rightway-tan.blogspot.com/search/label/Ethnocracy
301 Moved Permanently 196 B URL HTTP/1.1 rightway-tan.blogspot.com/search/label/Ethnocracy
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash c0057ad464398b11f65ba0f4322abb87
90370cfceadad93ea66190d88e3a36557c82675f
9dc9b73cc994367fb6e46705656ebbbb6b97688e11d7b48090e5ba084a46a2f1
Analyzer Verdict Alert fortinet Phishing
GET /search/label/Ethnocracy HTTP/1.1
Host: rightway-tan.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Location: https://rightway-tan.blogspot.com/search/label/Ethnocracy
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Fri, 16 Sep 2022 03:25:49 GMT
Expires: Fri, 16 Sep 2022 03:25:49 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 196
Server: GSE
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 96daaf84cd2c07756756caf7a2724a29
d24d47c68eec98d44bf341dab9d893df97103e1a
fef9ce9f75ec19e7ae2ccbffb6654db2473a2b4acc94c1b4303e5ec24149465f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FEF9CE9F75EC19E7AE2CCBFFB6654DB2473A2B4ACC94C1B4303E5EC24149465F"
Last-Modified: Thu, 15 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18603
Expires: Fri, 16 Sep 2022 08:35:52 GMT
Date: Fri, 16 Sep 2022 03:25:49 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 91dd975a7b17b2922dd23c0e49314e40
57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 16 Sep 2022 03:10:43 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: sxNH0mTVWk1egTEdiTRrN7Fx67QfyB64mGmAmRJ-SClj7RSSXdFpow==
Age: 905
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Thu, 15 Sep 2022 04:35:16 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 8Yb_Zi87-eSdvNumIY-M8DmaoPK6oc3_m1s07Q1kt2wkye_uzQOOQA==
age: 82234
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 21dff4be7a54275d6fa2d1e8abe81e54
ff9ac400cdc9a1dbc2c778397caaf3fbbafb5e87
a5a45aeea3e30c56305cb9bf85e87741d5fca77fb9262ac489882597482cb20e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 03:25:49 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Fri, 16 Sep 2022 03:03:22 GMT
Cache-Control: max-age=3600
Expires: Fri, 16 Sep 2022 03:08:34 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: C7vzFEW6QyBu8IoeM5Hoc2A2mQv3n2vwBcZpXtQUA0ytkRSxMG3leA==
Age: 1348
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 21dff4be7a54275d6fa2d1e8abe81e54
ff9ac400cdc9a1dbc2c778397caaf3fbbafb5e87
a5a45aeea3e30c56305cb9bf85e87741d5fca77fb9262ac489882597482cb20e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eb7bdebc4efb819b8d1328fe619264c8
1a614dd3ce7a62d8f589eead279b612ace503d1c
1157349779c0920a0a105e0551dadfd42e554a982dafb216a5a982c45b91248d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css
200 OK 7.8 kB URL HTTP/2 www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css
IP
File type ASCII text, with very long lines (35959)
Hash 5aa2d3297bdc86bc81322aedecbb5e79
1c0a3c007e41726e167e79b70ddea76198650884
feae1fac625d0f30b5f10fa00b62df1a5600cd2178062c427e55f289b29cc630
GET /static/v1/widgets/2975350028-css_bundle_v2.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 7776
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 09 Sep 2022 08:13:04 GMT
expires: Sat, 09 Sep 2023 08:13:04 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 08 Sep 2022 15:01:24 GMT
content-type: text/css
age: 587566
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 55618314b5346f28acef72e499dc5de2
11ebb0929659f643ea7faf392880f3276b0931ca
1181d8d5f6a9b36f0df59e99600ca1048f7adec1528f195ad0c40e59b2585bcf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash d597af1ab2f21a983bf0f0d105b94209
9d5dd938777abde094c89066b539141a02106b88
a614eb7f969544c8040642be7c852625341e2441e757d063d2af1ff465c8c3f4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3186
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:50 GMT
Last-Modified: Fri, 16 Sep 2022 02:32:44 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
rightway-tan.blogspot.com/search/label/Ethnocracy
200 OK 76 kB URL HTTP/2 rightway-tan.blogspot.com/search/label/Ethnocracy
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1495)
Hash fd9b669ca593b33e9cdc9647bc578906
480c5d049b9ca280597921c1c72580e54f97ab4d
606d928f118fedab6e3b4bdd3816eb2ee60ec27898a64ba2c996ded61f8c4797
Analyzer Verdict Alert fortinet Phishing
GET /search/label/Ethnocracy HTTP/1.1
Host: rightway-tan.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Fri, 16 Sep 2022 03:25:50 GMT
date: Fri, 16 Sep 2022 03:25:50 GMT
cache-control: private, max-age=0
last-modified: Wed, 14 Sep 2022 11:54:58 GMT
etag: W/"ca01d45e1bdda489b18102d0884ae8684038a20763bc34bd2fd0bc2bd552866b"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 75807
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
resources.blogblog.com/img/icon18_email.gif
200 OK 164 B URL HTTP/2 resources.blogblog.com/img/icon18_email.gif
IP
File type GIF image data, version 89a, 18 x 13\012- data
Hash 36b9f993db1b953f3b9b08040aaf9af4
18248661b307586dc291fd2dff4bb59cf7579475
1258cbe1e2900ec3df11a83a6bb6008d7a833f783a6df80b0d5d45a052ac1466
GET /img/icon18_email.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 164
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 12 Sep 2022 03:00:40 GMT
expires: Mon, 19 Sep 2022 03:00:40 GMT
cache-control: public, max-age=604800
last-modified: Sun, 11 Sep 2022 12:52:39 GMT
content-type: image/gif
age: 347110
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3f94c38b92316f91765ceed606f9f4ea
03442fbbe884ceac60c9585a8bbc0b87278523fd
70df317dbe22ae71bcc285fc0ea2185a11822856187a6c235c758df3f63eb75f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
resources.blogblog.com/img/icon18_edit_allbkg.gif
200 OK 162 B URL HTTP/2 resources.blogblog.com/img/icon18_edit_allbkg.gif
IP
File type GIF image data, version 89a, 18 x 18\012- data
Hash c991641178ff05adf0d004298b5eafa9
d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
GET /img/icon18_edit_allbkg.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 162
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 12 Sep 2022 02:33:36 GMT
expires: Mon, 19 Sep 2022 02:33:36 GMT
cache-control: public, max-age=604800
last-modified: Sun, 11 Sep 2022 10:50:02 GMT
content-type: image/gif
age: 348734
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
apis.google.com/js/plusone.js
200 OK 20 kB URL HTTP/2 apis.google.com/js/plusone.js
IP
File type ASCII text, with very long lines (1277)
Hash 202067c443611dc148225b75c0e3d556
9e6be316508f5c2a2e4b8cecc561b0e7415bd38c
5d9db864eb7c211f62d61436846b80db003b0102c903dda9bc15af29e5eefa39
GET /js/plusone.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20362
date: Fri, 16 Sep 2022 03:25:50 GMT
expires: Fri, 16 Sep 2022 03:25:50 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "5f35d22782378ad2"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 20ae50d0df52817906a88b07b3c08138
0f999020f07959636477be4178d238d4dd460464
26eb9c5ac69c9144425fb15a481336487c1923bb141685aea110b0e3dfc20171
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
resources.blogblog.com/img/widgets/arrow_dropdown.gif
200 OK 141 B URL HTTP/2 resources.blogblog.com/img/widgets/arrow_dropdown.gif
IP
File type GIF image data, version 89a, 13 x 10\012- data
Hash 2964a07d60a4e76b299130fb1b4115f6
3b72dcc19f3ad685513eaba612e07e0ed495f2e1
28ab89f0285c48d2faed701905c185c302f2b389584a52ceaa76a91ea64dc3a7
GET /img/widgets/arrow_dropdown.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 141
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 10 Sep 2022 01:46:16 GMT
expires: Sat, 17 Sep 2022 01:46:16 GMT
cache-control: public, max-age=604800
last-modified: Fri, 09 Sep 2022 16:53:13 GMT
content-type: image/gif
age: 524374
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
resources.blogblog.com/blogblog/data/1kt/watermark/body_background_birds.png
