT
File typeRIFF (little-endian) data, Web/P image Hash4791d34db5acdee3f23f4ce9c90d8050 51313b5fdc90360782af7ab287dd84bc9cbd67db eb1e6dcf24de87f677f96b757080d5b3cf1b2d85ace97e4c5a70922669ec86f3
GET /img/b/R29vZ2xl/AVvXsEhrYCsoyj7mlP_5ylo6DufSU4akzQjLvXINwbrmXsVijd6zWJwNFD5dmJz4xBcwT8qszsuzcMyGOHNoOlJZWwBa2EvDuhkaJE_zsrI77a_NqviG6nEgjEp1BAwBAY3DNHrrPM-UHWyP9KI/w640-h360-rw/image.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
vary: Origin
access-control-expose-headers: Content-Length
etag: "v51e"
expires: Sun, 01 Sep 2024 20:14:40 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="image.webp"
x-content-type-options: nosniff
date: Sat, 31 Aug 2024 20:14:40 GMT
server: fife
content-length: 60364
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiIL0clAHGELinnu7M0t1a5-wpfD8W0lp4abd01C9FTz7Yg6oX_PTTJGgCDho3cGkN-9z4RwlYCUkSAs4YqA1gnJ4kABh22trTlmeN4BVUqveaebdTBNoJ6Pi0AAkqf98BQCG8Oyjcq2-I/w640-h640-rw/image.png | 142.250.74.97 | 200 OK | 327 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiIL0clAHGELinnu7M0t1a5-wpfD8W0lp4abd01C9FTz7Yg6oX_PTTJGgCDho3cGkN-9z4RwlYCUkSAs4YqA1gnJ4kABh22trTlmeN4BVUqveaebdTBNoJ6Pi0AAkqf98BQCG8Oyjcq2-I/w640-h640-rw/image.png IP142.250.74.97:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint6C:DD:E8:38:9C:56:23:58:B5:BF:84:3B:D0:2B:24:C7:10:3E:89:C3 ValidityMon, 05 Aug 2024 07:15:31 GMT - Mon, 28 Oct 2024 07:15:30 GMT
File typeRIFF (little-endian) data, Web/P image Size327 kB (327408 bytes) Hashec594b2c5eb1f595e207b48d48619cfb eae8ab412dd779cf3ca5e294d38ed271e2188a0b bf257ae6a2d584b305ec3eb6ec6a64fc86636a0db7c4751e11ba3bea9cb604bb
GET /img/b/R29vZ2xl/AVvXsEiIL0clAHGELinnu7M0t1a5-wpfD8W0lp4abd01C9FTz7Yg6oX_PTTJGgCDho3cGkN-9z4RwlYCUkSAs4YqA1gnJ4kABh22trTlmeN4BVUqveaebdTBNoJ6Pi0AAkqf98BQCG8Oyjcq2-I/w640-h640-rw/image.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
vary: Origin
access-control-expose-headers: Content-Length
etag: "v566"
expires: Sun, 01 Sep 2024 20:14:40 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="image.webp"
x-content-type-options: nosniff
date: Sat, 31 Aug 2024 20:14:40 GMT
server: fife
content-length: 327408
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhv3GkMbCi2cLa6Pj31fugnmVFl-uh8tgz7EpqvqMHYy9m5MoCIuW4-6imZLQGhVnGxBJVphcqKigD1Y1rKewQlzF70062HzyBL1JJrAAlugEcRPgm-kwX5Kn1XlrejRNt_EdpU1v_-zKE/w400-h400-rw/original+%25281%2529.jpg | 142.250.74.97 | 200 OK | 16 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhv3GkMbCi2cLa6Pj31fugnmVFl-uh8tgz7EpqvqMHYy9m5MoCIuW4-6imZLQGhVnGxBJVphcqKigD1Y1rKewQlzF70062HzyBL1JJrAAlugEcRPgm-kwX5Kn1XlrejRNt_EdpU1v_-zKE/w400-h400-rw/original+%25281%2529.jpg IP142.250.74.97:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint6C:DD:E8:38:9C:56:23:58:B5:BF:84:3B:D0:2B:24:C7:10:3E:89:C3 ValidityMon, 05 Aug 2024 07:15:31 GMT - Mon, 28 Oct 2024 07:15:30 GMT
File typeRIFF (little-endian) data, Web/P image Hash9e272599de4da47a8cd95a8c7beb9fff 685651b5f69e7b83e36b76c6e88339635d980ea6 53c9da80b7483cd42aaa15da8c206920eec7721d91dec2f17e23aeccbddb6092
GET /img/b/R29vZ2xl/AVvXsEhv3GkMbCi2cLa6Pj31fugnmVFl-uh8tgz7EpqvqMHYy9m5MoCIuW4-6imZLQGhVnGxBJVphcqKigD1Y1rKewQlzF70062HzyBL1JJrAAlugEcRPgm-kwX5Kn1XlrejRNt_EdpU1v_-zKE/w400-h400-rw/original+%25281%2529.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
vary: Origin
access-control-expose-headers: Content-Length
etag: "v50d"
expires: Sun, 01 Sep 2024 20:14:40 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="original (1).webp"
x-content-type-options: nosniff
date: Sat, 31 Aug 2024 20:14:40 GMT
server: fife
content-length: 15706
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| resources.blogblog.com/img/navbar/icons_peach.png | 142.250.74.105 | 200 OK | 907 B |
URL GET HTTP/3resources.blogblog.com/img/navbar/icons_peach.png IP142.250.74.105:443
Requested byhttps://www.blogger.com/navbar.g?targetBlogID=3405693820859981231&blogName=sofiahalbof+anime+world+&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://sofiahalbofanimeworld.blogspot.com/search&blogLocale=en&v=2&homepageUrl=https://sofiahalbofanimeworld.blogspot.com/&vt=-5639291567810939189&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en._ShUtMH1OvQ.O%2Fam%3DAABA%2Fd%3D1%2Frs%3DAHpOoo9sEd_Wjj_xEtgO8qX69P7hAZI9cg%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Fsofiahalbofanimeworld.blogspot.com&pfname=&rpctoken=25001728 CertificateIssuerGoogle Trust Services Subject*.blogger.com FingerprintE5:22:7F:76:57:F8:0E:D9:DA:51:9C:EF:6F:0A:70:00:E3:45:B4:8A ValidityMon, 05 Aug 2024 06:35:16 GMT - Mon, 28 Oct 2024 06:35:15 GMT
