r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 1456357aecbd23f21ad98da57e0127eb
7074815b39fa8da9013883971d665e4c1b0797ea
f3eba265ee64870b2f822f1511b36c747d763c382557789cdad8be1d3b52d1f5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F3EBA265EE64870B2F822F1511B36C747D763C382557789CDAD8BE1D3B52D1F5"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17380
Expires: Wed, 23 Nov 2022 08:53:30 GMT
Date: Wed, 23 Nov 2022 04:03:50 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash b59d95402dfb464c176610284ba13f65
1a6c62fb0d48654dd204b66161bb03fefe60f71a
40cfd59b890ec5a3570603d28d90bd7e5c506babd52c2ece93e09f1c7b2a6880
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2884
Cache-Control: max-age=112529
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:03:50 GMT
Etag: "637ca4f3-1d7"
Expires: Thu, 24 Nov 2022 11:19:19 GMT
Last-Modified: Tue, 22 Nov 2022 10:31:15 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4d7e4eed097b9c4e5d509419f1cfc85a
290bb3d428a7c6330e2e3d73a952b16f820896c8
0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 23 Nov 2022 03:09:21 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3269
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 054ff0d1a0a43f7cb1d78dbd34e27f99
3caf54f3de1d6a8c6f6454083f8b8e7dec77db54
fcdcef8306ae31f20c366489e1f88aa40b08f154d25d45f4055c4f8cdef47634
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FCDCEF8306AE31F20C366489E1F88AA40B08F154D25D45F4055C4F8CDEF47634"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2190
Expires: Wed, 23 Nov 2022 04:40:20 GMT
Date: Wed, 23 Nov 2022 04:03:50 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: SFsb08kqMZSjP4EsyqlXqgIr12EUvnScyXDSUnv0MqFdjZDwz8u4LN/dNd+ZTFNT3vAQd7JzVN0=
x-amz-request-id: H9XS7T5BZX4AH5B8
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 23 Nov 2022 03:39:50 GMT
age: 1440
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 04:03:50 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css
104.18.11.207200 OK 6.9 kB URL HTTP/1.1 maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css
IP 104.18.11.207:0
File type ASCII text, with very long lines (27303)
Hash cbf8915e56f5efdf55a4da5c71837b9c
db61665daaf3bee57a3a6eb075fdd9affcd44dfe
2410e6da0ec1d910a51c92e147f56180ac8ec3789cb1a3ed09990366546e196c
GET /font-awesome/4.5.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 04:03:50 GMT
Content-Type: text/css; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
CDN-PullZone: 252412
CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74
CDN-RequestCountryCode: DE
CDN-EdgeStorageId: 565, 617, 617
Last-Modified: Mon, 25 Jan 2021 22:04:54 GMT
CDN-CachedAt: 2021-06-08 19:04:20
CDN-RequestPullSuccess: True
CDN-RequestPullCode: 200
Cache-Control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
CDN-RequestId: e9a84d03a1f7c6aa17012c712a6e5dd5
Content-Encoding: gzip
CDN-Status: 200
CDN-Cache: HIT
CF-Cache-Status: HIT
Age: 14620478
Server: cloudflare
CF-RAY: 76e7046f38a0b50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
fonts.googleapis.com/css?family=Montserrat:400,700
142.250.74.10200 OK 521 B URL HTTP/1.1 fonts.googleapis.com/css?family=Montserrat:400,700
IP 142.250.74.10:0
Hash b52e405858cd07e929b5387c0ed0d1de
8dc157b5ece5222f0f175eee9379a699dee76cd8
e289bd897465ef8c6c74d81d09ee98cf500d744073df727158f6323caf335547
GET /css?family=Montserrat:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Wed, 23 Nov 2022 04:03:50 GMT
Date: Wed, 23 Nov 2022 04:03:50 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
alphamaletraits.blogspot.com/2015/10/how-to-spend-less-money-eating-at.html
142.250.74.161200 OK 49 kB URL HTTP/1.1 alphamaletraits.blogspot.com/2015/10/how-to-spend-less-money-eating-at.html
IP 142.250.74.161:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (2771)
Hash 8e01b633efaa46f4b5fcaa455d4ab8ec
c690e7be463fe64d7ee57c3610874372949ca34f
3df8ce8b3a95be5796ef1bfcf1562a7f396ff2f1a04083ab9326dbc8fc69ee52
Analyzer Verdict Alert fortinet Malware
GET /2015/10/how-to-spend-less-money-eating-at.html HTTP/1.1
Host: alphamaletraits.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Wed, 23 Nov 2022 04:03:50 GMT
Date: Wed, 23 Nov 2022 04:03:50 GMT
Cache-Control: private, max-age=0
Last-Modified: Tue, 08 Nov 2022 02:46:03 GMT
ETag: W/"574bb0f83ded66c5eed3d759e64c13c5be62c70878325ad402f9175a41e75414"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 49042
Server: GSE
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash eb526d16fc4a304286cf261dc5d8abea
0aed946d28abc21cb11657e6f864b561a0c68fba
551520b0344d58c1b4ddc9dfb452da2acf43080871a7037f4530eec48fb86362
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:03:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 2158a9300fe45b9c7eb9f8bee64fd5a8
efc67da3b98aa908a9493a352701f55eac794728
101dcb3cccef1a365cbae9a0034dd15e3ac1717fd28aa846555b80195502f249
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:03:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css
142.250.74.105200 OK 7.8 kB URL HTTP/2 www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css
IP 142.250.74.105:0
File type ASCII text, with very long lines (35959)
Hash 5aa2d3297bdc86bc81322aedecbb5e79
1c0a3c007e41726e167e79b70ddea76198650884
feae1fac625d0f30b5f10fa00b62df1a5600cd2178062c427e55f289b29cc630
GET /static/v1/widgets/2975350028-css_bundle_v2.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 7776
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 17:53:54 GMT
expires: Wed, 22 Nov 2023 17:53:54 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 21 Nov 2022 17:51:13 GMT
content-type: text/css
age: 36596
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.11.0/jquery.min.js
142.250.74.106200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.11.0/jquery.min.js
IP 142.250.74.106:0
File type ASCII text, with very long lines (32341)
Hash 856f85cc1b07156fa844b44a10c236c2
7cef457c0e1cd0c20f4e699564ea8997f0332021
c61aa9ce7b32f93630abac1a4b27382f9333e0ff69477c9d9099070ae0742b01
GET /ajax/libs/jquery/1.11.0/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33576
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 03:07:54 GMT
expires: Thu, 23 Nov 2023 03:07:54 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 3356
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
resources.infolinks.com/js/infolinks_main.js
172.66.41.9200 OK 2.2 kB URL HTTP/1.1 resources.infolinks.com/js/infolinks_main.js
IP 172.66.41.9:0
File type ASCII text, with very long lines (3584)
Hash fcbcafcbd03f111c61f3ee876c83208f
c44606c0448afa429202283168baf2e4258f575e
05991820963ff733a1360b176301be801391fc232e9722635489081d514dd9b1
GET /js/infolinks_main.js HTTP/1.1
Host: resources.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 04:03:50 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 22 Nov 2022 07:47:51 GMT
ETag: W/"e01-5ee0a639bf1b8"
Cache-Control: max-age=3600
Expires: Wed, 23 Nov 2022 04:57:10 GMT
Via: 1.1 google
CF-Cache-Status: HIT
Age: 400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76e7046febacb4eb-OSL
Content-Encoding: gzip
3.bp.blogspot.com/-eJil1F3LxAw/U0rbIiX0RHI/AAAAAAAAAPQ/yoSB82RUZHc/s72-c/Alpha+Male+Body+language+Tips+.jpeg
142.250.74.161200 OK 3.0 kB URL HTTP/1.1 3.bp.blogspot.com/-eJil1F3LxAw/U0rbIiX0RHI/AAAAAAAAAPQ/yoSB82RUZHc/s72-c/Alpha+Male+Body+language+Tips+.jpeg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash a8df995070c38fc1a74682e311d59996
464850471342fb9e4bfbd13585e69e559371aeb2
4f5e1b1695b36c4c53fef7ecf54a486b2e2f078be47393c80cc0b483e3770de6
GET /-eJil1F3LxAw/U0rbIiX0RHI/AAAAAAAAAPQ/yoSB82RUZHc/s72-c/Alpha+Male+Body+language+Tips+.jpeg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "vf5"
Expires: Thu, 24 Nov 2022 04:03:50 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Alpha Male Body language Tips .jpeg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 23 Nov 2022 04:03:50 GMT
Server: fife
Content-Length: 2980
X-XSS-Protection: 0
4.bp.blogspot.com/-p7lczwr1bJ8/U0nVkOIbiaI/AAAAAAAAAOo/nomZ8GlFWWk/s72-c/Don+Draper+.jpg
142.250.74.161200 OK 1.8 kB URL HTTP/1.1 4.bp.blogspot.com/-p7lczwr1bJ8/U0nVkOIbiaI/AAAAAAAAAOo/nomZ8GlFWWk/s72-c/Don+Draper+.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 69b81ee769320d0e2f5cb4e8b99fd16a
26930a6affaa7c20f97098367db67909f0e773ea
e2dda84a6bf1f2a9b5022a2f792265592982ee2d65feeb5046a510c4bfa3137b
GET /-p7lczwr1bJ8/U0nVkOIbiaI/AAAAAAAAAOo/nomZ8GlFWWk/s72-c/Don+Draper+.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "veb"
Expires: Thu, 24 Nov 2022 04:03:50 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Don Draper .jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 23 Nov 2022 04:03:50 GMT
Server: fife
Content-Length: 1849
X-XSS-Protection: 0
3.bp.blogspot.com/-2cQt0VltUMw/VGUxMPIXJsI/AAAAAAAAAZc/2x7B7p5Tg6s/s1600/alpha%2Bmale.PNG
142.250.74.161200 OK 4.7 kB URL HTTP/1.1 3.bp.blogspot.com/-2cQt0VltUMw/VGUxMPIXJsI/AAAAAAAAAZc/2x7B7p5Tg6s/s1600/alpha%2Bmale.PNG
IP 142.250.74.161:0
File type PNG image data, 567 x 114, 8-bit/color RGB, non-interlaced\012- data
Hash db9da7a1ecfa1e4838cab7294ae95221
32e2aad9aec08b69e21080bcf9a38f6d9768efcf
1116bde13c177be871a2f5d1a1e539fb12792f2797196c2c1a6e1f3bf74771a1
GET /-2cQt0VltUMw/VGUxMPIXJsI/AAAAAAAAAZc/2x7B7p5Tg6s/s1600/alpha%2Bmale.PNG HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v198"
Expires: Thu, 24 Nov 2022 04:03:50 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="alpha male.PNG"
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 23 Nov 2022 04:03:50 GMT
Server: fife
Content-Length: 4727
X-XSS-Protection: 0
3.bp.blogspot.com/-B-gKgJZeyts/U_H0WB1IxnI/AAAAAAAAAXk/HGWPLn1rP8s/s72-c/alpha%2Bmale%2Bdating%2Btips%2B.jpg
142.250.74.161200 OK 2.8 kB URL HTTP/1.1 3.bp.blogspot.com/-B-gKgJZeyts/U_H0WB1IxnI/AAAAAAAAAXk/HGWPLn1rP8s/s72-c/alpha%2Bmale%2Bdating%2Btips%2B.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash cc8bb11d3b4a76beaf6fc19a349146d6
e6f1241593d274ee650e4f8991cf5cf7543cf54b
3dfcf6d43dc152efb54c24107df52d834bd63aa4906dcc2e438bc53b59831ecc
GET /-B-gKgJZeyts/U_H0WB1IxnI/AAAAAAAAAXk/HGWPLn1rP8s/s72-c/alpha%2Bmale%2Bdating%2Btips%2B.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v17a"
Expires: Thu, 24 Nov 2022 04:03:50 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="alpha male dating tips .jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 23 Nov 2022 04:03:50 GMT
Server: fife
Content-Length: 2800
X-XSS-Protection: 0
alphamaletraits.blogspot.com/js/cookienotice.js
142.250.74.161200 OK 2.0 kB URL HTTP/1.1 alphamaletraits.blogspot.com/js/cookienotice.js
IP 142.250.74.161:0
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
Analyzer Verdict Alert fortinet Malware
GET /js/cookienotice.js HTTP/1.1
Host: alphamaletraits.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/2015/10/how-to-spend-less-money-eating-at.html
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
Date: Wed, 23 Nov 2022 04:03:50 GMT
Expires: Wed, 30 Nov 2022 04:03:50 GMT
Cache-Control: public, max-age=604800
Last-Modified: Tue, 22 Nov 2022 21:54:19 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
www.blogger.com/static/v1/widgets/2342155703-widgets.js
142.250.74.105200 OK 57 kB URL HTTP/2 www.blogger.com/static/v1/widgets/2342155703-widgets.js
IP 142.250.74.105:0
File type ASCII text, with very long lines (2221)
Hash 1217c8e34acb09c7cea97bae4d386ea1
55ee17703d0a7710943e93913bacb49220d98b4b
c2f23437ab938096bf8b40de8b08c4f27bb880b7ef8588481ec5ccc08b58870b
GET /static/v1/widgets/2342155703-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56726
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 21 Nov 2022 16:02:03 GMT
expires: Tue, 21 Nov 2023 16:02:03 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 21 Nov 2022 00:52:59 GMT
content-type: text/javascript
age: 129707
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-V17p1XslG4k/U0GrU-EGv2I/AAAAAAAAAOA/E0Fj_bTlj0w/s72-c/Alpha+Male+Seduction++.JPG
142.250.74.161200 OK 3.1 kB URL HTTP/1.1 1.bp.blogspot.com/-V17p1XslG4k/U0GrU-EGv2I/AAAAAAAAAOA/E0Fj_bTlj0w/s72-c/Alpha+Male+Seduction++.JPG
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash cfb9caed3a3729bd19cb58f885f8cb75
204dcb55951e452d37a7b4066417a1222bd57dde
0e6705fcc5a580d040f6b6760670a61f39d945f6826d20783451e3903ff5c75e
GET /-V17p1XslG4k/U0GrU-EGv2I/AAAAAAAAAOA/E0Fj_bTlj0w/s72-c/Alpha+Male+Seduction++.JPG HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "ve1"
Expires: Thu, 24 Nov 2022 04:03:50 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Alpha Male Seduction .JPG"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 23 Nov 2022 04:03:50 GMT
Server: fife
Content-Length: 3068
X-XSS-Protection: 0
cdn.popcash.net/pop.js
151.139.128.11200 OK 38 kB IP 151.139.128.11:0
File type ASCII text, with very long lines (65390)
Hash 98cfe0446b61a1f2a2df62468da0202c
156362703ec16548fe52ef46832fdad94d493463
903349d17d20a9010f59b6feed6519fda179cf5606bbde8abcd58db81525b527
Analyzer Verdict Alert fortinet Malware
GET /pop.js HTTP/1.1
Host: cdn.popcash.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 04:03:50 GMT
Content-Encoding: gzip
Content-Type: application/javascript
Last-Modified: Wed, 02 Nov 2022 15:55:59 GMT
Accept-Ranges: bytes
ETag: W/"6362930f-1f3e1"
Cache-Control: max-age=2592000, public
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=p3GV0C8mJYYsFZ5jILTOFPivV4YZ61dG05K5L69VVBSlod34hnCbvBXbsxrNwdGVNv6TChhVOEHNzNV0%2BNmvasKO9crjfF%2BnNavpkBq1VUFjDd2YK5z5p%2BTVmFEf"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76814901bb4ab517-OSL
Vary: Accept-Encoding
X-HW: 1669176230.cds237.sk1.h2,1669176230.cds216.sk1.c
Access-Control-Allow-Origin: *
Connection: keep-alive
Content-Length: 38289
4.bp.blogspot.com/-S5qDsiol0fg/Uz8ARjNQ_KI/AAAAAAAAAL4/zcmTRLwzTSo/s72-c/Questions-to-Ask-Yourself-Every-Day-for-a-Happier-Life.jpg
142.250.74.161200 OK 2.1 kB URL HTTP/1.1 4.bp.blogspot.com/-S5qDsiol0fg/Uz8ARjNQ_KI/AAAAAAAAAL4/zcmTRLwzTSo/s72-c/Questions-to-Ask-Yourself-Every-Day-for-a-Happier-Life.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google, copyright=Bigstock\302\256], baseline, precision 8, 72x72, components 3\012- data
Hash becbd3e26ec55ce9e78d8e9a868750a6
6dfaa36c07293a5a644552598ab544e36b1cfe54
f0713fc7db697a2d18d67bf518b8b07b138d6d33e2a07a4d78d38d858041eb95
GET /-S5qDsiol0fg/Uz8ARjNQ_KI/AAAAAAAAAL4/zcmTRLwzTSo/s72-c/Questions-to-Ask-Yourself-Every-Day-for-a-Happier-Life.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "vbf"
Expires: Thu, 24 Nov 2022 04:03:50 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Questions-to-Ask-Yourself-Every-Day-for-a-Happier-Life.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 23 Nov 2022 04:03:50 GMT
Server: fife
Content-Length: 2092
X-XSS-Protection: 0
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 065495ec7a963a205abd9c8dbc75cb5d
ea416d0df4f6706150bda5da2077174f5cdd986b
1b2a2afee887651b23a849f14ace89b330329f6bf61c331545a3f6d12037aee5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:03:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 471 B IP 142.250.74.35:0
Hash 08fb143dfd9a3b59cfdc0248ad9f5482
bee979149e99e01b543881991a121a637e9ceb70
94ec72f114ab4f9b26c352e15f0920d2ab8bde8d72ac3fb95fe4a0627246a148
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:03:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 9b7c3c9a9c0cbb0f24701fe95043bdd0
c34fce37d1b74b0617cfb48fb645a747e25fa1bb
72417299ab85ea1a54216a62b31b69ff8bcc61719c081489dddbf5d79cd0fb64
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:03:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 471 B IP 142.250.74.35:0