200 OK 23 kB URL HTTP/2 resources.blogblog.com/blogblog/data/1kt/watermark/body_background_birds.png
IP
File type PNG image data, 300 x 300, 2-bit colormap, non-interlaced\012- data
Hash 5cd8cda0e75b359eb8f15dc83b0c5c29
86c99fbb62aadacb3ebd3f948d345b917f65253f
0220dbf46954d4efe2e91d261dd3d40f06e6402c722cc5580129af64bddc58f9
GET /blogblog/data/1kt/watermark/body_background_birds.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 22568
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 09 Sep 2022 21:52:29 GMT
expires: Fri, 16 Sep 2022 21:52:29 GMT
cache-control: public, max-age=604800
last-modified: Fri, 09 Sep 2022 19:53:29 GMT
content-type: image/png
age: 538401
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
200 OK 58 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
IP
File type ASCII text, with very long lines (2903)
Hash 45b7c632a0a69904ccd86bf93f7f07eb
3f25469c0ea5c689ff7dacac30d5ab78230900b8
7e98542b37c8bb214e88f97a60009bfcfcd90e705f67fa34ae0f185b9dc0bf02
GET /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
date: Fri, 16 Sep 2022 03:25:50 GMT
expires: Fri, 16 Sep 2022 03:25:50 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 2248944591110895215
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 57980
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
resources.blogblog.com/img/icon_feed12.png
200 OK 500 B URL HTTP/2 resources.blogblog.com/img/icon_feed12.png
IP
File type PNG image data, 12 x 12, 8-bit colormap, non-interlaced\012- data
Hash 44e7355a788fd1082deff0018883758e
50e3a28a44978e85d13c30522e0c71c8d0b24675
3cd341f37642f8a58b0fe14c2645913449c0ffe10be6ba0986275bfef29bc319
GET /img/icon_feed12.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 500
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 09 Sep 2022 15:31:37 GMT
expires: Fri, 16 Sep 2022 15:31:37 GMT
cache-control: public, max-age=604800
last-modified: Fri, 09 Sep 2022 07:51:48 GMT
content-type: image/png
age: 561253
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
resources.blogblog.com/img/widgets/subscribe-netvibes.png
200 OK 1.4 kB URL HTTP/2 resources.blogblog.com/img/widgets/subscribe-netvibes.png
IP
File type PNG image data, 91 x 17, 8-bit colormap, non-interlaced\012- data
Hash c52a5f4ecb6be5d7e93b23ef4122ee4e
4e698a5f455daf3a8ea1e219b1998079f0546716
71b8ad79c680b3e5d452a792c3b418b23f739a0a34005e0f37ec674f4c78cb5d
GET /img/widgets/subscribe-netvibes.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 1445
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 Sep 2022 06:20:18 GMT
expires: Thu, 22 Sep 2022 06:20:18 GMT
cache-control: public, max-age=604800
last-modified: Wed, 14 Sep 2022 09:49:51 GMT
content-type: image/png
age: 75932
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 20ae50d0df52817906a88b07b3c08138
0f999020f07959636477be4178d238d4dd460464
26eb9c5ac69c9144425fb15a481336487c1923bb141685aea110b0e3dfc20171
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
200 OK 67 B URL HTTP/2 pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP
Hash 9bbc3ca32ec951a484589ce0e6b4db73
753d6f6183b33b2dee5dde2208fca91c17f5bb13
b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 67
x-xss-protection: 0
date: Thu, 15 Sep 2022 20:48:28 GMT
expires: Thu, 29 Sep 2022 20:48:28 GMT
cache-control: public, max-age=1209600
age: 23842
etag: 13036835877489095579
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
resources.blogblog.com/img/widgets/subscribe-yahoo.png
200 OK 580 B URL HTTP/2 resources.blogblog.com/img/widgets/subscribe-yahoo.png
IP
File type PNG image data, 91 x 17, 8-bit colormap, non-interlaced\012- data
Hash 79f602b6ac18bee79b4e2353a6674010
28accf82263aa1a11bb821439d4d185865662530
bbf9b924cc32bff4738bb54d86905476349f90c8b20f748633e56f64379d553e
GET /img/widgets/subscribe-yahoo.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 09 Sep 2022 15:47:41 GMT
expires: Fri, 16 Sep 2022 15:47:41 GMT
cache-control: public, max-age=604800
last-modified: Fri, 09 Sep 2022 07:51:48 GMT
content-type: image/png
age: 560289
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.z9QjrzsHcOc.O/m=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/cb=gapi.loaded_0?le=scs
200 OK 51 kB URL HTTP/2 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.z9QjrzsHcOc.O/m=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/cb=gapi.loaded_0?le=scs
IP
File type ASCII text, with very long lines (580)
Hash 082af8f6ad7e453a93dd3d1e0ed74005
a768614da451435f22b8f19a0cd4977c48a639ce
f53c36c80f6af2bb427ea6b9d34dd82f8dbcf05d23b92d78ce6372af3a46d57c
GET /_/scs/abc-static/_/js/k=gapi.lb.en.z9QjrzsHcOc.O/m=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 51184
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Sep 2022 07:12:08 GMT
expires: Thu, 14 Sep 2023 07:12:08 GMT
cache-control: public, max-age=31536000
age: 159222
last-modified: Sat, 30 Jul 2022 15:17:53 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
resources.blogblog.com/blogblog/data/1kt/watermark/body_overlay_birds.png
200 OK 3.5 kB URL HTTP/2 resources.blogblog.com/blogblog/data/1kt/watermark/body_overlay_birds.png
IP
File type PNG image data, 386 x 121, 8-bit colormap, non-interlaced\012- data
Hash 031c64f442b967c59b28cdc8b03ac349
59f743959d06ced56f36b5e262c76e6cbfef9720
4bff767832f0cae6ed521f2436871dba9c4e1d036efd4889457b9e797738154a
GET /blogblog/data/1kt/watermark/body_overlay_birds.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 3523
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 12 Sep 2022 03:08:24 GMT
expires: Mon, 19 Sep 2022 03:08:24 GMT
cache-control: public, max-age=604800
last-modified: Mon, 12 Sep 2022 02:52:21 GMT
content-type: image/png
age: 346646
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.z9QjrzsHcOc.O/m=gapi_iframes,gapi_iframes_style_bubble/exm=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/cb=gapi.loaded_1?le=scs
200 OK 17 kB URL HTTP/2 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.z9QjrzsHcOc.O/m=gapi_iframes,gapi_iframes_style_bubble/exm=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/cb=gapi.loaded_1?le=scs
IP
File type ASCII text, with very long lines (3295)
Hash da083e9d59be400edf9d5f9a1716b91b
27d2025b6936aa58853e5ff3e1e67cef21cf32f5
edd3514aa92d8e00194c2f634d3ef3d4dd7efcd8cc0c33f3cda5f45ca250b0b7
GET /_/scs/abc-static/_/js/k=gapi.lb.en.z9QjrzsHcOc.O/m=gapi_iframes,gapi_iframes_style_bubble/exm=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/cb=gapi.loaded_1?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 16710
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Sep 2022 00:24:03 GMT
expires: Thu, 14 Sep 2023 00:24:03 GMT
cache-control: public, max-age=31536000
age: 183707
last-modified: Sat, 30 Jul 2022 15:17:53 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/3753684042-widgets.js
200 OK 57 kB URL HTTP/2 www.blogger.com/static/v1/widgets/3753684042-widgets.js
IP
File type ASCII text, with very long lines (2221)
Hash 9310029f33929201831992bd74c13953
092fc9b60b0fcc7e24b80eb89f40178e91effb98
ed0ad17efb3c922e7bc8feffa0a5718d2ad226c44f2bb183b6ad163684f3b982
GET /static/v1/widgets/3753684042-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 57039
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 Sep 2022 01:53:41 GMT
expires: Fri, 15 Sep 2023 01:53:41 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 08 Sep 2022 20:54:17 GMT
content-type: text/javascript
age: 91929
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha2XH_H1xUNGb4UTO92wYX5sV4Nn2GYHwWAuYZ9kreWdeYGE-3mF02Ui0x1xd__dYhrL0p4BcJhsgFbPc9kLzSvaZnoMTwrh4spow7z3w4IdOPnG5u54OuW5WwoYDp9bPOdFvngGaNI=s0-d
200 OK 3.9 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha2XH_H1xUNGb4UTO92wYX5sV4Nn2GYHwWAuYZ9kreWdeYGE-3mF02Ui0x1xd__dYhrL0p4BcJhsgFbPc9kLzSvaZnoMTwrh4spow7z3w4IdOPnG5u54OuW5WwoYDp9bPOdFvngGaNI=s0-d