File typePNG image data, 46 x 20, 8-bit colormap, non-interlaced Hash3718077fe5eb689b0ded987a52881d06 f0ce5596ef43f850c400cbbc0556697fb3e7b232 72be8098b87d7e2d7fbc6eb0a3eaebcf1013186d7733cd340549f9e1701a4865
GET /img/navbar/icons_peach.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 907
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 30 Aug 2024 03:57:17 GMT
expires: Fri, 06 Sep 2024 03:57:17 GMT
cache-control: public, max-age=604800
last-modified: Thu, 29 Aug 2024 15:58:15 GMT
content-type: image/png
age: 145043
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| resources.blogblog.com/img/navbar/arrows-light.png | 142.250.74.105 | 200 OK | 117 B |
URL GET HTTP/3resources.blogblog.com/img/navbar/arrows-light.png IP142.250.74.105:443
Requested byhttps://www.blogger.com/navbar.g?targetBlogID=3405693820859981231&blogName=sofiahalbof+anime+world+&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://sofiahalbofanimeworld.blogspot.com/search&blogLocale=en&v=2&homepageUrl=https://sofiahalbofanimeworld.blogspot.com/&vt=-5639291567810939189&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en._ShUtMH1OvQ.O%2Fam%3DAABA%2Fd%3D1%2Frs%3DAHpOoo9sEd_Wjj_xEtgO8qX69P7hAZI9cg%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Fsofiahalbofanimeworld.blogspot.com&pfname=&rpctoken=25001728 CertificateIssuerGoogle Trust Services Subject*.blogger.com FingerprintE5:22:7F:76:57:F8:0E:D9:DA:51:9C:EF:6F:0A:70:00:E3:45:B4:8A ValidityMon, 05 Aug 2024 06:35:16 GMT - Mon, 28 Oct 2024 06:35:15 GMT
File typePNG image data, 19 x 4, 8-bit/color RGBA, non-interlaced Hash25c2b0cfe0ad4dcda4a0e3727d091d80 b9d16f4311e64648b7970baf00cb9841e3c3351b bb6685107846b4c25384202730b84ec168fecee197e5f9e3fe8ffdd5bed6749d
GET /img/navbar/arrows-light.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 117
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 30 Aug 2024 12:27:33 GMT
expires: Fri, 06 Sep 2024 12:27:33 GMT
cache-control: public, max-age=604800
last-modified: Thu, 29 Aug 2024 18:59:57 GMT
content-type: image/png
age: 114427
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhsRHI13IP_HvEVuO2q3hg524aRbEUUFMafj4Aqw4fKQI7OWlG-UGmmeV7JBNBaap8pfpQuWebBnlPFaDUYMzSKNr3XAE4TE_AP1qy3LcRWU6PbQhZ7zMUx_P_Fth2WhYeT9BC6z_0U1xU/w640-h640-rw/original+%25282%2529.jpg | 142.250.74.97 | 200 OK | 36 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhsRHI13IP_HvEVuO2q3hg524aRbEUUFMafj4Aqw4fKQI7OWlG-UGmmeV7JBNBaap8pfpQuWebBnlPFaDUYMzSKNr3XAE4TE_AP1qy3LcRWU6PbQhZ7zMUx_P_Fth2WhYeT9BC6z_0U1xU/w640-h640-rw/original+%25282%2529.jpg IP142.250.74.97:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint6C:DD:E8:38:9C:56:23:58:B5:BF:84:3B:D0:2B:24:C7:10:3E:89:C3 ValidityMon, 05 Aug 2024 07:15:31 GMT - Mon, 28 Oct 2024 07:15:30 GMT
File typeRIFF (little-endian) data, Web/P image Hash57a40768bd5f7b9c8cf9c9009ee12ce1 58571f80a773f00b69cb03a86dec5fbd6905f500 db131aa0556ee0441f7353cd28297fab95360293387f7aed4fece7dbdf01e261
GET /img/b/R29vZ2xl/AVvXsEhsRHI13IP_HvEVuO2q3hg524aRbEUUFMafj4Aqw4fKQI7OWlG-UGmmeV7JBNBaap8pfpQuWebBnlPFaDUYMzSKNr3XAE4TE_AP1qy3LcRWU6PbQhZ7zMUx_P_Fth2WhYeT9BC6z_0U1xU/w640-h640-rw/original+%25282%2529.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
vary: Origin
access-control-expose-headers: Content-Length
etag: "v50f"
expires: Sun, 01 Sep 2024 20:14:40 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="original (2).webp"
x-content-type-options: nosniff
date: Sat, 31 Aug 2024 20:14:40 GMT
server: fife
content-length: 36462
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| apis.google.com/js/platform:gapi.iframes.style.common.js | 142.250.74.110 | 200 OK | 25 kB |
URL GET HTTP/3apis.google.com/js/platform:gapi.iframes.style.common.js IP142.250.74.110:443
Requested byhttps://www.blogger.com/navbar.g?targetBlogID=3405693820859981231&blogName=sofiahalbof+anime+world+&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://sofiahalbofanimeworld.blogspot.com/search&blogLocale=en&v=2&homepageUrl=https://sofiahalbofanimeworld.blogspot.com/&vt=-5639291567810939189&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en._ShUtMH1OvQ.O%2Fam%3DAABA%2Fd%3D1%2Frs%3DAHpOoo9sEd_Wjj_xEtgO8qX69P7hAZI9cg%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Fsofiahalbofanimeworld.blogspot.com&pfname=&rpctoken=25001728 CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintB6:BD:DB:2F:59:38:3C:25:02:05:98:69:CE:1B:5D:42:0B:8A:F8:09 ValidityMon, 05 Aug 2024 06:37:26 GMT - Mon, 28 Oct 2024 06:37:25 GMT
File typeJavaScript source, ASCII text, with very long lines (2774) Hash1b9ca0f9af3b9abee8176c44ca755b75 f25ce4a3917bf3c41eb470587d5176656689711f b1e8fe91784dadefa5dccced4d2e515b5769e74615d8bd3f98a1621d25e39522
GET /js/platform:gapi.iframes.style.common.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 24583
