r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7786cd9bd97e024b3a1d16215defaad2
786ddbb74b0b6bd9270622dbe0258d6caee407c1
9c297ccfd178eec7e472fb64a6b2e34d4c7a6dec32870f49982353e590196ba0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C297CCFD178EEC7E472FB64A6B2E34D4C7A6DEC32870F49982353E590196BA0"
Last-Modified: Mon, 14 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8521
Expires: Mon, 14 Nov 2022 07:09:55 GMT
Date: Mon, 14 Nov 2022 04:47:54 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash b1e969be0f3201087da138cbc8b89f10
d0a27f525f2b242b5dafa157f126c2ba880c8809
f7e5f39372b5adcc30c27e727eee1b19e6d13ed1b54fa1ad67235dc8ee08ac51
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5111
Cache-Control: max-age=112118
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:47:54 GMT
Etag: "6370c779-1d7"
Expires: Tue, 15 Nov 2022 11:56:32 GMT
Last-Modified: Sun, 13 Nov 2022 10:31:21 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4736bac84ca28f2b1e961159fb4ea098
1319612979f53896fcfeacd4215c2715d4951e4c
5e81213e111ddf68c7f884f72b4e06fc4dc95eb902c3cf0762236b2418840dba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Length, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 14 Nov 2022 04:44:32 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 202
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c88bc06741ab9fb81c2544acfcc34aa2
362cab19cff5aba27f472cc00071d5dfa38192e4
314ba27975f458e13917b2be91c9d5989a3e57c9e94b5a84dd52d0e21d27ae7f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "314BA27975F458E13917B2BE91C9D5989A3E57C9E94B5A84DD52D0E21D27AE7F"
Last-Modified: Mon, 14 Nov 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15976
Expires: Mon, 14 Nov 2022 09:14:10 GMT
Date: Mon, 14 Nov 2022 04:47:54 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: hl7DBlPLERlHMcWzMj6U2UPbn2hD20lcCkDTYIbYh048KDJiOHNkYSWZzLiJ8vQ9knFi2Or6Qg4=
x-amz-request-id: 3AZC2Q08AG441DG9
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 14 Nov 2022 03:50:57 GMT
age: 3417
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 14 Nov 2022 04:47:54 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
significadodetatuagens.blogspot.com/2014/04/significado-da-tatuagem-de-terco.html
200 OK 33 kB URL HTTP/1.1 significadodetatuagens.blogspot.com/2014/04/significado-da-tatuagem-de-terco.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (19701)
Hash 9d7214e001eb1abb47eea8f01b2b2132
7abafbef6aba77e5f5ae0b54406ceb149b96e950
7f5e55abb58f1406667c0860925910b3bb8bd47e3b996d988e3a2d6579bdfcf9
Analyzer Verdict Alert fortinet Phishing
GET /2014/04/significado-da-tatuagem-de-terco.html HTTP/1.1
Host: significadodetatuagens.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Mon, 14 Nov 2022 04:47:54 GMT
Date: Mon, 14 Nov 2022 04:47:54 GMT
Cache-Control: private, max-age=0
Last-Modified: Tue, 08 Nov 2022 02:39:51 GMT
ETag: W/"f50745553cc280fb7cbb4224bc9e9c2bf3950a0e8cd5f384fc80bab81018e968"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 32975
Server: GSE
fonts.googleapis.com/css?family=Oswald
200 OK 495 B URL HTTP/1.1 fonts.googleapis.com/css?family=Oswald
IP
Hash a4a32d3d207b2c021587e24e97d9a668
7eba49938cae3f0f1a7204f8ea5c1e24c21397df
2b5c3cdc80fd6a3c61185c1667e7a0fef0d1ce49066bafe2da8cdeba79301933
GET /css?family=Oswald HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Mon, 14 Nov 2022 04:47:55 GMT
Date: Mon, 14 Nov 2022 04:47:55 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
significadodetatuagens.blogspot.com/js/cookienotice.js
200 OK 6.5 kB URL HTTP/1.1 significadodetatuagens.blogspot.com/js/cookienotice.js
IP
Hash a705132a2174f88e196ec3610d68faa8
3bad57a48d973a678fec600d45933010f6edc659
068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
GET /js/cookienotice.js HTTP/1.1
Host: significadodetatuagens.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/2014/04/significado-da-tatuagem-de-terco.html
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 6513
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 12 Nov 2022 05:27:50 GMT
Expires: Sat, 19 Nov 2022 05:27:50 GMT
Cache-Control: public, max-age=604800
Last-Modified: Fri, 11 Nov 2022 23:52:28 GMT
Content-Type: text/javascript
Age: 170405
dl.dropbox.com/u/93265919/efeitoimagens/data-post.js
301 Moved Permanently 0 B URL HTTP/1.1 dl.dropbox.com/u/93265919/efeitoimagens/data-post.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /u/93265919/efeitoimagens/data-post.js HTTP/1.1
Host: dl.dropbox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
HTTP/1.1 301 Moved Permanently
location: https://dl.dropbox.com/u/93265919/efeitoimagens/data-post.js
date: Mon, 14 Nov 2022 04:47:54 GMT
server: envoy
x-dropbox-request-id: b12aff3f83354f798914e151117e2586
content-length: 0
apis.google.com/js/plusone.js
200 OK 21 kB URL HTTP/1.1 apis.google.com/js/plusone.js
IP
File type ASCII text, with very long lines (1279)
Hash 557a84e1a4b4a45f586fb72599df1ad0
78eec98dcefee53f24a6684e407c81676e7952b4
a488b14f67aa02c62eb30b758d1eb76155478e3af0b2fd78dc52de4e28ed4014
GET /js/plusone.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript
Access-Control-Allow-Origin: *
Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team"
Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
Timing-Allow-Origin: *
Content-Length: 20987
Date: Mon, 14 Nov 2022 04:47:55 GMT
Expires: Mon, 14 Nov 2022 04:47:55 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
ETag: "c1b020d722de3a38"
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
s7.addthis.com/js/300/addthis_widget.js
308 Permanent Redirect 171 B URL HTTP/1.1 s7.addthis.com/js/300/addthis_widget.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3c417e9efbcaeb3bf7e7df75cf3b22fd
00465aec6b8ec302eae8abb99678fc5c09c3f343
21bd143d38dbbae427615a7266a86a18dc95c417f3e510632d7a9180d98d3571
GET /js/300/addthis_widget.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
HTTP/1.1 308 Permanent Redirect
Server: nginx/1.15.8
Content-Type: text/html
Content-Length: 171
Location: https://s7.addthis.com/js/300/addthis_widget.js
Date: Mon, 14 Nov 2022 04:47:55 GMT
Connection: keep-alive
X-Distribution: 99
X-Host: s7.addthis.com
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 96c9e6a333b1f0fddf32f24e7b965151
647fee1eb0d6839e30115edebe8d0840e6152cdb
a2ac4ddc863a9d641d91d504db389e0116cf1699322d2391f17d5785bf5bc538
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:47:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c6848d05b3331a71c43a32f2c10ccb23
55d535be1375d8d0cfffcfcc1fd0301c534fc323
efceacd47b109cd90e2b1818020e37d135bf9f5a125933fc83f5cc46cd9c29f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:47:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bc49d7a510846ce4c52fc2bcf19c591c
42189d9ddeba55c15da20ab02c8ccad4a8ad7ae2
86ce259086857d53f246aa21f8cb5dc2be85435601b687f727d3a5a2e38ec406
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:47:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 96c9e6a333b1f0fddf32f24e7b965151
647fee1eb0d6839e30115edebe8d0840e6152cdb
a2ac4ddc863a9d641d91d504db389e0116cf1699322d2391f17d5785bf5bc538
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:47:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
200 OK 6.6 kB URL HTTP/2 www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
IP
File type ASCII text, with very long lines (30596)
Hash 6f46e6f68353c7911fe34f31faa1518f
ea4dbfa2f87c18e9c51c59a32dfa9afb9c2c3472
0be7e26374fcff6f423b88e5f2a05d1cfdcb56abb4a78fa125e391989782ae0f
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 12 Nov 2022 20:36:31 GMT
expires: Sun, 12 Nov 2023 20:36:31 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 12 Nov 2022 15:50:54 GMT
content-type: text/css
age: 115884
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash a8e4b19720aea80c2b3e0ee0c5465994
e2aec8f26434c7a3a24f7a8e61bf790bc1aa92b8
9fd42f960546efeace53e87c3cb140c8f2ca4df57011115c11d2bbdb3e075343
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3997
Cache-Control: max-age=152006
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:47:55 GMT
Etag: "637167a4-1d7"
Expires: Tue, 15 Nov 2022 23:01:21 GMT
Last-Modified: Sun, 13 Nov 2022 21:54:44 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
www.blogger.com/static/v1/jsbin/3469866930-comment_from_post_iframe.js
200 OK 17 kB URL HTTP/2 www.blogger.com/static/v1/jsbin/3469866930-comment_from_post_iframe.js
IP
File type ASCII text, with very long lines (1441)
Hash f18def4ccec463cf908f91e7cba7f2c1
02d95f67edd84a44c82255ca7abcdbf7f4d0cee5
12b91cbf31131a10b1fc2aa05047c027caeac0d6e0ca5deadf418fff63d68082
GET /static/v1/jsbin/3469866930-comment_from_post_iframe.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 17447
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 09 Nov 2022 08:05:29 GMT
expires: Thu, 09 Nov 2023 08:05:29 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 08 Nov 2022 09:52:17 GMT
content-type: text/javascript
age: 420146
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/1456298461-widgets.js
200 OK 57 kB URL HTTP/2 www.blogger.com/static/v1/widgets/1456298461-widgets.js
IP
File type ASCII text, with very long lines (2221)
Hash 88748618db43e969518c3eb33210c960
0f41c4f3ee1c9cf7872497ae5a090e9a40acc0aa
ffa7705795c1add317fbe3967deb0738b6af86eac5aeda67fabc64eb82837cc7
GET /static/v1/widgets/1456298461-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56694
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 09 Nov 2022 18:58:17 GMT
expires: Thu, 09 Nov 2023 18:58:17 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 08 Nov 2022 03:55:44 GMT
content-type: text/javascript
age: 380978
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 04ad28caad1f09b52037f7af9326a3f3
c05e31b5caae0cd714aef58c820f2a094b5333a6
659f55543fa6576be02b99d69245331f55c476ac59581a69f1d9e462f6b03db0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:47:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s7.addthis.com/js/300/addthis_widget.js
200 OK 116 kB URL HTTP/2 s7.addthis.com/js/300/addthis_widget.js
IP
File type ASCII text, with very long lines (54602)
Size 116 kB (116406 bytes)
Hash 722e21e12eaa431752dfae3577fe0619
cdf8ee4381284ad6b6081663ae6ee322998e1b35
998242560562ed6542b378745338b65d06b0001ee9c4c9bb843166524bd4c407
GET /js/300/addthis_widget.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://significadodetatuagens.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/javascript
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-5834c"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 116406
date: Mon, 14 Nov 2022 04:47:55 GMT
vary: Accept-Encoding
x-distribution: 99
x-host: s7.addthis.com
X-Firefox-Spdy: h2
apis.google.com/js/platform.js
200 OK 21 kB URL HTTP/2 apis.google.com/js/platform.js
IP
File type ASCII text, with very long lines (1279)
Hash 71e5222c0f9051545890bb00c38ca28d
3c2c124c2c60c827c1eaade9842a6fe23112c36e
998e9a7323f70813bf8d9a1dd15868cc990caa8952957edd6c7d2a3cc9d07b0b
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20987
date: Mon, 14 Nov 2022 04:47:55 GMT
expires: Mon, 14 Nov 2022 04:47:55 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "849328c364e52e6e"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c6848d05b3331a71c43a32f2c10ccb23
55d535be1375d8d0cfffcfcc1fd0301c534fc323
efceacd47b109cd90e2b1818020e37d135bf9f5a125933fc83f5cc46cd9c29f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:47:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
200 OK 58 kB URL HTTP/1.1 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
IP
File type ASCII text, with very long lines (2776)
Hash 7fa1a15219220263064f6b4c3bbe88d0
af616b39280b64fe88e86fcee0019396a915a120
27de4e50583a68ce236f128009d83a540a750aa180e7137a71113201f50b392b
GET /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
Date: Mon, 14 Nov 2022 04:47:55 GMT
Expires: Mon, 14 Nov 2022 04:47:55 GMT
Cache-Control: private, max-age=3600
Content-Type: text/javascript; charset=UTF-8
ETag: 18065027917170260280
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 58090
X-XSS-Protection: 0
sites.google.com/site/paginblogger/numeradas/pagenav.js
302 Found 205 B URL HTTP/2 sites.google.com/site/paginblogger/numeradas/pagenav.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 21fc24f22a75da5cd91a9d5ef21f5b72
69197b304a97d2e4ea70ab69ac29b415d0c39486
2ee5383b6476a1356a390067b149f1d4b79ec5c0493ed360338b88a195393ad6
GET /site/paginblogger/numeradas/pagenav.js HTTP/1.1
Host: sites.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
x-robots-tag: noarchive
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 14 Nov 2022 04:47:55 GMT