IP
File type GIF image data, version 89a, 88 x 31\012- data
Hash 959f8c4a110d7f3699ac0e45d37996d1
871b6c7632c5f51c590fb8ae86ef351b8ba93048
29fcd0c1193d82531c125fed8777e89d33eb56c3e98c83e720aa469af7002e46
GET /blogger_img_proxy/ANbyha2XH_H1xUNGb4UTO92wYX5sV4Nn2GYHwWAuYZ9kreWdeYGE-3mF02Ui0x1xd__dYhrL0p4BcJhsgFbPc9kLzSvaZnoMTwrh4spow7z3w4IdOPnG5u54OuW5WwoYDp9bPOdFvngGaNI=s0-d HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Sat, 17 Sep 2022 03:25:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: attachment;filename="unnamed.gif"
content-type: image/gif
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 16 Sep 2022 03:25:50 GMT
server: fife
content-length: 3884
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
resources.blogblog.com/blogblog/data/1kt/watermark/post_background_birds.png
200 OK 103 B URL HTTP/2 resources.blogblog.com/blogblog/data/1kt/watermark/post_background_birds.png
IP
File type PNG image data, 10 x 10, 8-bit colormap, non-interlaced\012- data
Hash 7928cb1e4fb733117a1479c289f29d92
bd1bbe65951f64f44ec85910877dabd35c6dbc07
8a44923efeda7708df28a77f7e01bb10be3831d112891172950fe8c2d6b2566e
GET /blogblog/data/1kt/watermark/post_background_birds.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 103
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 Sep 2022 16:58:14 GMT
expires: Thu, 22 Sep 2022 16:58:14 GMT
cache-control: public, max-age=604800
last-modified: Thu, 15 Sep 2022 11:52:44 GMT
content-type: image/png
age: 37656
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha34fkdG7FsmT1bMmCR4VJZ7TzZKlCINZsmhUa4CMj1w4d9uhjcGfFGcyErTmY2h5UXuNpkF8jQRPow6HIGo1OKIn0_g-GyOB9SclnpgNuAaC1ySUvs41ieriimrhk0=s0-d
404 Not Found 1.7 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha34fkdG7FsmT1bMmCR4VJZ7TzZKlCINZsmhUa4CMj1w4d9uhjcGfFGcyErTmY2h5UXuNpkF8jQRPow6HIGo1OKIn0_g-GyOB9SclnpgNuAaC1ySUvs41ieriimrhk0=s0-d
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 25006bfbefbb592fb55de49f83e5605e
2e2cb5a2fd7975e4198252977000b3bfd0182e9a
a9d0a88713747e04be068af33bbaf7d4d39b887a609193137061d3d7ac332484
GET /blogger_img_proxy/ANbyha34fkdG7FsmT1bMmCR4VJZ7TzZKlCINZsmhUa4CMj1w4d9uhjcGfFGcyErTmY2h5UXuNpkF8jQRPow6HIGo1OKIn0_g-GyOB9SclnpgNuAaC1ySUvs41ieriimrhk0=s0-d HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 16 Sep 2022 03:25:50 GMT
server: fife
content-length: 1715
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh6.googleusercontent.com/proxy/v2DG1UMrhBdJO39t0BitpLdqezNACT1QiYPIGw7aSGOOv5SCAdJcbBf6g7cuJomnMJMl3JDyJ4yz-0PI0EKHUFQ_jHo=w72-h72-n-k-no-nu
200 OK 4.1 kB URL HTTP/2 lh6.googleusercontent.com/proxy/v2DG1UMrhBdJO39t0BitpLdqezNACT1QiYPIGw7aSGOOv5SCAdJcbBf6g7cuJomnMJMl3JDyJ4yz-0PI0EKHUFQ_jHo=w72-h72-n-k-no-nu
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 72x72, components 3\012- data
Hash 2f6953bcb4276732fa4774fade6f06b2
383ba1e7fa7894ffa181d29b5081169bcc6a3f3e
00624c3de242902853634af9245d16dde565db787166ec9ed415320aa7fc5790
GET /proxy/v2DG1UMrhBdJO39t0BitpLdqezNACT1QiYPIGw7aSGOOv5SCAdJcbBf6g7cuJomnMJMl3JDyJ4yz-0PI0EKHUFQ_jHo=w72-h72-n-k-no-nu HTTP/1.1
Host: lh6.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Sat, 17 Sep 2022 03:25:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 16 Sep 2022 03:25:50 GMT
server: fife
content-length: 4146
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.blogger.com/img/share_buttons_20_3.png
200 OK 5.1 kB URL HTTP/2 www.blogger.com/img/share_buttons_20_3.png
IP
File type PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash ad9999106d5f550920b586e8e1704e5a
93fd02c51166402a41f96509cd0ca3fb917877dd
3829a5b2ade7cfc416c80b8f3df71e49e68672875f025d525223978f5cee3fd3
GET /img/share_buttons_20_3.png HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 5080
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 Sep 2022 06:18:28 GMT
expires: Thu, 22 Sep 2022 06:18:28 GMT
cache-control: public, max-age=604800
last-modified: Wed, 14 Sep 2022 16:51:32 GMT
content-type: image/png
age: 76042
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha0odCQ3yjgjpe9gWRP43bFGNuL5fMdbe4LaN-J6iGmORZrRwsqfQvnZxHnOsOJjgCYoB-j9AtDRT8akLpt3MtsAH6KimMbU8FvBnN7Ybm3fxFUtqPSFcdDIDVEiEIiIKyA=s0-d
404 Not Found 1.7 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha0odCQ3yjgjpe9gWRP43bFGNuL5fMdbe4LaN-J6iGmORZrRwsqfQvnZxHnOsOJjgCYoB-j9AtDRT8akLpt3MtsAH6KimMbU8FvBnN7Ybm3fxFUtqPSFcdDIDVEiEIiIKyA=s0-d
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash a55d502a1bbc432c13b75292825ac2f6
b5966d1d0c07829185bb62a73ec4d40ece832be6
929ed4f1a5342307c0b69eca2f910c47abf108f1032fda5b56977b27abe77c96
GET /blogger_img_proxy/ANbyha0odCQ3yjgjpe9gWRP43bFGNuL5fMdbe4LaN-J6iGmORZrRwsqfQvnZxHnOsOJjgCYoB-j9AtDRT8akLpt3MtsAH6KimMbU8FvBnN7Ybm3fxFUtqPSFcdDIDVEiEIiIKyA=s0-d HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 16 Sep 2022 03:25:50 GMT
server: fife
content-length: 1719
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh4.googleusercontent.com/proxy/DC5iocaOWKweULK2_VxcnTXn47nocdnXVHUzrlPy7D3MyJY9_HONxEFPwnhCEH4V6Pg3eMpOBEfiYsoc3HAY3CrxhrI=w72-h72-n-k-no-nu
200 OK 3.4 kB URL HTTP/2 lh4.googleusercontent.com/proxy/DC5iocaOWKweULK2_VxcnTXn47nocdnXVHUzrlPy7D3MyJY9_HONxEFPwnhCEH4V6Pg3eMpOBEfiYsoc3HAY3CrxhrI=w72-h72-n-k-no-nu
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 72x72, components 3\012- data
Hash 518885d57e6ac17ab22a639e2d4be97f
f9a4a7758bca29570afe81246d38d2b243d547d4
387ba67f0cea95367b1980dfd526d33e0d8455c80faa29b30081342584098074
GET /proxy/DC5iocaOWKweULK2_VxcnTXn47nocdnXVHUzrlPy7D3MyJY9_HONxEFPwnhCEH4V6Pg3eMpOBEfiYsoc3HAY3CrxhrI=w72-h72-n-k-no-nu HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Sat, 17 Sep 2022 03:25:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 16 Sep 2022 03:25:50 GMT
server: fife
content-length: 3372
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha21GGTgSvgfW_RCAUrIRcsoF8_F5tj9FqVozbNeAhRal_yFMPrcvwswZsmfZilWK447EFYqmlKTbLG1zIBrXUCrV1ruHF4wfuk5r3vGIPiFIU65saMMbvUzNez3CA=s0-d
404 Not Found 1.7 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha21GGTgSvgfW_RCAUrIRcsoF8_F5tj9FqVozbNeAhRal_yFMPrcvwswZsmfZilWK447EFYqmlKTbLG1zIBrXUCrV1ruHF4wfuk5r3vGIPiFIU65saMMbvUzNez3CA=s0-d
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 7af9d1ca01c9b76d2f38391d1b1de34f
386db45a8e2bbd4cea753ff39b03449572a90bb3
e40ca8bd40351f82556c9428b63184614aa652631d6edad73a4acb39890a7d3a
GET /blogger_img_proxy/ANbyha21GGTgSvgfW_RCAUrIRcsoF8_F5tj9FqVozbNeAhRal_yFMPrcvwswZsmfZilWK447EFYqmlKTbLG1zIBrXUCrV1ruHF4wfuk5r3vGIPiFIU65saMMbvUzNez3CA=s0-d HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 16 Sep 2022 03:25:50 GMT
server: fife
content-length: 1714
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/proxy/Uxc2LPG0jCXcapAmQFhziln81cHpvLuqG0eav2dZo01lrb-uUj2xNbCNe8Lj0bsxthcltEOILtysUpaoayj6syfkpi8=w72-h72-n-k-no-nu
200 OK 3.0 kB URL HTTP/2 lh3.googleusercontent.com/proxy/Uxc2LPG0jCXcapAmQFhziln81cHpvLuqG0eav2dZo01lrb-uUj2xNbCNe8Lj0bsxthcltEOILtysUpaoayj6syfkpi8=w72-h72-n-k-no-nu
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 72x72, components 3\012- data
Hash 571857b93ff3679d316ce8d088babe53
c268b1272cb246e0c39e9b3fa30c2e88347eeeba
2c867d6cfa744958b6f05d98d83c1e06a07218c5e033f2f400521dc4ee3201c2
GET /proxy/Uxc2LPG0jCXcapAmQFhziln81cHpvLuqG0eav2dZo01lrb-uUj2xNbCNe8Lj0bsxthcltEOILtysUpaoayj6syfkpi8=w72-h72-n-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Sat, 17 Sep 2022 03:25:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 16 Sep 2022 03:25:50 GMT
server: fife
content-length: 3019
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 818b1c492640bb49ddaaf8060465b76f
6b3aa62cd3855dc60fe30d8bfba7cbb5d6b7b931
1544372859a8715652c5d92e23880fe499e746d5791391744695cd55be3d6b7d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3f94c38b92316f91765ceed606f9f4ea
03442fbbe884ceac60c9585a8bbc0b87278523fd