date: Sat, 31 Aug 2024 20:14:40 GMT
expires: Sat, 31 Aug 2024 20:14:40 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "d9ceb97b6f56e929"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cryptocoinsad.com/banner/ads_banner/26894.png |  104.21.23.218 | 200 OK | 84 kB |
URL GET HTTP/2cryptocoinsad.com/banner/ads_banner/26894.png IP104.21.23.218:443
Requested byhttps://ad2bitcoin.com/ad.php?ref=sofiahalbof&width=300 CertificateIssuerGoogle Trust Services Subjectcryptocoinsad.com FingerprintE3:1F:CC:AD:39:12:66:37:53:54:BD:39:28:AD:68:32:44:9D:72:3D ValidityTue, 20 Aug 2024 14:00:57 GMT - Mon, 18 Nov 2024 14:00:56 GMT
File typePNG image data, 300 x 250, 8-bit/color RGB, non-interlaced Hash9cf6b3562d72760ed546272a9dfa05a0 85ca8d21d508ef3c51503f47eedd7ceda6264c34 b120531eed330d554b2469b877df9df79e634848af2036121821cac84aff28ff
GET /banner/ads_banner/26894.png HTTP/1.1
Host: cryptocoinsad.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ad2bitcoin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 31 Aug 2024 20:14:40 GMT
content-type: image/png
content-length: 84238
last-modified: Mon, 11 Sep 2023 20:57:10 GMT
etag: "64ff7f26-1490e"
cache-control: max-age=10800
cf-cache-status: HIT
age: 2655
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qW%2B%2FGLxs43xuoBx53DVZE5Re73CT3djbnbf%2FrY6GOFZXm1iPj64nITOhtIMOsk%2FH1g4IHUAf35vg6mlf%2BrzXi8vsvHfpkrWODuKtqh7zoYrNJXovV6tqDg7y1cgjSvbujOxsow%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8bbfb02fedbfb51b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ad2bitcoin.com/adqlt.php?ref=sofiahalbof&keycode=6556 | 162.0.208.108 | 200 OK | 0 B |
URL GET HTTP/1.1ad2bitcoin.com/adqlt.php?ref=sofiahalbof&keycode=6556 IP162.0.208.108:443
Requested byhttps://ad2bitcoin.com/ad.php?ref=sofiahalbof&width=300 CertificateIssuerLet's Encrypt Subjectad2bitcoin.com.traffic2bitcoin.com Fingerprint5C:2B:40:7E:5B:1B:1F:33:93:73:67:81:49:A3:F7:73:C4:8A:EB:46 ValidityWed, 21 Aug 2024 00:57:57 GMT - Tue, 19 Nov 2024 00:57:56 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /adqlt.php?ref=sofiahalbof&keycode=6556 HTTP/1.1
Host: ad2bitcoin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ad2bitcoin.com/ad.php?ref=sofiahalbof&width=300
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 31 Aug 2024 20:14:40 GMT
Server: Apache
Vary: User-Agent
Content-Length: 0
Keep-Alive: timeout=5, max=49
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
|
|
| apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en._ShUtMH1OvQ.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/am=AABA/rs=AHpOoo9sEd_Wjj_xEtgO8qX69P7hAZI9cg/cb=gapi.loaded_0?le=scs | 142.250.74.110 | 200 OK | 47 kB |
URL GET HTTP/3apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en._ShUtMH1OvQ.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/am=AABA/rs=AHpOoo9sEd_Wjj_xEtgO8qX69P7hAZI9cg/cb=gapi.loaded_0?le=scs IP142.250.74.110:443
Requested byhttps://www.blogger.com/navbar.g?targetBlogID=3405693820859981231&blogName=sofiahalbof+anime+world+&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://sofiahalbofanimeworld.blogspot.com/search&blogLocale=en&v=2&homepageUrl=https://sofiahalbofanimeworld.blogspot.com/&vt=-5639291567810939189&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en._ShUtMH1OvQ.O%2Fam%3DAABA%2Fd%3D1%2Frs%3DAHpOoo9sEd_Wjj_xEtgO8qX69P7hAZI9cg%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Fsofiahalbofanimeworld.blogspot.com&pfname=&rpctoken=25001728 CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintB6:BD:DB:2F:59:38:3C:25:02:05:98:69:CE:1B:5D:42:0B:8A:F8:09 ValidityMon, 05 Aug 2024 06:37:26 GMT - Mon, 28 Oct 2024 06:37:25 GMT
File typeJavaScript source, ASCII text, with very long lines (2681) Hash4651a4bc4ceaf8d1811aea20ab8584cc e9ba2c1e8b5f2391eac8fce3567c920a68391c11 73cbb0b6d9c83a076751991cf4db53e24f0a83a6124d74d5fd66cc1d830ba138
GET /_/scs/abc-static/_/js/k=gapi.lb.en._ShUtMH1OvQ.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/am=AABA/rs=AHpOoo9sEd_Wjj_xEtgO8qX69P7hAZI9cg/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 46634
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 27 Aug 2024 20:38:04 GMT
expires: Wed, 27 Aug 2025 20:38:04 GMT
cache-control: public, max-age=31536000
age: 344196
last-modified: Thu, 08 Aug 2024 21:32:10 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hash424e775377593db3528c56406ec045f1 2542f6a61a63eb1229e4bcd7e4e5f7e6180647a6 2733472f07fbba752774a2f2d2205b135cfab4ce420e25617c018e910d4ab55b
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 31 Aug 2024 20:14:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| sofiahalbofanimeworld.blogspot.com/favicon.ico | 216.58.207.193 | 200 OK | 412 B |