Hash 96af143c2939b373dd51ef244ad65537
21bb837822202ac742d461a379deae190eb340f0
0bfb1fb106921097d6e43e3eaac75a21a465a65e2fb3c49eaa135532cd590856
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:03:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
3.bp.blogspot.com/-dJ7kH3jZcR8/VyDnpVShD9I/AAAAAAAAB74/TMF10thlfQ8D5wr0S_fa_sA4SYIl0Xb7QCLcB/s72-c/lilwaynesmile.jpg
142.250.74.161200 OK 3.0 kB URL HTTP/2 3.bp.blogspot.com/-dJ7kH3jZcR8/VyDnpVShD9I/AAAAAAAAB74/TMF10thlfQ8D5wr0S_fa_sA4SYIl0Xb7QCLcB/s72-c/lilwaynesmile.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash d0096d58b80e33ecdf08fce2f8ddedda
3d5f99fa31deb8fbefd1af18b640e2c224ce6321
80f1312594f17cdcdf3b3b1e99a9b0fed7c0f14297317b35f090b13fc5c5ae36
GET /-dJ7kH3jZcR8/VyDnpVShD9I/AAAAAAAAB74/TMF10thlfQ8D5wr0S_fa_sA4SYIl0Xb7QCLcB/s72-c/lilwaynesmile.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v7c0"
expires: Thu, 24 Nov 2022 04:03:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="lilwaynesmile.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Wed, 23 Nov 2022 04:03:50 GMT
server: fife
content-length: 3017
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
4.bp.blogspot.com/-LMTKMsV6Jfk/VyDcwJiysvI/AAAAAAAAB6w/ZZmxq96-oDAIleVSbh3TdfCIEY18bswBACLcB/s72-c/dani.jpg
142.250.74.161200 OK 3.7 kB URL HTTP/2 4.bp.blogspot.com/-LMTKMsV6Jfk/VyDcwJiysvI/AAAAAAAAB6w/ZZmxq96-oDAIleVSbh3TdfCIEY18bswBACLcB/s72-c/dani.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 1ab62059d9289b10dadd175913acadad
dd32cbe99039d5c6709d3b0e87f28dba595ea930
17e6107b108c8f0faa9bb096927eddc2d8a82ea287ee9eab9a26144950529d70
GET /-LMTKMsV6Jfk/VyDcwJiysvI/AAAAAAAAB6w/ZZmxq96-oDAIleVSbh3TdfCIEY18bswBACLcB/s72-c/dani.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v7af"
expires: Thu, 24 Nov 2022 04:03:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="dani.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Wed, 23 Nov 2022 04:03:50 GMT
server: fife
content-length: 3662
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 471 B IP 142.250.74.35:0
Hash 96af143c2939b373dd51ef244ad65537
21bb837822202ac742d461a379deae190eb340f0
0bfb1fb106921097d6e43e3eaac75a21a465a65e2fb3c49eaa135532cd590856
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:03:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
4.bp.blogspot.com/-j9b7IhL_8tY/Vz5VWcdrGBI/AAAAAAAACUE/GMT0wfjOLIUXAAD6IP7hnWcyb6uevlswwCLcB/s72-c/life%2B%2B.jpg
142.250.74.161200 OK 2.3 kB URL HTTP/2 4.bp.blogspot.com/-j9b7IhL_8tY/Vz5VWcdrGBI/AAAAAAAACUE/GMT0wfjOLIUXAAD6IP7hnWcyb6uevlswwCLcB/s72-c/life%2B%2B.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 68055110038f8ed953642f2936386cf0
1f76eca1a0c4977a0e13bc44275fcfb7a948dbbb
8ba87b52c86d5206b9c7b858e7e218c4a92a91b90c182340d8c2f48d2799a87c
GET /-j9b7IhL_8tY/Vz5VWcdrGBI/AAAAAAAACUE/GMT0wfjOLIUXAAD6IP7hnWcyb6uevlswwCLcB/s72-c/life%2B%2B.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v943"
expires: Thu, 24 Nov 2022 04:03:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="life .jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Wed, 23 Nov 2022 04:03:50 GMT
server: fife
content-length: 2263
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 471 B IP 142.250.74.35:0
Hash dc6b906c9d58320e95ae19ad39dfc843
30bf2b319c6b732278f3f25c7e538a3105cc4805
ed3c986c7d9d293f5779892cbdc65a790cf8d9b3f383d7f61bde65724573641d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:03:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
3.bp.blogspot.com/-XWp1hnmVkVo/Vz8ueQSr3LI/AAAAAAAACUY/XowjkKJ-nK4Ian3ebS9Q5XgrIxVM0W9UACLcB/s72-c/get%2Bover.jpg
142.250.74.161200 OK 1.8 kB URL HTTP/2 3.bp.blogspot.com/-XWp1hnmVkVo/Vz8ueQSr3LI/AAAAAAAACUY/XowjkKJ-nK4Ian3ebS9Q5XgrIxVM0W9UACLcB/s72-c/get%2Bover.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash ee14930b81c4767e568267412e4e5315
b0cfd660e59f5653814d02a614161b4d1e76656a
68698756f9379b73ce2bc74605072338be7c6c099201ac7facd51f0058a86df1
GET /-XWp1hnmVkVo/Vz8ueQSr3LI/AAAAAAAACUY/XowjkKJ-nK4Ian3ebS9Q5XgrIxVM0W9UACLcB/s72-c/get%2Bover.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="get over.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 1834
x-xss-protection: 0
date: Wed, 23 Nov 2022 04:03:50 GMT
expires: Mon, 21 Nov 2022 02:52:20 GMT
cache-control: public, max-age=86400, no-transform
etag: "v94a"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-b5C9nfbhMaM/VxeLfUDWr2I/AAAAAAAABs0/ZnMXb-4F2SAZVy2z70kezQJSxZU9o3gAACLcB/s72-c/Happy.jpg
142.250.74.161200 OK 3.1 kB URL HTTP/2 1.bp.blogspot.com/-b5C9nfbhMaM/VxeLfUDWr2I/AAAAAAAABs0/ZnMXb-4F2SAZVy2z70kezQJSxZU9o3gAACLcB/s72-c/Happy.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 5219a9801e4c5ec8f09aec7dd872a88c
07383a11f47f5624e18917a9354a48b55d9eea56
7594e57bee0496f49930c4d7f261c6e4a4410c638d49e7e064566bd55924bebd
GET /-b5C9nfbhMaM/VxeLfUDWr2I/AAAAAAAABs0/ZnMXb-4F2SAZVy2z70kezQJSxZU9o3gAACLcB/s72-c/Happy.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v6ce"
expires: Thu, 24 Nov 2022 04:03:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Happy.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Wed, 23 Nov 2022 04:03:50 GMT
server: fife
content-length: 3073
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
apis.google.com/js/platform.js
142.250.74.174200 OK 21 kB URL HTTP/2 apis.google.com/js/platform.js
IP 142.250.74.174:0
File type ASCII text, with very long lines (1279)
Hash 7ac44ef24e267df17ff72f195b252806
62db12d9ce11a576ccd7fa3544d851c5fd42f3b7
aae7897e7b55999c1b3166309381d19ac488dced51e14071339d8b193a686a61
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20984
date: Wed, 23 Nov 2022 04:03:50 GMT
expires: Wed, 23 Nov 2022 04:03:50 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "7446758f13887885"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 471 B IP 142.250.74.35:0
Hash 08fb143dfd9a3b59cfdc0248ad9f5482
bee979149e99e01b543881991a121a637e9ceb70
94ec72f114ab4f9b26c352e15f0920d2ab8bde8d72ac3fb95fe4a0627246a148
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:03:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 471 B IP 142.250.74.35:0
Hash 08fb143dfd9a3b59cfdc0248ad9f5482
bee979149e99e01b543881991a121a637e9ceb70
94ec72f114ab4f9b26c352e15f0920d2ab8bde8d72ac3fb95fe4a0627246a148
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:03:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
p95578.clksite.com/adServe/banners?tid=95578_312094_1&type=footer&size=37
173.192.101.24301 Moved Permanently 162 B URL HTTP/1.1 p95578.clksite.com/adServe/banners?tid=95578_312094_1&type=footer&size=37
IP 173.192.101.24:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /adServe/banners?tid=95578_312094_1&type=footer&size=37 HTTP/1.1
Host: p95578.clksite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 23 Nov 2022 04:03:50 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://mybettermb.com/adServe/banners?tid=95578_312094_1&type=footer&size=37
p95578.clksite.com/adServe/banners?tid=95578_312094_0&tagid=2&hybridPop=true
173.192.101.24301 Moved Permanently 162 B URL HTTP/1.1 p95578.clksite.com/adServe/banners?tid=95578_312094_0&tagid=2&hybridPop=true
IP 173.192.101.24:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /adServe/banners?tid=95578_312094_0&tagid=2&hybridPop=true HTTP/1.1
Host: p95578.clksite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 23 Nov 2022 04:03:50 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://mybettermb.com/adServe/banners?tid=95578_312094_0&tagid=2&hybridPop=true
www.blogger.com/dyn-css/authorization.css?targetBlogID=5595517656967011807&zx=8b0ec9a3-c32d-4d06-8f0c-1c61418af1a8
142.250.74.105200 OK 21 B URL HTTP/2 www.blogger.com/dyn-css/authorization.css?targetBlogID=5595517656967011807&zx=8b0ec9a3-c32d-4d06-8f0c-1c61418af1a8
IP 142.250.74.105:0
File type very short file (no magic)
Hash a62e4d501434033d5d177e67d3aafdd0
34f7300c9ed47334cf10826d57af785321e3138b
b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522
GET /dyn-css/authorization.css?targetBlogID=5595517656967011807&zx=8b0ec9a3-c32d-4d06-8f0c-1c61418af1a8 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 23 Nov 2022 04:03:50 GMT
last-modified: Wed, 23 Nov 2022 04:03:50 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bdv.bidvertiser.com/BidVertiser.dbm?pid=558468%26bid=1855359
54.241.51.109200 OK 9.0 kB URL HTTP/1.1 bdv.bidvertiser.com/BidVertiser.dbm?pid=558468%26bid=1855359
IP 54.241.51.109:0
File type ASCII text, with CRLF line terminators
Hash 0d489677aaa27440619b64706f2cafe9
b87bf2207059e1db5a939e804c7e586e7b8ad125
0dab6095a7e07c26dc21102cfb0e3e81eda68ed0681d34b23719bd31bc188539
GET /BidVertiser.dbm?pid=558468%26bid=1855359 HTTP/1.1
Host: bdv.bidvertiser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Content-Type: text/javascript
Pragma: no-cache
Cache-Control: no-store
Expires: -1
Connection: close
Content-Length: 9014
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 471 B IP 142.250.74.35:0
Hash 08fb143dfd9a3b59cfdc0248ad9f5482
bee979149e99e01b543881991a121a637e9ceb70
94ec72f114ab4f9b26c352e15f0920d2ab8bde8d72ac3fb95fe4a0627246a148
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:03:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 8069f5e67c25fc0b7388ba5d4decd8c9
64a85ba44c80ea206f4382f573c3d61e4f607ccf
7587cd04333ddf1cff15ae219cb8fca0618786a9fe4cee989975f4d50889e72a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:03:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bdv.bidvertiser.com/BidVertiser.dbm?pid=558468&bid=1801988
54.241.51.109200 OK 9.0 kB URL HTTP/1.1 bdv.bidvertiser.com/BidVertiser.dbm?pid=558468&bid=1801988
IP 54.241.51.109:0
File type ASCII text, with CRLF line terminators
Hash 0d489677aaa27440619b64706f2cafe9
b87bf2207059e1db5a939e804c7e586e7b8ad125
0dab6095a7e07c26dc21102cfb0e3e81eda68ed0681d34b23719bd31bc188539
GET /BidVertiser.dbm?pid=558468&bid=1801988 HTTP/1.1
Host: bdv.bidvertiser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Content-Type: text/javascript
Pragma: no-cache
Cache-Control: no-store
Expires: -1
Connection: close
Content-Length: 9014
fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
216.58.207.195200 OK 31 kB URL HTTP/1.1 fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Hash ac0d2859ea5f8fd6bcb3c305c08ec184
7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://alphamaletraits.blogspot.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 30928
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 17 Nov 2022 16:55:19 GMT
Expires: Fri, 17 Nov 2023 16:55:19 GMT
Cache-Control: public, max-age=31536000
Age: 472111
Last-Modified: Mon, 11 Jul 2022 18:57:39 GMT
Content-Type: font/woff2
maxcdn.bootstrapcdn.com/font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0
104.18.11.207200 OK 67 kB URL HTTP/1.1 maxcdn.bootstrapcdn.com/font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0
IP 104.18.11.207:0
File type Web Open Font Format (Version 2), TrueType, length 66624, version 4.262\012- data
Hash db812d8a70a4e88e888744c1c9a27e89
638c652d623280a58144f93e7b552c66d1667a11
ff82aeed6b9bb6701696c84d1b223d2e682eb78c89117a438ce6cfea8c498995
GET /font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0 HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://alphamaletraits.blogspot.com
Connection: keep-alive
Referer: http://maxcdn.bootstrapcdn.com/
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 04:03:50 GMT
Content-Type: font/woff2
Content-Length: 66624
Connection: keep-alive
CDN-PullZone: 252412
CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74
CDN-RequestCountryCode: DE
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=31919000
ETag: "db812d8a70a4e88e888744c1c9a27e89"
Last-Modified: Mon, 25 Jan 2021 22:04:54 GMT
CDN-CachedAt: 08/15/2022 13:52:58
CDN-ProxyVer: 1.02
CDN-RequestPullCode: 200
CDN-RequestPullSuccess: True
CDN-EdgeStorageId: 723
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
X-Content-Type-Options: nosniff
CDN-Status: 200
CDN-RequestId: 0fbc895c702f1c455e9d302cac1469ac
CDN-Cache: HIT
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76e70471cbafb505-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
4.bp.blogspot.com/-lbXI_aY_4oY/Vi9RXA1agvI/AAAAAAAABEI/hLU6zv_eyy4/s72-c/How%2BTo%2BSpend%2BLess%2BMoney%2BEating%2BAt%2BRestaurantsHow%2BTo%2BSpend%2BLess%2BMoney%2BEating%2BAt%2BRestaurants.jpg
142.250.74.161200 OK 4.0 kB URL HTTP/1.1 4.bp.blogspot.com/-lbXI_aY_4oY/Vi9RXA1agvI/AAAAAAAABEI/hLU6zv_eyy4/s72-c/How%2BTo%2BSpend%2BLess%2BMoney%2BEating%2BAt%2BRestaurantsHow%2BTo%2BSpend%2BLess%2BMoney%2BEating%2BAt%2BRestaurants.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 25506a3b426a98741482e3710618f74a
bb1b3989032aafe978922b354c5597964e3b2a8e
106a8ece7dede747c4584aeaa4b70ed4a6ede852f399ac4397281738a3b00d21
GET /-lbXI_aY_4oY/Vi9RXA1agvI/AAAAAAAABEI/hLU6zv_eyy4/s72-c/How%2BTo%2BSpend%2BLess%2BMoney%2BEating%2BAt%2BRestaurantsHow%2BTo%2BSpend%2BLess%2BMoney%2BEating%2BAt%2BRestaurants.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v444"
Expires: Thu, 24 Nov 2022 04:03:50 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="How To Spend Less Money Eating At RestaurantsHow To Spend Less Money Eating At Restaurants.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 23 Nov 2022 04:03:50 GMT
Server: fife
Content-Length: 3973
X-XSS-Protection: 0
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 23 Nov 2022 03:08:53 GMT
cache-control: public,max-age=3600
age: 3297
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash fd98d34529ba1be61371d7f1f11a05d1
e04c2667d7f1dd3103182d5b69eed41147005334
4f80b80278bf50ed33921c968fc5285e80380cb0df4490b01c676727016421e4
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 04:03:50 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 20 Nov 2022 19:25:46 GMT
Expires: Sun, 27 Nov 2022 19:25:45 GMT
Etag: "e04c2667d7f1dd3103182d5b69eed41147005334"
Cache-Control: max-age=400314,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76e704733eaab4e8-OSL
bdv.bidvertiser.com/BidVertiser.dbm?pid=558468%26bid=1855359
54.241.51.109200 OK 9.0 kB URL HTTP/1.1 bdv.bidvertiser.com/BidVertiser.dbm?pid=558468%26bid=1855359
IP 54.241.51.109:0
File type ASCII text, with CRLF line terminators
Hash 0d489677aaa27440619b64706f2cafe9
b87bf2207059e1db5a939e804c7e586e7b8ad125
0dab6095a7e07c26dc21102cfb0e3e81eda68ed0681d34b23719bd31bc188539
GET /BidVertiser.dbm?pid=558468%26bid=1855359 HTTP/1.1
Host: bdv.bidvertiser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Content-Type: text/javascript
Pragma: no-cache
Cache-Control: no-store
Expires: -1
Connection: close
Content-Length: 9014
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 8a181d95550cfdf3b1fc4deb71631e40
37866f7293c41fbfb817e321754cae5c5bf59f93
6aa3d2763181cc48d2ad0ce7d227f3cb3324045c3f7858ccdbae675768dcec55
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4148
Cache-Control: max-age=108732
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:03:51 GMT
Etag: "637c912f-1d7"
Expires: Thu, 24 Nov 2022 10:16:03 GMT
Last-Modified: Tue, 22 Nov 2022 09:06:55 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash fd98d34529ba1be61371d7f1f11a05d1
e04c2667d7f1dd3103182d5b69eed41147005334
4f80b80278bf50ed33921c968fc5285e80380cb0df4490b01c676727016421e4
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 04:03:51 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 20 Nov 2022 19:25:46 GMT
Expires: Sun, 27 Nov 2022 19:25:45 GMT
Etag: "e04c2667d7f1dd3103182d5b69eed41147005334"
Cache-Control: max-age=400313,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76e704733d190b39-OSL