70df317dbe22ae71bcc285fc0ea2185a11822856187a6c235c758df3f63eb75f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eb7bdebc4efb819b8d1328fe619264c8
1a614dd3ce7a62d8f589eead279b612ace503d1c
1157349779c0920a0a105e0551dadfd42e554a982dafb216a5a982c45b91248d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eb7bdebc4efb819b8d1328fe619264c8
1a614dd3ce7a62d8f589eead279b612ace503d1c
1157349779c0920a0a105e0551dadfd42e554a982dafb216a5a982c45b91248d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 4wI1NnDYlShBIi+Nt3kYoA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: cUQNZF3IJYDJINgcDLd4ZQQNTrA=
pagead2.googlesyndication.com/pagead/managed/js/adsense/m202209080101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-7113504168792126&plah=rightway-tan.blogspot.com
200 OK 125 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/managed/js/adsense/m202209080101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-7113504168792126&plah=rightway-tan.blogspot.com
IP
File type ASCII text, with very long lines (5015)
Size 125 kB (124739 bytes)
Hash 68d1009375d570adcb13947f4b8dcc42
9139ca28f8ee2e9ce7ba2d75a27f525831154de9
8ec6757effafaa97aa6498b191ed72d25623dbf82768cc10db118e4d8c5190f8
GET /pagead/managed/js/adsense/m202209080101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-7113504168792126&plah=rightway-tan.blogspot.com HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Fri, 16 Sep 2022 03:25:51 GMT
expires: Fri, 16 Sep 2022 03:25:51 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
content-type: text/javascript; charset=UTF-8
etag: 3164323306609075985
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 124739
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.thestar.com.my/~/media/online/2018/05/28/23/27/btn2.ashx/?w=620&h=413&crop=1&hash=343BB02D36AB17A2E4FEBF91A7EFA2C2AD7F10FF
404 Not Found 12 kB URL HTTP/2 www.thestar.com.my/~/media/online/2018/05/28/23/27/btn2.ashx/?w=620&h=413&crop=1&hash=343BB02D36AB17A2E4FEBF91A7EFA2C2AD7F10FF
IP
Hash 8efa3b350cd102f6dcbcfae74694b7ce
e207bc9c1bd87fcdc4721b15faeef312175b68b3
9d08254678351bff8728135913986a4405b69035e0b5cbe00894044139075e97
GET /~/media/online/2018/05/28/23/27/btn2.ashx/?w=620&h=413&crop=1&hash=343BB02D36AB17A2E4FEBF91A7EFA2C2AD7F10FF HTTP/1.1
Host: www.thestar.com.my
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Fri, 16 Sep 2022 03:25:50 GMT
server: nginx
cache-control: no-cache, private
referrer-policy: no-referrer-when-downgrade
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
vary: Accept-Encoding
x-cache: Error from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: po5PyGxXV2O9UE_LW-krpvosH8frXsEp72fDMa90DBABwT9_d6fN2Q==
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a2fd3b0b89ef62dffeb60d2e6f1db209
0579bfcf82353521ee0833aa66a10514190f3ca7
68ad15c71f542a57cca01713847459555da06333a710461e8b7f4083a71424c6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "68AD15C71F542A57CCA01713847459555DA06333A710461E8B7F4083A71424C6"
Last-Modified: Wed, 14 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15700
Expires: Fri, 16 Sep 2022 07:47:31 GMT
Date: Fri, 16 Sep 2022 03:25:51 GMT
Connection: keep-alive
i.ytimg.com/vi/z149vLKn9d8/hqdefault.jpg
200 OK 26 kB URL HTTP/2 i.ytimg.com/vi/z149vLKn9d8/hqdefault.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3\012- data
Hash e8fd315723e02c8b67da58a96d9f428a
f3b597052b3b3aeb7c7b7a832151310343c976c8
f6ad229b3d72afd3da9b50c1d92ca9caacba75815b1b1c298ab529196fa8efaf
GET /vi/z149vLKn9d8/hqdefault.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 25914
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 16 Sep 2022 03:25:51 GMT
expires: Fri, 16 Sep 2022 05:25:51 GMT
cache-control: public, max-age=7200
etag: "1628092007"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a2fd3b0b89ef62dffeb60d2e6f1db209
0579bfcf82353521ee0833aa66a10514190f3ca7
68ad15c71f542a57cca01713847459555da06333a710461e8b7f4083a71424c6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "68AD15C71F542A57CCA01713847459555DA06333A710461E8B7F4083A71424C6"
Last-Modified: Wed, 14 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15700
Expires: Fri, 16 Sep 2022 07:47:31 GMT
Date: Fri, 16 Sep 2022 03:25:51 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 734d709ca96b537a66a72b012bad01b3
1422dc6e556936950feec9000a321a050b638ff8
f22c958051fad1d1d361d069afd22467fbc3caaebffac1ffb0fe3eead923c0c3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/charts/loader.js
200 OK 20 kB URL HTTP/2 www.gstatic.com/charts/loader.js
IP
File type ASCII text, with very long lines (2134)
Hash f3341efa0432876b1697ccec98c33b01
55044e79afbe25d119b7b87dc7b5d1b3ec0c607a
6672904faeb4f203e0109279aa99d88f9e8690d2d696d80309ef50a974f88c77
GET /charts/loader.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: gzip
access-control-allow-credentials: true
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gviz
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gviz"
report-to: {"group":"gviz","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gviz"}]}
content-length: 19937
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 16 Sep 2022 02:43:34 GMT
expires: Fri, 16 Sep 2022 03:43:34 GMT
cache-control: public, max-age=3600
last-modified: Wed, 23 Jun 2021 18:41:30 GMT
content-type: text/javascript
age: 2537
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 849d9b71f28edccc5fdab51c09f0fe9e
d2997d4bd5efe43b93058fb5299f79a000b78f2a
778f50372884346ca95dddcbb5518e7e346b1d617a1c0711af469cf6ee8c7db5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 849d9b71f28edccc5fdab51c09f0fe9e
d2997d4bd5efe43b93058fb5299f79a000b78f2a
778f50372884346ca95dddcbb5518e7e346b1d617a1c0711af469cf6ee8c7db5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ra.revolvermaps.com/0/0/6.js?i=0tkahjp5mwu&m=7&s=320&c=e63100&cr1=ffffff&f=arial&l=0&bv=90&lx=-420&ly=420&hi=20&he=7&hc=a8ddff&rs=80
200 OK 975 B URL HTTP/1.1 ra.revolvermaps.com/0/0/6.js?i=0tkahjp5mwu&m=7&s=320&c=e63100&cr1=ffffff&f=arial&l=0&bv=90&lx=-420&ly=420&hi=20&he=7&hc=a8ddff&rs=80
IP
ASN #34549 meerfarbig GmbH & Co. KG
File type ASCII text, with very long lines (1829), with no line terminators
Hash 6f2cff312815e129e65971e1f7aa0b6c
f07651ab0ae9b95ef1007782e8d1bbf0fae53f66
26a7a91762ec29a98d90e879584a0218e49e6733c98504d5c15d156f39d72446
GET /0/0/6.js?i=0tkahjp5mwu&m=7&s=320&c=e63100&cr1=ffffff&f=arial&l=0&bv=90&lx=-420&ly=420&hi=20&he=7&hc=a8ddff&rs=80 HTTP/1.1
Host: ra.revolvermaps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 16 Sep 2022 03:25:51 GMT
Server: Apache
Last-Modified: Fri, 23 Jun 2017 15:59:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=31536000
Content-Length: 975
Keep-Alive: timeout=4, max=100
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 20ae50d0df52817906a88b07b3c08138
0f999020f07959636477be4178d238d4dd460464
26eb9c5ac69c9144425fb15a481336487c1923bb141685aea110b0e3dfc20171
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 20ae50d0df52817906a88b07b3c08138
0f999020f07959636477be4178d238d4dd460464
26eb9c5ac69c9144425fb15a481336487c1923bb141685aea110b0e3dfc20171
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 849d9b71f28edccc5fdab51c09f0fe9e
d2997d4bd5efe43b93058fb5299f79a000b78f2a
778f50372884346ca95dddcbb5518e7e346b1d617a1c0711af469cf6ee8c7db5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh3.googleusercontent.com/blogger_img_proxy/ANbyha34fkdG7FsmT1bMmCR4VJZ7TzZKlCINZsmhUa4CMj1w4d9uhjcGfFGcyErTmY2h5UXuNpkF8jQRPow6HIGo1OKIn0_g-GyOB9SclnpgNuAaC1ySUvs41ieriimrhk0=s0-d
404 Not Found 1.7 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha34fkdG7FsmT1bMmCR4VJZ7TzZKlCINZsmhUa4CMj1w4d9uhjcGfFGcyErTmY2h5UXuNpkF8jQRPow6HIGo1OKIn0_g-GyOB9SclnpgNuAaC1ySUvs41ieriimrhk0=s0-d
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 25006bfbefbb592fb55de49f83e5605e