URL GET HTTP/3sofiahalbofanimeworld.blogspot.com/favicon.ico IP216.58.207.193:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subjectmisc-sni.blogspot.com Fingerprint19:1A:AB:37:46:A3:1F:05:55:E6:DD:6B:99:D8:A7:EB:F7:F6:D5:E1 ValidityMon, 05 Aug 2024 06:59:20 GMT - Mon, 28 Oct 2024 06:59:19 GMT
File typeMS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel Hash59a0c7b6e4848ccdabcea0636efda02b 30ef5c54b8bbc3487ea2b4c45cd11ea2932e4340 a1495da3cf3db37bf105a12658636ff628fee7b73975b9200049af7747e60b1f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: sofiahalbofanimeworld.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-security-policy: upgrade-insecure-requests
content-security-policy-report-only: default-src https: blob: data: 'unsafe-inline' 'unsafe-eval'; report-to blogspot; report-uri https://www.blogger.com/cspreport
report-to: {"group":"blogspot","max_age":2592000,"endpoints":[{"url":"https://www.blogger.com/cspreport"}]}
content-type: image/x-icon
expires: Sat, 31 Aug 2024 20:14:40 GMT
date: Sat, 31 Aug 2024 20:14:40 GMT
cache-control: private, max-age=86400
last-modified: Sun, 25 Aug 2024 18:14:46 GMT
etag: W/"e17977b52bdd0a621448f62835cc3b0c56be75d44349539aaa142eac79732e66"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 412
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| ep1.adtrafficquality.google/getconfig/sodar?sv=200&tid=gda&tv=r20240828&st=env | 142.250.74.130 | 200 OK | 13 kB |
URL GET HTTP/2ep1.adtrafficquality.google/getconfig/sodar?sv=200&tid=gda&tv=r20240828&st=env IP142.250.74.130:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subjectadtrafficquality.google Fingerprint5C:AA:48:AC:FA:7C:D2:19:D9:4D:76:C2:75:2E:E6:59:7E:1F:69:76 ValidityMon, 05 Aug 2024 07:28:42 GMT - Mon, 28 Oct 2024 07:28:41 GMT
Hash9f3f86970396fb6f2df0c66e9c2ddaba 2046d7643141a1523ae768a941e5c4c18c0b941d ea087445f24b770020714d9f59ba61530bf73bd0d3a63fc3b71a235770963269
GET /getconfig/sodar?sv=200&tid=gda&tv=r20240828&st=env HTTP/1.1
Host: ep1.adtrafficquality.google
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sofiahalbofanimeworld.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: application/json; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
date: Sat, 31 Aug 2024 20:14:40 GMT
server: cafe
content-length: 12925
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hash424e775377593db3528c56406ec045f1 2542f6a61a63eb1229e4bcd7e4e5f7e6180647a6 2733472f07fbba752774a2f2d2205b135cfab4ce420e25617c018e910d4ab55b
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 31 Aug 2024 20:14:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ep2.adtrafficquality.google/sodar/sodar2.js | 142.250.74.161 | 200 OK | 6.4 kB |
URL GET HTTP/2ep2.adtrafficquality.google/sodar/sodar2.js IP142.250.74.161:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subjectadtrafficquality.google Fingerprint5C:AA:48:AC:FA:7C:D2:19:D9:4D:76:C2:75:2E:E6:59:7E:1F:69:76 ValidityMon, 05 Aug 2024 07:28:42 GMT - Mon, 28 Oct 2024 07:28:41 GMT
File typeJavaScript source, ASCII text, with very long lines (1321) Hash2cc87e9764aebcbbf36ff2061e6a2793 b4f2ffdf4c695aa79f0e63651c18a88729c2407b 61c32059a5e94075a7ecff678b33907966fc9cfa384daa01aa057f872da14dbb
GET /sodar/sodar2.js HTTP/1.1
Host: ep2.adtrafficquality.google
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 6386
date: Sat, 31 Aug 2024 20:14:41 GMT
expires: Sat, 31 Aug 2024 20:14:41 GMT
cache-control: private, max-age=3000
etag: "1637097310169751"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hashd4caf68052b398f52ba5ae4be05d56c8 96202296e1996bc1d84cc5e5c53c062693d8bb3d 32d9ea828c2fcb005c6294a93ed5bf8cc65cfb8cf956b4e2096ee872dc63a20b
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 31 Aug 2024 20:14:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| tpc.googlesyndication.com/sodar/sodar2/225/runner.html | 216.58.207.193 | 200 OK | 5.0 kB |
URL GET HTTP/2tpc.googlesyndication.com/sodar/sodar2/225/runner.html IP216.58.207.193:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subjecttpc.googlesyndication.com FingerprintDF:CE:A6:4E:6D:9C:E1:24:E0:78:1E:06:88:BA:7C:2F:D6:00:D5:1C ValidityMon, 05 Aug 2024 07:18:20 GMT - Mon, 28 Oct 2024 07:18:19 GMT
File typeHTML document, ASCII text, with very long lines (2020) Hash1d3d22df067f5219073f9c0fabb74fdd d5c226022639323d93946df3571404116041e588 55a119c0394f901a8a297e109c17b5e5402689708b999ab10691c16179f32a4a
GET /sodar/sodar2/225/runner.html HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 5046