4.bp.blogspot.com/-lbXI_aY_4oY/Vi9RXA1agvI/AAAAAAAABEI/hLU6zv_eyy4/s640/How%2BTo%2BSpend%2BLess%2BMoney%2BEating%2BAt%2BRestaurantsHow%2BTo%2BSpend%2BLess%2BMoney%2BEating%2BAt%2BRestaurants.jpg
142.250.74.161200 OK 111 kB URL HTTP/1.1 4.bp.blogspot.com/-lbXI_aY_4oY/Vi9RXA1agvI/AAAAAAAABEI/hLU6zv_eyy4/s640/How%2BTo%2BSpend%2BLess%2BMoney%2BEating%2BAt%2BRestaurantsHow%2BTo%2BSpend%2BLess%2BMoney%2BEating%2BAt%2BRestaurants.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 640x426, components 3\012- data
Size 111 kB (111071 bytes)
Hash 76c50ffa7e12f47293a35d51ebf0dce0
184ca0e109342e7455e861b3ee3c7cb3590d6afb
a3294d86973898253e192ef59ae6a922f67dcb25c74bb79c241c56f9f705557d
GET /-lbXI_aY_4oY/Vi9RXA1agvI/AAAAAAAABEI/hLU6zv_eyy4/s640/How%2BTo%2BSpend%2BLess%2BMoney%2BEating%2BAt%2BRestaurantsHow%2BTo%2BSpend%2BLess%2BMoney%2BEating%2BAt%2BRestaurants.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v444"
Expires: Thu, 24 Nov 2022 04:03:51 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="How To Spend Less Money Eating At RestaurantsHow To Spend Less Money Eating At Restaurants.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 23 Nov 2022 04:03:51 GMT
Server: fife
Content-Length: 111071
X-XSS-Protection: 0
mybettermb.com/adServe/banners?tid=95578_312094_0&tagid=2&hybridPop=true
108.168.193.189403 Forbidden 14 kB URL HTTP/2 mybettermb.com/adServe/banners?tid=95578_312094_0&tagid=2&hybridPop=true
IP 108.168.193.189:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (44246), with no line terminators
Hash 0699300b06239ba5930064c3438a099d
6738fb392cb78d2f40c8f42e17b1d192e8276a39
487b0bbfc80911f120f4026fae149deede3b8cc4d3a60f1c6f04fd4d8b371dc3
GET /adServe/banners?tid=95578_312094_0&tagid=2&hybridPop=true HTTP/1.1
Host: mybettermb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://alphamaletraits.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
server: nginx
date: Wed, 23 Nov 2022 04:03:51 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding
cache-control: no-cache
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-language: en
content-encoding: gzip
X-Firefox-Spdy: h2
push.services.mozilla.com/
34.214.64.191101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.214.64.191:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: fAPepKGwnQ5Qziy9Asx1Fw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ho8U80PC1atMaoygV7QBuQCafYQ=
www.google-analytics.com/analytics.js
142.250.74.174200 OK 20 kB URL HTTP/1.1 www.google-analytics.com/analytics.js
IP 142.250.74.174:0
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 20039
Date: Wed, 23 Nov 2022 02:22:55 GMT
Expires: Wed, 23 Nov 2022 04:22:55 GMT
Cache-Control: public, max-age=7200
Age: 6056
Last-Modified: Tue, 27 Sep 2022 22:01:05 GMT
Content-Type: text/javascript
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
142.250.74.66200 OK 67 B URL HTTP/1.1 pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP 142.250.74.66:0
Hash 9bbc3ca32ec951a484589ce0e6b4db73
753d6f6183b33b2dee5dde2208fca91c17f5bb13
b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 0
Date: Tue, 22 Nov 2022 08:44:29 GMT
Expires: Tue, 06 Dec 2022 08:44:29 GMT
Cache-Control: public, max-age=1209600
ETag: 13036835877489095579
Content-Type: text/javascript; charset=UTF-8
Age: 69562
4.bp.blogspot.com/-p7lczwr1bJ8/U0nVkOIbiaI/AAAAAAAAAOo/nomZ8GlFWWk/s150/Don+Draper+.jpg
142.250.74.161200 OK 3.6 kB URL HTTP/1.1 4.bp.blogspot.com/-p7lczwr1bJ8/U0nVkOIbiaI/AAAAAAAAAOo/nomZ8GlFWWk/s150/Don+Draper+.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 100x150, components 3\012- data
Hash 76a85d3cd7959cf8c5ad24e1a501656f
177c0b07f174848498410ae70a2bf481641a296e
3deb78bee16d9b7e11d9924be0545f50fee6a95bbed6dc638139e3bb9f351f3f
GET /-p7lczwr1bJ8/U0nVkOIbiaI/AAAAAAAAAOo/nomZ8GlFWWk/s150/Don+Draper+.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "veb"
Expires: Thu, 24 Nov 2022 04:03:51 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Don Draper .jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 23 Nov 2022 04:03:51 GMT
Server: fife
Content-Length: 3636
X-XSS-Protection: 0
3.bp.blogspot.com/-eJil1F3LxAw/U0rbIiX0RHI/AAAAAAAAAPQ/yoSB82RUZHc/s150/Alpha+Male+Body+language+Tips+.jpeg
142.250.74.161200 OK 6.1 kB URL HTTP/1.1 3.bp.blogspot.com/-eJil1F3LxAw/U0rbIiX0RHI/AAAAAAAAAPQ/yoSB82RUZHc/s150/Alpha+Male+Body+language+Tips+.jpeg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 150x100, components 3\012- data
Hash d8b1855afbc67ac43153d9855f306ab4
0d3e1f9d354469f0009741483f3475e055e84997
3fcc688ac5073a8a231f25ad039735ff0908e788af1c57b0dc2e81bb080b45b0
GET /-eJil1F3LxAw/U0rbIiX0RHI/AAAAAAAAAPQ/yoSB82RUZHc/s150/Alpha+Male+Body+language+Tips+.jpeg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "vf5"
Expires: Thu, 24 Nov 2022 04:03:51 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Alpha Male Body language Tips .jpeg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 23 Nov 2022 04:03:51 GMT
Server: fife
Content-Length: 6051
X-XSS-Protection: 0
3.bp.blogspot.com/-B-gKgJZeyts/U_H0WB1IxnI/AAAAAAAAAXk/HGWPLn1rP8s/s150/alpha%2Bmale%2Bdating%2Btips%2B.jpg
142.250.74.161200 OK 6.1 kB URL HTTP/1.1 3.bp.blogspot.com/-B-gKgJZeyts/U_H0WB1IxnI/AAAAAAAAAXk/HGWPLn1rP8s/s150/alpha%2Bmale%2Bdating%2Btips%2B.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 104x150, components 3\012- data
Hash ec406b3e5013cc3d5a8804195af6b335
e56a2e8d8f2c9e7173f5fb0f60a836ff4f92b919
d39a020991954937555c2391913bf7e2d44700e493fed27d25d8cbdf5c68e3c2
GET /-B-gKgJZeyts/U_H0WB1IxnI/AAAAAAAAAXk/HGWPLn1rP8s/s150/alpha%2Bmale%2Bdating%2Btips%2B.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v17a"
Expires: Thu, 24 Nov 2022 04:03:51 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="alpha male dating tips .jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 23 Nov 2022 04:03:51 GMT
Server: fife
Content-Length: 6104
X-XSS-Protection: 0
1.bp.blogspot.com/-V17p1XslG4k/U0GrU-EGv2I/AAAAAAAAAOA/E0Fj_bTlj0w/s150/Alpha+Male+Seduction++.JPG
142.250.74.161200 OK 7.6 kB URL HTTP/1.1 1.bp.blogspot.com/-V17p1XslG4k/U0GrU-EGv2I/AAAAAAAAAOA/E0Fj_bTlj0w/s150/Alpha+Male+Seduction++.JPG
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 150x103, components 3\012- data
Hash ecb2317e738b2a2f307a38f6b3f2f8db
8e48d61c61c1ad2daf24dffaf583243a6962e555
a73e4714e042c50ca03ccd7c03843d89e29b40074c2d385650f9aacc0f3d37d3
GET /-V17p1XslG4k/U0GrU-EGv2I/AAAAAAAAAOA/E0Fj_bTlj0w/s150/Alpha+Male+Seduction++.JPG HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="Alpha Male Seduction .JPG"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 7607
X-XSS-Protection: 0
Date: Wed, 23 Nov 2022 04:03:51 GMT
Expires: Mon, 21 Nov 2022 02:52:21 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "ve1"
Content-Type: image/jpeg
Age: 0
4.bp.blogspot.com/-S5qDsiol0fg/Uz8ARjNQ_KI/AAAAAAAAAL4/zcmTRLwzTSo/s150/Questions-to-Ask-Yourself-Every-Day-for-a-Happier-Life.jpg
142.250.74.161200 OK 4.4 kB URL HTTP/1.1 4.bp.blogspot.com/-S5qDsiol0fg/Uz8ARjNQ_KI/AAAAAAAAAL4/zcmTRLwzTSo/s150/Questions-to-Ask-Yourself-Every-Day-for-a-Happier-Life.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google, copyright=Bigstock\302\256], baseline, precision 8, 150x96, components 3\012- data
Hash 5d1fcda9d3a93d224df179e94386955d
79a0bd36700787603c6871e9879857d2b55cf486
2c9cc1286e4ce4a4fc558122a77e2806ba5facbc69a04640985c8a5304c18916
GET /-S5qDsiol0fg/Uz8ARjNQ_KI/AAAAAAAAAL4/zcmTRLwzTSo/s150/Questions-to-Ask-Yourself-Every-Day-for-a-Happier-Life.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "vbf"
Expires: Thu, 24 Nov 2022 04:03:51 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Questions-to-Ask-Yourself-Every-Day-for-a-Happier-Life.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 23 Nov 2022 04:03:51 GMT
Server: fife
Content-Length: 4401
X-XSS-Protection: 0
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 585eab785e44953b9e6d7c389024ff3e
57582825e9a285177f38cd2fa868ad3a8eab85d1
f1c62af1e27c8510576adcb62b28be35f290d2ee71e873f7000c194980522e80
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:03:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 585eab785e44953b9e6d7c389024ff3e
57582825e9a285177f38cd2fa868ad3a8eab85d1
f1c62af1e27c8510576adcb62b28be35f290d2ee71e873f7000c194980522e80
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:03:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp2.globalsign.com/gsalphasha2g2
104.18.20.226200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP 104.18.20.226:0
Hash a9a163f8eba3fc1be140340a133faef3
84652a1243623c462280d8fb3d4f52743e0e28ed
c1c6c7f0ea37a86a5872fed70744ccf98fe963d007a358ce0155bdeeb0ba4d5b
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 04:03:51 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Sun, 27 Nov 2022 02:23:07 GMT
ETag: "84652a1243623c462280d8fb3d4f52743e0e28ed"
Last-Modified: Wed, 23 Nov 2022 02:23:08 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 802
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76e704776ad4b4ed-OSL
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 840d8ca56b39793bb2250147bda0cf38
cb8c2a5fc6529b25a7c9c095e189781d306b1e68
63cdfbe5defd895be6f14c04a74af3f306c1442a1e84d88437f94f47d3859978
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 04:03:51 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 21 Nov 2022 00:20:48 GMT
Expires: Mon, 28 Nov 2022 00:20:47 GMT
Etag: "cb8c2a5fc6529b25a7c9c095e189781d306b1e68"
Cache-Control: max-age=418015,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76e70477480db4e8-OSL
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 471 B IP 142.250.74.35:0
Hash 523634f5e33b64d08c05415ca377b336
27750bceb120328cf37f0a053115a9b216890885
79be1cbfccc032a1e2ac97b84217f00466649b5a715df45ece301eb3b5b94dc1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:03:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 68ab5865b415e2e421a4eaa3a206ce0e
fa492d5a66e9d07ffdc14b3d8e11f0cdc27aed87
10298e9120db56a4aeaf950d2fa25af662172358e534aa5fa6d4af8ab53ce146
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:03:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
yt3.ggpht.com/ytc/AMLnZu9nHG6-AY1e4YCVNqsM6B316YkGp2jIpU2tXnE82w=s48-c-k-c0x00ffffff-no-rj
142.250.74.161200 OK 1.3 kB URL HTTP/2 yt3.ggpht.com/ytc/AMLnZu9nHG6-AY1e4YCVNqsM6B316YkGp2jIpU2tXnE82w=s48-c-k-c0x00ffffff-no-rj
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 48x48, components 3\012- data
Hash 86f624812975997401d27cffc81ba519
df864880e66ce207dcb44772f5e9802a9e2e15a7
f8c219efd19e742159dfb087a8ad18d380f9c6332b42a5682072d7e1aded541e
GET /ytc/AMLnZu9nHG6-AY1e4YCVNqsM6B316YkGp2jIpU2tXnE82w=s48-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 1305
x-xss-protection: 0
date: Wed, 23 Nov 2022 04:03:51 GMT
expires: Sat, 19 Nov 2022 13:02:14 GMT
cache-control: public, max-age=86400, no-transform
etag: "v9b"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 0a5ad626d1ba8ddd7c0d24d20b7a0eab
2a098b38e5c91e4b3e6e92a567d36aa1c136ed39
f8e0672f400ed58bf505419f3b5b0ce9f78ae8087c905319d8830be950e1931b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:03:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dcba.popcash.net/znWaa3gu
50.16.142.183204 No Content 0 B URL HTTP/2 dcba.popcash.net/znWaa3gu
IP 50.16.142.183:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /znWaa3gu HTTP/1.1
Host: dcba.popcash.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://alphamaletraits.blogspot.com
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Wed, 23 Nov 2022 04:03:51 GMT
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash ed3ae8e878b9c8c9c5fc3ab22d8547d6
e4d08dc74fa84a3bcc9d442e225e8f7a6c124822
e135b6fb23500cb2edbf836719ed450cdb6b1e86b7c8491289cb4e1ccbd9ce84
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:03:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ssl.gstatic.com/accounts/o/1832714284-postmessagerelay.js
142.250.74.99200 OK 4.3 kB URL HTTP/2 ssl.gstatic.com/accounts/o/1832714284-postmessagerelay.js
IP 142.250.74.99:0
File type ASCII text, with very long lines (2267)
Hash 3f7502705229ccec9d066c5cd75e6c31
ede1663155afaa5a5213d075e6295c6d839b05c3
2be5113d3022d1819a19f327235d287a2538a03741fc08ccd9d55cc1d78b6282
GET /accounts/o/1832714284-postmessagerelay.js HTTP/1.1
Host: ssl.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://accounts.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/federated-signon-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="federated-signon-mpm-access"
report-to: {"group":"federated-signon-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/federated-signon-mpm-access"}]}
content-length: 4294
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 10:55:51 GMT
expires: Wed, 22 Nov 2023 10:55:51 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 19 Nov 2022 03:11:36 GMT
content-type: text/javascript
age: 61680
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
alphamaletraits.blogspot.com/feeds/posts/default/-/Spend%20Less%20Money%20Eating%20At%20Restaurants?alt=json-in-script&max-results=3&callback=jQuery1110048188591464226693_1669176230037&_=1669176230038
142.250.74.161200 OK 12 kB URL HTTP/1.1 alphamaletraits.blogspot.com/feeds/posts/default/-/Spend%20Less%20Money%20Eating%20At%20Restaurants?alt=json-in-script&max-results=3&callback=jQuery1110048188591464226693_1669176230037&_=1669176230038
IP 142.250.74.161:0
File type Unicode text, UTF-8 text, with very long lines (45058)
Hash 40a0ab315ab64310c8b8eb1683009cce
2759562a6ab41eb3a06bca8665613a2ee22069f9
375e38afe73af2d2c66009693cb69a3487441db6e6b9f438ee5ceaf2fd8ca6a0
GET /feeds/posts/default/-/Spend%20Less%20Money%20Eating%20At%20Restaurants?alt=json-in-script&max-results=3&callback=jQuery1110048188591464226693_1669176230037&_=1669176230038 HTTP/1.1
Host: alphamaletraits.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/2015/10/how-to-spend-less-money-eating-at.html
Cookie: sc_is_visitor_unique=rx9666362.1669176231.390BB2B96D5C4F4A7AF964332C2B0299.1.1.1.1.1.1.1.1.1
HTTP/1.1 200 OK
Cross-Origin-Resource-Policy: cross-origin
ETag: W/"c3817b0675a4e83426c461f0eb95a2095b84554adbc9650be3222568309127bf"
Date: Wed, 23 Nov 2022 04:03:51 GMT
Content-Type: text/javascript; charset=UTF-8
Server: blogger-renderd
Expires: Wed, 23 Nov 2022 04:03:52 GMT
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Last-Modified: Tue, 08 Nov 2022 02:46:03 GMT
Content-Encoding: gzip
Content-Length: 12472
X-Frame-Options: SAMEORIGIN
ssl.gstatic.com/s2/oz/images/stars/po/bubblev1/border_3.gif
142.250.74.99200 OK 43 B URL HTTP/2 ssl.gstatic.com/s2/oz/images/stars/po/bubblev1/border_3.gif
IP 142.250.74.99:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash f6815f3311f2ad7bacb9c9156b5151bb
4042dfd5b2a00af6857acf15e63dc0672592e7d6
c8de81a1acb5f3788959ecc04eaa6526d5bdb29991157cecbef71042268c0374
GET /s2/oz/images/stars/po/bubblev1/border_3.gif HTTP/1.1
Host: ssl.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 43
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Nov 2022 06:41:06 GMT
expires: Fri, 17 Nov 2023 06:41:06 GMT
cache-control: public, max-age=31536000
age: 508965
last-modified: Thu, 03 Oct 2019 10:15:00 GMT
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ssl.gstatic.com/s2/oz/images/stars/po/bubblev1/spacer.gif
142.250.74.99200 OK 43 B URL HTTP/2 ssl.gstatic.com/s2/oz/images/stars/po/bubblev1/spacer.gif
IP 142.250.74.99:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d44ebb7184c776b663f036174faa361a
53a278eedce146c3a979d190af4affaec3d7cfeb