2e2cb5a2fd7975e4198252977000b3bfd0182e9a
a9d0a88713747e04be068af33bbaf7d4d39b887a609193137061d3d7ac332484
GET /blogger_img_proxy/ANbyha34fkdG7FsmT1bMmCR4VJZ7TzZKlCINZsmhUa4CMj1w4d9uhjcGfFGcyErTmY2h5UXuNpkF8jQRPow6HIGo1OKIn0_g-GyOB9SclnpgNuAaC1ySUvs41ieriimrhk0=s0-d HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 16 Sep 2022 03:25:51 GMT
server: fife
content-length: 1715
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jk.revolvermaps.com/r.js
404 Not Found 202 B IP
ASN #34549 meerfarbig GmbH & Co. KG
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 2492f7ec93ae23151125ecffdf52af21
9a64e7e59d3161994d437a7aece39f9b32cbf7b2
a919e8c6eb303b9d327b089e20e2960cd885836cd236500371d998fa78333362
GET /r.js HTTP/1.1
Host: jk.revolvermaps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 404 Not Found
Date: Fri, 16 Sep 2022 03:25:51 GMT
Server: Apache
Content-Length: 202
Keep-Alive: timeout=4, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
cdn-img.pressreader.com/pressdisplay/docserver/getimage.aspx?regionguid=80108d58-7778-4799-900d-a43057852049&scale=141&file=13422018052900000000001001®ionKey=Y0MnokQMmgL1uXK8T4yJ3A%3d%3d
200 OK 6.0 kB URL HTTP/2 cdn-img.pressreader.com/pressdisplay/docserver/getimage.aspx?regionguid=80108d58-7778-4799-900d-a43057852049&scale=141&file=13422018052900000000001001®ionKey=Y0MnokQMmgL1uXK8T4yJ3A%3d%3d
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 117x119, components 3\012- data
Hash c0a8249b690ac2883a2feb0ce36d2299
73f0283f88db981ca8279102ee38aea62a31c5ff
4e8859a9a745ebd8f8c7f31dd793840bce658674d571e93c0767e1de22fd23d2
GET /pressdisplay/docserver/getimage.aspx?regionguid=80108d58-7778-4799-900d-a43057852049&scale=141&file=13422018052900000000001001®ionKey=Y0MnokQMmgL1uXK8T4yJ3A%3d%3d HTTP/1.1
Host: cdn-img.pressreader.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 16 Sep 2022 03:25:51 GMT
content-type: image/jpeg
content-length: 5965
cache-control: public, no-transform
expires: Sun, 16 Oct 2022 03:25:51 GMT
last-modified: Fri, 16 Sep 2022 03:25:51 GMT
wc: d7
x-powered-by: ARR/3.0
ws: 5
cf-cache-status: MISS
accept-ranges: bytes
set-cookie: __cf_bm=3H5mAzOy7RXCy7CJLBbwL1DOoOSrXeyY.AChJI5hQxw-1663298751-0-ASaJk76MBBH99IYgfhQ4rfRoO/3eF/ACKgkIrI+b0rLkroM5uyT1rl+6m73aTqChKb46p4P6mUkN0zpmhMu8HUo=; path=/; expires=Fri, 16-Sep-22 03:55:51 GMT; domain=.pressreader.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=2592000
server: cloudflare
cf-ray: 74b67f491936b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn-img.pressreader.com/pressdisplay/docserver/getimage.aspx?regionguid=30b15562-0b5b-4604-9a41-b5eccce65089&scale=400&file=13422018052900000000001001®ionKey=ci%2fleKmghx%2fsOMZlckXmeg%3d%3d
200 OK 19 kB URL HTTP/2 cdn-img.pressreader.com/pressdisplay/docserver/getimage.aspx?regionguid=30b15562-0b5b-4604-9a41-b5eccce65089&scale=400&file=13422018052900000000001001®ionKey=ci%2fleKmghx%2fsOMZlckXmeg%3d%3d
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 316x344, components 3\012- data
Hash 6ac65e43a7139a69c518aa48a3a83745
2347c0117827ff3937822883b042ef62c57cfb43
817dc52a3a050f375a888edee3cc546e829d4851d8af8c4095b559217a162cc8
GET /pressdisplay/docserver/getimage.aspx?regionguid=30b15562-0b5b-4604-9a41-b5eccce65089&scale=400&file=13422018052900000000001001®ionKey=ci%2fleKmghx%2fsOMZlckXmeg%3d%3d HTTP/1.1
Host: cdn-img.pressreader.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 16 Sep 2022 03:25:51 GMT
content-type: image/jpeg
content-length: 18871
cache-control: public, no-transform
expires: Sun, 16 Oct 2022 03:25:51 GMT
last-modified: Fri, 16 Sep 2022 03:25:51 GMT
wc: d7
x-powered-by: ARR/3.0
ws: 7
cf-cache-status: MISS
accept-ranges: bytes
set-cookie: __cf_bm=0EudPSNL4yS92YJRNad8VPHCbQOr3hF9jnxhKEExzhE-1663298751-0-Aea5a4fsjwCEaLyW0EXcEPKuhXByrVAuVa/V0fJ5DHfEwIWKEawuAgAZdfJSTHhB30QuosBidljCCul6zg349DE=; path=/; expires=Fri, 16-Sep-22 03:55:51 GMT; domain=.pressreader.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=2592000
server: cloudflare
cf-ray: 74b67f49193bb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha1Vg3JJhQxKySqhZMMiyf6lPFK-KHucz59c_9cuQtaICHbnUis6WWw9rJ7eyqBjjVStYGxOlCuxnsHC1RAgMm5PoIQLUxSlBSEiSlykp2yRpMlqWKm6nHUsf8AkVc7luFqy5WpNAW5NqWlfwi2g5Jwvbo2vfizmsuICzHkzagaU3O9WjISoNkf5qQl4E6yWh_lfdGktS-UoKzI8xkFnn7FqquKr47PtnFk=s0-d
200 OK 15 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha1Vg3JJhQxKySqhZMMiyf6lPFK-KHucz59c_9cuQtaICHbnUis6WWw9rJ7eyqBjjVStYGxOlCuxnsHC1RAgMm5PoIQLUxSlBSEiSlykp2yRpMlqWKm6nHUsf8AkVc7luFqy5WpNAW5NqWlfwi2g5Jwvbo2vfizmsuICzHkzagaU3O9WjISoNkf5qQl4E6yWh_lfdGktS-UoKzI8xkFnn7FqquKr47PtnFk=s0-d
IP
File type PNG image data, 150 x 185, 8-bit/color RGBA, non-interlaced\012- data
Hash 29478f90b24c595713c4e59cfea61c81
6ae90937569f3a6f67c440d7cdcc149f57e209de
7480f9ea45ea17ed049d191bfcd590d1fc395c7a3287e5994326c909e801d732
GET /blogger_img_proxy/ANbyha1Vg3JJhQxKySqhZMMiyf6lPFK-KHucz59c_9cuQtaICHbnUis6WWw9rJ7eyqBjjVStYGxOlCuxnsHC1RAgMm5PoIQLUxSlBSEiSlykp2yRpMlqWKm6nHUsf8AkVc7luFqy5WpNAW5NqWlfwi2g5Jwvbo2vfizmsuICzHkzagaU3O9WjISoNkf5qQl4E6yWh_lfdGktS-UoKzI8xkFnn7FqquKr47PtnFk=s0-d HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
date: Fri, 16 Sep 2022 03:25:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate, no-transform
content-disposition: attachment;filename="unnamed.png"
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 15362
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 818b1c492640bb49ddaaf8060465b76f
6b3aa62cd3855dc60fe30d8bfba7cbb5d6b7b931
1544372859a8715652c5d92e23880fe499e746d5791391744695cd55be3d6b7d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 848674a3bc6b0d4d6cba22b140c574bc
ec95f08f3a5b022c3753f78e30f71d03e2895d78
069aaae82ec20e5bbcc694f9603bded464798891e5e2abc27baadeace22f6a05
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c5464ec08b3114d812818031eda37083
03fd70aed34b34b304abfb9be669b8827d08802d
472be54521cdd8e728ede5df4056e50da4dc844dd62a1e99781a1a791e2629a3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "472BE54521CDD8E728EDE5DF4056E50DA4DC844DD62A1E99781A1A791E2629A3"
Last-Modified: Thu, 15 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15137
Expires: Fri, 16 Sep 2022 07:38:08 GMT
Date: Fri, 16 Sep 2022 03:25:51 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7df27d4646e6e1cd358f0997ad604ea9
bf0c3feb55312e00ed8aa718458cc1e932903ac2
ba7ebd5b66156d280c46a2e492c5830f67e114711498b405b4e57ee1f45f4905
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/html/r20220914/r20190131/zrt_lookup.html
200 OK 4.4 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/html/r20220914/r20190131/zrt_lookup.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1731)
Hash 682bf699cccbc0ff817e1fcb7b95262a
11ad3edf0008f52b733c2d6d7199e1f052318d58
bd42f773d589f85cf6884d7893746d5d4e0c082f78e1c80511cf3aefa1c69a0f
GET /pagead/html/r20220914/r20190131/zrt_lookup.html HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 4420
x-xss-protection: 0
date: Thu, 15 Sep 2022 03:52:54 GMT
expires: Thu, 29 Sep 2022 03:52:54 GMT
cache-control: public, max-age=1209600
etag: 9671129459699598864
content-type: text/html; charset=UTF-8
age: 84777
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash bc9a811cbf8395794e9506724cfd26e7
ef8569e244af83b67cdd63de0232e0a6e485ee60
9b4cef8120d9169cb594f2972604549781be924a7181800380b8118bda765ae6
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 16 Sep 2022 03:25:51 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 15 Sep 2022 23:32:39 GMT
Expires: Thu, 22 Sep 2022 23:32:38 GMT
Etag: "ef8569e244af83b67cdd63de0232e0a6e485ee60"
Cache-Control: max-age=590206,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74b67f4b4eb60b61-OSL
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 734d709ca96b537a66a72b012bad01b3