last-modified: Sat, 04 Jul 2020 03:07:51 GMT
etag: "1593832071665"
location: https://sites.google.com/site/paginblogger/numeradas/pagenav.js?attredirects=0
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 205
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 96c9e6a333b1f0fddf32f24e7b965151
647fee1eb0d6839e30115edebe8d0840e6152cdb
a2ac4ddc863a9d641d91d504db389e0116cf1699322d2391f17d5785bf5bc538
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:47:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
sites.google.com/site/pagerolderlink/home/blogger/blogger.js
302 Found 207 B URL HTTP/2 sites.google.com/site/pagerolderlink/home/blogger/blogger.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 447dcc3f93cc70fb75bff0ed573332f4
1ddf85195b3b923c70f413c85bc4e473c7c64f2d
751751b46aaa7136fabbf1128a12f145adbd38b07faf35e46887e8878a378f7c
GET /site/pagerolderlink/home/blogger/blogger.js HTTP/1.1
Host: sites.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
x-robots-tag: noarchive
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 14 Nov 2022 04:47:55 GMT
last-modified: Sat, 04 Jul 2020 03:05:50 GMT
etag: "1593831950853"
location: https://sites.google.com/site/pagerolderlink/home/blogger/blogger.js?attredirects=0
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 207
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
sites.google.com/site/pagerolderlink/head/body.js
302 Found 202 B URL HTTP/2 sites.google.com/site/pagerolderlink/head/body.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 7a603493aaf8d4982505b7a0228dfb66
2c51c8d391effb9a7a3c094e66ddd430df972d65
6e07108257f986449516e717a5a8f580911a4f1ac0d4cb536fbb72d27b130ea7
GET /site/pagerolderlink/head/body.js HTTP/1.1
Host: sites.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
x-robots-tag: noarchive
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 14 Nov 2022 04:47:55 GMT
last-modified: Sat, 04 Jul 2020 03:05:02 GMT
etag: "1593831902942"
location: https://sites.google.com/site/pagerolderlink/head/body.js?attredirects=0
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 202
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
2.bp.blogspot.com/-oFF4HrEbwaI/To9NpETr6dI/AAAAAAAAEJk/jowvXNvTKcY/s1600/twitter.png
200 OK 963 B URL HTTP/1.1 2.bp.blogspot.com/-oFF4HrEbwaI/To9NpETr6dI/AAAAAAAAEJk/jowvXNvTKcY/s1600/twitter.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash a5672a72538626bac5c6c3cd7c0e9294
9e6917aee95beb6405716cd61197e6d36f832e81
d57575f80fbb3d5a929ba7d43e78a7a1b7b66e7a907c99bcab754a96afbc4f14
GET /-oFF4HrEbwaI/To9NpETr6dI/AAAAAAAAEJk/jowvXNvTKcY/s1600/twitter.png HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="twitter.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 963
X-XSS-Protection: 0
Date: Mon, 14 Nov 2022 04:39:47 GMT
Expires: Sun, 06 Nov 2022 02:55:02 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 488
ETag: "v1099"
Content-Type: image/png
www.blogger.com/img/blogger_logo_round_35.png
200 OK 2.5 kB URL HTTP/1.1 www.blogger.com/img/blogger_logo_round_35.png
IP
File type PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash 838622483cbfed35380b4705f19d7cca
7de684136affc969a24d61927afc18905cf2fc36
183923f8c8c3960dce8ad9722cf55a30d19b321b721741bd9e2ab6ae1f1ae72a
GET /img/blogger_logo_round_35.png HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2531
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 10 Nov 2022 15:44:36 GMT
Expires: Thu, 17 Nov 2022 15:44:36 GMT
Cache-Control: public, max-age=604800
Last-Modified: Tue, 08 Nov 2022 17:54:01 GMT
Content-Type: image/png
Age: 306199
b.dihitt.com/banners/dihitt_76x16_01.jpg
400 Bad Request 150 B URL HTTP/1.1 b.dihitt.com/banners/dihitt_76x16_01.jpg
IP
ASN #44136 ODERLAND Webbhotell AB
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 7f077f1fce3d566040b0d69eb1f27d8f
28d9c5f6b214c5cdbe7f7e55d6ed5e82080dea01
487ad0d2cf075f4328a1adf57ef428759ad4e2c873a8ebd2ad9653990829c9cf
GET /banners/dihitt_76x16_01.jpg HTTP/1.1
Host: b.dihitt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
HTTP/1.1 400 Bad Request
Server: nginx
Date: Mon, 14 Nov 2022 04:47:55 GMT
Content-Type: text/html
Content-Length: 150
Connection: close
X-Edge-IP: 185.20.12.36
X-Edge-Location: Kungalv, SE
1.bp.blogspot.com/-zyZkki5OJqE/To9Nmf1xb8I/AAAAAAAAEJQ/dlUOxjZ0H5U/s1600/email.png
200 OK 1.1 kB URL HTTP/1.1 1.bp.blogspot.com/-zyZkki5OJqE/To9Nmf1xb8I/AAAAAAAAEJQ/dlUOxjZ0H5U/s1600/email.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash f4093f3e5c8b6a854a1f8a6408f42664
f9f5d50543bc37d5438aeec15441c0e6b85f22f0
de9273c6f19d6109edeb685c9f1df3668ed87fb9d9139e40b812248813ceac92
GET /-zyZkki5OJqE/To9Nmf1xb8I/AAAAAAAAEJQ/dlUOxjZ0H5U/s1600/email.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="email.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 1125
X-XSS-Protection: 0
Date: Mon, 14 Nov 2022 04:47:55 GMT
Expires: Sun, 06 Nov 2022 02:49:43 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1094"
Content-Type: image/png
Age: 0
1.bp.blogspot.com/-SLbNOLbWhs0/To9NoZ-cOHI/AAAAAAAAEJg/uRl444L2fyg/s1600/rss.png
200 OK 1.5 kB URL HTTP/1.1 1.bp.blogspot.com/-SLbNOLbWhs0/To9NoZ-cOHI/AAAAAAAAEJg/uRl444L2fyg/s1600/rss.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 141c729fc2ff9a51bee6e2b502c06162
98faa9e3aecf16374292f72d0277e6570740db67
dfc7094d110b8297cbb6d7738882dbf3b0595f0d8b8afef143b3b48e0c0d2110
GET /-SLbNOLbWhs0/To9NoZ-cOHI/AAAAAAAAEJg/uRl444L2fyg/s1600/rss.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="rss.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 1521
X-XSS-Protection: 0
Date: Mon, 14 Nov 2022 04:47:55 GMT
Expires: Thu, 04 Aug 2022 10:44:45 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1098"
Content-Type: image/png
Age: 0
3.bp.blogspot.com/-NbS3DZVbHU0/To9NnX6odTI/AAAAAAAAEJY/SvIFghHPw-k/s1600/gplus.png
200 OK 1.8 kB URL HTTP/1.1 3.bp.blogspot.com/-NbS3DZVbHU0/To9NnX6odTI/AAAAAAAAEJY/SvIFghHPw-k/s1600/gplus.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash fa838f175bae2ce0845ebfa1bd39988c
2e3f62a21bb2a0c0fc467482d6b5a838a1230562
ecf23a1b00dcecadb87469b1214a99f381f1f23f3688f28626206ea3680faada
GET /-NbS3DZVbHU0/To9NnX6odTI/AAAAAAAAEJY/SvIFghHPw-k/s1600/gplus.png HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="gplus.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 1788
X-XSS-Protection: 0
Date: Mon, 14 Nov 2022 01:52:31 GMT
Expires: Sun, 06 Nov 2022 02:46:04 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 10524
ETag: "v1096"
Content-Type: image/png
3.bp.blogspot.com/-bzutYp7uln0/To9Nn2z36jI/AAAAAAAAEJc/-_kgc1MkEB4/s1600/linkedin.png
200 OK 1.0 kB URL HTTP/1.1 3.bp.blogspot.com/-bzutYp7uln0/To9Nn2z36jI/AAAAAAAAEJc/-_kgc1MkEB4/s1600/linkedin.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 219e3230a45dabb323407c61365c3235
01699740c86acd5fe7c7d8eb7abf6330c2418e41
ca8e28f5a5456a373c3732c2e7851e7e160f864edf14cd2606cbaa83b7146f76
GET /-bzutYp7uln0/To9Nn2z36jI/AAAAAAAAEJc/-_kgc1MkEB4/s1600/linkedin.png HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="linkedin.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 1040
X-XSS-Protection: 0
Date: Mon, 14 Nov 2022 01:52:31 GMT
Expires: Sun, 18 Sep 2022 03:44:21 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 10524
ETag: "v1097"
Content-Type: image/png
4.bp.blogspot.com/-O6nMA1_akTo/To9NmwKzo4I/AAAAAAAAEJU/UFiFTyAJbnw/s1600/facebook.png
200 OK 962 B URL HTTP/1.1 4.bp.blogspot.com/-O6nMA1_akTo/To9NmwKzo4I/AAAAAAAAEJU/UFiFTyAJbnw/s1600/facebook.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 309c914e1eb6c78cb9f0f1a657ac6f6c
1420eda2b39793997f150dc59da379a318dae97c
9b769c4e88643bdb97e4944d6e19e16664040308f121dc76e369e9b0cf037cea
GET /-O6nMA1_akTo/To9NmwKzo4I/AAAAAAAAEJU/UFiFTyAJbnw/s1600/facebook.png HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="facebook.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 962
X-XSS-Protection: 0
Date: Mon, 14 Nov 2022 03:10:38 GMT
Expires: Sat, 08 Oct 2022 04:30:16 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 5837
ETag: "v1095"
Content-Type: image/png
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Cache-Control, Pragma, Last-Modified, ETag, Alert, Backoff, Content-Type, Retry-After, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 14 Nov 2022 04:44:48 GMT
cache-control: public,max-age=3600
age: 187
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
sites.google.com/site/paginblogger/numeradas/pagenav.js?attredirects=0
302 Found 454 B URL HTTP/2 sites.google.com/site/paginblogger/numeradas/pagenav.js?attredirects=0
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (415)
Hash 2d4f4481fee9bdb9313368657f25b625
30f7391f03a1178c01327340e3d30f88430b5dd2
267f0a73aba1d37af576584f8f8468338fca31ebb4a51793fb2a0d0c1609cd8f
GET /site/paginblogger/numeradas/pagenav.js?attredirects=0 HTTP/1.1
Host: sites.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://significadodetatuagens.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
location: https://89edd755-a-62cb3a1a-s-sites.googlegroups.com/site/paginblogger/numeradas/pagenav.js?attachauth=ANoY7crsYywT-Q8BkPsoUDi8Qh8k393c6Lk0OW0uzoVM7IYQkzvTm5DQIp9xiiJX2kSh1rfi6EJrPEALlEJ5qfZSgffD0K-SocdwHaq9te14gEIzCinx399cHsd3Z-OnjURWmDn-k36zdq1auhQZzCZ8m3NWspyii5zMspJ9StpHjINk4niS3jwlUiFLONR-bcvVqtDm-DRqqIRk2oyDHt4P1v29mFF4aAJM-aZeW4kPYAa7Q5ZZYNU%3D&attredirects=0
content-encoding: gzip
date: Mon, 14 Nov 2022 04:47:55 GMT
expires: Mon, 14 Nov 2022 04:47:55 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 454
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
sites.google.com/site/pagerolderlink/head/body.js?attredirects=0
302 Found 440 B URL HTTP/2 sites.google.com/site/pagerolderlink/head/body.js?attredirects=0
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (391)
Hash a680fd0accf9449638f87415387784cf
c069a4758b2403088db40cc9ada22bca16066162
4c4037419b7b089e597b8f8ce476825540e77e013f4895a89c2cffa3d315d4dc
GET /site/pagerolderlink/head/body.js?attredirects=0 HTTP/1.1
Host: sites.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://significadodetatuagens.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
location: https://ba01b89a-a-62cb3a1a-s-sites.googlegroups.com/site/pagerolderlink/head/body.js?attachauth=ANoY7cpIjVSz7Z8eog4ncTMAbdOYNNlFJgNuBYBqdRvOVxtNF8w5gL2LfiCpQPcqAAdtQyaRwWe1o50b_EqiMEIWsNUYjx6CPGV-EuTzPDzhQaW3ulgyMA0y6XHEKw0Ol_AzZ2SBWGo6JLgjXbzvC7PRhXX0q5yAQax0528TyKTN6zt1U-W_n5qkiOEb1vv1pZOEHZIJh-xPppZECBBXw3tQ9M2ar7wVIA%3D%3D&attredirects=0
content-encoding: gzip
date: Mon, 14 Nov 2022 04:47:55 GMT
expires: Mon, 14 Nov 2022 04:47:55 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 440
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
sites.google.com/site/pagerolderlink/home/blogger/blogger.js?attredirects=0
302 Found 455 B URL HTTP/2 sites.google.com/site/pagerolderlink/home/blogger/blogger.js?attredirects=0
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (420)
Hash fa1c0507b7ec78f977aae5d73c089b9d
cc2571c095af92f042ce823fb20ab9b327155333
98426e8dd010729082357e0d2cca456eed0d2c077f7809227287c3557a8cea69
GET /site/pagerolderlink/home/blogger/blogger.js?attredirects=0 HTTP/1.1
Host: sites.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://significadodetatuagens.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
location: https://ba01b89a-a-62cb3a1a-s-sites.googlegroups.com/site/pagerolderlink/home/blogger/blogger.js?attachauth=ANoY7cr9O4xrjdkEwVZtz7ILuvnosujxvpBJ2FAFUpKmxe1oSzlZMMUc5GVqo2hBnauW0yL0g1tBEbQttm7b_IqJ9zJ-GERSLMsgOSChvPA-QcnJzPdnJjQtZ9jSS2_6N1Ito6xcteXhFPJFLOvPGNq30ImWWWa2nmx7jZy08f9V3NTtijRJSBwF_osBV62oYlYeJwcemk1opL0SCyDlj_9USZ1slehsHkyly5lIl9jH5T7onZK0mkE%3D&attredirects=0
content-encoding: gzip
date: Mon, 14 Nov 2022 04:47:55 GMT
expires: Mon, 14 Nov 2022 04:47:55 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 455
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.clicmais.net/images/bannerCM12060.gif
404 Not Found 9 B URL HTTP/1.1 www.clicmais.net/images/bannerCM12060.gif
IP
ASN #30633 LEASEWEB-USA-WDC
File type ASCII text, with no line terminators
Hash d8f4a1993546cc4b850cde3599e27aec
094b763b4cfcc0b05e5d040581cd513c3ca08067
907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9
GET /images/bannerCM12060.gif HTTP/1.1
Host: www.clicmais.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
HTTP/1.1 404 Not Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 9
date: Mon, 14 Nov 2022 04:47:55 GMT
server: nginx
set-cookie: sid=81421e4e-63d7-11ed-9dd2-4faea0a88fed; path=/; domain=.clicmais.net; expires=Sat, 02 Dec 2090 08:02:02 GMT; max-age=2147483647; HttpOnly