ed1b73c6b4690cde9b521865b58e031293209bc0b2ba2b5716ecf4bf9885ee4b
GET /s2/oz/images/stars/po/bubblev1/spacer.gif HTTP/1.1
Host: ssl.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 43
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 19 Nov 2022 01:26:42 GMT
expires: Sun, 19 Nov 2023 01:26:42 GMT
cache-control: public, max-age=31536000
age: 355029
last-modified: Thu, 03 Oct 2019 10:15:00 GMT
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bdv.bidvertiser.com/BidVertiser.dbm?pid=558468&bid=1855359&RD=87524820833038&DIF=1&bd_ref_v=alphamaletraits.blogspot.com&tref=1&win_name=null&docref=&jsrand=87524820833038&js1loc=-&loctitle=YOUR%20KEYWORDS%20HERE
54.241.51.109200 OK 20 kB URL HTTP/1.1 bdv.bidvertiser.com/BidVertiser.dbm?pid=558468&bid=1855359&RD=87524820833038&DIF=1&bd_ref_v=alphamaletraits.blogspot.com&tref=1&win_name=null&docref=&jsrand=87524820833038&js1loc=-&loctitle=YOUR%20KEYWORDS%20HERE
IP 54.241.51.109:0
Hash 99c3eff72a0f2525ad0afc9c5ce7f354
c52155c87114e451f73f699d5350c4afcef98acd
4797a37a3e653e93a58ed2b293df7e6ba2fd3fe53679408ad58a94d64d21d32a
GET /BidVertiser.dbm?pid=558468&bid=1855359&RD=87524820833038&DIF=1&bd_ref_v=alphamaletraits.blogspot.com&tref=1&win_name=null&docref=&jsrand=87524820833038&js1loc=-&loctitle=YOUR%20KEYWORDS%20HERE HTTP/1.1
Host: bdv.bidvertiser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wednesday, 23-Nov-2022 04:03:50 GMT
Cache-Control: no-store
Last-Modified: Tuesday, 23-Nov-2021 04:03:50 GMT
P3P: policyref="http://www.bidvertiser.com/bdv/bidvertiser/p3p.xml", CP="NOI DEV PSA PSD IVA OTP OUR OTR IND OTC"
Content-Type: text/html; charset=utf-8
Content-Len: 333
CONNECTION: Close
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash ed3ae8e878b9c8c9c5fc3ab22d8547d6
e4d08dc74fa84a3bcc9d442e225e8f7a6c124822
e135b6fb23500cb2edbf836719ed450cdb6b1e86b7c8491289cb4e1ccbd9ce84
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:03:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ssl.gstatic.com/s2/oz/images/stars/po/bubblev1/border_3.gif
142.250.74.99200 OK 43 B URL HTTP/1.1 ssl.gstatic.com/s2/oz/images/stars/po/bubblev1/border_3.gif
IP 142.250.74.99:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash f6815f3311f2ad7bacb9c9156b5151bb
4042dfd5b2a00af6857acf15e63dc0672592e7d6
c8de81a1acb5f3788959ecc04eaa6526d5bdb29991157cecbef71042268c0374
GET /s2/oz/images/stars/po/bubblev1/border_3.gif HTTP/1.1
Host: ssl.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"
Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
Content-Length: 43
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 17 Nov 2022 21:44:26 GMT
Expires: Fri, 17 Nov 2023 21:44:26 GMT
Cache-Control: public, max-age=31536000
Age: 454765
Last-Modified: Thu, 03 Oct 2019 10:15:00 GMT
Content-Type: image/gif
accounts.google.com/o/oauth2/postmessageRelay?parent=http%3A%2F%2Falphamaletraits.blogspot.com&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.geaHZXF2-fw.O%2Fd%3D1%2Frs%3DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ%2Fm%3D__features__
216.58.207.237200 OK 473 B URL HTTP/2 accounts.google.com/o/oauth2/postmessageRelay?parent=http%3A%2F%2Falphamaletraits.blogspot.com&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.geaHZXF2-fw.O%2Fd%3D1%2Frs%3DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ%2Fm%3D__features__
IP 216.58.207.237:0
Hash 7a418193d9cb5856ed22c9783b9524c4
efe8daae84f04d0a73117452b403a4f2d08eaef6
ffd20d2e0dfdfa99da82f6094e45c27182c70f59e148c7488ce21ae7a8fc0fea
GET /o/oauth2/postmessageRelay?parent=http%3A%2F%2Falphamaletraits.blogspot.com&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.geaHZXF2-fw.O%2Fd%3D1%2Frs%3DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ%2Fm%3D__features__ HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 23 Nov 2022 04:03:51 GMT
content-security-policy: require-trusted-types-for 'script';report-uri /o/cspreport, script-src 'nonce-v7EhuYgeu5BJZhIdq39JaA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /o/cspreport
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ssl.gstatic.com/s2/oz/images/stars/po/bubblev1/bubbleSprite_3.png
142.250.74.99200 OK 318 B URL HTTP/1.1 ssl.gstatic.com/s2/oz/images/stars/po/bubblev1/bubbleSprite_3.png
IP 142.250.74.99:0
File type PNG image data, 39 x 33, 8-bit colormap, non-interlaced\012- data
Hash 117295a03bf8194590ad92d6f044b4a6
6f6ef687b76a7579d8fb17f1e9a39005f76a753b
232334d177f358c07f8271994e6fc0c018abfce7c8910deb604de1440d741c45
GET /s2/oz/images/stars/po/bubblev1/bubbleSprite_3.png HTTP/1.1
Host: ssl.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"
Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
Content-Length: 318
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sun, 20 Nov 2022 22:52:28 GMT
Expires: Mon, 20 Nov 2023 22:52:28 GMT
Cache-Control: public, max-age=31536000
Age: 191483
Last-Modified: Thu, 03 Oct 2019 10:15:00 GMT
Content-Type: image/png
ssl.gstatic.com/s2/oz/images/stars/po/bubblev1/bubbleDropB_3.png
142.250.74.99200 OK 117 B URL HTTP/1.1 ssl.gstatic.com/s2/oz/images/stars/po/bubblev1/bubbleDropB_3.png
IP 142.250.74.99:0
File type PNG image data, 1 x 5, 4-bit colormap, non-interlaced\012- data
Hash 91f7f433b47f76d152ac4dc8cbb8324e
ffce61c56ddbfaf6c2d02d3bb2dcda9b49bee460
984601230d8cbfe18370425e8e897037cc1a7adf831a691a9ede573cf44479d4
GET /s2/oz/images/stars/po/bubblev1/bubbleDropB_3.png HTTP/1.1
Host: ssl.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"
Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
Content-Length: 117
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 22 Nov 2022 06:00:49 GMT
Expires: Wed, 22 Nov 2023 06:00:49 GMT
Cache-Control: public, max-age=31536000
Age: 79382
Last-Modified: Thu, 03 Oct 2019 10:15:00 GMT
Content-Type: image/png
cdn.chitika.net/getads.js
143.204.55.6301 Moved Permanently 167 B URL HTTP/1.1 cdn.chitika.net/getads.js
IP 143.204.55.6:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /getads.js HTTP/1.1
Host: cdn.chitika.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Wed, 23 Nov 2022 04:03:52 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://cdn.chitika.net/getads.js
X-Cache: Redirect from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ziyrHh8Mr3JxzlfeuIpKjmM7Gtf2QCTLwoX3V9Ln4By_QFBZ0QojHQ==
s7.addthis.com/js/300/addthis_widget.js
23.38.200.123308 Permanent Redirect 171 B URL HTTP/1.1 s7.addthis.com/js/300/addthis_widget.js
IP 23.38.200.123:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3c417e9efbcaeb3bf7e7df75cf3b22fd
00465aec6b8ec302eae8abb99678fc5c09c3f343
21bd143d38dbbae427615a7266a86a18dc95c417f3e510632d7a9180d98d3571
GET /js/300/addthis_widget.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 308 Permanent Redirect
Server: nginx/1.15.8
Content-Type: text/html
Content-Length: 171
Location: https://s7.addthis.com/js/300/addthis_widget.js
Date: Wed, 23 Nov 2022 04:03:52 GMT
Connection: keep-alive
X-Distribution: 99
X-Host: s7.addthis.com
resources.infolinks.com/js/1834.006-3.025/ice.js
172.66.41.9200 OK 58 kB URL HTTP/1.1 resources.infolinks.com/js/1834.006-3.025/ice.js
IP 172.66.41.9:0
File type ASCII text, with very long lines (32032)
Hash 1698667e847afd8f082edbb3d0595394
dff61e0f2e3d72c6a17bb5311c3213b57497bd1d
a1484d67231f0bfdb41d6f0cbe3e9ecb172b782353d858e8fb6b95e146ecd394
GET /js/1834.006-3.025/ice.js HTTP/1.1
Host: resources.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 04:03:52 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 17 Nov 2022 11:52:12 GMT
ETag: W/"2dae0-5eda9383fbfdf"
Cache-Control: max-age=2592000
Expires: Fri, 23 Dec 2022 02:46:06 GMT
Via: 1.1 google
CF-Cache-Status: HIT
Age: 4666
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76e7047a7f2bb4eb-OSL
Content-Encoding: gzip
alphamaletraits.blogspot.com/2015/10/how-to-transform-your-life-in-less-than.html
142.250.74.161200 OK 51 kB URL HTTP/1.1 alphamaletraits.blogspot.com/2015/10/how-to-transform-your-life-in-less-than.html
IP 142.250.74.161:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (2771)
Hash 6790f787d6d36cb22bf7b2ed38c34b94
4368d39f7499eca3bd5cb5c4cb2367ad8898bbe9
a6d2102e99245f42e0858195717b795270ddcc357c61401b86a49e6ade6bcf4b
Analyzer Verdict Alert fortinet Malware
GET /2015/10/how-to-transform-your-life-in-less-than.html HTTP/1.1
Host: alphamaletraits.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/2015/10/how-to-spend-less-money-eating-at.html
Cookie: sc_is_visitor_unique=rx9666362.1669176231.390BB2B96D5C4F4A7AF964332C2B0299.1.1.1.1.1.1.1.1.1; _ga=GA1.3.1551348380.1669176231; _gid=GA1.3.1684280444.1669176231; _gat=1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Wed, 23 Nov 2022 04:03:51 GMT
Date: Wed, 23 Nov 2022 04:03:51 GMT
Cache-Control: private, max-age=0
Last-Modified: Tue, 08 Nov 2022 02:46:03 GMT
ETag: W/"574bb0f83ded66c5eed3d759e64c13c5be62c70878325ad402f9175a41e75414"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 50921
Server: GSE
s7.addthis.com/js/300/addthis_widget.js
23.38.200.123200 OK 116 kB URL HTTP/2 s7.addthis.com/js/300/addthis_widget.js
IP 23.38.200.123:0
File type ASCII text, with very long lines (54602)
Size 116 kB (116325 bytes)
Hash ff4671f71c958029bbf6d9694284da70
7535744f2dbaf99902a54fc529e760b08a73f265
123f781673b2e45e18df36b64984674f489a5f3541c69e295f01f554b8d3c738
GET /js/300/addthis_widget.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://alphamaletraits.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/javascript
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-5834c"
cache-control: public, max-age=600
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 116325
date: Wed, 23 Nov 2022 04:03:52 GMT
vary: Accept-Encoding
x-distribution: 99
x-host: s7.addthis.com
X-Firefox-Spdy: h2
connect.facebook.net/en_US/all.js
157.240.200.14200 OK 1.7 kB URL HTTP/1.1 connect.facebook.net/en_US/all.js
IP 157.240.200.14:0
File type ASCII text, with very long lines (1957)
Hash 4dd4c9661265ea0d71b14bd3be73ab9c
fe5d34164a6bc13cc3b842357e4ec15f5c385b1c
893feb51e841d40baa44580aacc18e5bee8f01df627c49842e3da8a8ab07b6d0
GET /en_US/all.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Expose-Headers: X-FB-Content-MD5
x-fb-content-md5: 435e8a46a92ecb91345b5f41ef45eb84
ETag: "2eea83c178a84b968cebda88f6670f9f"
Content-Type: application/x-javascript; charset=utf-8
timing-allow-origin: *
Access-Control-Allow-Origin: *
cross-origin-resource-policy: cross-origin
Expires: Wed, 23 Nov 2022 04:21:54 GMT
Cache-Control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
X-Content-Type-Options: nosniff
x-fb-rlafr: 0
X-Frame-Options: DENY
Strict-Transport-Security: max-age=31536000; preload; includeSubDomains
Content-MD5: TdTJZhJl6g1xsUvTvnOrnA==
X-FB-Debug: fjKz5c2QnC4AEcO4DeN0+O6PwwGSo+upa5l1TlgiweivdTz2oEyhFdYXfY9Lqsh10IBzYSdrVXUeflvORSNjXw==
Priority: u=3,i
X-FB-TRIP-ID: 1679558926
Date: Wed, 23 Nov 2022 04:03:52 GMT
Alt-Svc: h3=":443"; ma=86400
Connection: keep-alive
Content-Length: 1686
d2b9l3u54v5v39.cloudfront.net/css/248x298.css?cbst=2
54.230.245.149200 OK 2.8 kB URL HTTP/1.1 d2b9l3u54v5v39.cloudfront.net/css/248x298.css?cbst=2
IP 54.230.245.149:0
File type ASCII text, with CRLF line terminators
Hash f020440d7f52ee37d70575b0cd5e5b24
82e5372b0edc7d3f383460166f8e0f1e6280aa81
a2df6be8c0eb6d9e62a747d71755fdb0251668c571c984d040d7d6108ffaa5ef
GET /css/248x298.css?cbst=2 HTTP/1.1
Host: d2b9l3u54v5v39.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bdv.bidvertiser.com/
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 2817
Connection: keep-alive
Last-Modified: Thu, 18 Jan 2018 16:20:30 GMT
Accept-Ranges: bytes
Server: Microsoft-IIS/10.0
Date: Wed, 23 Nov 2022 00:25:33 GMT
ETag: "183bf427890d31:0"
X-Cache: Hit from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Ts6EtAOrTW8ycwhhjh7J-rrKuYDGfj3Wyi_hJe9MJhSyhCmZuQyHxg==
Age: 13099
d2b9l3u54v5v39.cloudfront.net/css/default.css
54.230.245.149200 OK 1.5 kB URL HTTP/1.1 d2b9l3u54v5v39.cloudfront.net/css/default.css
IP 54.230.245.149:0
File type ASCII text, with CRLF line terminators
Hash 8ea20baef891abad5a169261301f1b0d
b983c5b36da773d38fc2d9d56fb1e462080ac0f8
27306e4a14ab04d39e59d9d73d6fac0fca90bbab3da5d9358c0000b9119c90af
GET /css/default.css HTTP/1.1
Host: d2b9l3u54v5v39.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bdv.bidvertiser.com/
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 1489
Connection: keep-alive
Last-Modified: Mon, 21 Sep 2015 08:25:40 GMT
Accept-Ranges: bytes
Server: Microsoft-IIS/10.0
Date: Tue, 22 Nov 2022 07:35:23 GMT
ETag: "70d0ec1947f4d01:0"
X-Cache: Hit from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Odeggkwp2xP7XqpH8HaAbBXzyys0nm5Gp04oM5TofEP9IKTO4MeBXw==
Age: 73709
bdv.bidvertiser.com/BidVertiser.dbm?pid=558468&bid=1801988&RD=9414380824329&DIF=1&bd_ref_v=alphamaletraits.blogspot.com&tref=1&win_name=null&docref=&jsrand=9414380824329&js1loc=-&loctitle=YOUR%20KEYWORDS%20HERE
54.241.51.109200 OK 6.5 kB URL HTTP/1.1 bdv.bidvertiser.com/BidVertiser.dbm?pid=558468&bid=1801988&RD=9414380824329&DIF=1&bd_ref_v=alphamaletraits.blogspot.com&tref=1&win_name=null&docref=&jsrand=9414380824329&js1loc=-&loctitle=YOUR%20KEYWORDS%20HERE
IP 54.241.51.109:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (405), with CRLF, LF line terminators
Hash d8486e9bcf0f3f4a813fb1fe758e0679
81d2f74c7491e2d26e94e72563812db9950b37a1
153781f8f7fc9fe6ae344a2b24822f2646b6532a9fddf1cf6f4579ede9ceed6d
GET /BidVertiser.dbm?pid=558468&bid=1801988&RD=9414380824329&DIF=1&bd_ref_v=alphamaletraits.blogspot.com&tref=1&win_name=null&docref=&jsrand=9414380824329&js1loc=-&loctitle=YOUR%20KEYWORDS%20HERE HTTP/1.1
Host: bdv.bidvertiser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wednesday, 23-Nov-2022 04:03:52 GMT
Cache-Control: no-store
Last-Modified: Tuesday, 23-Nov-2021 04:03:52 GMT
Set-Cookie: bdv_c11p=244; domain=.bidvertiser.com; path=/; expires=Thu, 24-Nov-2022 04:03:52 GMT
bdv_c11p=1_1_1; domain=.bidvertiser.com; path=/; expires=Thu, 24-Nov-2022 04:03:52 GMT
P3P: policyref="http://www.bidvertiser.com/bdv/bidvertiser/p3p.xml", CP="NOI DEV PSA PSD IVA OTP OUR OTR IND OTC"
Content-Type: text/html; charset=utf-8
Content-Len: 5319
CONNECTION: Close
alphamaletraits.blogspot.com/favicon.ico
142.250.74.161200 OK 409 B URL HTTP/1.1 alphamaletraits.blogspot.com/favicon.ico
IP 142.250.74.161:0
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash d7e202d6052be1753514b63bf999912e
e0e3c2246afde4198927f21a2f9b10685cfa29be
79c42fc92db7564387d3d2a1b00d548db2eb189203644a7afef51f797011c3a5
GET /favicon.ico HTTP/1.1
Host: alphamaletraits.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/2015/10/how-to-spend-less-money-eating-at.html
Cookie: sc_is_visitor_unique=rx9666362.1669176231.390BB2B96D5C4F4A7AF964332C2B0299.1.1.1.1.1.1.1.1.1; _ga=GA1.3.1551348380.1669176231; _gid=GA1.3.1684280444.1669176231; _gat=1
HTTP/1.1 200 OK
Content-Type: image/x-icon
Expires: Wed, 23 Nov 2022 04:03:52 GMT
Date: Wed, 23 Nov 2022 04:03:52 GMT
Cache-Control: private, max-age=86400
Last-Modified: Tue, 08 Nov 2022 02:46:03 GMT
ETag: W/"574bb0f83ded66c5eed3d759e64c13c5be62c70878325ad402f9175a41e75414"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 409
Server: GSE
alphamaletraits.blogspot.com/2015/10/darren-hardys-most-popular-success.html
142.250.74.161200 OK 48 kB URL HTTP/1.1 alphamaletraits.blogspot.com/2015/10/darren-hardys-most-popular-success.html
IP 142.250.74.161:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2771)
Hash 36a4902e0e8b2f6cc13dbb042dd7c3fe
6fedf46bebdab44f1993b6b99d3ea423c9fa3758
9b99bc7dea8d8aa9389137e3316226b55e0b0893b1cd66aebecd2595d84bdb3d
Analyzer Verdict Alert fortinet Malware