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 30 Aug 2024 14:27:10 GMT
expires: Sat, 30 Aug 2025 14:27:10 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 21 Jun 2021 20:47:05 GMT
content-type: text/html
vary: Accept-Encoding
age: 107251
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pagead2.googlesyndication.com/bg/Y4kDWM76wifkQEpdyV_qV919xjUbW68Vp6zTd8kmBRk.js | 142.250.74.98 | | 21 kB |
URL pagead2.googlesyndication.com/bg/Y4kDWM76wifkQEpdyV_qV919xjUbW68Vp6zTd8kmBRk.js IP142.250.74.98:0
CertificateIssuerGoogle Trust Services Subject*.g.doubleclick.net Fingerprint6B:E4:45:BC:75:8F:CB:78:D9:D4:11:82:64:25:68:F4:30:DD:46:7B ValidityMon, 05 Aug 2024 06:37:16 GMT - Mon, 28 Oct 2024 06:37:15 GMT
File typeJavaScript source, ASCII text, with very long lines (53689) Hash93ed6847e36a69bc3066d73909879f42 56b27d72070d78e4c34e18e674de749ab8fc1494 63890358cefac227e4404a5dc95fea57dd7dc6351b5baf15a7acd377c9260519
GET /bg/Y4kDWM76wifkQEpdyV_qV919xjUbW68Vp6zTd8kmBRk.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tpc.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 20779
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 30 Aug 2024 07:16:56 GMT
expires: Sat, 30 Aug 2025 07:16:56 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 26 Aug 2024 15:38:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 133065
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| tpc.googlesyndication.com/generate_204?5vfY4g | 216.58.207.193 | | 0 B |
URL tpc.googlesyndication.com/generate_204?5vfY4g IP216.58.207.193:0
CertificateIssuerGoogle Trust Services Subjecttpc.googlesyndication.com FingerprintDF:CE:A6:4E:6D:9C:E1:24:E0:78:1E:06:88:BA:7C:2F:D6:00:D5:1C ValidityMon, 05 Aug 2024 07:18:20 GMT - Mon, 28 Oct 2024 07:18:19 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?5vfY4g HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Sat, 31 Aug 2024 20:14:41 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&t=2&li=gda_r20240828&jk=648894224547398&bg=!4-Cl4K_NAAakh3bWhIc7ADQBe5WfOIwT1Byyh_Xow6U5ZgC9Xq9szrVYcs9n5SF6c-CBzR98Geo4DZGchrRcO8_FsGx2AgAAARRSAAAACGgBB34ANVrL1Ie1Hg3hZuLVU-Uq50rR9ed6YCTGPEK6CEtNU4QaaG_neR-QZkUcPO9ppVOaTN-iFZu4CgEb3PiZzOaT2hdbreLmG2EV6gtgN4fzChdgcDIziHBPjvuNQ6ASTNHsLTEPxjftTenM5Uxy0ElruLntGihOqHcsADX-2xNB2Lz678rfNhiruDrfjcc50D9O9-F8fyEuMilyQUlQsd9AX3GY75bQRRZvHY3FY7IpgVM0MiM6xKzypeV3AV8wq0Dz6NRoAL8L0HwR35iQZX3P7U90hJdeqj0X85i0WqTVge821ajmbSUCib4WVhJbyDZZZx6qqJ_FcWGNIbWqsbTTAgujdlkoExwj-LvUjn4muGEDtxIu2ICRezZYShEPiG1xr-x1udBet9QUdCWCSgK8ANz3pA67E_W6VxemqniaNx8n1v2bQv6EnNUx2OBh4dm22FjO25kCG3DttMeMx_Vk3Izw9XHRYJbixEO7ZJjYPC03XvhgdGVAjfTJiXmDqluFVUmUx8o6gdd13dmvlSqviyClFzpH79Y47c1se2q0PfKGgw7SiQB_w3pUPhzMuXt9eOUyu9qSgNyM1uo1Qn_uBmsD5hMPbUC4TE2XpvtAH73rDBe5GG2RIs7ViljqfbwlSvcqiOrJP1NmOuDUVcpzUi57Cq6lHzba59Ko-zmszejFv16y0evDCGdBX59etyhYenJbFZRAzi24lIK_jMlkIYmm7N1g0QXxJPUN5tqMa5DTuuWm93TT6HfXViey10emFly0FtBGtND1FAnI5Mvi-XD9NEvGKQ56_HPAih1_fr1_zzBmWRTt_rWL94lt-hCOdepR5ZFDwJYrGrIP_uMqS0L2d99K6PLICReMWb19v9RlxQXwF1YAJezqB5jZ0ULuJvzZoLEbBbdafLKU6BB7UZ_ytdhkhnRVQ4ztvgw3VpgkhRms9jKKYD-2aYD6QDtdBoypBarx8lsxPOLJFRuOEkQ4-xB6XdAL85xtHa_DsokNurm4Nz6UAIn2nTmjxh_mt-8NAHHfgpcgttmAyDY56aNkc0vGZ3u2AHuiTuueFFRHbterNJ1fEzKmqhMCDDBPhpvU6MdvrzCHX0WG5S_LKPgZ5SC-4ZUZAKz_4L_y2DHO_PNiqsrwc7UUtxtZMVZHTlWTlFdn_H-GjJPY-WIx91Pr | 142.250.74.98 | 204 No Content | 0 B |
URL GET HTTP/3pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&t=2&li=gda_r20240828&jk=648894224547398&bg=!4-Cl4K_NAAakh3bWhIc7ADQBe5WfOIwT1Byyh_Xow6U5ZgC9Xq9szrVYcs9n5SF6c-CBzR98Geo4DZGchrRcO8_FsGx2AgAAARRSAAAACGgBB34ANVrL1Ie1Hg3hZuLVU-Uq50rR9ed6YCTGPEK6CEtNU4QaaG_neR-QZkUcPO9ppVOaTN-iFZu4CgEb3PiZzOaT2hdbreLmG2EV6gtgN4fzChdgcDIziHBPjvuNQ6ASTNHsLTEPxjftTenM5Uxy0ElruLntGihOqHcsADX-2xNB2Lz678rfNhiruDrfjcc50D9O9-F8fyEuMilyQUlQsd9AX3GY75bQRRZvHY3FY7IpgVM0MiM6xKzypeV3AV8wq0Dz6NRoAL8L0HwR35iQZX3P7U90hJdeqj0X85i0WqTVge821ajmbSUCib4WVhJbyDZZZx6qqJ_FcWGNIbWqsbTTAgujdlkoExwj-LvUjn4muGEDtxIu2ICRezZYShEPiG1xr-x1udBet9QUdCWCSgK8ANz3pA67E_W6VxemqniaNx8n1v2bQv6EnNUx2OBh4dm22FjO25kCG3DttMeMx_Vk3Izw9XHRYJbixEO7ZJjYPC03XvhgdGVAjfTJiXmDqluFVUmUx8o6gdd13dmvlSqviyClFzpH79Y47c1se2q0PfKGgw7SiQB_w3pUPhzMuXt9eOUyu9qSgNyM1uo1Qn_uBmsD5hMPbUC4TE2XpvtAH73rDBe5GG2RIs7ViljqfbwlSvcqiOrJP1NmOuDUVcpzUi57Cq6lHzba59Ko-zmszejFv16y0evDCGdBX59etyhYenJbFZRAzi24lIK_jMlkIYmm7N1g0QXxJPUN5tqMa5DTuuWm93TT6HfXViey10emFly0FtBGtND1FAnI5Mvi-XD9NEvGKQ56_HPAih1_fr1_zzBmWRTt_rWL94lt-hCOdepR5ZFDwJYrGrIP_uMqS0L2d99K6PLICReMWb19v9RlxQXwF1YAJezqB5jZ0ULuJvzZoLEbBbdafLKU6BB7UZ_ytdhkhnRVQ4ztvgw3VpgkhRms9jKKYD-2aYD6QDtdBoypBarx8lsxPOLJFRuOEkQ4-xB6XdAL85xtHa_DsokNurm4Nz6UAIn2nTmjxh_mt-8NAHHfgpcgttmAyDY56aNkc0vGZ3u2AHuiTuueFFRHbterNJ1fEzKmqhMCDDBPhpvU6MdvrzCHX0WG5S_LKPgZ5SC-4ZUZAKz_4L_y2DHO_PNiqsrwc7UUtxtZMVZHTlWTlFdn_H-GjJPY-WIx91Pr