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 336defac1e4cc5dd3442b1aa4bab698b
1fad056c29319b5dd74fab4c492c884e67d0bb03
436ff1c5164ba8f6ad6ea793e685df46f9037c6a6496d37206d9512da25248de
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:47:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 336defac1e4cc5dd3442b1aa4bab698b
1fad056c29319b5dd74fab4c492c884e67d0bb03
436ff1c5164ba8f6ad6ea793e685df46f9037c6a6496d37206d9512da25248de
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:47:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 336defac1e4cc5dd3442b1aa4bab698b
1fad056c29319b5dd74fab4c492c884e67d0bb03
436ff1c5164ba8f6ad6ea793e685df46f9037c6a6496d37206d9512da25248de
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:47:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 0a9a357f652868f9317812b8103ba15d
95a90c7a07b591dce7f39c6f9ab27974d1a1ed2a
16fd52c7ee6806455e724f30af8d58630a141a8a3823c48c20b5da3a71f066da
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1451
Cache-Control: max-age=103388
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:47:55 GMT
Etag: "6370b3ac-1d7"
Expires: Tue, 15 Nov 2022 09:31:03 GMT
Last-Modified: Sun, 13 Nov 2022 09:06:52 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
www.dignow.org/images/dignow_120.png
301 Moved Permanently 707 B URL HTTP/1.1 www.dignow.org/images/dignow_120.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /images/dignow_120.png HTTP/1.1
Host: www.dignow.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Mon, 14 Nov 2022 04:47:55 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
location: https://www.dignow.org/images/dignow_120.png
platform: hostinger
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3TVQt43%2BjONcSYjQI%2FTndlEIdq7cPEqkUs4P0Bx%2FLFhRDrL9NIDpESiQln39LSTWl9WAykhDgdeGnRGr5f1IpwJQCDSOYxB3IeEzsHmy%2F2t7V2lw2bmpwJIIOstNSw3%2BtQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 769d1ca3acb50afe-OSL
alt-svc: h2=":443"; ma=60
bloggercomment.com/allowComments.js
301 Moved Permanently 707 B URL HTTP/1.1 bloggercomment.com/allowComments.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
Analyzer Verdict Alert fortinet Malware
GET /allowComments.js HTTP/1.1
Host: bloggercomment.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Mon, 14 Nov 2022 04:47:55 GMT
server: LiteSpeed
location: https://bloggercomment.com/allowComments.js
platform: hostinger
content-security-policy: upgrade-insecure-requests
1.bp.blogspot.com/-WFjRunmd0VM/U1bB-mQfEQI/AAAAAAAAGiY/XWtLdWBprW4/s1600/evandro-terco-pulsosignificadodatatuagemdeTER%C3%87O-significadodetatuagens.blogspot.com.jpg
200 OK 64 kB URL HTTP/1.1 1.bp.blogspot.com/-WFjRunmd0VM/U1bB-mQfEQI/AAAAAAAAGiY/XWtLdWBprW4/s1600/evandro-terco-pulsosignificadodatatuagemdeTER%C3%87O-significadodetatuagens.blogspot.com.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 600x448, components 3\012- data
Hash 70682254a1b8e522b55244d89bb31ac5
94a0a875f1ac52791550f792c914501e69e10713
aa94504886e6da9bd026842e1a1965382ea634601ff7c9f802220cd2cdf056ad
GET /-WFjRunmd0VM/U1bB-mQfEQI/AAAAAAAAGiY/XWtLdWBprW4/s1600/evandro-terco-pulsosignificadodatatuagemdeTER%C3%87O-significadodetatuagens.blogspot.com.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1a27"
Expires: Tue, 15 Nov 2022 04:47:55 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="evandro-terco-pulsosignificadodatatuagemdeTER_O-significadodetatuagens.blogspot.com.jpg";filename*=UTF-8''evandro-terco-pulsosignificadodatatuagemdeTER%C3%87O-significadodetatuagens.blogspot.com.jpg
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 14 Nov 2022 04:47:55 GMT
Server: fife
Content-Length: 64329
X-XSS-Protection: 0
3.bp.blogspot.com/-_CNQn-1wF-A/U1bD07xCBeI/AAAAAAAAGi4/HSAYIq6pzII/s1600/downloadsignificadodatatuagemdeTER%25C3%2587O-significadodetatuagens.blogspot.com.jpg
200 OK 11 kB URL HTTP/1.1 3.bp.blogspot.com/-_CNQn-1wF-A/U1bD07xCBeI/AAAAAAAAGi4/HSAYIq6pzII/s1600/downloadsignificadodatatuagemdeTER%25C3%2587O-significadodetatuagens.blogspot.com.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 254x199, components 3\012- data
Hash d1f317f2270171585a5a6d759b5296b5
3530b787e65ecf9053efea15f5e77e577442e646
2bb4a95ebb8a8a680bf1a69c1a8d24ed390b0c0dc765ba4466e918ba3aae4294
GET /-_CNQn-1wF-A/U1bD07xCBeI/AAAAAAAAGi4/HSAYIq6pzII/s1600/downloadsignificadodatatuagemdeTER%25C3%2587O-significadodetatuagens.blogspot.com.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v2619"
Expires: Tue, 15 Nov 2022 04:47:55 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="downloadsignificadodatatuagemdeTER_O-significadodetatuagens.blogspot.com.jpg";filename*=UTF-8''downloadsignificadodatatuagemdeTER%C3%87O-significadodetatuagens.blogspot.com.jpg
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 14 Nov 2022 04:47:55 GMT
Server: fife
Content-Length: 10875
X-XSS-Protection: 0
2.bp.blogspot.com/-PwUqONjLlxA/U1bD0-FqIcI/AAAAAAAAGis/bXIsNAjoDRI/s1600/images+(2)significadodatatuagemdeTER%C3%87O-significadodetatuagens.blogspot.com.jpg
200 OK 6.1 kB URL HTTP/1.1 2.bp.blogspot.com/-PwUqONjLlxA/U1bD0-FqIcI/AAAAAAAAGis/bXIsNAjoDRI/s1600/images+(2)significadodatatuagemdeTER%C3%87O-significadodetatuagens.blogspot.com.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 183x275, components 3\012- data
Hash fb0d1f44d7ea6aa2a0f5831938c1cdd6
7468a2b631dc7c55769dff2025ca5d90b48bd71e
f8bc45fef5ae3664f65e2732a85316fdecca7ee7434fdfa328dd2477f667a70f
GET /-PwUqONjLlxA/U1bD0-FqIcI/AAAAAAAAGis/bXIsNAjoDRI/s1600/images+(2)significadodatatuagemdeTER%C3%87O-significadodetatuagens.blogspot.com.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1a2d"
Expires: Tue, 15 Nov 2022 04:47:55 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="images (2)significadodatatuagemdeTER_O-significadodetatuagens.blogspot.com.jpg";filename*=UTF-8''images%20(2)significadodatatuagemdeTER%C3%87O-significadodetatuagens.blogspot.com.jpg
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 14 Nov 2022 04:47:55 GMT
Server: fife
Content-Length: 6114
X-XSS-Protection: 0
1.bp.blogspot.com/-x7pqcMBFlRg/U1bEfvjxT9I/AAAAAAAAGi8/ypUFzlUYELU/s1600/LUANSANTANAsignificadodatatuagemdeTER%C3%87O-significadodetatuagens.blogspot.comOSTAS-4.jpg
200 OK 47 kB URL HTTP/1.1 1.bp.blogspot.com/-x7pqcMBFlRg/U1bEfvjxT9I/AAAAAAAAGi8/ypUFzlUYELU/s1600/LUANSANTANAsignificadodatatuagemdeTER%C3%87O-significadodetatuagens.blogspot.comOSTAS-4.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 600x525, components 3\012- data
Hash c8f1d0adef9ba243d175754999ae4212
62e6b3efca5e23c2d1e7bf38143a1efe9c102941
891f7b061353898493b3080339112a1f0c810e503db2b33aeae8611e1212b7e2
GET /-x7pqcMBFlRg/U1bEfvjxT9I/AAAAAAAAGi8/ypUFzlUYELU/s1600/LUANSANTANAsignificadodatatuagemdeTER%C3%87O-significadodetatuagens.blogspot.comOSTAS-4.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1a30"
Expires: Tue, 15 Nov 2022 04:47:55 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="LUANSANTANAsignificadodatatuagemdeTER_O-significadodetatuagens.blogspot.comOSTAS-4.jpg";filename*=UTF-8''LUANSANTANAsignificadodatatuagemdeTER%C3%87O-significadodetatuagens.blogspot.comOSTAS-4.jpg
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 14 Nov 2022 04:47:55 GMT
Server: fife
Content-Length: 46923
X-XSS-Protection: 0
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 336defac1e4cc5dd3442b1aa4bab698b
1fad056c29319b5dd74fab4c492c884e67d0bb03
436ff1c5164ba8f6ad6ea793e685df46f9037c6a6496d37206d9512da25248de
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:47:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 336defac1e4cc5dd3442b1aa4bab698b
1fad056c29319b5dd74fab4c492c884e67d0bb03
436ff1c5164ba8f6ad6ea793e685df46f9037c6a6496d37206d9512da25248de
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:47:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1p5/ZQR2R2YiJsk
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/ZQR2R2YiJsk
IP
Hash 8a4061376dc01e251b435d298ea76e0f
a72334519b71be545364f3e22a076f780fd7add7
4ce72c2dff755767910de0ffda63c509f92654cbc2d49cf0bc632e92da1afb2f
POST /s/gts1p5/ZQR2R2YiJsk HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:47:56 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: RSlaYEaLZ9TF5gqDoSHrgQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: KI5TX+RLwZnzhgY+1wGk5t2XhoA=
ocsp.pki.goog/s/gts1p5/ZQR2R2YiJsk
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/ZQR2R2YiJsk
IP
Hash 8a4061376dc01e251b435d298ea76e0f
a72334519b71be545364f3e22a076f780fd7add7
4ce72c2dff755767910de0ffda63c509f92654cbc2d49cf0bc632e92da1afb2f
POST /s/gts1p5/ZQR2R2YiJsk HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:47:56 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ba01b89a-a-62cb3a1a-s-sites.googlegroups.com/site/pagerolderlink/head/body.js?attachauth=ANoY7cpIjVSz7Z8eog4ncTMAbdOYNNlFJgNuBYBqdRvOVxtNF8w5gL2LfiCpQPcqAAdtQyaRwWe1o50b_EqiMEIWsNUYjx6CPGV-EuTzPDzhQaW3ulgyMA0y6XHEKw0Ol_AzZ2SBWGo6JLgjXbzvC7PRhXX0q5yAQax0528TyKTN6zt1U-W_n5qkiOEb1vv1pZOEHZIJh-xPppZECBBXw3tQ9M2ar7wVIA%3D%3D&attredirects=0
200 OK 58 kB URL HTTP/2 ba01b89a-a-62cb3a1a-s-sites.googlegroups.com/site/pagerolderlink/head/body.js?attachauth=ANoY7cpIjVSz7Z8eog4ncTMAbdOYNNlFJgNuBYBqdRvOVxtNF8w5gL2LfiCpQPcqAAdtQyaRwWe1o50b_EqiMEIWsNUYjx6CPGV-EuTzPDzhQaW3ulgyMA0y6XHEKw0Ol_AzZ2SBWGo6JLgjXbzvC7PRhXX0q5yAQax0528TyKTN6zt1U-W_n5qkiOEb1vv1pZOEHZIJh-xPppZECBBXw3tQ9M2ar7wVIA%3D%3D&attredirects=0
IP
File type ASCII text, with very long lines (14615), with CRLF, LF line terminators
Hash 329726c2ebe11b47b878fbea1322aaa6
5a1c617a3cbc7180a7dfd46660817206179c5a81
72f7096e379ecd28990f50762ae319fdc3c5cefbea0c2ad2c61592f1e73e55ed
GET /site/pagerolderlink/head/body.js?attachauth=ANoY7cpIjVSz7Z8eog4ncTMAbdOYNNlFJgNuBYBqdRvOVxtNF8w5gL2LfiCpQPcqAAdtQyaRwWe1o50b_EqiMEIWsNUYjx6CPGV-EuTzPDzhQaW3ulgyMA0y6XHEKw0Ol_AzZ2SBWGo6JLgjXbzvC7PRhXX0q5yAQax0528TyKTN6zt1U-W_n5qkiOEb1vv1pZOEHZIJh-xPppZECBBXw3tQ9M2ar7wVIA%3D%3D&attredirects=0 HTTP/1.1
Host: ba01b89a-a-62cb3a1a-s-sites.googlegroups.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://significadodetatuagens.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 14 Nov 2022 04:47:56 GMT
last-modified: Sat, 04 Jul 2020 03:05:02 GMT
etag: "1593831902942"
content-disposition: attachment; filename="body.js"
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
200 OK 67 B URL HTTP/1.1 pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP
Hash 9bbc3ca32ec951a484589ce0e6b4db73
753d6f6183b33b2dee5dde2208fca91c17f5bb13
b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 0
Date: Sun, 13 Nov 2022 17:09:46 GMT
Expires: Sun, 27 Nov 2022 17:09:46 GMT
Cache-Control: public, max-age=1209600
ETag: 13036835877489095579
Content-Type: text/javascript; charset=UTF-8
Age: 41890
bloggercomment.com/allowComments.js
302 Found 683 B URL HTTP/2 bloggercomment.com/allowComments.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 6371befc85069a96b0cb3c52e754a55a
de3def799f60ce2a16721687937ffb2a3f9bd3ae
db6f3663ecb5b124f3c02ce15691739fe69888b7ed6112f03062489470517f77
Analyzer Verdict Alert fortinet Malware
GET /allowComments.js HTTP/1.1
Host: bloggercomment.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://significadodetatuagens.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html
content-length: 683
date: Mon, 14 Nov 2022 04:47:56 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
location: https://fontpis.blogspot.com/
platform: hostinger
content-security-policy: upgrade-insecure-requests
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2
200 OK 9.8 kB URL HTTP/1.1 fonts.gstatic.com/s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 9840, version 1.0\012- data
Hash afda6e429fd299054de28e1f157c683d
c1847d6f3df5fe11d5e96fd5e6a59b73ff7ed96b
81cd29d1413ecf75834fb3ce1da572fe5c39e53b22c61f5dafec5b14ed4ee12e
GET /s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://significadodetatuagens.blogspot.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 9840
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 08 Nov 2022 04:58:58 GMT
Expires: Wed, 08 Nov 2023 04:58:58 GMT
Cache-Control: public, max-age=31536000
Age: 517738
Last-Modified: Mon, 18 Jul 2022 19:24:04 GMT
Content-Type: font/woff2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c1abc90e3b0a3418b27aa617d9e6f6eb
ec09eabd2f48a4013c6ae13d0145d5cd5823aa96
57905b7c1951f7340d51107297e02bd848abecfcf701ea8bc1befa105ee0178f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:47:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c1abc90e3b0a3418b27aa617d9e6f6eb
ec09eabd2f48a4013c6ae13d0145d5cd5823aa96