GET /2015/10/darren-hardys-most-popular-success.html HTTP/1.1
Host: alphamaletraits.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/2015/10/how-to-spend-less-money-eating-at.html
Cookie: sc_is_visitor_unique=rx9666362.1669176231.390BB2B96D5C4F4A7AF964332C2B0299.1.1.1.1.1.1.1.1.1; _ga=GA1.3.1551348380.1669176231; _gid=GA1.3.1684280444.1669176231; _gat=1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Wed, 23 Nov 2022 04:03:51 GMT
Date: Wed, 23 Nov 2022 04:03:51 GMT
Cache-Control: private, max-age=0
Last-Modified: Tue, 08 Nov 2022 02:46:03 GMT
ETag: W/"574bb0f83ded66c5eed3d759e64c13c5be62c70878325ad402f9175a41e75414"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 48418
Server: GSE
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash a2cc21e2248758db1a942dfe612c2d2a
07bf7a6aa73ce334fc5facbc9eba1d1d2939a661
db9f71ca2516f25200ee836da69116ff01da443664375ff3c794d0a61e945edf
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 04:03:52 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 20 Nov 2022 12:04:30 GMT
Expires: Sun, 27 Nov 2022 12:04:29 GMT
Etag: "07bf7a6aa73ce334fc5facbc9eba1d1d2939a661"
Cache-Control: max-age=373836,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76e7047b4a48b4e8-OSL
z.moatads.com/addthismoatframe568911941483/moatframe.js
23.38.201.146200 OK 948 B URL HTTP/2 z.moatads.com/addthismoatframe568911941483/moatframe.js
IP 23.38.201.146:0
File type ASCII text, with very long lines (523)
Hash f14b4e1f799b14f798a195f43cf58376
b6fd3b3d407fb4c0a00fb8a31862235e2a6e0a86
92ed3e9fda5fa4d738ff4d9023846b56633617363dda6a750cacb4fba53241ac
GET /addthismoatframe568911941483/moatframe.js HTTP/1.1
Host: z.moatads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: e0HboiVQpjIDEK8WTxqU5+8G8wOtu9bNCFY72alTHLP0/Yb+qoiTOxu6fad89ebRofzHxENxOOg=
x-amz-request-id: 61EC92F13BB22DD4
last-modified: Fri, 08 Nov 2019 20:13:52 GMT
etag: "f14b4e1f799b14f798a195f43cf58376"
content-encoding: gzip
accept-ranges: bytes
content-type: application/x-javascript
content-length: 948
server: AmazonS3
vary: Accept-Encoding
cache-control: max-age=34910
date: Wed, 23 Nov 2022 04:03:52 GMT
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash a23d14e29a03340350eedf7deeb335be
34645a7b8af30e7e80820ccf7d3e12ae2c562c81
10aac9bb1946b24c335f10fbe1c0a83c10ed95a6503d97a5eb510107214741e5
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 04:03:52 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 20 Nov 2022 04:30:34 GMT
Expires: Sun, 27 Nov 2022 04:30:33 GMT
Etag: "34645a7b8af30e7e80820ccf7d3e12ae2c562c81"
Cache-Control: max-age=346600,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76e7047abf500b39-OSL
router.infolinks.com/usync/manage?pid=2489734&wsid=0&pdom=alphamaletraits.blogspot.com&purl=http%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html
172.66.41.9200 OK 0 B URL HTTP/2 router.infolinks.com/usync/manage?pid=2489734&wsid=0&pdom=alphamaletraits.blogspot.com&purl=http%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html
IP 172.66.41.9:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usync/manage?pid=2489734&wsid=0&pdom=alphamaletraits.blogspot.com&purl=http%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 23 Nov 2022 04:03:52 GMT
content-length: 0
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 76e7047b2cf5b51e-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 0be3e3b6a55789993d7a1a175bb8e335
70e1b2ef23731397872aa67d3da9f97d40e4fad4
155e55bec061fd76dc2a73b570ebbac9ad17f22e95394c7bf96094a0729a7a54
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1316
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:03:52 GMT
Last-Modified: Wed, 23 Nov 2022 03:41:56 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
ocsp.sca1b.amazontrust.com/
143.204.42.88200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.88:0
Hash 33d9215c4dfcdce38759985cfd60ef16
224aba3a5ec5ec7e585169f2ab956d4ea3020362
d4f519ef5ffbbe67f898f14b74bbff1057ce389a0a110f92a21d893738689df6
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=157119
Date: Wed, 23 Nov 2022 04:03:52 GMT
Etag: "637d5e67-1d7"
Expires: Thu, 24 Nov 2022 23:42:31 GMT
Last-Modified: Tue, 22 Nov 2022 23:42:31 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: spA8Oarg2eY5ETlnn5rZb7gHAFEAamtbmvW7S_6ONGSX2lDedirVxA==
bdv.bidvertiser.com/BidVertiser.dbm?pid=558468&bid=1855359&RD=6765197495938&DIF=1&bd_ref_v=alphamaletraits.blogspot.com&tref=1&win_name=null&docref=&jsrand=6765197495938&js1loc=-&loctitle=YOUR%20KEYWORDS%20HERE
54.241.51.109200 OK 333 B URL HTTP/1.1 bdv.bidvertiser.com/BidVertiser.dbm?pid=558468&bid=1855359&RD=6765197495938&DIF=1&bd_ref_v=alphamaletraits.blogspot.com&tref=1&win_name=null&docref=&jsrand=6765197495938&js1loc=-&loctitle=YOUR%20KEYWORDS%20HERE
IP 54.241.51.109:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (333), with no line terminators
Hash fcb81ad08a21938e338db7fb1e89ae33
88aad2b790ca94286ca6f4f5cb28750c5915428b
a6746c5d7877986411f2a5b98c5e4ba5f841f8301f9ed5f6448c08b262c7485d
GET /BidVertiser.dbm?pid=558468&bid=1855359&RD=6765197495938&DIF=1&bd_ref_v=alphamaletraits.blogspot.com&tref=1&win_name=null&docref=&jsrand=6765197495938&js1loc=-&loctitle=YOUR%20KEYWORDS%20HERE HTTP/1.1
Host: bdv.bidvertiser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wednesday, 23-Nov-2022 04:03:51 GMT
Cache-Control: no-store
Last-Modified: Tuesday, 23-Nov-2021 04:03:51 GMT
P3P: policyref="http://www.bidvertiser.com/bdv/bidvertiser/p3p.xml", CP="NOI DEV PSA PSD IVA OTP OUR OTR IND OTC"
Content-Type: text/html; charset=utf-8
Content-Len: 333
CONNECTION: Close
c.adsco.re/
104.17.167.186200 OK 25 kB IP 104.17.167.186:0
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (689)
Hash c4372012627fbf5e7d2ba4762deeb8dc
466e1b728ec64f17c64ca7d33bf7f48aa769580c
d055fc1453cd49773a305009ea3d8c18492054c6d77cb9c3ae510df9d6f5ecba
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 23 Nov 2022 04:03:52 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Sat, 24 Dec 2022 04:03:52 GMT
etag: W/"n/ARilLrRVDeZNVpaPOsXg=="
cf-cache-status: HIT
age: 301482
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e7047b9c52b529-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
bdv.bidvertiser.com/BidVertiser.dbm?pid=558468%26bid=1855359&_=1669176230039
54.241.51.109200 OK 9.0 kB URL HTTP/1.1 bdv.bidvertiser.com/BidVertiser.dbm?pid=558468%26bid=1855359&_=1669176230039
IP 54.241.51.109:0
File type ASCII text, with CRLF line terminators
Hash 0d489677aaa27440619b64706f2cafe9
b87bf2207059e1db5a939e804c7e586e7b8ad125
0dab6095a7e07c26dc21102cfb0e3e81eda68ed0681d34b23719bd31bc188539
GET /BidVertiser.dbm?pid=558468%26bid=1855359&_=1669176230039 HTTP/1.1
Host: bdv.bidvertiser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Content-Type: text/javascript
Pragma: no-cache
Cache-Control: no-store
Expires: -1
Connection: close
Content-Length: 9014
c.adsco.re/
104.17.167.186200 OK 28 kB IP 104.17.167.186:0
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (689)
Hash 10a01aa4b1b98eaf84bbf379ae1e8a37
8fa47a75106dda08d76725d882fc80a4787a89e0
e7a5d2a6be0bdeed7f340c5da1d39049f8c6aab19ec273a016b4347a43106cf3
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 04:03:52 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=2678400
Accept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
Permissions-Policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
Link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
Expires: Sat, 24 Dec 2022 04:03:52 GMT
ETag: W/"n/ARilLrRVDeZNVpaPOsXg=="
Content-Encoding: gzip
CF-Cache-Status: HIT
Age: 301482
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76e7047c8eb01c0e-OSL
alt-svc: h2=":443"; ma=60
6.adsco.re/
104.17.167.186200 OK 0 B IP 104.17.167.186:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://alphamaletraits.blogspot.com
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 04:03:52 GMT
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: http://alphamaletraits.blogspot.com
Cache-Control: private, max-age=10
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Max-Age: 2592000
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76e7047c9837b527-OSL
alt-svc: h2=":443"; ma=60
connect.facebook.net/en_US/all.js?hash=fac933fb8bec15f40b4e5335bd668763
157.240.200.14200 OK 87 kB URL HTTP/2 connect.facebook.net/en_US/all.js?hash=fac933fb8bec15f40b4e5335bd668763
IP 157.240.200.14:0
File type ASCII text, with very long lines (18734)
Hash 2cf449d61ccc3a81828bfb306a14399e
339350e83e2d9dd5d61e8e8520232fe9dde892df
51df6ddd7b2004d9a21279d7c282a0d4f83172265414c2bf66f3d501fb779e6e
GET /en_US/all.js?hash=fac933fb8bec15f40b4e5335bd668763 HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://alphamaletraits.blogspot.com
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: d8611e84c3c4ac3a9d35ca6bf44a84f0
etag: "e682e48dae66a5dd03dd9deee4e0fa53"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Thu, 23 Nov 2023 03:05:21 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: LPRJ1hzMOoGCi/swahQ5ng==
x-fb-debug: UyJvywgaCRC2Tr6VW9KBI842L57tqogAJ9N+zGx/NHed3/BT6rqySZ7InpADYjSUB4wIBxrmlilA24ggdw9K4w==
content-length: 86731
x-fb-trip-id: 1679558926
date: Wed, 23 Nov 2022 04:03:52 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 0be3e3b6a55789993d7a1a175bb8e335
70e1b2ef23731397872aa67d3da9f97d40e4fad4
155e55bec061fd76dc2a73b570ebbac9ad17f22e95394c7bf96094a0729a7a54
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1316
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:03:52 GMT
Last-Modified: Wed, 23 Nov 2022 03:41:56 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
router.infolinks.com/gsd?evt=afterGSD&pid=2489734&wsid=0&pdom=alphamaletraits.blogspot.com&purl=http%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html&jsv=1834.006-3.025&_cb=16691762317800
172.66.41.9200 OK 0 B URL HTTP/1.1 router.infolinks.com/gsd?evt=afterGSD&pid=2489734&wsid=0&pdom=alphamaletraits.blogspot.com&purl=http%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html&jsv=1834.006-3.025&_cb=16691762317800
IP 172.66.41.9:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gsd?evt=afterGSD&pid=2489734&wsid=0&pdom=alphamaletraits.blogspot.com&purl=http%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html&jsv=1834.006-3.025&_cb=16691762317800 HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 04:03:52 GMT
Content-Length: 0
Connection: keep-alive
Via: 1.1 google
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76e7047bba12b4f9-OSL
4.adsco.re/
162.252.214.5200 OK 62 B IP 162.252.214.5:0
File type ASCII text, with no line terminators
Hash adde5febc7b5b6c2c759ec735cce83a0
77ec17be8a9970ff04663294d41c590d0d24fde4
ce2b9f2e5005195de7add565505005be6f2ef0d37521771e15106d1e1b9260ff
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://alphamaletraits.blogspot.com
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 04:03:52 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: http://alphamaletraits.blogspot.com
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash a2cc21e2248758db1a942dfe612c2d2a
07bf7a6aa73ce334fc5facbc9eba1d1d2939a661
db9f71ca2516f25200ee836da69116ff01da443664375ff3c794d0a61e945edf
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 04:03:52 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 20 Nov 2022 12:04:30 GMT
Expires: Sun, 27 Nov 2022 12:04:29 GMT
Etag: "07bf7a6aa73ce334fc5facbc9eba1d1d2939a661"
Cache-Control: max-age=373836,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76e7047bca77b4e8-OSL
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17199
Expires: Wed, 23 Nov 2022 08:50:31 GMT
Date: Wed, 23 Nov 2022 04:03:52 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17199
Expires: Wed, 23 Nov 2022 08:50:31 GMT
Date: Wed, 23 Nov 2022 04:03:52 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F02321462-ee42-483c-b25f-8e011f1a5f17.jpeg
34.120.237.76200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F02321462-ee42-483c-b25f-8e011f1a5f17.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3aa134e9259a4f258a832e223bcd5825
3648297257e246e7ec4541fef1ee549523c04f02
3abcd9f270d477b813f145b6c6ccc6c881c705a05976627762db58c4a1f4b76a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F02321462-ee42-483c-b25f-8e011f1a5f17.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8128
x-amzn-requestid: 0ba11562-ea07-4058-8d6e-ac079ce63ab0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCNLcEtgoAMFVVg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d8f15-3079e77022f090b112ae1804;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 03:10:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ymhH-B1HNHKAFHs6-zOa97ehcX4h1lV0ZLgVMoKNIdWfMpYQzy3g4w==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 03:26:08 GMT
age: 2264
etag: "3648297257e246e7ec4541fef1ee549523c04f02"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 481c033b9ffd030ff0de6e35cf788b47
85d3baad9217af2b5d75c019d2ef95dbb919a788
02443c7869914c2b29892deb0c645395bcf4e8379da3cf20974614ff9c92893b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11249
x-amzn-requestid: 65a3db77-b2e6-40b9-a776-021c2e9b56d0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bubSsHbZoAMFZNg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6375a5aa-1286b97968cc2e4c7fe8ab29;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 03:08:26 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: iGM_HV13dzz5eOswbOJfjj14jlFW4jy2YsW7eJumS_TM5TxxG8VMwQ==
via: 1.1 38eecd3ca21bf068d69a2f9cfe668d14.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 03:49:13 GMT
age: 879
etag: "85d3baad9217af2b5d75c019d2ef95dbb919a788"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d582ed2-f829-4647-9113-832d4500a207.jpeg
34.120.237.76200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d582ed2-f829-4647-9113-832d4500a207.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6d2c986e076309d51d199332caebb07a
343a5bfba0f8fec28f9345f276b44f44c6eaf6a6
64e6fba6a45c70c1db6040a2273472774c00257bef373cc45b6ca00cb819681a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d582ed2-f829-4647-9113-832d4500a207.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9138
x-amzn-requestid: 524e565e-a9fb-45f9-b786-d64cf26a3cdf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cBcAAHG8IAMFhwQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d4066-3689e70e6212e9e77dc134f4;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 21:34:30 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: cwu__NPGaU0zyAG0H1yZhmjGsFzvNmzsGv6Zt9hrF5gwSysEio2MjA==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 21:45:52 GMT
age: 22680
etag: "343a5bfba0f8fec28f9345f276b44f44c6eaf6a6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc29cc891-05a6-43aa-910c-6255241c5cdb.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc29cc891-05a6-43aa-910c-6255241c5cdb.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1387520c00b2ce57c6e49fd89afbfe83
5404be7e1fff033a5cccc15164d77b7e96a48a81
2f0fe787a2b2da38cf134a08dc4addf281e6f96761df33780b1a74d037573d58
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc29cc891-05a6-43aa-910c-6255241c5cdb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12244
x-amzn-requestid: 1766972b-e5c3-4922-a2e8-04387da9c9b7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b_AL_EiaIAMFndw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637c4719-27c0032c611a9aef0363e903;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 03:50:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -UJDz7KZ7uZ0DnKsTz7NMCGPOt5EIzBu16wyqAkemIO4N-97hV7sIg==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 22:54:39 GMT