1422dc6e556936950feec9000a321a050b638ff8
f22c958051fad1d1d361d069afd22467fbc3caaebffac1ffb0fe3eead923c0c3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jk.revolvermaps.com/r.js
404 Not Found 202 B IP
ASN #34549 meerfarbig GmbH & Co. KG
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 2492f7ec93ae23151125ecffdf52af21
9a64e7e59d3161994d437a7aece39f9b32cbf7b2
a919e8c6eb303b9d327b089e20e2960cd885836cd236500371d998fa78333362
GET /r.js HTTP/1.1
Host: jk.revolvermaps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 404 Not Found
Date: Fri, 16 Sep 2022 03:25:51 GMT
Server: Apache
Content-Length: 202
Keep-Alive: timeout=4, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
www.blogger.com/dyn-css/authorization.css?targetBlogID=3843727205859859637&zx=9510ea7e-995b-4f01-ab02-6e4c934c471a
200 OK 21 B URL HTTP/2 www.blogger.com/dyn-css/authorization.css?targetBlogID=3843727205859859637&zx=9510ea7e-995b-4f01-ab02-6e4c934c471a
IP
File type very short file (no magic)
Hash a62e4d501434033d5d177e67d3aafdd0
34f7300c9ed47334cf10826d57af785321e3138b
b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522
GET /dyn-css/authorization.css?targetBlogID=3843727205859859637&zx=9510ea7e-995b-4f01-ab02-6e4c934c471a HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 16 Sep 2022 03:25:51 GMT
last-modified: Fri, 16 Sep 2022 03:25:51 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.blogger.com/navbar.g?targetBlogID=3843727205859859637&blogName=Rightway&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://rightway-tan.blogspot.com/search&blogLocale=en_GB&v=2&homepageUrl=https://rightway-tan.blogspot.com/&vt=1537280965658928976&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.z9QjrzsHcOc.O%2Fd%3D1%2Frs%3DAHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA%2Fm%3D__features__
200 OK 2.6 kB URL HTTP/2 www.blogger.com/navbar.g?targetBlogID=3843727205859859637&blogName=Rightway&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://rightway-tan.blogspot.com/search&blogLocale=en_GB&v=2&homepageUrl=https://rightway-tan.blogspot.com/&vt=1537280965658928976&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.z9QjrzsHcOc.O%2Fd%3D1%2Frs%3DAHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA%2Fm%3D__features__
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3207)
Hash 9f8a0114cd6476a278dba76ec08aef89
52cf6360af5ca1e6e30dd2274e339991121a2542
2bf10995cf7dd1e9771cbdd0715e0e8e566b29015feb808bb39ecd49dff6bd06
GET /navbar.g?targetBlogID=3843727205859859637&blogName=Rightway&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://rightway-tan.blogspot.com/search&blogLocale=en_GB&v=2&homepageUrl=https://rightway-tan.blogspot.com/&vt=1537280965658928976&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.z9QjrzsHcOc.O%2Fd%3D1%2Frs%3DAHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA%2Fm%3D__features__ HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 16 Sep 2022 03:25:51 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 2591
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8ff1c0d8a380ce4a561609526d995bf5
135ecd7e71ea2823d39f8c1efcb2121618ed8167
f7228281af8d6de222aa47b3a78a627f85315244e65a8956fa2c0c7dff1bb7ad
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 848674a3bc6b0d4d6cba22b140c574bc
ec95f08f3a5b022c3753f78e30f71d03e2895d78
069aaae82ec20e5bbcc694f9603bded464798891e5e2abc27baadeace22f6a05
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash edc3fd16211643f33475ab54eac21a38
2971ab3faf279849c6c89c2e557b361b09010a9b
eeea21b2ec81e44dc5caabf4c8be119c12c8566098253f5da2c45d45a517f0dc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash db503d6c6780cb1b8dfeffa10a50eada
51a459bdc02f20576031f526be6788f653095d94
b7a653d3c381c6cea5b6838aea01a7de8ea5c2d8bdf5ff92c4cd5c22829c8e8d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7975b33417f675d21a178b997288d616
1d2e957c46d45d6cb2f44389f3dcc66c880b6065
daffff63daade8bb0c2fd63570229df8502c563dd079b4da4103f6ee89fa67e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.com/adsid/integrator.js?domain=rightway-tan.blogspot.com
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=rightway-tan.blogspot.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=rightway-tan.blogspot.com HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 16 Sep 2022 03:25:51 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7975b33417f675d21a178b997288d616
1d2e957c46d45d6cb2f44389f3dcc66c880b6065
daffff63daade8bb0c2fd63570229df8502c563dd079b4da4103f6ee89fa67e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
partner.googleadservices.com/gampad/cookie.js?domain=rightway-tan.blogspot.com&callback=_gfp_s_&client=ca-pub-7113504168792126
200 OK 203 B URL HTTP/2 partner.googleadservices.com/gampad/cookie.js?domain=rightway-tan.blogspot.com&callback=_gfp_s_&client=ca-pub-7113504168792126
IP
File type ASCII text, with no line terminators
Hash b0c585855ffc6ef7b5f7ca1b8b7b4685
2f58e1b8bad789d890d07faa3c5fe19f6ef1382b
638630a4c58fe0973b3319afad5d2a21284bade1d4e137f86930ce507e9f19c5
GET /gampad/cookie.js?domain=rightway-tan.blogspot.com&callback=_gfp_s_&client=ca-pub-7113504168792126 HTTP/1.1
Host: partner.googleadservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 16 Sep 2022 03:25:51 GMT
server: cafe
cache-control: private
content-length: 203
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=rightway-tan.blogspot.com
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=rightway-tan.blogspot.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=rightway-tan.blogspot.com HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 16 Sep 2022 03:25:51 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
translate.googleapis.com/translate_static/css/translateelement.css
200 OK 3.6 kB URL HTTP/2 translate.googleapis.com/translate_static/css/translateelement.css
IP
File type ASCII text, with very long lines (18670)
Hash 897ba9a21d9625286674da769dacc2e2
84b4923ab7dee562395160824d53496314499b77
696cbf5c2f3f1efae555562b72abbbb22bed02eff03d62074555cab241190ae0
GET /translate_static/css/translateelement.css HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 3619
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 16 Sep 2022 03:12:35 GMT
expires: Fri, 16 Sep 2022 04:12:35 GMT
cache-control: public, max-age=3600
age: 796
last-modified: Wed, 17 Aug 2022 23:38:00 GMT
content-type: text/css
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha3sLhCRGVyWCKB8xvc1FxHl0PESQNCahanNaxIq5pkMwZOjjPUoKd3hbpUnTclya9UWf5d6dkq8ErHh4dBXqKk3_KqSoNErFEt8pYLAIMq-89WtcA=s0-d
404 Not Found 1.7 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha3sLhCRGVyWCKB8xvc1FxHl0PESQNCahanNaxIq5pkMwZOjjPUoKd3hbpUnTclya9UWf5d6dkq8ErHh4dBXqKk3_KqSoNErFEt8pYLAIMq-89WtcA=s0-d
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 5f87e4dd5b94fe167af41c525c4b1571
2e53135f40e2dd440baa9da73797c4f697132884
7dc02ff7145fe9a3e44c06f752d29b85c17b86548f29bd576b1b344083939815
GET /blogger_img_proxy/ANbyha3sLhCRGVyWCKB8xvc1FxHl0PESQNCahanNaxIq5pkMwZOjjPUoKd3hbpUnTclya9UWf5d6dkq8ErHh4dBXqKk3_KqSoNErFEt8pYLAIMq-89WtcA=s0-d HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 16 Sep 2022 03:25:51 GMT
server: fife
content-length: 1702
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
200 OK 28 kB URL HTTP/2 translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
IP
Hash f75c51446dcbf76eba239c192cd368e5
34df992d9a3da64e539dc89bc78b1dcfe29d00ac
17aee72f1a542deb61f021bd58c59f6a4a5dc41a88422699e5f609fa4ff0d539
GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 16 Sep 2022 03:25:51 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+908; expires=Sun, 15-Sep-2024 03:25:51 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.NEcMNFo_uHU.O/d=1/exm=el_conf/ed=1/rs=AN8SPfpBEFoOXr5xH6ZY0S3SgVQOXOLskQ/m=el_main