57905b7c1951f7340d51107297e02bd848abecfcf701ea8bc1befa105ee0178f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:47:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
section-border.blogspot.com.br/
302 Moved Temporarily 181 B URL HTTP/1.1 section-border.blogspot.com.br/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash ac5635b9856306ab7d56fae9b2ac50b2
98e61afada9743d86811aa59d70072e01b56c1b0
221aba6e3be7a98e214e1d747b6f7a53768dffc5241027cb54fc22babf6cb494
GET / HTTP/1.1
Host: section-border.blogspot.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Location: http://section-border.blogspot.com/
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Mon, 14 Nov 2022 04:47:56 GMT
Expires: Mon, 14 Nov 2022 04:47:56 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 181
Server: GSE
googleads.g.doubleclick.net/pagead/html/r20221109/r20190131/zrt_lookup.html
200 OK 4.2 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/html/r20221109/r20190131/zrt_lookup.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2579)
Hash 2fb3574102373e2e076cfa2ff90cdf25
d06c985183def975546d6e47ab6369c11dcf7195
e61cbc207f7fc2f429deceff11e7a339a3d9a9574da6d035054eba02ee381345
GET /pagead/html/r20221109/r20190131/zrt_lookup.html HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 4242
x-xss-protection: 0
date: Sun, 13 Nov 2022 17:54:38 GMT
expires: Sun, 27 Nov 2022 17:54:38 GMT
cache-control: public, max-age=1209600
age: 39198
etag: 10353107486223812946
content-type: text/html; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.clicmais.net/images/bannerCM12060.gif
404 Not Found 9 B URL HTTP/1.1 www.clicmais.net/images/bannerCM12060.gif
IP
ASN #30633 LEASEWEB-USA-WDC
File type ASCII text, with no line terminators
Hash d8f4a1993546cc4b850cde3599e27aec
094b763b4cfcc0b05e5d040581cd513c3ca08067
907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9
GET /images/bannerCM12060.gif HTTP/1.1
Host: www.clicmais.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
HTTP/1.1 404 Not Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 9
date: Mon, 14 Nov 2022 04:47:56 GMT
server: nginx
set-cookie: sid=81e2ba5c-63d7-11ed-b4f2-4faedbe07001; path=/; domain=.clicmais.net; expires=Sat, 02 Dec 2090 08:02:03 GMT; max-age=2147483647; HttpOnly
pagead2.googlesyndication.com/pagead/managed/js/adsense/m202211090101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-0165280589404372&plah=significadodetatuagens.blogspot.com&bust=31070852
200 OK 120 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/managed/js/adsense/m202211090101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-0165280589404372&plah=significadodetatuagens.blogspot.com&bust=31070852
IP
File type ASCII text, with very long lines (6141)
Size 120 kB (119544 bytes)
Hash 5e23365b4f4923842cbddcd00eb22520
59e32a2d3277f91eed3907713d2f604bfcbc44f4
ca95618ba3cbee9f6e3d3e6a69bc2acc079a70d92b3fa97b12b16d6c6df0b6d3
GET /pagead/managed/js/adsense/m202211090101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-0165280589404372&plah=significadodetatuagens.blogspot.com&bust=31070852 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Mon, 14 Nov 2022 04:47:56 GMT
expires: Mon, 14 Nov 2022 04:47:56 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
content-type: text/javascript; charset=UTF-8
etag: 9359590258662444867
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 119544
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2bc53aaf69bdee1f757bd47be906bbb0
1ad1cc696dcdae804923a4d6f70320b29a72b3d5
0c7f45bb445305051f4c9e7de1a821b682aa3cb3621e0ac5b0dbbcca425df4f9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:47:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
2.bp.blogspot.com/-wUTAVijSDbw/UBNTf5ppYEI/AAAAAAAAAT4/XasMzcoO8KA/s1600/search.png
200 OK 529 B URL HTTP/1.1 2.bp.blogspot.com/-wUTAVijSDbw/UBNTf5ppYEI/AAAAAAAAAT4/XasMzcoO8KA/s1600/search.png
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 6ff7ac282387d1bffe14d6e840cdbaaa
bd907d55b077e44af75d959efa1d378c3a8d5838
432fd5c4e7f3958c270cce7bd127aa492603135deb223352d0f463dd4cd24cb4
GET /-wUTAVijSDbw/UBNTf5ppYEI/AAAAAAAAAT4/XasMzcoO8KA/s1600/search.png HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v13e"
Expires: Tue, 15 Nov 2022 04:47:56 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="search.png"
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 14 Nov 2022 04:47:56 GMT
Server: fife
Content-Length: 529
X-XSS-Protection: 0
4.bp.blogspot.com/-RhRydBTxWEk/UOY85zkWABI/AAAAAAAABwo/v-KwRDT5J_w/s1600/menu-primary-bg.png
200 OK 273 B URL HTTP/1.1 4.bp.blogspot.com/-RhRydBTxWEk/UOY85zkWABI/AAAAAAAABwo/v-KwRDT5J_w/s1600/menu-primary-bg.png
IP
File type PNG image data, 2 x 184, 8-bit/color RGBA, non-interlaced\012- data
Hash fa5c369ac7fa65c7a0accb7c5e5cfb57
7e2f5da103922688d2508cdd7f8ec2f33fa2c79e
64c077ade1580660fea7f07102206bcceb68c4e909e8ef7b860fa715b69ddf8e
GET /-RhRydBTxWEk/UOY85zkWABI/AAAAAAAABwo/v-KwRDT5J_w/s1600/menu-primary-bg.png HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v70a"
Expires: Tue, 15 Nov 2022 04:47:56 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="menu-primary-bg.png"
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 14 Nov 2022 04:47:56 GMT
Server: fife
Content-Length: 273
X-XSS-Protection: 0
1.bp.blogspot.com/-4lxMJ2x2wTQ/UOY8usha4RI/AAAAAAAABwg/d2umaD7yusk/s1600/background.png
200 OK 228 B URL HTTP/1.1 1.bp.blogspot.com/-4lxMJ2x2wTQ/UOY8usha4RI/AAAAAAAABwg/d2umaD7yusk/s1600/background.png
IP
File type PNG image data, 5 x 5, 8-bit/color RGB, non-interlaced\012- data
Hash 94bcebe4ecca5b291659aa5c9f3e6b81
fbe516d128bf7d9ef431dcdf26fc8bd9b79fcbd5
eb863b2214176976bf0977e081b178b3a08dfbe529f2343834b073ed60906627
GET /-4lxMJ2x2wTQ/UOY8usha4RI/AAAAAAAABwg/d2umaD7yusk/s1600/background.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v708"
Expires: Tue, 15 Nov 2022 04:47:56 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="background.png"
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 14 Nov 2022 04:47:56 GMT
Server: fife
Content-Length: 228
X-XSS-Protection: 0
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ac45444bcd03203917d51c0ce8b87e65
90e239e243132bfbed2741ce7b73ea09d3ddd685
a716af0c0d950af63a00bf70c875a2e9c72e451ba4803597ddde517923bdeca1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:47:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f5563b8eaa8bbe5076e53dcb10e434a5
ce068739a71489f4991632ce5c6cd0943267a91a
c917e4ff0251bc6bbe67aab3858e5d3421fa743fe8e4e612a0938c2d2bb19e53
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:47:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fontpis.blogspot.com/
200 OK 1.8 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (497)
Hash 52ef0cd37c933e838a5a198eee5869fa
c280f1e0d44fb65f950aaa80334d38131a45f135
fe15ddeda2d0af99d6ad90cc97772b2d4357284cf2d364a0c13120c5e1537ee1
GET / HTTP/1.1
Host: fontpis.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://significadodetatuagens.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Mon, 14 Nov 2022 04:47:56 GMT
date: Mon, 14 Nov 2022 04:47:56 GMT
cache-control: private, max-age=0
last-modified: Tue, 08 Nov 2022 00:58:03 GMT
etag: W/"df624f51614255cbddf80f976084402bb271d944734631927b4648e31a191d38"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 1769
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/adsid/integrator.js?domain=significadodetatuagens.blogspot.com
200 OK 1.5 kB URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=significadodetatuagens.blogspot.com
IP
Hash 1e13e4d09d50f54412b19b83680f3f95
b102e218c5e3886a5ece2874d9f4b3178fb2b8be
38ef75691f0213bbcdabeb5fc748c538b337edd834f0fde2b7328086a3e874f4
GET /adsid/integrator.js?domain=significadodetatuagens.blogspot.com HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Mon, 14 Nov 2022 04:47:56 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dl.dropbox.com/u/93265919/efeitoimagens/data-post.js
404 Not Found 4.5 kB URL HTTP/2 dl.dropbox.com/u/93265919/efeitoimagens/data-post.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (23665)
Hash 3ec7f9e1c2dbda59c22efcbd36cbd0cd
058b8df161c4af8e5dbd72af7512be705294756d
332f97b8ac283ee8d081b5f635e97af535c30fac5a67b2ab3e2df8cdf45d294b
GET /u/93265919/efeitoimagens/data-post.js HTTP/1.1
Host: dl.dropbox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://significadodetatuagens.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
content-type: text/html
date: Mon, 14 Nov 2022 04:47:56 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, noimageindex
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: remote
x-dropbox-request-id: 36bcf103c9e94f308fbacb116443cbe5
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=significadodetatuagens.blogspot.com
200 OK 1.5 kB URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=significadodetatuagens.blogspot.com
IP
Hash 1e13e4d09d50f54412b19b83680f3f95
b102e218c5e3886a5ece2874d9f4b3178fb2b8be
38ef75691f0213bbcdabeb5fc748c538b337edd834f0fde2b7328086a3e874f4
GET /adsid/integrator.js?domain=significadodetatuagens.blogspot.com HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Mon, 14 Nov 2022 04:47:56 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
4.bp.blogspot.com/_4HKUHirY_2U/TLlJUqSaolI/AAAAAAAAEq4/qpgAHAOe9x0/s1600/comment-avatar-premium.jpg
200 OK 541 B URL HTTP/1.1 4.bp.blogspot.com/_4HKUHirY_2U/TLlJUqSaolI/AAAAAAAAEq4/qpgAHAOe9x0/s1600/comment-avatar-premium.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=4, orientation=upper-left, software=Google], baseline, precision 8, 32x32, components 1\012- data
Hash 9ee3da6ab7356c8b0578eaebe9391903
7d793d99b9992f85bc5cacc2f8d71f8e2e8b7e4c
2c6957f1397213a1066f50c6801fe3a73e64cedec1a05ae438a1464b137ea71f
GET /_4HKUHirY_2U/TLlJUqSaolI/AAAAAAAAEq4/qpgAHAOe9x0/s1600/comment-avatar-premium.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v12ae"
Expires: Tue, 15 Nov 2022 04:47:56 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="comment-avatar.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 14 Nov 2022 04:47:56 GMT
Server: fife
Content-Length: 541
X-XSS-Protection: 0
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2bc53aaf69bdee1f757bd47be906bbb0
1ad1cc696dcdae804923a4d6f70320b29a72b3d5
0c7f45bb445305051f4c9e7de1a821b682aa3cb3621e0ac5b0dbbcca425df4f9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:47:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
section-border.blogspot.com/
200 OK 6.8 kB URL HTTP/1.1 section-border.blogspot.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4148)
Hash 4c39081244ca2a9b40de3222faa71b66
6845632829140aa5730165e2531fab794959825c
90b501c1b5d4dc670dd96d447b5b672152ecb1872ea4ac9d14e42859a1a0d8db
GET / HTTP/1.1
Host: section-border.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://significadodetatuagens.blogspot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Mon, 14 Nov 2022 04:47:56 GMT
Date: Mon, 14 Nov 2022 04:47:56 GMT
Cache-Control: private, max-age=0
Last-Modified: Wed, 01 Dec 2021 17:12:44 GMT
ETag: W/"0643ffd12432b571e04e40f06729474ba98f456e2e8945cf33730b437e960aa3"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 6811
Server: GSE
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ac45444bcd03203917d51c0ce8b87e65
90e239e243132bfbed2741ce7b73ea09d3ddd685
a716af0c0d950af63a00bf70c875a2e9c72e451ba4803597ddde517923bdeca1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:47:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
section-border.blogspot.com.br/
302 Moved Temporarily 181 B URL HTTP/1.1 section-border.blogspot.com.br/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash ac5635b9856306ab7d56fae9b2ac50b2
98e61afada9743d86811aa59d70072e01b56c1b0
221aba6e3be7a98e214e1d747b6f7a53768dffc5241027cb54fc22babf6cb494
GET / HTTP/1.1
Host: section-border.blogspot.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Location: http://section-border.blogspot.com/
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Mon, 14 Nov 2022 04:47:56 GMT
Expires: Mon, 14 Nov 2022 04:47:56 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 181
Server: GSE
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f5563b8eaa8bbe5076e53dcb10e434a5
ce068739a71489f4991632ce5c6cd0943267a91a
c917e4ff0251bc6bbe67aab3858e5d3421fa743fe8e4e612a0938c2d2bb19e53
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:47:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
200 OK 26 kB URL HTTP/2 s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (63757)
Hash 707317ccaabe08d32d1bd781754e6871
bb82dcd3e044c960e0861c2ce878f5504e628f78
d0a164ece41c61aec26517fb645646f5ba91f72ea5448eff1ee6c393b7c53051