age: 18553
etag: "5404be7e1fff033a5cccc15164d77b7e96a48a81"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f13f0a4-9e67-4f61-9165-83b87312d9cb.jpeg
34.120.237.76200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f13f0a4-9e67-4f61-9165-83b87312d9cb.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 309227dc1b5f9193c6be8f5a010fa348
dff12e88a784a954012f257d3689862c52251d01
2d52b83ff0a58c41bf2e38abf8fce13eb87b5ecfce144ff0edc1bfadd254b452
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f13f0a4-9e67-4f61-9165-83b87312d9cb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8081
x-amzn-requestid: cafd3337-7bb8-4e2d-91d4-a33439a32b80
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cBcAMEwgoAMFl-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d4067-6074dcae15d9194513916d48;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 21:34:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lfLcMzlaKoOXDhvCk6dJCuqkINEqJX20JltVNZMLUFhQeNPpN8cVFg==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 21:56:14 GMT
age: 22058
etag: "dff12e88a784a954012f257d3689862c52251d01"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb450e2a1-222f-4dfe-850a-f862cd102c3e.jpeg
34.120.237.76200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb450e2a1-222f-4dfe-850a-f862cd102c3e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 21fc9852ed2db17695d7038195b9283f
cda806d600c9e63e50d8ec42549fb107e4915068
55a7098369eb94f4333a1079ed6ad570121b7c76eeafb35022224b86d9b7edbb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb450e2a1-222f-4dfe-850a-f862cd102c3e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6910
x-amzn-requestid: 0d4fa715-c66a-4bcb-985c-f2c2ea71b3a9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-pvrF-xoAMFSMw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637c2330-67041f796d1906cc51e31b73;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 01:17:36 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: npd-DJrCfYjrwW7kfMwT38YWatTTdpr7bMRc0ikcXDwefQq-OR3ByQ==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 20:05:57 GMT
age: 28675
etag: "cda806d600c9e63e50d8ec42549fb107e4915068"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
3.bp.blogspot.com/-a6ebtJhV8oY/Vi9RXkmpHtI/AAAAAAAABEM/vvYXgczH9-c/s640/How%2BTo%2BTransform%2BYour%2BLife%2BIn%2BLess%2BThan%2BOne%2BYear.jpg
142.250.74.161200 OK 61 kB URL HTTP/1.1 3.bp.blogspot.com/-a6ebtJhV8oY/Vi9RXkmpHtI/AAAAAAAABEM/vvYXgczH9-c/s640/How%2BTo%2BTransform%2BYour%2BLife%2BIn%2BLess%2BThan%2BOne%2BYear.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, orientation=upper-left, software=Google], baseline, precision 8, 399x600, components 3\012- data
Hash 93eda07303ebe3fea862e9728ddeba64
bb2b2cbb1873140bd945b82d66154b29669e30ba
f45af0c95688d14c9dd139a6e5941b0caca95e79db8bc9166dc1fef49b1a7d0b
GET /-a6ebtJhV8oY/Vi9RXkmpHtI/AAAAAAAABEM/vvYXgczH9-c/s640/How%2BTo%2BTransform%2BYour%2BLife%2BIn%2BLess%2BThan%2BOne%2BYear.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v445"
Expires: Thu, 24 Nov 2022 04:03:52 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="How To Transform Your Life In Less Than One Year.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 23 Nov 2022 04:03:52 GMT
Server: fife
Content-Length: 61283
X-XSS-Protection: 0
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash cc6f115d8a52093a9ea79b4a521bfabd
709518d818bb47271fc70aac22a5bb12f54e1429
2dd086344c880a83a4d40f359edce224cabddc664b0a3bafd4ec36ec1d4166e6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2DD086344C880A83A4D40F359EDCE224CABDDC664B0A3BAFD4EC36EC1D4166E6"
Last-Modified: Mon, 21 Nov 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15065
Expires: Wed, 23 Nov 2022 08:14:57 GMT
Date: Wed, 23 Nov 2022 04:03:52 GMT
Connection: keep-alive
3.bp.blogspot.com/-a6ebtJhV8oY/Vi9RXkmpHtI/AAAAAAAABEM/vvYXgczH9-c/s72-c/How%2BTo%2BTransform%2BYour%2BLife%2BIn%2BLess%2BThan%2BOne%2BYear.jpg
142.250.74.161200 OK 3.5 kB URL HTTP/1.1 3.bp.blogspot.com/-a6ebtJhV8oY/Vi9RXkmpHtI/AAAAAAAABEM/vvYXgczH9-c/s72-c/How%2BTo%2BTransform%2BYour%2BLife%2BIn%2BLess%2BThan%2BOne%2BYear.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 0504f33dbd7cdee549a5a10a62177fb4
b15f80867a4331e59e1c85aa21bd1eff3066b70e
7ad22164ca2b32f1282edeef014c68655009705a5a9a3bae54ed8eecd44efaf4
GET /-a6ebtJhV8oY/Vi9RXkmpHtI/AAAAAAAABEM/vvYXgczH9-c/s72-c/How%2BTo%2BTransform%2BYour%2BLife%2BIn%2BLess%2BThan%2BOne%2BYear.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v445"
Expires: Thu, 24 Nov 2022 04:03:52 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="How To Transform Your Life In Less Than One Year.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 23 Nov 2022 04:03:52 GMT
Server: fife
Content-Length: 3518
X-XSS-Protection: 0
6.adsco.re/
104.17.167.186200 OK 0 B IP 104.17.167.186:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Moz: prefetch
Connection: keep-alive
Referer: http://c.adsco.re/
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 04:03:52 GMT
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: private, max-age=10
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Max-Age: 2592000
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76e7047eee97b51e-OSL
alt-svc: h2=":443"; ma=60
4.adsco.re/
162.252.214.5200 OK 62 B IP 162.252.214.5:0
File type ASCII text, with no line terminators
Hash adde5febc7b5b6c2c759ec735cce83a0
77ec17be8a9970ff04663294d41c590d0d24fde4
ce2b9f2e5005195de7add565505005be6f2ef0d37521771e15106d1e1b9260ff
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Moz: prefetch
Connection: keep-alive
Referer: http://c.adsco.re/
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 04:03:52 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
cjk9z3fpbolz.n4.adsco.re/
38.132.109.186200 OK 0 B URL HTTP/1.1 cjk9z3fpbolz.n4.adsco.re/
IP 38.132.109.186:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: cjk9z3fpbolz.n4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: http://alphamaletraits.blogspot.com
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 04:03:52 GMT
Content-Type: text/html
Content-Length: 0
Last-Modified: Mon, 30 Jul 2018 15:32:42 GMT
Connection: close
ETag: "5b5f2f9a-0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Accept-Ranges: bytes
adsco.re/p
162.252.214.5200 OK 171 B IP 162.252.214.5:0
File type ASCII text, with no line terminators
Hash 1f3fb7ddc11052859841e42325958604
1ba7782c30a578403d158e0b261ca6787949e202
8f4e5465035b000d95b09d261fd0b746996e0a43442e81422d93f85b6959fee5
POST /p HTTP/1.1
Host: adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Length: 2553
Origin: http://alphamaletraits.blogspot.com
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 04:03:53 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
AS-P-1: OK lon123
AS-P-2: OK
AS-P-3: OK
Access-Control-Max-Age: 2592000
Cache-Control: no-transform
Access-Control-Allow-Origin: http://alphamaletraits.blogspot.com
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
1.bp.blogspot.com/-MHcU1rGF2Rc/Vi9SdeI0DjI/AAAAAAAABEY/02RvwTMuak4/s72-c/Darren%2BHardy%25E2%2580%2599s%2BMost-Popular%2BSuccess%2BQuotes.jpg
142.250.74.161200 OK 3.7 kB URL HTTP/1.1 1.bp.blogspot.com/-MHcU1rGF2Rc/Vi9SdeI0DjI/AAAAAAAABEY/02RvwTMuak4/s72-c/Darren%2BHardy%25E2%2580%2599s%2BMost-Popular%2BSuccess%2BQuotes.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 3db5943753089eb445481d738fb78863
86485931cebc40e4ea137869b06dd60094d427f9
89bd7b6828fee212ccd1bfed7f4e2f16e2ee96f5bb18fdc27389b06d3075f67d
GET /-MHcU1rGF2Rc/Vi9SdeI0DjI/AAAAAAAABEY/02RvwTMuak4/s72-c/Darren%2BHardy%25E2%2580%2599s%2BMost-Popular%2BSuccess%2BQuotes.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v447"
Expires: Thu, 24 Nov 2022 04:03:53 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Darren Hardy_s Most-Popular Success Quotes.jpg";filename*=UTF-8''Darren%20Hardy%E2%80%99s%20Most-Popular%20Success%20Quotes.jpg
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 23 Nov 2022 04:03:53 GMT
Server: fife
Content-Length: 3703
X-XSS-Protection: 0
1.bp.blogspot.com/-MHcU1rGF2Rc/Vi9SdeI0DjI/AAAAAAAABEY/02RvwTMuak4/s640/Darren%2BHardy%25E2%2580%2599s%2BMost-Popular%2BSuccess%2BQuotes.jpg
142.250.74.161200 OK 59 kB URL HTTP/1.1 1.bp.blogspot.com/-MHcU1rGF2Rc/Vi9SdeI0DjI/AAAAAAAABEY/02RvwTMuak4/s640/Darren%2BHardy%25E2%2580%2599s%2BMost-Popular%2BSuccess%2BQuotes.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 640x426, components 3\012- data
Hash b8ec53836835b3f8429c8482b74c931d
152c78ced87a0dcfc47ee29fba34daa8424f668d
7f8db9e96d56e9bcbeb836b874d4580c2cb5c784ffb570b08d059e1428f113a1
GET /-MHcU1rGF2Rc/Vi9SdeI0DjI/AAAAAAAABEY/02RvwTMuak4/s640/Darren%2BHardy%25E2%2580%2599s%2BMost-Popular%2BSuccess%2BQuotes.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v447"
Expires: Thu, 24 Nov 2022 04:03:53 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Darren Hardy_s Most-Popular Success Quotes.jpg";filename*=UTF-8''Darren%20Hardy%E2%80%99s%20Most-Popular%20Success%20Quotes.jpg
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 23 Nov 2022 04:03:53 GMT
Server: fife
Content-Length: 59240
X-XSS-Protection: 0
s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
23.38.200.123200 OK 26 kB URL HTTP/2 s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
IP 23.38.200.123:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (63757)
Hash 707317ccaabe08d32d1bd781754e6871
bb82dcd3e044c960e0861c2ce878f5504e628f78
d0a164ece41c61aec26517fb645646f5ba91f72ea5448eff1ee6c393b7c53051
GET /static/sh.f48a1a04fe8dbf021b4cda1d.html HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: text/html
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-11adc"
timing-allow-origin: *
cache-control: public, max-age=86313600
p3p: CP="NON ADM OUR DEV IND COM STA"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 26421
date: Wed, 23 Nov 2022 04:03:53 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 9a2f2404e1a2caf586155a962b7fe4ec
c6ca53150de9ce525562fb524e4742f5dd0fae9f
6f01b0ebc8013fcfe27f48228de066791c1c6b0189a4add8ef4a1f980385d382
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6F01B0EBC8013FCFE27F48228DE066791C1C6B0189A4ADD8EF4A1F980385D382"
Last-Modified: Mon, 21 Nov 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4349
Expires: Wed, 23 Nov 2022 05:16:22 GMT
Date: Wed, 23 Nov 2022 04:03:53 GMT
Connection: keep-alive
m.addthis.com/live/red_lojson/300lo.json?si=637d9ba728142be6&bkl=0&bl=1&pdt=598&sid=637d9ba728142be6&pub=ra-546b7d23003f3d90&rev=v8.28.8-wp&ln=en&pc=men&cb=0&ab=-&dp=alphamaletraits.blogspot.com&fp=2015%2F10%2Fhow-to-spend-less-money-eating-at.html&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&mk=YOUR%20KEYWORDS%20HERE&colc=1669176232780&jsl=129&uvs=637d9ba77f35a496000&skipb=1&callback=addthis.cbs.jsonp__5059861297648310
23.38.200.123200 OK 88 B URL HTTP/2 m.addthis.com/live/red_lojson/300lo.json?si=637d9ba728142be6&bkl=0&bl=1&pdt=598&sid=637d9ba728142be6&pub=ra-546b7d23003f3d90&rev=v8.28.8-wp&ln=en&pc=men&cb=0&ab=-&dp=alphamaletraits.blogspot.com&fp=2015%2F10%2Fhow-to-spend-less-money-eating-at.html&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&mk=YOUR%20KEYWORDS%20HERE&colc=1669176232780&jsl=129&uvs=637d9ba77f35a496000&skipb=1&callback=addthis.cbs.jsonp__5059861297648310
IP 23.38.200.123:0
File type ASCII text, with no line terminators
Hash 8c93e63e54431e01cf57c16c3473bd2e
96b28a3236afe5e12ef061ee5dff41524c9a6faa
2e2f72b493cfb63ddc5056cdde2d5f0525de2e941f5ff5da1ae0740884307499
GET /live/red_lojson/300lo.json?si=637d9ba728142be6&bkl=0&bl=1&pdt=598&sid=637d9ba728142be6&pub=ra-546b7d23003f3d90&rev=v8.28.8-wp&ln=en&pc=men&cb=0&ab=-&dp=alphamaletraits.blogspot.com&fp=2015%2F10%2Fhow-to-spend-less-money-eating-at.html&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&mk=YOUR%20KEYWORDS%20HERE&colc=1669176232780&jsl=129&uvs=637d9ba77f35a496000&skipb=1&callback=addthis.cbs.jsonp__5059861297648310 HTTP/1.1
Host: m.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 88
cache-control: max-age=0, no-cache, no-store, no-transform
pragma: no-cache
content-disposition: attachment; filename=1.txt
date: Wed, 23 Nov 2022 04:03:53 GMT
X-Firefox-Spdy: h2
www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df4c996161e2c98%26domain%3Dalphamaletraits.blogspot.com%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Falphamaletraits.blogspot.com%252Ff30830cc10aa428%26relation%3Dparent.parent&color_scheme=light&container_width=300&header=true&href=https%3A%2F%2Fwww.facebook.com%2Falphamaleteam&locale=en_US&sdk=joey&show_border=true&show_faces=true&stream=false
157.240.200.35200 OK 12 kB URL HTTP/2 www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df4c996161e2c98%26domain%3Dalphamaletraits.blogspot.com%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Falphamaletraits.blogspot.com%252Ff30830cc10aa428%26relation%3Dparent.parent&color_scheme=light&container_width=300&header=true&href=https%3A%2F%2Fwww.facebook.com%2Falphamaleteam&locale=en_US&sdk=joey&show_border=true&show_faces=true&stream=false
IP 157.240.200.35:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (19791)
Hash 3a84dc053131a27ca89142dbbf473074
1c08a414a3e6519d7524d0157603c87d609b5fbb
dc0575c8ffc6b8091d877cdbcb65cf3d06c99f6eae923746ae6fa7bd7ba39a74
GET /plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df4c996161e2c98%26domain%3Dalphamaletraits.blogspot.com%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Falphamaletraits.blogspot.com%252Ff30830cc10aa428%26relation%3Dparent.parent&color_scheme=light&container_width=300&header=true&href=https%3A%2F%2Fwww.facebook.com%2Falphamaleteam&locale=en_US&sdk=joey&show_border=true&show_faces=true&stream=false HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-opener-policy: unsafe-none
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: 5KMzQqqgH92Y0vfBED4wIT90EWL34jvJDasI9NQRwXF7oEXR9ATSLHzM5IMji+hby2wKLlbcoVrXQZwCpi1kjg==
date: Wed, 23 Nov 2022 04:03:53 GMT
priority: u=3,i
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
v1.addthisedge.com/live/boost/ra-546b7d23003f3d90/_ate.track.config_resp
23.38.200.123200 OK 583 B URL HTTP/2 v1.addthisedge.com/live/boost/ra-546b7d23003f3d90/_ate.track.config_resp
IP 23.38.200.123:0
File type ASCII text, with very long lines (1849), with no line terminators
Hash 347ba26111defb72e62a441725565847
aebf382bb4f1e579af3bdb0b6018e059c3c13c16
70d32d7dd6f40a47e622f49a18310ad2f86866eb18a0e7301f5dec9f0f570d23
GET /live/boost/ra-546b7d23003f3d90/_ate.track.config_resp HTTP/1.1
Host: v1.addthisedge.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 583
etag: 789427365--gzip
content-disposition: attachment; filename=1.txt
content-encoding: gzip
cache-control: public, max-age=54, s-maxage=86400
date: Wed, 23 Nov 2022 04:03:53 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
s7.addthis.com/static/layers.fa6cd1947ce26e890d3d.js
23.38.200.123200 OK 78 kB URL HTTP/2 s7.addthis.com/static/layers.fa6cd1947ce26e890d3d.js
IP 23.38.200.123:0
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash 9a77dff666eebb6cf4bbc4c67c7b563b
9e98d7824a7b4e34665c2690d6f52caddad1fe4b
6cdf8e597f3cbe759531153fd926d51aeaebd836a1c9bc1436e079645bfd3ad7
GET /static/layers.fa6cd1947ce26e890d3d.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/javascript
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-41cf5"
timing-allow-origin: *
cache-control: public, max-age=86313600
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 77672