200 OK 94 kB URL HTTP/2 translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.NEcMNFo_uHU.O/d=1/exm=el_conf/ed=1/rs=AN8SPfpBEFoOXr5xH6ZY0S3SgVQOXOLskQ/m=el_main
IP
File type ASCII text, with very long lines (1613)
Hash 18aefe5ec21f3778ce3318002805140e
219365ad9a30dc86c628f26e2ffa748c9847a617
6a5fc910fcdbed9e79fc5449c97c6c4454ae4f8327e66232f6aee051d14989a3
GET /_/translate_http/_/js/k=translate_http.tr.no.NEcMNFo_uHU.O/d=1/exm=el_conf/ed=1/rs=AN8SPfpBEFoOXr5xH6ZY0S3SgVQOXOLskQ/m=el_main HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 93873
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 Sep 2022 17:35:03 GMT
expires: Fri, 15 Sep 2023 17:35:03 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 14 Sep 2022 05:13:28 GMT
content-type: text/javascript; charset=UTF-8
age: 35448
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
p18334.clksite.com/adServe/banners?tid=RIGHTWAYTAN_25267_1&size=26
301 Moved Permanently 162 B URL HTTP/2 p18334.clksite.com/adServe/banners?tid=RIGHTWAYTAN_25267_1&size=26
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /adServe/banners?tid=RIGHTWAYTAN_25267_1&size=26 HTTP/1.1
Host: p18334.clksite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Fri, 16 Sep 2022 03:25:51 GMT
content-type: text/html
content-length: 162
location: https://mybetterck.com/adServe/banners?tid=RIGHTWAYTAN_25267_1&size=26
X-Firefox-Spdy: h2
ra.revolvermaps.com/js/r.php?i=0tkahjp5mwu&l=https%3A%2F%2Frightway-tan.blogspot.com%2Fsearch%2Flabel%2FEthnocracy&r=1663298735623
200 OK 43 B URL HTTP/1.1 ra.revolvermaps.com/js/r.php?i=0tkahjp5mwu&l=https%3A%2F%2Frightway-tan.blogspot.com%2Fsearch%2Flabel%2FEthnocracy&r=1663298735623
IP
ASN #34549 meerfarbig GmbH & Co. KG
File type GIF image data, version 89a, 1 x 1\012- data
Hash 6d22e4f2d2057c6e8d6fab098e76e80f
b80b11203d97fe01c5597ca3be70406ea48f5709
afe0dcfca292a0fae8bce08a48c14d3e59c9d82c6052ab6d48a22ecc6c48f277
GET /js/r.php?i=0tkahjp5mwu&l=https%3A%2F%2Frightway-tan.blogspot.com%2Fsearch%2Flabel%2FEthnocracy&r=1663298735623 HTTP/1.1
Host: ra.revolvermaps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 16 Sep 2022 03:25:51 GMT
Server: Apache
Content-Length: 43
Keep-Alive: timeout=4, max=99
Connection: Keep-Alive
Content-Type: image/gif
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 849d9b71f28edccc5fdab51c09f0fe9e
d2997d4bd5efe43b93058fb5299f79a000b78f2a
778f50372884346ca95dddcbb5518e7e346b1d617a1c0711af469cf6ee8c7db5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ra.revolvermaps.com/js/c.php?i=0tkahjp5mwu
200 OK 43 B URL HTTP/1.1 ra.revolvermaps.com/js/c.php?i=0tkahjp5mwu
IP
ASN #34549 meerfarbig GmbH & Co. KG
File type GIF image data, version 89a, 1 x 1\012- data
Hash 6d22e4f2d2057c6e8d6fab098e76e80f
b80b11203d97fe01c5597ca3be70406ea48f5709
afe0dcfca292a0fae8bce08a48c14d3e59c9d82c6052ab6d48a22ecc6c48f277
GET /js/c.php?i=0tkahjp5mwu HTTP/1.1
Host: ra.revolvermaps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 16 Sep 2022 03:25:51 GMT
Server: Apache
Cache-Control: max-age=900
Last-Modified: Fri, 16 Sep 2022 03:25:51 GMT
Content-Length: 43
Keep-Alive: timeout=4, max=98
Connection: Keep-Alive
Content-Type: image/gif
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash edc3fd16211643f33475ab54eac21a38
2971ab3faf279849c6c89c2e557b361b09010a9b
eeea21b2ec81e44dc5caabf4c8be119c12c8566098253f5da2c45d45a517f0dc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash db503d6c6780cb1b8dfeffa10a50eada
51a459bdc02f20576031f526be6788f653095d94
b7a653d3c381c6cea5b6838aea01a7de8ea5c2d8bdf5ff92c4cd5c22829c8e8d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7975b33417f675d21a178b997288d616
1d2e957c46d45d6cb2f44389f3dcc66c880b6065
daffff63daade8bb0c2fd63570229df8502c563dd079b4da4103f6ee89fa67e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn-img.pressreader.com/pressdisplay/docserver/getimage.aspx?regionguid=e288bf24-1de5-4d71-b28f-a80629b057c2&scale=400&file=13422018052900000000001001®ionKey=v5wtqudGJOK2c4HQsI4scg%3d%3d
200 OK 23 kB URL HTTP/2 cdn-img.pressreader.com/pressdisplay/docserver/getimage.aspx?regionguid=e288bf24-1de5-4d71-b28f-a80629b057c2&scale=400&file=13422018052900000000001001®ionKey=v5wtqudGJOK2c4HQsI4scg%3d%3d
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x344, components 3\012- data
Hash 0fc22bb18172d416d691dce257fcac8d
76ff144fe11b6ab37c67948045a25e40ae8132f3
af6d620d7cc2a3d01ea0a7181244312ee8eadcd23cac44f4c3c43875153b5f89
GET /pressdisplay/docserver/getimage.aspx?regionguid=e288bf24-1de5-4d71-b28f-a80629b057c2&scale=400&file=13422018052900000000001001®ionKey=v5wtqudGJOK2c4HQsI4scg%3d%3d HTTP/1.1
Host: cdn-img.pressreader.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 16 Sep 2022 03:25:51 GMT
content-type: image/jpeg
content-length: 22716
cache-control: public, no-transform
expires: Sun, 16 Oct 2022 03:25:51 GMT
last-modified: Fri, 16 Sep 2022 03:25:51 GMT
wc: d6
x-powered-by: ARR/3.0
ws: 8
cf-cache-status: MISS
accept-ranges: bytes
set-cookie: __cf_bm=_2XQ.XFS5Xfh_63WEvSa8TI3tOiZwPG1I0C6.yxjMq8-1663298751-0-Ae/aQft5nTYxl+Jt8NuiTY7LQmdIcF8KCKocidOkyB0B7eNtk1HvfaXa6DEIEuc+Aaj+7oKR4HGIR4iBw/9o7hw=; path=/; expires=Fri, 16-Sep-22 03:55:51 GMT; domain=.pressreader.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=2592000
server: cloudflare
cf-ray: 74b67f491939b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn-img.pressreader.com/pressdisplay/docserver/getimage.aspx?regionguid=81ae52a8-14d2-455f-8f9d-a1e5f07761f9&scale=400&file=13422018052900000000001001®ionKey=%2bc7V5RSVqeFaAP%2f%2bTqm5bw%3d%3d
200 OK 26 kB URL HTTP/2 cdn-img.pressreader.com/pressdisplay/docserver/getimage.aspx?regionguid=81ae52a8-14d2-455f-8f9d-a1e5f07761f9&scale=400&file=13422018052900000000001001®ionKey=%2bc7V5RSVqeFaAP%2f%2bTqm5bw%3d%3d
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 340x332, components 3\012- data
Hash ed90a5d85051b8c34b15ae9b0cebb824
c6a6adb8ec7a7f848f1d4b5aabab217c1b0cfe26
40971a431118657eeed7b0c7bbe2e03703dd2ea33fab8bca4f3dead8eb219b7a
GET /pressdisplay/docserver/getimage.aspx?regionguid=81ae52a8-14d2-455f-8f9d-a1e5f07761f9&scale=400&file=13422018052900000000001001®ionKey=%2bc7V5RSVqeFaAP%2f%2bTqm5bw%3d%3d HTTP/1.1
Host: cdn-img.pressreader.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 16 Sep 2022 03:25:51 GMT
content-type: image/jpeg
content-length: 25934
cache-control: public, no-transform
expires: Sun, 16 Oct 2022 03:25:51 GMT
last-modified: Fri, 16 Sep 2022 03:25:51 GMT
wc: d8
x-powered-by: ARR/3.0
ws: 8
cf-cache-status: MISS
accept-ranges: bytes
set-cookie: __cf_bm=Kgsqr_ZRazG_8Sk86lxyqVqSyNJU.oY4QS6CiXzpPUE-1663298751-0-AWYHdkh/yuKS1i35OI5NHZ8vPWRYGOOK/AwCflzA60oj7fMbKhoBGRRdQA3bFCCDobxMBRs1jdxtA4D2lifxzRM=; path=/; expires=Fri, 16-Sep-22 03:55:51 GMT; domain=.pressreader.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=2592000
server: cloudflare
cf-ray: 74b67f49193ab509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha0fXcWYyx-T_JttHulIsfcBwfmWlvaaE6f5UJR6krkRK-H09JXMyCnr8nA0UTLjpcj3-41Huda2_anBtOoDiAYUnPk2wNg8CQ=s0-d
200 OK 67 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha0fXcWYyx-T_JttHulIsfcBwfmWlvaaE6f5UJR6krkRK-H09JXMyCnr8nA0UTLjpcj3-41Huda2_anBtOoDiAYUnPk2wNg8CQ=s0-d
IP
File type GIF image data, version 89a, 700 x 356\012- data
Hash 6cc19215f7aaa000c342456afbd4e7e3
fae8985d9cda1a51c854d70f3cec01ff9fddc690
c6069ff28bc5c6dcdea4fa4db1f10a9aead8f5f00ba70e0f011132eea2074dbf
GET /blogger_img_proxy/ANbyha0fXcWYyx-T_JttHulIsfcBwfmWlvaaE6f5UJR6krkRK-H09JXMyCnr8nA0UTLjpcj3-41Huda2_anBtOoDiAYUnPk2wNg8CQ=s0-d HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Sat, 17 Sep 2022 03:25:51 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: attachment;filename="unnamed.gif"
content-type: image/gif
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 16 Sep 2022 03:25:51 GMT