GET /static/sh.f48a1a04fe8dbf021b4cda1d.html HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: text/html
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-11adc"
timing-allow-origin: *
cache-control: public, max-age=86313600
p3p: CP="NON ADM OUR DEV IND COM STA"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 26421
date: Mon, 14 Nov 2022 04:47:57 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
section-border.blogspot.com/
200 OK 6.8 kB URL HTTP/1.1 section-border.blogspot.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4148)
Hash 4c39081244ca2a9b40de3222faa71b66
6845632829140aa5730165e2531fab794959825c
90b501c1b5d4dc670dd96d447b5b672152ecb1872ea4ac9d14e42859a1a0d8db
GET / HTTP/1.1
Host: section-border.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://significadodetatuagens.blogspot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Mon, 14 Nov 2022 04:47:57 GMT
Date: Mon, 14 Nov 2022 04:47:57 GMT
Cache-Control: private, max-age=0
Last-Modified: Wed, 01 Dec 2021 17:12:44 GMT
ETag: W/"0643ffd12432b571e04e40f06729474ba98f456e2e8945cf33730b437e960aa3"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 6811
Server: GSE
section-border.blogspot.com/js/cookienotice.js
200 OK 2.0 kB URL HTTP/1.1 section-border.blogspot.com/js/cookienotice.js
IP
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
GET /js/cookienotice.js HTTP/1.1
Host: section-border.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://section-border.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
Date: Mon, 14 Nov 2022 04:47:57 GMT
Expires: Mon, 21 Nov 2022 04:47:57 GMT
Cache-Control: public, max-age=604800
Last-Modified: Sun, 13 Nov 2022 19:50:11 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 29b1503232a9cf0843bd9f0d01c0a9a5
620b3b98a58cd32175d40534dca81ef4a26d880f
1f54c0fa57ea62f131e173d4a365d6d2d4d10e0993eb69eaf9e27d3788a5daf8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F54C0FA57EA62F131E173D4A365D6D2D4D10E0993EB69EAF9E27D3788A5DAF8"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13997
Expires: Mon, 14 Nov 2022 08:41:14 GMT
Date: Mon, 14 Nov 2022 04:47:57 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 29b1503232a9cf0843bd9f0d01c0a9a5
620b3b98a58cd32175d40534dca81ef4a26d880f
1f54c0fa57ea62f131e173d4a365d6d2d4d10e0993eb69eaf9e27d3788a5daf8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F54C0FA57EA62F131E173D4A365D6D2D4D10E0993EB69EAF9E27D3788A5DAF8"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13997
Expires: Mon, 14 Nov 2022 08:41:14 GMT
Date: Mon, 14 Nov 2022 04:47:57 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 29b1503232a9cf0843bd9f0d01c0a9a5
620b3b98a58cd32175d40534dca81ef4a26d880f
1f54c0fa57ea62f131e173d4a365d6d2d4d10e0993eb69eaf9e27d3788a5daf8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F54C0FA57EA62F131E173D4A365D6D2D4D10E0993EB69EAF9E27D3788A5DAF8"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13997
Expires: Mon, 14 Nov 2022 08:41:14 GMT
Date: Mon, 14 Nov 2022 04:47:57 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0cdfe4b6-c666-4d7d-b8d9-52afb16c1914.jpeg
200 OK 7.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0cdfe4b6-c666-4d7d-b8d9-52afb16c1914.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c9e7189c575f78c94a21b4303d2d217e
0b9fdefce793d3ff9437ee466d1a57e1befd4ee2
e5d665549f2098ba17a7bdcf8766383402671e597a440226ac277cf70ccd24c2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0cdfe4b6-c666-4d7d-b8d9-52afb16c1914.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7088
x-amzn-requestid: 2958ff5e-1dbc-4290-90ff-10e8a0078df7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bjyFnEMmIAMFkkQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637163bd-57530f27384a452473157706;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 21:38:05 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: MpZamTGftS06B1_rftZQM1kCsqlU-lFwT__UFsBYPkMo9du9el5lUg==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Sun, 13 Nov 2022 21:54:01 GMT
age: 24836
etag: "0b9fdefce793d3ff9437ee466d1a57e1befd4ee2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 29b1503232a9cf0843bd9f0d01c0a9a5
620b3b98a58cd32175d40534dca81ef4a26d880f
1f54c0fa57ea62f131e173d4a365d6d2d4d10e0993eb69eaf9e27d3788a5daf8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F54C0FA57EA62F131E173D4A365D6D2D4D10E0993EB69EAF9E27D3788A5DAF8"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13997
Expires: Mon, 14 Nov 2022 08:41:14 GMT
Date: Mon, 14 Nov 2022 04:47:57 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F93dfd620-9002-46a5-b0e7-f76908157342.jpeg
200 OK 6.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F93dfd620-9002-46a5-b0e7-f76908157342.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 91867304df5ea75d02ae48a94d24b62e
4e1159bd964a4c06ec237c81bb93eb1623aad66e
f946d60d53b9d6c8e11a9d15a8127c7a65cb2fad7b604ab8b007fa0137a9d370
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F93dfd620-9002-46a5-b0e7-f76908157342.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6716
x-amzn-requestid: f0c6fef3-c522-4641-afba-96bb3ba25cd3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bjybzHzXoAMFv5Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6371644b-75160f836fb48bda59c470a8;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 21:40:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: CuPYHc2of7TQ-WsM96Jjoz0CCQ6Z-pLlM8dqc3xK-gYZyPs1-mcRag==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Sun, 13 Nov 2022 21:53:45 GMT
age: 24852
etag: "4e1159bd964a4c06ec237c81bb93eb1623aad66e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ae99eef-8784-4c1a-8c91-bd4ef21987a2.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ae99eef-8784-4c1a-8c91-bd4ef21987a2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f4ac79607215beb845b6e7bf1e92506b
d4ac19f0373649804e9747b30552897a453db42d
ec4691a0573471e50dce4bd5db454dcd0498939aa6d1d9d39a1221ad01578a45
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ae99eef-8784-4c1a-8c91-bd4ef21987a2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7632
x-amzn-requestid: 2b3de800-a50f-4872-8a7c-54ec33923739
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bjzJYFCdIAMFmLQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6371656f-1ee2b3f21d22619e3381e1a4;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 21:45:19 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Dr0oeNxvib4qjo6CAg6YPyXkypbU5eF6GLLK1mN3jJer6G22pE8jLQ==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Sun, 13 Nov 2022 22:01:14 GMT
age: 24403
etag: "d4ac19f0373649804e9747b30552897a453db42d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa95e3362-3324-487e-af72-a8801904975f.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa95e3362-3324-487e-af72-a8801904975f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ceefde63fac8b44410baa7054cbbf39d
bc5a776a90f9ff1c5bd6e3dad0a542d3b73bad88
6e55d25f544d934550970c70a8325886471550d1d4f757610b13800985896ba1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa95e3362-3324-487e-af72-a8801904975f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9663
x-amzn-requestid: ef07bc3a-4907-484b-9113-f00e08442f33
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bjyFUHz6IAMFrXg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637163bb-1c1a2d0d4aeae314494e4b33;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 21:38:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: uzddCdnw4KZgkOHdbDnWaDJQ3Y5h6GHH3t02NSoXazXSZRb6WkQPmg==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 13 Nov 2022 21:52:14 GMT
age: 24943
etag: "bc5a776a90f9ff1c5bd6e3dad0a542d3b73bad88"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe28d811-107a-493e-9c36-93a37a7dfe1a.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe28d811-107a-493e-9c36-93a37a7dfe1a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e04eab17e36899c3b3f67f6774d7a842
e4f3a076810adab8f034e34044aced853ffd1d35
45ab81ce9082af29333f76fb84791f2fde2e666a39671984196306f75f332187
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe28d811-107a-493e-9c36-93a37a7dfe1a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14493
x-amzn-requestid: c12b0588-18f2-4444-b5a2-4e066c428c33
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bjyDvEE2IAMF7zg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637163b1-3242621f173516376089985c;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 21:37:53 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: lGKR4HCVUtL0KlyMgAVULWpL1dopxSbu2oh337vM7ldK4zRDmYRluQ==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Sun, 13 Nov 2022 21:53:03 GMT
age: 24894
etag: "e4f3a076810adab8f034e34044aced853ffd1d35"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 032386e5c9dffff1ba1ee5e8a322d438
dd4fd6c803a9b333bace9a541c6bd183d0c56bb9
0e9f559a0aa7e114c5810a27ba243c0da7b44dc0bf7aec2b7ab32b8f0e2b536c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11667
x-amzn-requestid: 4778d1bd-28c3-4665-89da-046e356087f0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bjyD1HE-oAMF0QQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637163b1-53c7330c5fd36d3c4d9e6aed;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 21:37:53 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ubqvgLaJlGIxyJC1KBJP4ncx_2ltXS0C5dLGddjtbkt6pJmX84_VAg==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Sun, 13 Nov 2022 21:54:01 GMT
age: 24836
etag: "dd4fd6c803a9b333bace9a541c6bd183d0c56bb9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
whos.amung.us/swidget/26ri8qf50jwy
307 Temporary Redirect 0 B URL HTTP/1.1 whos.amung.us/swidget/26ri8qf50jwy
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /swidget/26ri8qf50jwy HTTP/1.1
Host: whos.amung.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://section-border.blogspot.com/
HTTP/1.1 307 Temporary Redirect
Date: Mon, 14 Nov 2022 04:47:57 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: no-cache, no-store, must-revalidate
location: http://widgets.amung.us/small/07/770.png
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 769d1cafcd1698f6-ARN
link.megalink.xyz/ad1/824c1c656a4967fb956c9e545f85fe90e9cbe832?1=&2=&3=&4=&5=&utm_campaign=push_subs_04_07_2020_0000&cid=
200 OK 11 kB URL HTTP/2 link.megalink.xyz/ad1/824c1c656a4967fb956c9e545f85fe90e9cbe832?1=&2=&3=&4=&5=&utm_campaign=push_subs_04_07_2020_0000&cid=
IP
File type ASCII text, with very long lines (530)
Hash a243a216a9c6fd9c136f0c33e49a5797
b99eb175b1e207a78a04e365a0f78f4e8f439fc7
16f22b0ec0193bc59863c468f976e027245371f04ad7573deb50c16bcebaaf70
GET /ad1/824c1c656a4967fb956c9e545f85fe90e9cbe832?1=&2=&3=&4=&5=&utm_campaign=push_subs_04_07_2020_0000&cid= HTTP/1.1
Host: link.megalink.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 14 Nov 2022 04:47:57 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
x-powered-by: PHP/8.1.9
cache-control: no-store, no-cache, must-revalidate, max-age=0
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
set-cookie: u=83dc418c287bcd913690bf445fc6ba89; expires=Tue, 14-Nov-2023 04:47:57 GMT; Max-Age=31536000; path=/
strict-transport-security: max-age=31536000; includeSubdomains;
content-encoding: gzip
X-Firefox-Spdy: h2
z.moatads.com/addthismoatframe568911941483/moatframe.js
200 OK 948 B URL HTTP/2 z.moatads.com/addthismoatframe568911941483/moatframe.js
IP
File type ASCII text, with very long lines (523)
Hash f14b4e1f799b14f798a195f43cf58376
b6fd3b3d407fb4c0a00fb8a31862235e2a6e0a86
92ed3e9fda5fa4d738ff4d9023846b56633617363dda6a750cacb4fba53241ac
GET /addthismoatframe568911941483/moatframe.js HTTP/1.1
Host: z.moatads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: e0HboiVQpjIDEK8WTxqU5+8G8wOtu9bNCFY72alTHLP0/Yb+qoiTOxu6fad89ebRofzHxENxOOg=
x-amz-request-id: 61EC92F13BB22DD4
last-modified: Fri, 08 Nov 2019 20:13:52 GMT
etag: "f14b4e1f799b14f798a195f43cf58376"
content-encoding: gzip
accept-ranges: bytes
content-type: application/x-javascript
content-length: 948
server: AmazonS3
vary: Accept-Encoding
cache-control: max-age=19655
date: Mon, 14 Nov 2022 04:47:57 GMT
X-Firefox-Spdy: h2
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.blogger.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Mon, 14 Nov 2022 04:47:57 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+851; expires=Wed, 13-Nov-2024 04:47:57 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Mon, 14 Nov 2022 04:47:57 GMT
cache-control: private
X-Firefox-Spdy: h2
whos.amung.us/swidget/megalink10
307 Temporary Redirect 0 B URL HTTP/1.1 whos.amung.us/swidget/megalink10
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /swidget/megalink10 HTTP/1.1