IP142.250.74.98:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.g.doubleclick.net Fingerprint6B:E4:45:BC:75:8F:CB:78:D9:D4:11:82:64:25:68:F4:30:DD:46:7B ValidityMon, 05 Aug 2024 06:37:16 GMT - Mon, 28 Oct 2024 06:37:15 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/sodar?id=sodar2&v=225&t=2&li=gda_r20240828&jk=648894224547398&bg=!4-Cl4K_NAAakh3bWhIc7ADQBe5WfOIwT1Byyh_Xow6U5ZgC9Xq9szrVYcs9n5SF6c-CBzR98Geo4DZGchrRcO8_FsGx2AgAAARRSAAAACGgBB34ANVrL1Ie1Hg3hZuLVU-Uq50rR9ed6YCTGPEK6CEtNU4QaaG_neR-QZkUcPO9ppVOaTN-iFZu4CgEb3PiZzOaT2hdbreLmG2EV6gtgN4fzChdgcDIziHBPjvuNQ6ASTNHsLTEPxjftTenM5Uxy0ElruLntGihOqHcsADX-2xNB2Lz678rfNhiruDrfjcc50D9O9-F8fyEuMilyQUlQsd9AX3GY75bQRRZvHY3FY7IpgVM0MiM6xKzypeV3AV8wq0Dz6NRoAL8L0HwR35iQZX3P7U90hJdeqj0X85i0WqTVge821ajmbSUCib4WVhJbyDZZZx6qqJ_FcWGNIbWqsbTTAgujdlkoExwj-LvUjn4muGEDtxIu2ICRezZYShEPiG1xr-x1udBet9QUdCWCSgK8ANz3pA67E_W6VxemqniaNx8n1v2bQv6EnNUx2OBh4dm22FjO25kCG3DttMeMx_Vk3Izw9XHRYJbixEO7ZJjYPC03XvhgdGVAjfTJiXmDqluFVUmUx8o6gdd13dmvlSqviyClFzpH79Y47c1se2q0PfKGgw7SiQB_w3pUPhzMuXt9eOUyu9qSgNyM1uo1Qn_uBmsD5hMPbUC4TE2XpvtAH73rDBe5GG2RIs7ViljqfbwlSvcqiOrJP1NmOuDUVcpzUi57Cq6lHzba59Ko-zmszejFv16y0evDCGdBX59etyhYenJbFZRAzi24lIK_jMlkIYmm7N1g0QXxJPUN5tqMa5DTuuWm93TT6HfXViey10emFly0FtBGtND1FAnI5Mvi-XD9NEvGKQ56_HPAih1_fr1_zzBmWRTt_rWL94lt-hCOdepR5ZFDwJYrGrIP_uMqS0L2d99K6PLICReMWb19v9RlxQXwF1YAJezqB5jZ0ULuJvzZoLEbBbdafLKU6BB7UZ_ytdhkhnRVQ4ztvgw3VpgkhRms9jKKYD-2aYD6QDtdBoypBarx8lsxPOLJFRuOEkQ4-xB6XdAL85xtHa_DsokNurm4Nz6UAIn2nTmjxh_mt-8NAHHfgpcgttmAyDY56aNkc0vGZ3u2AHuiTuueFFRHbterNJ1fEzKmqhMCDDBPhpvU6MdvrzCHX0WG5S_LKPgZ5SC-4ZUZAKz_4L_y2DHO_PNiqsrwc7UUtxtZMVZHTlWTlFdn_H-GjJPY-WIx91Pr HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Sat, 31 Aug 2024 20:14:42 GMT
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hash19b5ddc323d19c2c40aeac99710b0dbc b644c6fc9d897e368140e0c77c53d7b0af576f52 d1766589fe4143109d0ea9130f7c184d091f01bd546c6222e645423c654dbddc
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 31 Aug 2024 20:14:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.googleapis.com/css2?family=Inter:wght@400;600&display=swap | 142.250.74.106 | 200 OK | 1.1 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Inter:wght@400;600&display=swap IP142.250.74.106:443
Requested byhttps://ad.a-ads.com/1110727?size=728x90 CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint67:2C:47:03:FC:2F:6C:04:CD:B8:61:4D:97:F1:C4:EA:71:E9:9E:11 ValidityMon, 05 Aug 2024 07:18:20 GMT - Mon, 28 Oct 2024 07:18:19 GMT
File typegzip compressed data, max compression Hash4e224a717c25ff71e2750eb0f8ae45ac 4b4d5835583afb327589b10fcb3d18fa977f1350 554d01137ceffb7f65a9b9db23f73283446e847988448d136d7707617d23858a
GET /css2?family=Inter:wght@400;600&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ad.a-ads.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 31 Aug 2024 20:14:42 GMT
date: Sat, 31 Aug 2024 20:14:42 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash99ebc1f7938e3e9899561e03c4517e12 57b79bfe44d18a75b3becf12828a6b9f6a356722 420ad5ea4f1a4548be4f4e3fd5d961090804feee0e160f428139136c0a0f1040
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 31 Aug 2024 20:14:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hashfd0cba0be026b652bbffe7b1677f7a50 14e043560f93c989426b59a5ce88ba1758ef3d1f ec79b16ec123b0034a02b557ad26892d404fcd5c573f516ead9bcc3f585702b9
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 31 Aug 2024 20:14:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 | 142.250.74.67 | 200 OK | 48 kB |
URL GET HTTP/2fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 IP142.250.74.67:443
Requested byhttps://ad.a-ads.com/1110727?size=728x90 CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint83:B4:3A:CF:52:DA:10:B6:EA:48:49:6C:BD:57:5C:44:4E:10:A8:97 ValidityMon, 05 Aug 2024 07:18:20 GMT - Mon, 28 Oct 2024 07:18:19 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48444, version 1.0 Hash8e433c0592f77beb6dc527d7b90be120 d7402416753ae1bb4cbd4b10d33a0c10517838bd f052ee44c3728dfd23aba8a4567150bc314d23903026fbb6ad089422c2df56af
GET /s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ad.a-ads.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48444
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 30 Aug 2024 23:05:42 GMT
expires: Sat, 30 Aug 2025 23:05:42 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 29 Jul 2024 22:51:01 GMT
content-type: font/woff2
age: 76140
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 | 142.250.74.67 | 200 OK | 48 kB |
URL GET HTTP/2fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 IP142.250.74.67:443