date: Wed, 23 Nov 2022 04:03:53 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
serve.popads.net/c?_=BAYAY32bqQFjfZupgAGBAsAAILRE31tiu_nO97kcOchviY83-pcBObDXtMRND9Z_VXu-wQBHMEUCIQCI7vSF9v59C3URAxXHumVgOuR83mElz_AjwbvAGmHUDwIgBJTVdlZmRahDB-OUeKaHxseHJw-YxbUsDvZTo3lGgv0&v=4&siteId=928097&minBid=&popundersPerIP=0,0&blockedCountries=&documentRef=&s=1280,1024,1,1280,1024,0
216.21.13.10200 OK 44 B URL HTTP/1.1 serve.popads.net/c?_=BAYAY32bqQFjfZupgAGBAsAAILRE31tiu_nO97kcOchviY83-pcBObDXtMRND9Z_VXu-wQBHMEUCIQCI7vSF9v59C3URAxXHumVgOuR83mElz_AjwbvAGmHUDwIgBJTVdlZmRahDB-OUeKaHxseHJw-YxbUsDvZTo3lGgv0&v=4&siteId=928097&minBid=&popundersPerIP=0,0&blockedCountries=&documentRef=&s=1280,1024,1,1280,1024,0
IP 216.21.13.10:0
File type ASCII text, with no line terminators
Hash d5f0a25e4d3522d56d48ce7bc3e518fb
86794caff58f7fee6e684c2ba7195f970a8d6f4c
9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5
GET /c?_=BAYAY32bqQFjfZupgAGBAsAAILRE31tiu_nO97kcOchviY83-pcBObDXtMRND9Z_VXu-wQBHMEUCIQCI7vSF9v59C3URAxXHumVgOuR83mElz_AjwbvAGmHUDwIgBJTVdlZmRahDB-OUeKaHxseHJw-YxbUsDvZTo3lGgv0&v=4&siteId=928097&minBid=&popundersPerIP=0,0&blockedCountries=&documentRef=&s=1280,1024,1,1280,1024,0 HTTP/1.1
Host: serve.popads.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
access-control-allow-origin: *
asf: 9
popads-ec: ASB
content-type: text/javascript;charset=UTF-8
content-length: 44
date: Wed, 23 Nov 2022 04:03:53 GMT
s7.addthis.com/static/100.17feec3d215fd90d3df4.js
23.38.200.123200 OK 423 B URL HTTP/2 s7.addthis.com/static/100.17feec3d215fd90d3df4.js
IP 23.38.200.123:0
File type ASCII text, with very long lines (748), with no line terminators
Hash d7316e741ee91ce7e2f1b2619b70eb7a
244753ff8875cfb3950e4fe646ed0c4c2e798418
a5b148ef03b6547813221988df13f95885e68d91603972f9d1311f601306e94a
GET /static/100.17feec3d215fd90d3df4.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/javascript
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-2ec"
timing-allow-origin: *
cache-control: public, max-age=86313600
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 423
date: Wed, 23 Nov 2022 04:03:53 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
www.odnoklassniki.ru/dk?st.cmd=extLike&uid=0&ref=http%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html
217.20.147.1302 0 B URL HTTP/1.1 www.odnoklassniki.ru/dk?st.cmd=extLike&uid=0&ref=http%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html
IP 217.20.147.1:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dk?st.cmd=extLike&uid=0&ref=http%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html HTTP/1.1
Host: www.odnoklassniki.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 302
Server: Apache
Date: Wed, 23 Nov 2022 04:03:53 GMT
Content-Length: 0
Connection: keep-alive
Location: https://connect.ok.ru/dk?st.cmd=extLike&uid=0&ref=http%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html
www.odnoklassniki.ru/dk?st.cmd=extLike&uid=1&ref=https%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html
217.20.147.1302 0 B URL HTTP/1.1 www.odnoklassniki.ru/dk?st.cmd=extLike&uid=1&ref=https%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html
IP 217.20.147.1:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dk?st.cmd=extLike&uid=1&ref=https%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html HTTP/1.1
Host: www.odnoklassniki.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 302
Server: Apache
Date: Wed, 23 Nov 2022 04:03:53 GMT
Content-Length: 0
Connection: keep-alive
Location: https://connect.ok.ru/dk?st.cmd=extLike&uid=1&ref=https%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html
cjk9z3fpbolz.s4.adsco.re/
185.200.116.90200 OK 0 B URL HTTP/1.1 cjk9z3fpbolz.s4.adsco.re/
IP 185.200.116.90:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: cjk9z3fpbolz.s4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: http://alphamaletraits.blogspot.com
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 04:03:53 GMT
Content-Type: text/html
Content-Length: 0
Last-Modified: Mon, 30 Jul 2018 15:38:01 GMT
Connection: close
ETag: "5b5f30d9-0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Accept-Ranges: bytes
ocsp.globalsign.com/gsrsaovsslca2018
104.18.21.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP 104.18.21.226:0
Hash 33d580b0096723ab48d9057e67b89d65
a9c1279573198cffa18910fc5912e640de68d314
0f1597aca99bd0ddf350b821a455051c83cc0bda3180988aa524dfd623177c1f
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 04:03:53 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sun, 27 Nov 2022 01:51:16 GMT
ETag: "a9c1279573198cffa18910fc5912e640de68d314"
Last-Modified: Wed, 23 Nov 2022 01:51:17 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1751
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76e70485bd09b51b-OSL
ocsp.globalsign.com/gsrsaovsslca2018
104.18.21.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP 104.18.21.226:0
Hash 33d580b0096723ab48d9057e67b89d65
a9c1279573198cffa18910fc5912e640de68d314
0f1597aca99bd0ddf350b821a455051c83cc0bda3180988aa524dfd623177c1f
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 04:03:53 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sun, 27 Nov 2022 01:51:16 GMT
ETag: "a9c1279573198cffa18910fc5912e640de68d314"
Last-Modified: Wed, 23 Nov 2022 01:51:17 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1751
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76e70485bedc0b69-OSL
s7.addthis.com/static/14.2dfb61b890959f78272d.js
23.38.200.123200 OK 304 B URL HTTP/2 s7.addthis.com/static/14.2dfb61b890959f78272d.js
IP 23.38.200.123:0
File type ASCII text, with very long lines (397), with no line terminators
Hash ca0f404238de96a7e72a7412a43229ba
4f73f2828bffb15fe09660886210e4ec40eeaa8b
d44d9599170c634d819deecceaa0e7964c0eab00f2e424e882c2840b1363dd36
GET /static/14.2dfb61b890959f78272d.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/javascript
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-18d"
timing-allow-origin: *
cache-control: public, max-age=86313600
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 304
date: Wed, 23 Nov 2022 04:03:53 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
s7.addthis.com/static/143.3d8bb49f121080f7c65c.js
23.38.200.123200 OK 404 B URL HTTP/2 s7.addthis.com/static/143.3d8bb49f121080f7c65c.js
IP 23.38.200.123:0
File type ASCII text, with very long lines (625), with no line terminators
Hash 1867e14fd787b9160fd8a739ce2582cc
f0fc278e95f1927ae9235f7fc003894631d54cc8
14d6144e5868eb31342870609d7de9af2d465441c13c757344b8343f335dcce1
GET /static/143.3d8bb49f121080f7c65c.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/javascript
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-271"
timing-allow-origin: *
cache-control: public, max-age=86313600
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 404
date: Wed, 23 Nov 2022 04:03:53 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
s7.addthis.com/static/142.feb3b57b86599b08d012.js
23.38.200.123200 OK 634 B URL HTTP/2 s7.addthis.com/static/142.feb3b57b86599b08d012.js
IP 23.38.200.123:0
File type ASCII text, with very long lines (1226), with no line terminators
Hash e6adb730355ddf46435468ff0051e85e
83b4e408228cf84cdd81770317de3b04e6bf69e0
288f119a66be0f09bda90ac2e2c951f59e6a79a1320faabfae1bf5a45ce15aaf
GET /static/142.feb3b57b86599b08d012.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/javascript
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-4ca"
timing-allow-origin: *
cache-control: public, max-age=86313600
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 634
date: Wed, 23 Nov 2022 04:03:53 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
vk.com/share.php?act=count&index=0&url=http%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html
87.240.137.164301 Moved Permanently 164 B URL HTTP/1.1 vk.com/share.php?act=count&index=0&url=http%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html
IP 87.240.137.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 6d359f551ba4cb27d59e94a6cddaec09
d230318bd921ad8167c2eb9dfdc7b1d7d2c7373f
9ecd8531025e89f5e1ca23d81203a9feddbd5b4b75ca79c9868cb53762293bc8
GET /share.php?act=count&index=0&url=http%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: kittenx
Date: Wed, 23 Nov 2022 04:03:53 GMT
Content-Type: text/html
Content-Length: 164
Connection: keep-alive
Location: https://vk.com/share.php?act=count&index=0&url=http%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html
X-Frontend: front512004
Access-Control-Expose-Headers: X-Frontend
q.addthis.com/feeds/1.0/views2.json?pubid=ra-546b7d23003f3d90&domain=alphamaletraits.blogspot.com&limit=50&callback=_ate.cbs.fds_ra546b7d23003f3d90views2json0
23.38.200.123200 OK 2.0 kB URL HTTP/2 q.addthis.com/feeds/1.0/views2.json?pubid=ra-546b7d23003f3d90&domain=alphamaletraits.blogspot.com&limit=50&callback=_ate.cbs.fds_ra546b7d23003f3d90views2json0
IP 23.38.200.123:0
File type Unicode text, UTF-8 text, with very long lines (8388), with no line terminators
Hash 6d471af640961bfac4045ab9aebe81e5
6626d2dd7514b91df227c42007d1b5ea8e4f4322
3fcad6a2d1ab7aebe209392b7a116cc8fc6aa329066ad7c5bba2c3eab455a043
GET /feeds/1.0/views2.json?pubid=ra-546b7d23003f3d90&domain=alphamaletraits.blogspot.com&limit=50&callback=_ate.cbs.fds_ra546b7d23003f3d90views2json0 HTTP/1.1
Host: q.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/javascript;charset=UTF-8
surrogate-key: ra-546b7d23003f3d90
cache-tag: ra-546b7d23003f3d90
cache-control: max-age=0, s-maxage=3600
last-modified: Wed, 23 Nov 2022 03:49:24 GMT
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
content-length: 1954
date: Wed, 23 Nov 2022 04:03:53 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
vk.com/share.php?act=count&index=1&url=https%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html
87.240.137.164301 Moved Permanently 164 B URL HTTP/1.1 vk.com/share.php?act=count&index=1&url=https%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html
IP 87.240.137.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 6d359f551ba4cb27d59e94a6cddaec09
d230318bd921ad8167c2eb9dfdc7b1d7d2c7373f
9ecd8531025e89f5e1ca23d81203a9feddbd5b4b75ca79c9868cb53762293bc8
GET /share.php?act=count&index=1&url=https%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: kittenx
Date: Wed, 23 Nov 2022 04:03:53 GMT
Content-Type: text/html
Content-Length: 164
Connection: keep-alive
Location: https://vk.com/share.php?act=count&index=1&url=https%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html
X-Frontend: front512004
Access-Control-Expose-Headers: X-Frontend
3.bp.blogspot.com/-gJpdntDgATM/V-ezVmEijII/AAAAAAAACdA/aL8cweHobpo-HBrq0l_iUfWbe53IdWQPgCLcB/w1200-h630-p-k-no-nu/4123714.jpg
142.250.74.161200 OK 29 kB URL HTTP/1.1 3.bp.blogspot.com/-gJpdntDgATM/V-ezVmEijII/AAAAAAAACdA/aL8cweHobpo-HBrq0l_iUfWbe53IdWQPgCLcB/w1200-h630-p-k-no-nu/4123714.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 699x367, components 3\012- data
Hash b0ecafe2b342958a8057c380b8aa149a
7d8cbca01c9fc361decb0657391cd09955c1bbd3
9a04deefd572670fdf3bddd0e920efe1a4d5741abfb2b8dd74644a893a0d7280
GET /-gJpdntDgATM/V-ezVmEijII/AAAAAAAACdA/aL8cweHobpo-HBrq0l_iUfWbe53IdWQPgCLcB/w1200-h630-p-k-no-nu/4123714.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v9d4"
Expires: Thu, 24 Nov 2022 04:03:54 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="4123714.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 23 Nov 2022 04:03:54 GMT
Server: fife
Content-Length: 28986
X-XSS-Protection: 0
1.bp.blogspot.com/-syfXX1MYIsg/VxVOBiAQ-TI/AAAAAAAABkA/Lu-02nPzxqghlmNqS16CGxph0ZPw1zusQCLcB/w1200-h630-p-k-no-nu/secrets.jpg
142.250.74.161200 OK 27 kB URL HTTP/1.1 1.bp.blogspot.com/-syfXX1MYIsg/VxVOBiAQ-TI/AAAAAAAABkA/Lu-02nPzxqghlmNqS16CGxph0ZPw1zusQCLcB/w1200-h630-p-k-no-nu/secrets.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 500x263, components 3\012- data
Hash 5ac0e779cd6a784258bd8e66aa2a59e9
6c8f65dd549219195841ba0dae7d9ef8c0f11009
f75cf322538a00fd9d3e3d18786cca2d91d03487bcc8569d54b66e93b877fbef
GET /-syfXX1MYIsg/VxVOBiAQ-TI/AAAAAAAABkA/Lu-02nPzxqghlmNqS16CGxph0ZPw1zusQCLcB/w1200-h630-p-k-no-nu/secrets.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v641"
Expires: Thu, 24 Nov 2022 04:03:54 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="secrets.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 23 Nov 2022 04:03:54 GMT
Server: fife
Content-Length: 26903
X-XSS-Protection: 0
widgets.pinterest.com/v1/urls/count.json?url=https%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html&callback=window._ate.cbs.rcb_clsh0
151.101.84.84200 OK 130 B URL HTTP/1.1 widgets.pinterest.com/v1/urls/count.json?url=https%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html&callback=window._ate.cbs.rcb_clsh0
IP 151.101.84.84:0
File type ASCII text, with no line terminators
Hash 31ff78a49387468470694f783b2863e2
4ffb25d08ff04541def9e8adc3e0f1378296a5a0
570710ae42c09ad21f930ceb91d6a1fb301794617277b2888c58df71a10ae8fe
GET /v1/urls/count.json?url=https%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html&callback=window._ate.cbs.rcb_clsh0 HTTP/1.1
Host: widgets.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Connection: keep-alive
x-content-type-options: nosniff
access-control-allow-origin: *
content-type: application/javascript
cache-control: must-revalidate, max-age=887
expires: Wed, 23 Nov 2022 04:18:54 GMT
x-envoy-upstream-service-time: 4
x-pinterest-rid: 2056776700026355
Date: Wed, 23 Nov 2022 04:03:54 GMT
Age: 0
transfer-encoding: chunked
widgets.pinterest.com/v1/urls/count.json?url=http%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html&callback=window._ate.cbs.rcb_iiw80
151.101.84.84200 OK 129 B URL HTTP/1.1 widgets.pinterest.com/v1/urls/count.json?url=http%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html&callback=window._ate.cbs.rcb_iiw80
IP 151.101.84.84:0
File type ASCII text, with no line terminators
Hash 4a6880a5f4b9f3f03d5b7afaeac03880
136f72d7b6cf243b950371940a65c1e7d6cba2c6
139890449ea1564b7a19d57bdd58b5cb654fe7c452a40d0cd11187ab7cfa0dfc
GET /v1/urls/count.json?url=http%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html&callback=window._ate.cbs.rcb_iiw80 HTTP/1.1
Host: widgets.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Connection: keep-alive
x-content-type-options: nosniff
access-control-allow-origin: *
content-type: application/javascript
cache-control: must-revalidate, max-age=887
expires: Wed, 23 Nov 2022 04:18:54 GMT
x-envoy-upstream-service-time: 3
x-pinterest-rid: 3353147450388470
Date: Wed, 23 Nov 2022 04:03:54 GMT
Age: 0
transfer-encoding: chunked
2.bp.blogspot.com/-9HZCFXDQb3Y/VySh769Tw9I/AAAAAAAACC0/pyg74J7uX1ccXiQfxGFvbppDnHtJsiIBQCLcB/w1200-h630-p-k-no-nu/jerry_rice.jpg
142.250.74.161200 OK 28 kB URL HTTP/1.1 2.bp.blogspot.com/-9HZCFXDQb3Y/VySh769Tw9I/AAAAAAAACC0/pyg74J7uX1ccXiQfxGFvbppDnHtJsiIBQCLcB/w1200-h630-p-k-no-nu/jerry_rice.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 672x353, components 3\012- data
Hash 22a54fb26e8d142f058d1c7dc87348e9
e71bd429a5b58c2c4e0dc171a1cf821868340992
fb8c6f8f33da90047dceda05d5a3d54a18b736c2e09a76955dae091c0a593662
GET /-9HZCFXDQb3Y/VySh769Tw9I/AAAAAAAACC0/pyg74J7uX1ccXiQfxGFvbppDnHtJsiIBQCLcB/w1200-h630-p-k-no-nu/jerry_rice.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v82e"
Expires: Thu, 24 Nov 2022 04:03:54 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="jerry_rice.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 23 Nov 2022 04:03:54 GMT
Server: fife
Content-Length: 27667
X-XSS-Protection: 0