Host: whos.amung.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
HTTP/1.1 307 Temporary Redirect
Date: Mon, 14 Nov 2022 04:47:57 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: no-cache, no-store, must-revalidate
location: http://widgets.amung.us/small/00/41.png
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 769d1cb10a5709a9-ARN
m.addthis.com/live/red_lojson/300lo.json?si=6371c87b41a60453&bkl=0&bl=1&pdt=560&sid=6371c87b41a60453&pub=xa-51e9ab2729367395&rev=v8.28.8-wp&ln=en&pc=men&cb=0&ab=-&dp=significadodetatuagens.blogspot.com&fp=2014%2F04%2Fsignificado-da-tatuagem-de-terco.html&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&colc=1668401275616&jsl=1&uvs=6371c87bc7cc365c000&skipb=1&callback=addthis.cbs.jsonp__124638750596825280
200 OK 90 B URL HTTP/2 m.addthis.com/live/red_lojson/300lo.json?si=6371c87b41a60453&bkl=0&bl=1&pdt=560&sid=6371c87b41a60453&pub=xa-51e9ab2729367395&rev=v8.28.8-wp&ln=en&pc=men&cb=0&ab=-&dp=significadodetatuagens.blogspot.com&fp=2014%2F04%2Fsignificado-da-tatuagem-de-terco.html&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&colc=1668401275616&jsl=1&uvs=6371c87bc7cc365c000&skipb=1&callback=addthis.cbs.jsonp__124638750596825280
IP
File type ASCII text, with no line terminators
Hash c11520d3f7bb02af5127664bfab12f8a
7f690df1eccfd57748c1a53166682675f1ee378c
f0002c85dd4347326a74fb624c06cbcb4506eeb681e78a508e3b1963b234155e
GET /live/red_lojson/300lo.json?si=6371c87b41a60453&bkl=0&bl=1&pdt=560&sid=6371c87b41a60453&pub=xa-51e9ab2729367395&rev=v8.28.8-wp&ln=en&pc=men&cb=0&ab=-&dp=significadodetatuagens.blogspot.com&fp=2014%2F04%2Fsignificado-da-tatuagem-de-terco.html&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&colc=1668401275616&jsl=1&uvs=6371c87bc7cc365c000&skipb=1&callback=addthis.cbs.jsonp__124638750596825280 HTTP/1.1
Host: m.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 90
cache-control: max-age=0, no-cache, no-store, no-transform
pragma: no-cache
content-disposition: attachment; filename=1.txt
date: Mon, 14 Nov 2022 04:47:57 GMT
X-Firefox-Spdy: h2
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 131 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash babb6f090aeebc6f421624475b4aefff
06079b7547949822c118224e51604f4c5ebf80c8
b2fe8b91f31edc7284cc9690e90dd4a38d985598374df68967d917590beb55dd
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 2977
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.blogger.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Mon, 14 Nov 2022 04:47:57 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+785; expires=Wed, 13-Nov-2024 04:47:57 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Mon, 14 Nov 2022 04:47:57 GMT
X-Firefox-Spdy: h2
v1.addthisedge.com/live/boost/xa-51e9ab2729367395/_ate.track.config_resp
200 OK 47 B URL HTTP/2 v1.addthisedge.com/live/boost/xa-51e9ab2729367395/_ate.track.config_resp
IP
File type ASCII text, with no line terminators
Hash 24c668b115f75423506f2ea21d1b49c2
14f956ddb2d9e8b072cd5f605c3f39526490b391
b542daef470a9730029174f975ce3ce236b3e58bf9183b11956acce994b13a16
GET /live/boost/xa-51e9ab2729367395/_ate.track.config_resp HTTP/1.1
Host: v1.addthisedge.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-disposition: attachment; filename=1.txt
content-encoding: gzip
content-length: 47
cache-control: public, max-age=60, s-maxage=86400
date: Mon, 14 Nov 2022 04:47:57 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
s7.addthis.com/static/linkedin.html
200 OK 17 kB URL HTTP/2 s7.addthis.com/static/linkedin.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (44167)
Hash 1b91ea4b79d6249f55c14809db4d1347
be46d90e2664ecc2f45735c0fdbfc6ce7d714590
3512de8800d04819401539cc32a2ed9d84e0a106dd776e7203966563779eb42c
GET /static/linkedin.html HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: text/html
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-bc27"
cache-tag: client_dist_ndc
surrogate-key: client_dist_ndc
timing-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 17390
date: Mon, 14 Nov 2022 04:47:57 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a635b6112e22763022c9bce0e9141fae
13ba9e635ad5bf7bb57c39a154eec28c4b326801
4b22d01fc2179a0a13fd70d7e80b98f0b865397af369c2dc03678b072b7f7e90
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:47:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
whos.amung.us/swidget/26ri8qf50jwy
307 Temporary Redirect 707 B URL HTTP/1.1 whos.amung.us/swidget/26ri8qf50jwy
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /swidget/26ri8qf50jwy HTTP/1.1
Host: whos.amung.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://section-border.blogspot.com/
HTTP/1.1 307 Temporary Redirect
Date: Mon, 14 Nov 2022 04:47:57 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: no-cache, no-store, must-revalidate
location: http://widgets.amung.us/small/07/770.png
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 769d1cb1be3b98f6-ARN
s7.addthis.com/static/floating-css.80f181915fa0449e1ef6.js
200 OK 2.2 kB URL HTTP/2 s7.addthis.com/static/floating-css.80f181915fa0449e1ef6.js
IP
Hash 73241ae8d9682f80e19ecaa7e02e1e59
f835cad5fc138bf52677b380239118e029cc8923
a838899baddf5d2943e21c8fd04228a8d67c024c296d44d27fd687cf62740120
GET /static/floating-css.80f181915fa0449e1ef6.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/javascript
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-eaf"
timing-allow-origin: *
cache-control: public, max-age=86313600
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 815
date: Mon, 14 Nov 2022 04:47:57 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
200 OK 667 B URL HTTP/2 www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
IP
File type ASCII text, with very long lines (1034), with no line terminators
Hash ec909daf0633df08106d439801fe9981
01a5f45c28e6e955fc600835517771a5adede22c
745296b3c2ba9c1253fd0d871fb9c2da3511ebccf1778fe7c7e6533d6fcf5711
GET /recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Mon, 14 Nov 2022 04:47:57 GMT
date: Mon, 14 Nov 2022 04:47:57 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 667
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
platform.twitter.com/widgets.js
200 OK 29 kB URL HTTP/1.1 platform.twitter.com/widgets.js
IP
File type Unicode text, UTF-8 text, with very long lines (33915)
Hash 7899fffaf0046efb7f9be2495d9dc928
d4c60d88e8deea577a50f9d20e1b6b3a20cba2cf
07d50450f22df0588cc1b67f5a124cb91d99a032a229586eb7dc490cce9f7f30
GET /widgets.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 3000
Age: 604
Cache-Control: public, max-age=1800
Content-Type: application/javascript; charset=utf-8
Date: Mon, 14 Nov 2022 04:47:57 GMT
Etag: "6633f9603c759c40d9b200995454f17c+gzip"
Last-Modified: Wed, 02 Nov 2022 19:43:37 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F70B)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
x-amzn-internal-status: 304
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 29221
www.dignow.org/images/dignow_120.png
301 Moved Permanently 2.4 kB URL HTTP/2 www.dignow.org/images/dignow_120.png
IP
Hash f8914f43d0070ae5a2c2f937b336adf8
25bf93b0720cdc747a7708f21e04463921fcc0d0
3e5d90d28331a1a823901d617a63b08ce85db79a3e1fbedecef0ef9529471ed9
GET /images/dignow_120.png HTTP/1.1
Host: www.dignow.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://significadodetatuagens.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Mon, 14 Nov 2022 04:47:56 GMT
content-type: text/html
location: https://www.dignow.org/images/dignow_120.png
platform: hostinger
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nCcAILlwaA25bUNmWdR2Bkz66aFAGNKJUoZboS51QW9ZUo7pqH96z0OO2d4AnxbveP9gbvBVXXoI7aiDSyKcvckT8CrrzZgiMzNeuPnHf8nKdtX0ZrKdhn1NkLdkdsdSTg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 769d1ca8ead0b4fd-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
widgets.amung.us/small/00/41.png
200 OK 316 B URL HTTP/1.1 widgets.amung.us/small/00/41.png
IP
File type PNG image data, 80 x 15, 8-bit colormap, non-interlaced\012- data
Hash 4ef23dc55ad6d7806e9bb0389391239d
180b2262dade56252c69c316848ef0aa94f4d359
17eefa67f2f3f36ebdb7bcee6ff8d2126fa3b9a83e8d6f150c40f7bfdabfedb2
GET /small/00/41.png HTTP/1.1
Host: widgets.amung.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://significadodetatuagens.blogspot.com/
Connection: keep-alive
HTTP/1.1 200 OK
Date: Mon, 14 Nov 2022 04:47:57 GMT
Content-Type: image/png
Content-Length: 316
Connection: keep-alive
last-modified: Sun, 13 Jun 2010 09:48:29 GMT
etag: "4c14a96d-13c"
expires: Sat, 22 Oct 2022 05:56:08 GMT
cache-control: max-age=2678400
access-control-allow-origin: *
CF-Cache-Status: HIT
Age: 2069509
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 769d1cb29d230a35-ARN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 35ad471bf7f157abedbe322e59bb00ae
6f8c57f1c20377b6a1f74fd06849705a6370e291
b51251f347677a52f08a4a7c0d9ff0effed121992b6dc7fa709e33c400042e63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:47:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
whos.amung.us/swidget/megalink10
307 Temporary Redirect 1.4 kB URL HTTP/1.1 whos.amung.us/swidget/megalink10
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 8823359fd7e4740c80519b724e5b212f
cce6c1c8c53ae98ae835c93b8897ea74ca93ec02
9fc90c51e0e515d1866188b9127cf8ceb1b2affb4d154175cd3d535649778fea
GET /swidget/megalink10 HTTP/1.1
Host: whos.amung.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
HTTP/1.1 307 Temporary Redirect
Date: Mon, 14 Nov 2022 04:47:57 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: no-cache, no-store, must-revalidate
location: http://widgets.amung.us/small/00/41.png
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 769d1cb22aee09a9-ARN
significadodetatuagens.blogspot.com/2014/04/YOUR-FAVICON-URL
404 Not Found 28 kB URL HTTP/1.1 significadodetatuagens.blogspot.com/2014/04/YOUR-FAVICON-URL
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (19701)
Hash f5f24e915ff84257088e4f7dec404322
e7b673d619cc6fa76eb0918baa610c5fb72954ee
be6157ea9c9a6fb8d49872514fb353dca18ee96e795d7306413c2a73acdf707c
GET /2014/04/YOUR-FAVICON-URL HTTP/1.1
Host: significadodetatuagens.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/2014/04/significado-da-tatuagem-de-terco.html
Cookie: __atuvc=1%7C46; __atuvs=6371c87bc7cc365c000
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Mon, 14 Nov 2022 04:47:57 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 27982
Server: GSE
ocsp.digicert.com/
200 OK 471 B IP
Hash 25e43ddf8623077222fd85e2e27997c5
1b92bc7e8cf6be84f02f75981a428b877fd152ac
4d91ca4a4207493951f048d0b97f9a277548b107c63ec408c340dec364808116
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4848
Cache-Control: max-age=112580
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:47:57 GMT
Etag: "6370ca51-1d7"
Expires: Tue, 15 Nov 2022 12:04:17 GMT
Last-Modified: Sun, 13 Nov 2022 10:43:29 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
whos.amung.us/swidget/megalink10
307 Temporary Redirect 0 B URL HTTP/1.1 whos.amung.us/swidget/megalink10
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /swidget/megalink10 HTTP/1.1
Host: whos.amung.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
HTTP/1.1 307 Temporary Redirect
Date: Mon, 14 Nov 2022 04:47:57 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: no-cache, no-store, must-revalidate
location: http://widgets.amung.us/small/00/41.png
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 769d1cb23f6af13a-ARN
connect.facebook.net/en_US/sdk.js?hash=a14cc87fb8a602486b7931f2a2112430
200 OK 87 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js?hash=a14cc87fb8a602486b7931f2a2112430
IP
File type ASCII text, with very long lines (13192)
Hash e939b08ea5994368378a084471976392
53c0b52ac7a1af3fcc60454e9d466cea74a46797
b3527fde0f09042672b695e849cdf18c9e904c50e2e908d163fb13aebdc9d71a
GET /en_US/sdk.js?hash=a14cc87fb8a602486b7931f2a2112430 HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://significadodetatuagens.blogspot.com
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 4c9e38f5e2b991af69cd029f325d5dcc
etag: "c6e53b7add7a9d18c5c8162c08a4dc70"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Tue, 14 Nov 2023 03:04:17 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: 6TmwjqWZQ2g3ighEcZdjkg==
x-fb-debug: UJxxeeciH5mQmebJohyGOm7rwgpByel9emb0Iktn+4A/Xhmbl4w6qAnv+9+6AncPKNzh34MZx3tNMCnzjUDthg==
priority: u=3,i
content-length: 86892
x-fb-trip-id: 1904183273
date: Mon, 14 Nov 2022 04:47:57 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
widgets.amung.us/small/07/770.png
200 OK 330 B URL HTTP/1.1 widgets.amung.us/small/07/770.png
IP