Requested byhttps://ad.a-ads.com/1110727?size=728x90 CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint83:B4:3A:CF:52:DA:10:B6:EA:48:49:6C:BD:57:5C:44:4E:10:A8:97 ValidityMon, 05 Aug 2024 07:18:20 GMT - Mon, 28 Oct 2024 07:18:19 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48444, version 1.0 Hash8e433c0592f77beb6dc527d7b90be120 d7402416753ae1bb4cbd4b10d33a0c10517838bd f052ee44c3728dfd23aba8a4567150bc314d23903026fbb6ad089422c2df56af
GET /s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ad.a-ads.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48444
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 30 Aug 2024 23:05:42 GMT
expires: Sat, 30 Aug 2025 23:05:42 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 29 Jul 2024 22:51:01 GMT
content-type: font/woff2
age: 76140
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash99ebc1f7938e3e9899561e03c4517e12 57b79bfe44d18a75b3becf12828a6b9f6a356722 420ad5ea4f1a4548be4f4e3fd5d961090804feee0e160f428139136c0a0f1040
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 31 Aug 2024 20:14:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| steemitimages.com/640x0/https://cdn.steemitimages.com/DQmW4ryiaK7qYAHV7BQfuF3HEJwz625EeU8twvE5ntHfpBr/aave-common.177dbad9.jpg | 104.21.234.125 | 301 Moved Permanently | 129 kB |
URL GET HTTP/2steemitimages.com/640x0/https://cdn.steemitimages.com/DQmW4ryiaK7qYAHV7BQfuF3HEJwz625EeU8twvE5ntHfpBr/aave-common.177dbad9.jpg IP104.21.234.125:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerLet's Encrypt Subjectsteemitimages.com Fingerprint15:0E:F4:21:4F:5C:5B:28:5C:BB:84:44:B5:E9:3D:BE:84:2B:40:29 ValidityMon, 26 Aug 2024 22:58:52 GMT - Sun, 24 Nov 2024 22:58:51 GMT
Size129 kB (129221 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /640x0/https://cdn.steemitimages.com/DQmW4ryiaK7qYAHV7BQfuF3HEJwz625EeU8twvE5ntHfpBr/aave-common.177dbad9.jpg HTTP/1.1
Host: steemitimages.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Sat, 31 Aug 2024 20:14:40 GMT
content-type: text/html; charset=utf-8
x-request-id: Root=1-66d379b0-04a794987a6d5bbf652d24a4
vary: Origin, Accept-Encoding
location: /p/2N61tyyncFaFVtpM8rCsJzDgecVMtkz4jpzBsszXjhqan9oSxNUiLntKumUx6UXTnjRZBagC7t4wvcU8NfMFRFUUeTxXqYciwYQibrkEfPq2QTEahQD2wEJX5bpqnWRQhwYhW7YSwNYE?format=match&mode=fit&width=640
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O5B9JfdygeRKOhpkSsisn5WeaXd2yECmkNsBSWPTFcJi%2BtVStaSBcdPyevhI4rny4IewCUGGJOAjbE9YdD4bK5OX%2F7iICRmqYpGuybETaVCKJPCf6FCTVNd6%2BRa052kXo%2FIoaQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8bbfb02b9a226346-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| data.whicdn.com/images/327748005/large.jpg | 0.0.0.0 | | 0 B |
URL GET data.whicdn.com/images/327748005/large.jpg IP0.0.0.0:0
Requested byhttps://sofiahalbofanimeworld.blogspot.com/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/327748005/large.jpg HTTP/1.1
Host: data.whicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| cdn.surdotly.com/js/Surly.min.js | 54.173.41.122 | 200 OK | 2.9 kB |
URL GET HTTP/2cdn.surdotly.com/js/Surly.min.js IP54.173.41.122:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerLet's Encrypt Subjectcdn.surdotly.com FingerprintEE:3C:7D:1F:B5:C1:BC:37:C3:E7:D6:89:D2:F1:0C:D3:30:B0:64:60 ValidityMon, 15 Jul 2024 03:00:36 GMT - Sun, 13 Oct 2024 03:00:35 GMT
File typeJavaScript source, ASCII text, with very long lines (3093), with no line terminators Hash9e7527f0087921d70256dbf09361b372 0fa2c03bc74d4e7c40dff663ae39a32fd04c3252 38b3236be1134358a2d94635e894b53c93083633d99bf55b9f027faefe174f32
GET /js/Surly.min.js HTTP/1.1
Host: cdn.surdotly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.14.2
date: Sat, 31 Aug 2024 20:14:39 GMT
content-type: application/javascript
last-modified: Mon, 13 Jun 2022 04:23:22 GMT
vary: Accept-Encoding
etag: W/"62a6bbba-b7a"
expires: Mon, 30 Sep 2024 20:14:39 GMT
cache-control: max-age=2592000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| steemitimages.com/p/2N61tyyncFaFVtpM8rCsJzDgecVMtkz4jpzBsszXjhqan9oSxNUiLntKumUx6UXTnjRZBagC7t4wvcU8NfMFRFUUeTxXqYciwYQibrkEfPq2QTEahQD2wEJX5bpqnWRQhwYhW7YSwNYE?format=match&mode=fit&width=640 | 104.21.234.125 | 200 OK | 129 kB |
URL GET HTTP/3steemitimages.com/p/2N61tyyncFaFVtpM8rCsJzDgecVMtkz4jpzBsszXjhqan9oSxNUiLntKumUx6UXTnjRZBagC7t4wvcU8NfMFRFUUeTxXqYciwYQibrkEfPq2QTEahQD2wEJX5bpqnWRQhwYhW7YSwNYE?format=match&mode=fit&width=640 IP104.21.234.125:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerLet's Encrypt Subjectsteemitimages.com Fingerprint15:0E:F4:21:4F:5C:5B:28:5C:BB:84:44:B5:E9:3D:BE:84:2B:40:29 ValidityMon, 26 Aug 2024 22:58:52 GMT - Sun, 24 Nov 2024 22:58:51 GMT