connect.ok.ru/dk?st.cmd=extLike&uid=1&ref=https%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html
217.20.155.208200 OK 245 kB URL HTTP/2 connect.ok.ru/dk?st.cmd=extLike&uid=1&ref=https%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html
IP 217.20.155.208:0
File type ASCII text, with no line terminators
Size 245 kB (245104 bytes)
Hash 2e41316f608d3a6999bfed544aea0cf2
f8f87487728d23775e01bf0e2335a56d3b9a3ed0
a7ab6bb40f9786e37f0312283b4750c64172b4f644128d71fcfacfe3cb683aaa
GET /dk?st.cmd=extLike&uid=1&ref=https%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html HTTP/1.1
Host: connect.ok.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://alphamaletraits.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: apache
date: Wed, 23 Nov 2022 04:03:53 GMT
content-type: application/javascript;charset=UTF-8
vary: Accept-Encoding
set-cookie: bci=7144393306006897392; Domain=.ok.ru; Expires=Mon, 11-Dec-2090 07:18:00 GMT; Path=/; Secure; HttpOnly
_statid=6db2a72b-72e5-48b6-a392-e82426eeda80; Domain=.ok.ru; Expires=Mon, 11-Dec-2090 07:18:00 GMT; Path=/; Secure; HttpOnly
landref=alphamaletraits.blogspot.com; Domain=.ok.ru; Path=/; Secure
content-security-policy: default-src data: 'self' 'unsafe-inline' 'unsafe-eval' ok.ru *.ok.ru odnoklassniki.ru *.odnoklassniki.ru mycdn.me http://*.mycdn.me https://*.mycdn.me wss://ad.mail.ru *.mail.ru *.imgsmail.ru *.mradx.net *.serving-sys.com *.googleapis.com *.gstatic.com www.google.com https://api-maps.yandex.ru yastatic.net yandex.st *.doubleverify.com *.adsafeprotected.com https://consentmanager.mgr.consensu.org https://cdn.consentmanager.mgr.consensu.org https://football.sportmail.ru *.google.ru *.google.com *.googlesyndication.com *.yandex.ru blob:; script-src 'unsafe-inline' 'unsafe-eval' *.mail.ru https://*.mail.ru *.imgsmail.ru *.mradx.net ok.ru *.ok.ru odnoklassniki.ru *.odnoklassniki.ru mycdn.me http://*.mycdn.me https://*.mycdn.me mc.yandex.ru an.yandex.ru yastatic.net yandex.st *.google-analytics.com api-maps.yandex.ru https://api-maps.yandex.ru https://clck.yandex.ru *.googleapis.com *.gstatic.com www.google.com www.youtube.com https://www.youtube.com *.ytimg.com https://*.ytimg.com *.doubleverify.com *.dvtps.com *.doubleclick.net *.googletagservices.com *.googlesyndication.com *.googleadservices.com *.goodgame.ru https://*.goodgame.ru https://*.moatads.com *.adlooxtracking.com *.adlooxtracking.ru *.adsafeprotected.com *.serving-sys.com *.serving-sys.ru *.weborama.fr *.weborama-tech.ru https://enterprise.api-maps.yandex.ru https://suggest-maps.yandex.ru https://*.hit.gemius.pl https://consentmanager.mgr.consensu.org https://cdn.consentmanager.mgr.consensu.org https://gum.criteo.com https://football.sportmail.ru *.googletagmanager.com connect.facebook.net *.google.ru *.google.com *.googlesyndication.com yandex.ru; worker-src blob: 'self'; connect-src * wss: blob:; font-src * data: blob:; frame-src * blob: 'self'; img-src * data: blob: about:; media-src * data: blob:; object-src *; report-uri /csp/report;
content-security-policy-report-only: default-src data: blob: about: 'self' 'unsafe-inline' 'unsafe-eval' https: wss:; report-uri /csp/report?always;
cache-control: no-cache, no-store
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=63072000;includeSubdomains;preload
access-control-allow-origin: *
access-control-allow-credentials: true
rendered-blocks: WidgetExtLike
content-encoding: br
X-Firefox-Spdy: h2
api-public.addthis.com/url/serviceapi/shares-post.json?services=sFbt&url=https%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html
23.38.200.123200 OK 2 B URL HTTP/2 api-public.addthis.com/url/serviceapi/shares-post.json?services=sFbt&url=https%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html
IP 23.38.200.123:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /url/serviceapi/shares-post.json?services=sFbt&url=https%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html HTTP/1.1
Host: api-public.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Origin: http://alphamaletraits.blogspot.com
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/json
content-length: 2
cache-control: no-transform, max-age=0, s-maxage=14400
surrogate-key: sFbt=https://alphamaletraits.blogspot.com/2015/10/how-to-spend-less-money-eating-at.html
last-modified: Wed, 23 Nov 2022 04:00:00 GMT
access-control-allow-origin: http://alphamaletraits.blogspot.com
access-control-allow-credentials: true
strict-transport-security: max-age=15724800; includeSubDomains
date: Wed, 23 Nov 2022 04:03:54 GMT
X-Firefox-Spdy: h2
4.bp.blogspot.com/-p7lczwr1bJ8/U0nVkOIbiaI/AAAAAAAAAOo/nomZ8GlFWWk/w1200-h630-p-k-no-nu/Don+Draper+.jpg
142.250.74.161200 OK 7.8 kB URL HTTP/1.1 4.bp.blogspot.com/-p7lczwr1bJ8/U0nVkOIbiaI/AAAAAAAAAOo/nomZ8GlFWWk/w1200-h630-p-k-no-nu/Don+Draper+.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 300x158, components 3\012- data
Hash 893c54a9660f3a8f5168d8456b4be387
c5dc498d145ad4d46ee285d5150dc5d7c127f654
6f5e2977c21b00f1b3d43eb597675104cee1612c2ce87eee6a99218fdabede96
GET /-p7lczwr1bJ8/U0nVkOIbiaI/AAAAAAAAAOo/nomZ8GlFWWk/w1200-h630-p-k-no-nu/Don+Draper+.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "veb"
Expires: Thu, 24 Nov 2022 04:03:54 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Don Draper .jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 23 Nov 2022 04:03:54 GMT
Server: fife
Content-Length: 7834
X-XSS-Protection: 0
ocsp2.globalsign.com/gsorganizationvalsha2g2
104.18.20.226200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP 104.18.20.226:0
Hash 4abeb741e0adf1ee6c050c6aea16a9f7
0b7eb32e0d5dde89d9eb9e1007a8cf9b2cf72050
3b8af7dfcdbf46abcc569ddaaa21f5199b4c8fba6f544c48e322d6b9268fb94d
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 04:03:54 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Sun, 27 Nov 2022 01:30:30 GMT
ETag: "0b7eb32e0d5dde89d9eb9e1007a8cf9b2cf72050"
Last-Modified: Wed, 23 Nov 2022 01:30:31 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 450
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76e704886a1eb4ed-OSL
ocsp2.globalsign.com/gsorganizationvalsha2g2
104.18.20.226200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP 104.18.20.226:0
Hash 4abeb741e0adf1ee6c050c6aea16a9f7
0b7eb32e0d5dde89d9eb9e1007a8cf9b2cf72050
3b8af7dfcdbf46abcc569ddaaa21f5199b4c8fba6f544c48e322d6b9268fb94d
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 04:03:54 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Sun, 27 Nov 2022 01:30:30 GMT
ETag: "0b7eb32e0d5dde89d9eb9e1007a8cf9b2cf72050"
Last-Modified: Wed, 23 Nov 2022 01:30:31 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 450
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76e704886da70b65-OSL
connect.ok.ru/dk?st.cmd=extLike&uid=0&ref=http%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html
217.20.155.208200 OK 70 B URL HTTP/2 connect.ok.ru/dk?st.cmd=extLike&uid=0&ref=http%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html
IP 217.20.155.208:0
File type ASCII text, with no line terminators
Hash 568a1beabe8778874ab93bf0ba2c2e0d
6ff3c7333b25702385c5dabe3f3dfe4050fd394a
a974cd7957213731adec094e1050a568808f44642697fcd43a8938111762dc74
GET /dk?st.cmd=extLike&uid=0&ref=http%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html HTTP/1.1
Host: connect.ok.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://alphamaletraits.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: apache
date: Wed, 23 Nov 2022 04:03:53 GMT
content-type: application/javascript;charset=UTF-8
vary: Accept-Encoding
set-cookie: bci=503507904413805585; Domain=.ok.ru; Expires=Mon, 11-Dec-2090 07:18:00 GMT; Path=/; Secure; HttpOnly
_statid=8816daf5-395b-44e7-b539-c062e1efda1c; Domain=.ok.ru; Expires=Mon, 11-Dec-2090 07:18:00 GMT; Path=/; Secure; HttpOnly
landref=alphamaletraits.blogspot.com; Domain=.ok.ru; Path=/; Secure
content-security-policy: default-src data: 'self' 'unsafe-inline' 'unsafe-eval' ok.ru *.ok.ru odnoklassniki.ru *.odnoklassniki.ru mycdn.me http://*.mycdn.me https://*.mycdn.me wss://ad.mail.ru *.mail.ru *.imgsmail.ru *.mradx.net *.serving-sys.com *.googleapis.com *.gstatic.com www.google.com https://api-maps.yandex.ru yastatic.net yandex.st *.doubleverify.com *.adsafeprotected.com https://consentmanager.mgr.consensu.org https://cdn.consentmanager.mgr.consensu.org https://football.sportmail.ru *.google.ru *.google.com *.googlesyndication.com *.yandex.ru blob:; script-src 'unsafe-inline' 'unsafe-eval' *.mail.ru https://*.mail.ru *.imgsmail.ru *.mradx.net ok.ru *.ok.ru odnoklassniki.ru *.odnoklassniki.ru mycdn.me http://*.mycdn.me https://*.mycdn.me mc.yandex.ru an.yandex.ru yastatic.net yandex.st *.google-analytics.com api-maps.yandex.ru https://api-maps.yandex.ru https://clck.yandex.ru *.googleapis.com *.gstatic.com www.google.com www.youtube.com https://www.youtube.com *.ytimg.com https://*.ytimg.com *.doubleverify.com *.dvtps.com *.doubleclick.net *.googletagservices.com *.googlesyndication.com *.googleadservices.com *.goodgame.ru https://*.goodgame.ru https://*.moatads.com *.adlooxtracking.com *.adlooxtracking.ru *.adsafeprotected.com *.serving-sys.com *.serving-sys.ru *.weborama.fr *.weborama-tech.ru https://enterprise.api-maps.yandex.ru https://suggest-maps.yandex.ru https://*.hit.gemius.pl https://consentmanager.mgr.consensu.org https://cdn.consentmanager.mgr.consensu.org https://gum.criteo.com https://football.sportmail.ru *.googletagmanager.com connect.facebook.net *.google.ru *.google.com *.googlesyndication.com yandex.ru; worker-src blob: 'self'; connect-src * wss: blob:; font-src * data: blob:; frame-src * blob: 'self'; img-src * data: blob: about:; media-src * data: blob:; object-src *; report-uri /csp/report;
content-security-policy-report-only: default-src data: blob: about: 'self' 'unsafe-inline' 'unsafe-eval' https: wss:; report-uri /csp/report?always;
cache-control: no-cache, no-store
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=63072000;includeSubdomains;preload
access-control-allow-origin: *
access-control-allow-credentials: true
rendered-blocks: WidgetExtLike
content-encoding: br
X-Firefox-Spdy: h2
vk.com/share.php?act=count&index=0&url=http%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html
87.240.137.164200 OK 41 B URL HTTP/2 vk.com/share.php?act=count&index=0&url=http%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html
IP 87.240.137.164:0
File type ASCII text, with no line terminators
Hash 6de86497641c67868bfddcbf5a8bf434
6065bb53c9addbda818a6b172597326ebc31e8dc
51d446e1b704e289975e53c6945dee986d432bb439d02a2afcee7ce1b5bddcf8
GET /share.php?act=count&index=0&url=http%3A%2F%2Falphamaletraits.blogspot.com%2F2015%2F10%2Fhow-to-spend-less-money-eating-at.html HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://alphamaletraits.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Wed, 23 Nov 2022 04:03:54 GMT
content-type: text/html; charset=windows-1251
content-length: 41
x-powered-by: KPHP/7.4.112722
set-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly
remixlang=3; expires=Fri, 17 Nov 2023 14:56:11 GMT; path=/; domain=.vk.com
remixstlid=9103127209344291105_H45VhQhnJpZYYgzjLvDDjqlQkQ8mhGrU1gfMvbtczkH; expires=Thu, 23 Nov 2023 04:03:54 GMT; path=/; domain=.vk.com; secure
cache-control: no-store
content-encoding: gzip
x-frontend: front512004
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
mybettermb.com/adServe/banners?tid=95578_312094_1&type=footer&size=37
108.168.193.189403 Forbidden 0 B URL HTTP/2 mybettermb.com/adServe/banners?tid=95578_312094_1&type=footer&size=37
IP 108.168.193.189:0
GET /adServe/banners?tid=95578_312094_1&type=footer&size=37 HTTP/1.1
Host: mybettermb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://alphamaletraits.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
server: nginx
date: Wed, 23 Nov 2022 04:03:51 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding
cache-control: no-cache
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-language: en
content-encoding: gzip
X-Firefox-Spdy: h2
bdv.bidvertiser.com/bidvertiser.dbm?pid=558468&bid=1855359&RD=04687459884281&DIF=2
54.241.51.109200 OK 0 B URL HTTP/1.1 bdv.bidvertiser.com/bidvertiser.dbm?pid=558468&bid=1855359&RD=04687459884281&DIF=2
IP 54.241.51.109:0
GET /bidvertiser.dbm?pid=558468&bid=1855359&RD=04687459884281&DIF=2 HTTP/1.1
Host: bdv.bidvertiser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Date: Wednesday, 23-Nov-2022 04:03:52 GMT
Cache-Control: no-store
Last-Modified: Tuesday, 23-Nov-2021 04:03:52 GMT
P3P: policyref="http://www.bidvertiser.com/bdv/bidvertiser/p3p.xml", CP="NOI DEV PSA PSD IVA OTP OUR OTR IND OTC"
Content-Type: text/javascript; charset=utf-8
Content-Len: 333
CONNECTION: Close
c.statcounter.com/t.php?sc_project=9666362&u1=390BB2B96D5C4F4A7AF964332C2B0299&java=1&security=0d5d90ef&sc_snum=1&sess=a8f3c4&p=0&rcat=d&rdom=d&rdomg=new&bb=1&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1280&h=1024&camefrom=&u=http%3A//alphamaletraits.blogspot.com/2015/10/how-to-spend-less-money-eating-at.html&t=How%20To%20Spend%20Less%20Money%20Eating%20At%20Restaurants%20-%20Alpha%20Male%20Traits&invisible=1&sc_rum_e_s=1562&sc_rum_e_e=1574&get_config=true
104.20.229.67200 OK 0 B URL HTTP/2 c.statcounter.com/t.php?sc_project=9666362&u1=390BB2B96D5C4F4A7AF964332C2B0299&java=1&security=0d5d90ef&sc_snum=1&sess=a8f3c4&p=0&rcat=d&rdom=d&rdomg=new&bb=1&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1280&h=1024&camefrom=&u=http%3A//alphamaletraits.blogspot.com/2015/10/how-to-spend-less-money-eating-at.html&t=How%20To%20Spend%20Less%20Money%20Eating%20At%20Restaurants%20-%20Alpha%20Male%20Traits&invisible=1&sc_rum_e_s=1562&sc_rum_e_e=1574&get_config=true
IP 104.20.229.67:0
GET /t.php?sc_project=9666362&u1=390BB2B96D5C4F4A7AF964332C2B0299&java=1&security=0d5d90ef&sc_snum=1&sess=a8f3c4&p=0&rcat=d&rdom=d&rdomg=new&bb=1&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1280&h=1024&camefrom=&u=http%3A//alphamaletraits.blogspot.com/2015/10/how-to-spend-less-money-eating-at.html&t=How%20To%20Spend%20Less%20Money%20Eating%20At%20Restaurants%20-%20Alpha%20Male%20Traits&invisible=1&sc_rum_e_s=1562&sc_rum_e_e=1574&get_config=true HTTP/1.1
Host: c.statcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://alphamaletraits.blogspot.com
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 23 Nov 2022 04:03:52 GMT
content-type: application/json
p3p: policyref="http://www.statcounter.com/w3c/p3p.xml", CP="ADMa OUR COM NAV NID DSP NOI COR"
expires: Mon, 26 Jul 1997 05:00:00 GMT
set-cookie: is_unique=sc9666362.1669176232.0; SameSite=None; Secure; Expires=Monday, 22-Nov-2027 05:03:52 +01; Path=/; Domain=.statcounter.com
access-control-allow-origin: http://alphamaletraits.blogspot.com
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 76e7047c1c7fb529-OSL
content-encoding: br
X-Firefox-Spdy: h2
bdv.bidvertiser.com/bidvertiser.dbm?pid=558468&bid=1801988&RD=77054417365213&DIF=2
54.241.51.109200 OK 0 B URL HTTP/1.1 bdv.bidvertiser.com/bidvertiser.dbm?pid=558468&bid=1801988&RD=77054417365213&DIF=2
IP 54.241.51.109:0
GET /bidvertiser.dbm?pid=558468&bid=1801988&RD=77054417365213&DIF=2 HTTP/1.1
Host: bdv.bidvertiser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alphamaletraits.blogspot.com/
HTTP/1.1 200 OK
Date: Wednesday, 23-Nov-2022 04:03:52 GMT
Cache-Control: no-store
Last-Modified: Tuesday, 23-Nov-2021 04:03:52 GMT
P3P: policyref="http://www.bidvertiser.com/bdv/bidvertiser/p3p.xml", CP="NOI DEV PSA PSD IVA OTP OUR OTR IND OTC"
Content-Type: text/javascript; charset=utf-8
Content-Len: 0
CONNECTION: Close