File type PNG image data, 80 x 15, 8-bit colormap, non-interlaced\012- data
Hash 747d68276027c86c068ca7418abd5ce5
4f3da425f9d9fc6b952eaa57f900e71523eb76d1
6d84c8782d2212f72ab5cb8aa5c9b88a592af70ae236aae86d6f953fe279640b
GET /small/07/770.png HTTP/1.1
Host: widgets.amung.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://section-border.blogspot.com/
Connection: keep-alive
HTTP/1.1 200 OK
Date: Mon, 14 Nov 2022 04:47:57 GMT
Content-Type: image/png
Content-Length: 330
Connection: keep-alive
last-modified: Sun, 13 Jun 2010 09:48:30 GMT
etag: "4c14a96e-14a"
expires: Tue, 15 Nov 2022 04:47:57 GMT
cache-control: max-age=2678400
access-control-allow-origin: *
CF-Cache-Status: MISS
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 769d1cb1cfe995ee-ARN
widgets.amung.us/small/00/41.png
200 OK 316 B URL HTTP/1.1 widgets.amung.us/small/00/41.png
IP
File type PNG image data, 80 x 15, 8-bit colormap, non-interlaced\012- data
Hash 4ef23dc55ad6d7806e9bb0389391239d
180b2262dade56252c69c316848ef0aa94f4d359
17eefa67f2f3f36ebdb7bcee6ff8d2126fa3b9a83e8d6f150c40f7bfdabfedb2
GET /small/00/41.png HTTP/1.1
Host: widgets.amung.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://significadodetatuagens.blogspot.com/
Connection: keep-alive
HTTP/1.1 200 OK
Date: Mon, 14 Nov 2022 04:47:57 GMT
Content-Type: image/png
Content-Length: 316
Connection: keep-alive
last-modified: Sun, 13 Jun 2010 09:48:29 GMT
etag: "4c14a96d-13c"
expires: Sat, 22 Oct 2022 05:56:08 GMT
cache-control: max-age=2678400
access-control-allow-origin: *
CF-Cache-Status: HIT
Age: 2069509
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 769d1cb32d5f0a35-ARN
widgets.amung.us/small/00/41.png
200 OK 316 B URL HTTP/1.1 widgets.amung.us/small/00/41.png
IP
File type PNG image data, 80 x 15, 8-bit colormap, non-interlaced\012- data
Hash 4ef23dc55ad6d7806e9bb0389391239d
180b2262dade56252c69c316848ef0aa94f4d359
17eefa67f2f3f36ebdb7bcee6ff8d2126fa3b9a83e8d6f150c40f7bfdabfedb2
GET /small/00/41.png HTTP/1.1
Host: widgets.amung.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://significadodetatuagens.blogspot.com/
Connection: keep-alive
HTTP/1.1 200 OK
Date: Mon, 14 Nov 2022 04:47:57 GMT
Content-Type: image/png
Content-Length: 316
Connection: keep-alive
last-modified: Sun, 13 Jun 2010 09:48:29 GMT
etag: "4c14a96d-13c"
expires: Sat, 22 Oct 2022 05:56:08 GMT
cache-control: max-age=2678400
access-control-allow-origin: *
CF-Cache-Status: HIT
Age: 2069509
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 769d1cb32aeb9939-ARN
platform.twitter.com/widgets/widget_iframe.644279d1635fd969e87af94a98bd232b.html?origin=http%3A%2F%2Fsignificadodetatuagens.blogspot.com
200 OK 105 kB URL HTTP/1.1 platform.twitter.com/widgets/widget_iframe.644279d1635fd969e87af94a98bd232b.html?origin=http%3A%2F%2Fsignificadodetatuagens.blogspot.com
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (56168)
Size 105 kB (105445 bytes)
Hash 2b4968b185495eddda0d85b2351ebb71
c665785ca0f4039f8c71d94631cd50a879d866b5
eb8af089d8082a58a6e90fedc23007f17a9e89ddbc6a29b6e535e4847ba94160
GET /widgets/widget_iframe.644279d1635fd969e87af94a98bd232b.html?origin=http%3A%2F%2Fsignificadodetatuagens.blogspot.com HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 973624
Cache-Control: public, max-age=315360000
Content-Type: text/html; charset=utf-8
Date: Mon, 14 Nov 2022 04:47:57 GMT
Etag: "50d73c0b4a4c7e4697b9c6ac6f1ecd75+gzip"
Last-Modified: Wed, 02 Nov 2022 19:36:59 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F71D)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=VZ,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 105445
s7.addthis.com/static/t00/3p/sprite_connect_v12.png
200 OK 36 kB URL HTTP/2 s7.addthis.com/static/t00/3p/sprite_connect_v12.png
IP
File type PNG image data, 270 x 425, 8-bit/color RGBA, non-interlaced\012- data
Hash ee7fa4ed821dba2fa4852c38931476b5
5754d0839bff0d1c6587c5a9cac97567bc3e200c
807d41a61b06784a68fff060355de499dd1ba481fac9afa28c9800b0f17421d6
GET /static/t00/3p/sprite_connect_v12.png HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s7.addthis.com/static/linkedin.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: image/png
content-length: 36305
last-modified: Mon, 26 Oct 2020 18:11:28 GMT
etag: "5f971150-8dd1"
timing-allow-origin: *
cache-control: public, max-age=86313600
accept-ranges: bytes
strict-transport-security: max-age=15724800; includeSubDomains
date: Mon, 14 Nov 2022 04:47:57 GMT
x-host: s7.addthis.com
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 25e43ddf8623077222fd85e2e27997c5
1b92bc7e8cf6be84f02f75981a428b877fd152ac
4d91ca4a4207493951f048d0b97f9a277548b107c63ec408c340dec364808116
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4848
Cache-Control: max-age=112580
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:47:57 GMT
Etag: "6370ca51-1d7"
Expires: Tue, 15 Nov 2022 12:04:17 GMT
Last-Modified: Sun, 13 Nov 2022 10:43:29 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 314 B IP
Hash 105fb531f8205bdc5e7742ae06d81592
c7afc9afa46fb8b3bcbca6700c5792f01ffa3738
924c0724f90fbe8ae3750e742b724a5ac4219bdb1feac9fe99f6b7c444397f74
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 595
Cache-Control: max-age=88110
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:47:58 GMT
Etag: "63707b59-13a"
Expires: Tue, 15 Nov 2022 05:16:28 GMT
Last-Modified: Sun, 13 Nov 2022 05:06:33 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 314
syndication.twitter.com/settings?session_id=872d074220157f0f3492d1d9b69007ba6b729ca0
200 OK 374 B URL HTTP/2 syndication.twitter.com/settings?session_id=872d074220157f0f3492d1d9b69007ba6b729ca0
IP
File type JSON data\012- , ASCII text, with very long lines (913), with no line terminators
Hash 925c2a7587f39436ea29513221652474
695b7f2f3d99f407bcdfd0b372db0e28193cc60c
62e36e14e5c219119cb51c3cdf43a2005512a1bd6ebf2d68d0c610a2e6e3ef0f
GET /settings?session_id=872d074220157f0f3492d1d9b69007ba6b729ca0 HTTP/1.1
Host: syndication.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://platform.twitter.com/
Origin: https://platform.twitter.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Mon, 14 Nov 2022 04:47:57 GMT
perf: 7626143928
vary: Origin
server: tsa_o
content-type: application/json; charset=utf-8
cache-control: must-revalidate, max-age=600
last-modified: Mon, 14 Nov 2022 04:47:58 GMT
content-length: 374
content-encoding: gzip
x-transaction-id: f126af8c74a2e518
strict-transport-security: max-age=631138519
access-control-allow-origin: https://platform.twitter.com
access-control-allow-credentials: true
x-response-time: 105
x-connection-hash: dc36d38a8ea1ac1ddb08add9763b6260e28841730b40079871faf7f70186382e
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 12 Nov 2022 12:31:58 GMT
expires: Sun, 12 Nov 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 144960
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Nov 2022 21:46:16 GMT
expires: Fri, 10 Nov 2023 21:46:16 GMT
cache-control: public, max-age=31536000
age: 284502
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.facebook.com/v2.6/plugins/like.php?action=like&app_id=172525162793917&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df70912e170c2d4%26domain%3Dsignificadodetatuagens.blogspot.com%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fsignificadodetatuagens.blogspot.com%252Ff12f927b111ef9e%26relation%3Dparent.parent&container_width=0&font=arial&height=40&href=http%3A%2F%2Fsignificadodetatuagens.blogspot.com%2F2014%2F04%2Fsignificado-da-tatuagem-de-terco.html&layout=box_count&locale=en_US&sdk=joey&send=false&share=false&show_faces=false&width=55
200 OK 0 B URL HTTP/2 www.facebook.com/v2.6/plugins/like.php?action=like&app_id=172525162793917&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df70912e170c2d4%26domain%3Dsignificadodetatuagens.blogspot.com%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fsignificadodetatuagens.blogspot.com%252Ff12f927b111ef9e%26relation%3Dparent.parent&container_width=0&font=arial&height=40&href=http%3A%2F%2Fsignificadodetatuagens.blogspot.com%2F2014%2F04%2Fsignificado-da-tatuagem-de-terco.html&layout=box_count&locale=en_US&sdk=joey&send=false&share=false&show_faces=false&width=55
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2.6/plugins/like.php?action=like&app_id=172525162793917&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df70912e170c2d4%26domain%3Dsignificadodetatuagens.blogspot.com%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fsignificadodetatuagens.blogspot.com%252Ff12f927b111ef9e%26relation%3Dparent.parent&container_width=0&font=arial&height=40&href=http%3A%2F%2Fsignificadodetatuagens.blogspot.com%2F2014%2F04%2Fsignificado-da-tatuagem-de-terco.html&layout=box_count&locale=en_US&sdk=joey&send=false&share=false&show_faces=false&width=55 HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html;charset=utf-8
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-xss-protection: 0
x-fb-debug: m2ZysryDJasyFSDj/xMeLxTVqA6xGHmYkZfa58N2mG2nN5sXPER7gaEnyCRz7BBqvWzIW4KRcqM8PBYSoL2z/A==
content-length: 0
date: Mon, 14 Nov 2022 04:47:58 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2290cd24cdb5e471c5ef9fc0b5f10f83
8bcec863cf5e8eca904bcb4186b9418b2884ade6
90fefe500760ef27ef9a883f7262c973a6a6b672fb23af8d3945bfb9c47d8a7b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:47:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpc.googlesyndication.com/sodar/sodar2.js
200 OK 6.4 kB URL HTTP/2 tpc.googlesyndication.com/sodar/sodar2.js
IP
File type ASCII text, with very long lines (1321)
Hash ac906814ed812c4ecdbb624a3bd2f6c3
8e4547eaffaa66a1ee61b36028dbcd7091d0e7de
8ab8cef6156022c4547455defd8252b48b6bcb8b734072849345bb99758705fe
GET /sodar/sodar2.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 6386
date: Mon, 14 Nov 2022 04:47:58 GMT
expires: Mon, 14 Nov 2022 04:47:58 GMT
cache-control: private, max-age=3000
etag: "1637097310169751"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
platform.twitter.com/js/button.d2f864f87f544dc0c11d7d712a191c1f.js
200 OK 2.4 kB URL HTTP/1.1 platform.twitter.com/js/button.d2f864f87f544dc0c11d7d712a191c1f.js
IP
File type ASCII text, with very long lines (7017), with no line terminators
Hash 83616664e4155f8af0efb0576f8920cf
1277b0f4f935bec3ada0f87c45395bb6d9b2efbc
bb19d85932c5e8a952b6fc28c1df42aed6d6920f79ee3f2217d2484294d575d3
GET /js/button.d2f864f87f544dc0c11d7d712a191c1f.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 973623
Cache-Control: public, max-age=315360000
Content-Type: application/javascript; charset=utf-8
Date: Mon, 14 Nov 2022 04:47:58 GMT
Etag: "7bb2d17ac20be3bd6ec1079356afecd9+gzip"
Last-Modified: Wed, 02 Nov 2022 19:36:52 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F707)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=VZ,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 2362
tpc.googlesyndication.com/sodar/sodar2/225/runner.html
200 OK 5.0 kB URL HTTP/2 tpc.googlesyndication.com/sodar/sodar2/225/runner.html
IP
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2020)
Hash f530c16b248be97e10df228df6a41c24
ca3c3a38bbeef6906682b3e0b2a7be40c08b0925
f45287dcfd79a2411e79f98c834c6f7eff8a281a9b4fdba0124be9d204987786
GET /sodar/sodar2/225/runner.html HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 5046
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 09 Nov 2022 13:23:21 GMT
expires: Thu, 09 Nov 2023 13:23:21 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 21 Jun 2021 20:47:05 GMT
content-type: text/html
age: 401077
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
platform.twitter.com/widgets/tweet_button.644279d1635fd969e87af94a98bd232b.en.html
200 OK 14 kB URL HTTP/1.1 platform.twitter.com/widgets/tweet_button.644279d1635fd969e87af94a98bd232b.en.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (32033)
Hash cd8176e04a5a760140a9de9ffe9d8a17
f3b4514c9df71da30eadd2d87fd6131e5c3bf7e3
601089b9e7dcd29e255c391dff1c3da64dd80bb72ee047561592d86dbbc4c472
GET /widgets/tweet_button.644279d1635fd969e87af94a98bd232b.en.html HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 973621
Cache-Control: public, max-age=315360000
Content-Type: text/html; charset=utf-8
Date: Mon, 14 Nov 2022 04:47:58 GMT
Etag: "126ffb93f08e989b18a6e1fc082c9e33+gzip"
Last-Modified: Wed, 02 Nov 2022 19:36:56 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F707)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=VZ,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 13753