File typeJPEG image data, baseline, precision 8, 600x1071, components 3 Size129 kB (129221 bytes) Hashb1e72d29edfd2035eb5f7c71e1390ef3 ff53221a244690689ef02cdb456dbf334b47971d bb53a33b09d8e7db16c167782532e4695312185d1c6957963407ef1222d42138
GET /p/2N61tyyncFaFVtpM8rCsJzDgecVMtkz4jpzBsszXjhqan9oSxNUiLntKumUx6UXTnjRZBagC7t4wvcU8NfMFRFUUeTxXqYciwYQibrkEfPq2QTEahQD2wEJX5bpqnWRQhwYhW7YSwNYE?format=match&mode=fit&width=640 HTTP/1.1
Host: steemitimages.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sofiahalbofanimeworld.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 31 Aug 2024 20:14:40 GMT
content-type: image/jpeg
x-request-id: Root=1-66d34bd2-534805a46bb8eeda6f74953f
vary: Origin, Accept-Encoding
cache-control: public,max-age=29030400,immutable
cf-cache-status: HIT
age: 11741
last-modified: Sat, 31 Aug 2024 16:58:59 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rSGdUXN93LO3f6H3%2FBtEIDYziHSlsCfXBibzFCOjSEBsPBWWq6JdYjI2k%2FtXdHCjj6aFQm39vUZOTnw2Ytm8%2FEgb0Wu9S44Ei1PI5L1ix57S7mWEP7CcJfBVOo%2Bfvof%2BZ%2FUF9g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8bbfb02e3ec0953e-LHR
alt-svc: h3=":443"; ma=86400
|
|
| data.whicdn.com/images/323602204/original.gif | 0.0.0.0 | | 0 B |
URL GET data.whicdn.com/images/323602204/original.gif IP0.0.0.0:0
Requested byhttps://sofiahalbofanimeworld.blogspot.com/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/323602204/original.gif HTTP/1.1
Host: data.whicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| www.blogger.com/navbar.g?targetBlogID=3405693820859981231&blogName=sofiahalbof+anime+world+&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://sofiahalbofanimeworld.blogspot.com/search&blogLocale=en&v=2&homepageUrl=https://sofiahalbofanimeworld.blogspot.com/&vt=-5639291567810939189&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en._ShUtMH1OvQ.O%2Fam%3DAABA%2Fd%3D1%2Frs%3DAHpOoo9sEd_Wjj_xEtgO8qX69P7hAZI9cg%2Fm%3D__features__ | 142.250.74.105 | 200 OK | 5.3 kB |
URL GET HTTP/3www.blogger.com/navbar.g?targetBlogID=3405693820859981231&blogName=sofiahalbof+anime+world+&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://sofiahalbofanimeworld.blogspot.com/search&blogLocale=en&v=2&homepageUrl=https://sofiahalbofanimeworld.blogspot.com/&vt=-5639291567810939189&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en._ShUtMH1OvQ.O%2Fam%3DAABA%2Fd%3D1%2Frs%3DAHpOoo9sEd_Wjj_xEtgO8qX69P7hAZI9cg%2Fm%3D__features__ IP142.250.74.105:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.blogger.com FingerprintE5:22:7F:76:57:F8:0E:D9:DA:51:9C:EF:6F:0A:70:00:E3:45:B4:8A ValidityMon, 05 Aug 2024 06:35:16 GMT - Mon, 28 Oct 2024 06:35:15 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5484), with no line terminators Hashcbafc4939f7b9be37ec9e10ef399a3b2 db87542c3f5ff874aa3cda8d03bcf2069ead3cd7 b2a8b1265412d2572db8fdbce1cf497a0cdefc6690bb3f2a8a2cdf9851a3dd12
GET /navbar.g?targetBlogID=3405693820859981231&blogName=sofiahalbof+anime+world+&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://sofiahalbofanimeworld.blogspot.com/search&blogLocale=en&v=2&homepageUrl=https://sofiahalbofanimeworld.blogspot.com/&vt=-5639291567810939189&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en._ShUtMH1OvQ.O%2Fam%3DAABA%2Fd%3D1%2Frs%3DAHpOoo9sEd_Wjj_xEtgO8qX69P7hAZI9cg%2Fm%3D__features__ HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 31 Aug 2024 20:14:40 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 2191
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| ad.a-ads.com/1110727?size=728x90 |  136.243.11.250 | 200 OK | 13 kB |
URL GET HTTP/2ad.a-ads.com/1110727?size=728x90 IP136.243.11.250:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://ad2bitcoin.com/ad.php?ref=sofiahalbof&width=300 CertificateIssuerSectigo Limited Subject*.a-ads.com FingerprintC4:DC:49:DF:0A:63:5A:A6:E4:00:AB:0B:FD:E4:94:92:A8:77:B7:C6 ValidityWed, 27 Dec 2023 00:00:00 GMT - Sun, 26 Jan 2025 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (11039) Hash44a8972ac5c1f7d87d4ff18c06715be2 b92c3f2b68f47f18e37b8c83610ba9e661a2bf53 cb4b3335ea27fd86eb6ca7dbb768deefc7ac870470e0e95fcae80d5156e3e5ce
GET /1110727?size=728x90 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ad2bitcoin.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 31 Aug 2024 20:14:42 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding, Accept-Encoding
status: 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-powered-by: Phusion Passenger(R)
x-original-referer: https://ad2bitcoin.com/
x-robots-tag: noindex, nofollow, nosnippet, noarchive
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
0.0.0.0