syndication.twitter.com/i/jot/embeds?l=%7B%22widget_origin%22%3A%22http%3A%2F%2Fsignificadodetatuagens.blogspot.com%2F2014%2F04%2Fsignificado-da-tatuagem-de-terco.html%22%2C%22widget_frame%22%3Afalse%2C%22language%22%3A%22en%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22context%22%3A%22rufous-eol%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1668401277135%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%22a3525f077c700%3A1667415560940%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=872d074220157f0f3492d1d9b69007ba6b729ca0
200 OK 43 B URL HTTP/2 syndication.twitter.com/i/jot/embeds?l=%7B%22widget_origin%22%3A%22http%3A%2F%2Fsignificadodetatuagens.blogspot.com%2F2014%2F04%2Fsignificado-da-tatuagem-de-terco.html%22%2C%22widget_frame%22%3Afalse%2C%22language%22%3A%22en%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22context%22%3A%22rufous-eol%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1668401277135%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%22a3525f077c700%3A1667415560940%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=872d074220157f0f3492d1d9b69007ba6b729ca0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/jot/embeds?l=%7B%22widget_origin%22%3A%22http%3A%2F%2Fsignificadodetatuagens.blogspot.com%2F2014%2F04%2Fsignificado-da-tatuagem-de-terco.html%22%2C%22widget_frame%22%3Afalse%2C%22language%22%3A%22en%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22context%22%3A%22rufous-eol%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1668401277135%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%22a3525f077c700%3A1667415560940%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=872d074220157f0f3492d1d9b69007ba6b729ca0 HTTP/1.1
Host: syndication.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 14 Nov 2022 04:47:58 GMT
perf: 7626143928
vary: Origin
server: tsa_o
content-type: image/gif
cache-control: must-revalidate, max-age=600
last-modified: Mon, 14 Nov 2022 04:47:58 GMT
content-length: 43
x-transaction-id: b568b8477769e722
strict-transport-security: max-age=631138519
x-response-time: 107
x-connection-hash: dc36d38a8ea1ac1ddb08add9763b6260e28841730b40079871faf7f70186382e
X-Firefox-Spdy: h2
csi.gstatic.com/csi?v=2&s=pagead&action=csi_pagead&top=1&puid=1~lagb1j3x&c=935966310739086&e=44759875%2C44759926%2C44759837%2C42531706%2C31070852%2C44770881%2C31061691%2C31061692&ctx=1&met.3=164.1jn_1~165.1ji_6~164.1jq~165.1jo_3~164.1js~165.1jr_1~164.1jt~165.1js_1~166.1ix_10~166.1l4_3~166.1la_5~166.1li_2~1032.1pr~326.1pu_1~832.1pw~868.1pw~216.1pr_6~215.1pr_6~843.1pr_6~779.1px~1032.1ql~326.1qo~832.1qo~868.1qo~216.1ql_4~215.1ql_4~779.1qp~112.1qr_1~1032.1qs~326.1qu~832.1qu~868.1qu~216.1qs_2~215.1qs_3~779.1qw~1032.1qx~326.1qy~832.1qz~868.1qz~216.1qx_2~215.1qx_2~779.1qz~1032.1sh~326.1sj~832.1sj~868.1sj_1~164.1sf_5~165.1sb_9~779.1sk~629.1un_1~889.1ur_1~889.1v3_1~889.1v9_1~889.1vg~889.1vl_1~639.1vt~639.1vt~639.1vt~639.1vt~639.1vt~1001.1wa_1__1~1032.1we~326.1we~832.1wh~868.1wh~164.1wd_4~165.1wa_7~779.1wi~166.1xz_6~889.1y8_1~639.1yb~113.2yg_1&met.1=1.lagb1hd4~6.-5~7.-5~8.e~9.e~10.l~12.24~13.bt~14.d3~15.ce~16.1uh~17.1vz~18.1xk~19.2wp~20.2wp~21.2y8~23.1ik
204 No Content 0 B URL HTTP/2 csi.gstatic.com/csi?v=2&s=pagead&action=csi_pagead&top=1&puid=1~lagb1j3x&c=935966310739086&e=44759875%2C44759926%2C44759837%2C42531706%2C31070852%2C44770881%2C31061691%2C31061692&ctx=1&met.3=164.1jn_1~165.1ji_6~164.1jq~165.1jo_3~164.1js~165.1jr_1~164.1jt~165.1js_1~166.1ix_10~166.1l4_3~166.1la_5~166.1li_2~1032.1pr~326.1pu_1~832.1pw~868.1pw~216.1pr_6~215.1pr_6~843.1pr_6~779.1px~1032.1ql~326.1qo~832.1qo~868.1qo~216.1ql_4~215.1ql_4~779.1qp~112.1qr_1~1032.1qs~326.1qu~832.1qu~868.1qu~216.1qs_2~215.1qs_3~779.1qw~1032.1qx~326.1qy~832.1qz~868.1qz~216.1qx_2~215.1qx_2~779.1qz~1032.1sh~326.1sj~832.1sj~868.1sj_1~164.1sf_5~165.1sb_9~779.1sk~629.1un_1~889.1ur_1~889.1v3_1~889.1v9_1~889.1vg~889.1vl_1~639.1vt~639.1vt~639.1vt~639.1vt~639.1vt~1001.1wa_1__1~1032.1we~326.1we~832.1wh~868.1wh~164.1wd_4~165.1wa_7~779.1wi~166.1xz_6~889.1y8_1~639.1yb~113.2yg_1&met.1=1.lagb1hd4~6.-5~7.-5~8.e~9.e~10.l~12.24~13.bt~14.d3~15.ce~16.1uh~17.1vz~18.1xk~19.2wp~20.2wp~21.2y8~23.1ik
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /csi?v=2&s=pagead&action=csi_pagead&top=1&puid=1~lagb1j3x&c=935966310739086&e=44759875%2C44759926%2C44759837%2C42531706%2C31070852%2C44770881%2C31061691%2C31061692&ctx=1&met.3=164.1jn_1~165.1ji_6~164.1jq~165.1jo_3~164.1js~165.1jr_1~164.1jt~165.1js_1~166.1ix_10~166.1l4_3~166.1la_5~166.1li_2~1032.1pr~326.1pu_1~832.1pw~868.1pw~216.1pr_6~215.1pr_6~843.1pr_6~779.1px~1032.1ql~326.1qo~832.1qo~868.1qo~216.1ql_4~215.1ql_4~779.1qp~112.1qr_1~1032.1qs~326.1qu~832.1qu~868.1qu~216.1qs_2~215.1qs_3~779.1qw~1032.1qx~326.1qy~832.1qz~868.1qz~216.1qx_2~215.1qx_2~779.1qz~1032.1sh~326.1sj~832.1sj~868.1sj_1~164.1sf_5~165.1sb_9~779.1sk~629.1un_1~889.1ur_1~889.1v3_1~889.1v9_1~889.1vg~889.1vl_1~639.1vt~639.1vt~639.1vt~639.1vt~639.1vt~1001.1wa_1__1~1032.1we~326.1we~832.1wh~868.1wh~164.1wd_4~165.1wa_7~779.1wi~166.1xz_6~889.1y8_1~639.1yb~113.2yg_1&met.1=1.lagb1hd4~6.-5~7.-5~8.e~9.e~10.l~12.24~13.bt~14.d3~15.ce~16.1uh~17.1vz~18.1xk~19.2wp~20.2wp~21.2y8~23.1ik HTTP/1.1
Host: csi.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://significadodetatuagens.blogspot.com
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: *
date: Mon, 14 Nov 2022 04:47:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Wed, 21 Jan 2004 19:51:30 GMT
content-type: image/gif
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.5.1/jquery.min.js
200 OK 0 B URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.5.1/jquery.min.js
IP
GET /ajax/libs/jquery/1.5.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 29839
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 12 Nov 2022 07:33:31 GMT
expires: Sun, 12 Nov 2023 07:33:31 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 162864
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dl.dropboxusercontent.com/u/53396719/blogger/status-message.js
404 Not Found 0 B URL HTTP/2 dl.dropboxusercontent.com/u/53396719/blogger/status-message.js
IP
GET /u/53396719/blogger/status-message.js HTTP/1.1
Host: dl.dropboxusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
content-type: text/html
date: Mon, 14 Nov 2022 04:47:54 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, noimageindex
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: remote
x-dropbox-request-id: d4a91fb87de44828aa46b1fbb6da851e
X-Firefox-Spdy: h2
dl.dropbox.com/u/93265919/efeitoimagens/data-post.js
404 Not Found 0 B URL HTTP/2 dl.dropbox.com/u/93265919/efeitoimagens/data-post.js
IP
GET /u/93265919/efeitoimagens/data-post.js HTTP/1.1
Host: dl.dropbox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://significadodetatuagens.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
content-type: text/html
date: Mon, 14 Nov 2022 04:47:54 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, noimageindex
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: remote
x-dropbox-request-id: f150f39434fd4c0687cb08f42a70adeb
X-Firefox-Spdy: h2
ba01b89a-a-62cb3a1a-s-sites.googlegroups.com/site/pagerolderlink/home/blogger/blogger.js?attachauth=ANoY7cr9O4xrjdkEwVZtz7ILuvnosujxvpBJ2FAFUpKmxe1oSzlZMMUc5GVqo2hBnauW0yL0g1tBEbQttm7b_IqJ9zJ-GERSLMsgOSChvPA-QcnJzPdnJjQtZ9jSS2_6N1Ito6xcteXhFPJFLOvPGNq30ImWWWa2nmx7jZy08f9V3NTtijRJSBwF_osBV62oYlYeJwcemk1opL0SCyDlj_9USZ1slehsHkyly5lIl9jH5T7onZK0mkE%3D&attredirects=0
200 OK 0 B URL HTTP/2 ba01b89a-a-62cb3a1a-s-sites.googlegroups.com/site/pagerolderlink/home/blogger/blogger.js?attachauth=ANoY7cr9O4xrjdkEwVZtz7ILuvnosujxvpBJ2FAFUpKmxe1oSzlZMMUc5GVqo2hBnauW0yL0g1tBEbQttm7b_IqJ9zJ-GERSLMsgOSChvPA-QcnJzPdnJjQtZ9jSS2_6N1Ito6xcteXhFPJFLOvPGNq30ImWWWa2nmx7jZy08f9V3NTtijRJSBwF_osBV62oYlYeJwcemk1opL0SCyDlj_9USZ1slehsHkyly5lIl9jH5T7onZK0mkE%3D&attredirects=0
IP
GET /site/pagerolderlink/home/blogger/blogger.js?attachauth=ANoY7cr9O4xrjdkEwVZtz7ILuvnosujxvpBJ2FAFUpKmxe1oSzlZMMUc5GVqo2hBnauW0yL0g1tBEbQttm7b_IqJ9zJ-GERSLMsgOSChvPA-QcnJzPdnJjQtZ9jSS2_6N1Ito6xcteXhFPJFLOvPGNq30ImWWWa2nmx7jZy08f9V3NTtijRJSBwF_osBV62oYlYeJwcemk1opL0SCyDlj_9USZ1slehsHkyly5lIl9jH5T7onZK0mkE%3D&attredirects=0 HTTP/1.1
Host: ba01b89a-a-62cb3a1a-s-sites.googlegroups.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://significadodetatuagens.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 14 Nov 2022 04:47:55 GMT
last-modified: Sat, 04 Jul 2020 03:05:50 GMT
etag: "1593831950853"
content-disposition: attachment; filename="blogger.js"
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.dignow.org/images/dignow_120.png
301 Moved Permanently 0 B URL HTTP/2 www.dignow.org/images/dignow_120.png
IP
GET /images/dignow_120.png HTTP/1.1
Host: www.dignow.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://significadodetatuagens.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Mon, 14 Nov 2022 04:47:56 GMT
content-type: text/html
location: https://www.dignow.org/images/dignow_120.png
platform: hostinger
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QADFXa4BxgIWJYh8ZuzJtA33E9uVAmgAmfm8IFV9MA%2BWLc%2B1jUVk0r6SiOC0BxbbEAPmWJY9vO%2BiP0V3kkW0UyzK%2BNHxMc6G1pifI5l1Qt3OUYjkWjLZue4WuSK4hhG%2B6g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 769d1ca7ca4fb4fd-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
89edd755-a-62cb3a1a-s-sites.googlegroups.com/site/paginblogger/numeradas/pagenav.js?attachauth=ANoY7crsYywT-Q8BkPsoUDi8Qh8k393c6Lk0OW0uzoVM7IYQkzvTm5DQIp9xiiJX2kSh1rfi6EJrPEALlEJ5qfZSgffD0K-SocdwHaq9te14gEIzCinx399cHsd3Z-OnjURWmDn-k36zdq1auhQZzCZ8m3NWspyii5zMspJ9StpHjINk4niS3jwlUiFLONR-bcvVqtDm-DRqqIRk2oyDHt4P1v29mFF4aAJM-aZeW4kPYAa7Q5ZZYNU%3D&attredirects=0
200 OK 0 B URL HTTP/2 89edd755-a-62cb3a1a-s-sites.googlegroups.com/site/paginblogger/numeradas/pagenav.js?attachauth=ANoY7crsYywT-Q8BkPsoUDi8Qh8k393c6Lk0OW0uzoVM7IYQkzvTm5DQIp9xiiJX2kSh1rfi6EJrPEALlEJ5qfZSgffD0K-SocdwHaq9te14gEIzCinx399cHsd3Z-OnjURWmDn-k36zdq1auhQZzCZ8m3NWspyii5zMspJ9StpHjINk4niS3jwlUiFLONR-bcvVqtDm-DRqqIRk2oyDHt4P1v29mFF4aAJM-aZeW4kPYAa7Q5ZZYNU%3D&attredirects=0
IP
GET /site/paginblogger/numeradas/pagenav.js?attachauth=ANoY7crsYywT-Q8BkPsoUDi8Qh8k393c6Lk0OW0uzoVM7IYQkzvTm5DQIp9xiiJX2kSh1rfi6EJrPEALlEJ5qfZSgffD0K-SocdwHaq9te14gEIzCinx399cHsd3Z-OnjURWmDn-k36zdq1auhQZzCZ8m3NWspyii5zMspJ9StpHjINk4niS3jwlUiFLONR-bcvVqtDm-DRqqIRk2oyDHt4P1v29mFF4aAJM-aZeW4kPYAa7Q5ZZYNU%3D&attredirects=0 HTTP/1.1
Host: 89edd755-a-62cb3a1a-s-sites.googlegroups.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://significadodetatuagens.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 14 Nov 2022 04:47:55 GMT
last-modified: Sat, 04 Jul 2020 03:07:51 GMT
etag: "1593832071665"
content-disposition: attachment; filename="pagenav.js"
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.dignow.org/images/dignow_120.png
301 Moved Permanently 0 B URL HTTP/2 www.dignow.org/images/dignow_120.png
IP
GET /images/dignow_120.png HTTP/1.1
Host: www.dignow.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://significadodetatuagens.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Mon, 14 Nov 2022 04:47:56 GMT
content-type: text/html
location: https://www.dignow.org/images/dignow_120.png
platform: hostinger
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9krm0wJYT5P4%2Bkq4vgdi%2FgMcsY0Jk33YrJn4iK0eS9dk4cMiFl1ucQTkFhtHZ5qyfhTog4kRN%2B4Vhgi2boAb%2BPs8AE6gwYEFy%2B68OPP0oWNV0oDua1Hz92clJfygmKbwTQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 769d1ca7fa63b4fd-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/jF-AgDWy8ih0GfLx4Semh9UK/recaptcha__en.js
200 OK 0 B URL HTTP/2 www.gstatic.com/recaptcha/releases/jF-AgDWy8ih0GfLx4Semh9UK/recaptcha__en.js
IP
GET /recaptcha/releases/jF-AgDWy8ih0GfLx4Semh9UK/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162590
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 13 Nov 2022 09:37:41 GMT
expires: Mon, 13 Nov 2023 09:37:41 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 07 Nov 2022 23:32:29 GMT
content-type: text/javascript
age: 69016
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dl.dropboxusercontent.com/u/53396719/blogger/status-message.js
404 Not Found 0 B URL HTTP/2 dl.dropboxusercontent.com/u/53396719/blogger/status-message.js
IP
GET /u/53396719/blogger/status-message.js HTTP/1.1
Host: dl.dropboxusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://significadodetatuagens.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
content-type: text/html
date: Mon, 14 Nov 2022 04:47:56 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, noimageindex
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: remote
x-dropbox-request-id: 52c628b6feba4acbafc8a02240be8d47
X-Firefox-Spdy: h2
142.250.74.161
185.20.12.36
104.22.75.171
23.36.76.226
93.184.220.29