server: fife
content-length: 67345
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
vjs.zencdn.net/vttjs/0.15.3/vtt.global.min.js
200 OK 7.4 kB URL HTTP/2 vjs.zencdn.net/vttjs/0.15.3/vtt.global.min.js
IP
File type ASCII text, with very long lines (20915)
Hash 4c4ee758d9faee213618ed424bc5e15c
9fd5c3a5cbd0c94eb16d039221f52ccb556a8ebe
869e007fede7f0d842d3737fe03da03c80db0a7bb24ad66d65b9c7c1b2ac3e50
GET /vttjs/0.15.3/vtt.global.min.js HTTP/1.1
Host: vjs.zencdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://players.brightcove.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Wed, 11 May 2022 18:56:37 GMT
etag: "9ab357d51e365493dab6cf243489069b"
cache-control: public, max-age=31536000
content-type: application/javascript; charset=utf-8
content-encoding: gzip
date: Fri, 16 Sep 2022 03:25:51 GMT
x-served-by: cache-bma1658-BMA
x-cache: HIT
x-cache-hits: 28981
vary: Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
content-length: 7354
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 7b4383036106b9deae9d84799fbc265f
f0817b4a4f016f5727d688dc00bb9d3f36f60d26
29f17a66df109964a80119d3dc5fc73f981a563bf5ec35b57146aa7346bdc3de
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 16 Sep 2022 03:25:51 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 13 Sep 2022 07:06:36 GMT
Expires: Tue, 20 Sep 2022 07:06:35 GMT
Etag: "f0817b4a4f016f5727d688dc00bb9d3f36f60d26"
Cache-Control: max-age=358243,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74b67f4eb8170b61-OSL
cdn-img.pressreader.com/pressdisplay/docserver/getimage.aspx?regionKey=599uHa%2fAbULtAE1OZCE4iw%3d%3d
200 OK 130 kB URL HTTP/2 cdn-img.pressreader.com/pressdisplay/docserver/getimage.aspx?regionKey=599uHa%2fAbULtAE1OZCE4iw%3d%3d
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 775x443, components 3\012- data
Size 130 kB (130062 bytes)
Hash 3aad5b73621f4ace6523e9a2956c8cdd
18bf141cf40f0508a02e1eefaf5c4c6302aa2eba
4fabf30a640ce3340db19f4fefe9484c0a1831a05340d28b0cfd583c83e0965f
GET /pressdisplay/docserver/getimage.aspx?regionKey=599uHa%2fAbULtAE1OZCE4iw%3d%3d HTTP/1.1
Host: cdn-img.pressreader.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 16 Sep 2022 03:25:51 GMT
content-type: image/jpeg
content-length: 130062
cache-control: public, no-transform
expires: Sun, 16 Oct 2022 03:25:51 GMT
last-modified: Fri, 16 Sep 2022 03:25:51 GMT
wc: d5
x-powered-by: ARR/3.0
ws: 8
cf-cache-status: MISS
accept-ranges: bytes
set-cookie: __cf_bm=Su2idxUGHNEHRrRxS9Qs6gO_m3YQouvvAGxDPydIHwE-1663298751-0-ATBSTYz8vKij2r+FLtjfv0lBv6fe7gHa9sQ6hkHeNRjlwyoJ172U2pGNOF4Uy003oSK0ijrHMN5sTRfatKh0Cqk=; path=/; expires=Fri, 16-Sep-22 03:55:51 GMT; domain=.pressreader.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=2592000
server: cloudflare
cf-ray: 74b67f49193cb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c5464ec08b3114d812818031eda37083
03fd70aed34b34b304abfb9be669b8827d08802d
472be54521cdd8e728ede5df4056e50da4dc844dd62a1e99781a1a791e2629a3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "472BE54521CDD8E728EDE5DF4056E50DA4DC844DD62A1E99781A1A791E2629A3"
Last-Modified: Thu, 15 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15137
Expires: Fri, 16 Sep 2022 07:38:08 GMT
Date: Fri, 16 Sep 2022 03:25:51 GMT
Connection: keep-alive
edge.api.brightcove.com/playback/v1/accounts/4405352761001/videos/5790576186001
200 OK 0 B URL HTTP/2 edge.api.brightcove.com/playback/v1/accounts/4405352761001/videos/5790576186001
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /playback/v1/accounts/4405352761001/videos/5790576186001 HTTP/1.1
Host: edge.api.brightcove.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: accept
Referer: https://players.brightcove.net/
Origin: https://players.brightcove.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Varnish
retry-after: 0
access-control-max-age: 86400
accept-ranges: bytes
date: Fri, 16 Sep 2022 03:25:51 GMT
via: 1.1 varnish
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 0
x-timer: S1663298752.930143,VS0,VE0
access-control-allow-origin: *
access-control-expose-headers: cache-control,content-type,powered-by,powered-from,via,x-cache,x-cache-hits,x-served-by,x-timer,bcov-debug-cache-stats,bcov-instance,x-amz-cf-id,Policy-Key-Geo-Countries,Policy-Key-Geo-Exclude-Countries,Policy-Key-IP-Whitelist,Account-Status,Policy-Key-Raw,Policy-Key-Domains,Policy-Key-Require-Ad-Config,Policy-Key-AccountID,BCOV-Request-ID,BCOV-Error-Code,soapaction
access-control-allow-headers: content-type,accept,accept-language,content-language,bcov-policy,soapaction
access-control-allow-methods: HEAD,GET,OPTIONS
cache-control: max-age=0, no-cache, no-store
content-length: 0
X-Firefox-Spdy: h2
imasdk.googleapis.com/js/sdkloader/ima3.js
200 OK 129 kB URL HTTP/2 imasdk.googleapis.com/js/sdkloader/ima3.js
IP
File type ASCII text, with very long lines (2831)
Size 129 kB (128594 bytes)
Hash 50d626941b4ee04ffd8db40517d8efb0
b199efdcee797a379c48301caeeb8cd5754d1a90
602eefbadac2e37076b6daa8b56f24befe2b33d4b97c799695171aafd43fc57a
GET /js/sdkloader/ima3.js HTTP/1.1
Host: imasdk.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://players.brightcove.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-doubleclick-instream-static"
report-to: {"group":"ads-doubleclick-instream-static","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-instream-static"}]}
content-length: 128594
date: Fri, 16 Sep 2022 03:25:51 GMT
expires: Fri, 16 Sep 2022 03:25:51 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ra.revolvermaps.com/w/6/a/a2.php?i=0tkahjp5mwu&m=7&s=320&c=e63100&cr1=ffffff&f=arial&l=0&bv=90&lx=-420&ly=420&hi=20&he=7&hc=a8ddff&rs=80
200 OK 11 kB URL HTTP/1.1 ra.revolvermaps.com/w/6/a/a2.php?i=0tkahjp5mwu&m=7&s=320&c=e63100&cr1=ffffff&f=arial&l=0&bv=90&lx=-420&ly=420&hi=20&he=7&hc=a8ddff&rs=80
IP
ASN #34549 meerfarbig GmbH & Co. KG
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (33262), with no line terminators
Hash 2de366e03a369be3e16190fa8e1311d0
7b5c98b8cdc1358450c14610ae5bac4e416ba025
382b2cb1c25abe4e03d5205966d6c13658d12e190dc5740aafdecf602d983497
GET /w/6/a/a2.php?i=0tkahjp5mwu&m=7&s=320&c=e63100&cr1=ffffff&f=arial&l=0&bv=90&lx=-420&ly=420&hi=20&he=7&hc=a8ddff&rs=80 HTTP/1.1
Host: ra.revolvermaps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 16 Sep 2022 03:25:51 GMT
Server: Apache
Cache-Control: public, max-age=2592000
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=4, max=97
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
edge.api.brightcove.com/playback/v1/accounts/4405352761001/videos/5790576186001
404 Not Found 105 B URL HTTP/2 edge.api.brightcove.com/playback/v1/accounts/4405352761001/videos/5790576186001
IP
File type JSON data\012- , ASCII text
Hash 843b56585f08f9bccd219e493532f40c
aef0ed4a9820373b53d7d6dc615f180e42555c5d
358984f49cb1ecdf7646abe16a5a8362b02cd9ed0063c69cee2d69c0b06d3eeb
GET /playback/v1/accounts/4405352761001/videos/5790576186001 HTTP/1.1
Host: edge.api.brightcove.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json;pk=BCpkADawqM20OMM-x7m15UJIGftewpTBeIb8YhzcRJVG60d5asIFNzpmicyn2KwqPNfYKKsnW2jBEHU2dpenJ2rLL_einTNlQLJww8ShSYK1fKLVecf7EMZLrSAy-s7uG33gruwOUC1HAqoi
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://players.brightcove.net
Connection: keep-alive
Referer: https://players.brightcove.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
bcov-error-code: VIDEO_NOT_FOUND
bcov-request-id: d0e2fd27-ffd3-4d6a-b5ec-a42bdfb8f869
content-type: application/json; charset=UTF-8
powered-by: BC
powered-from: eu-central-1b
accept-ranges: bytes
date: Fri, 16 Sep 2022 03:25:52 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1680-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1663298752.946073,VS0,VE142
access-control-allow-origin: *
access-control-expose-headers: cache-control,content-type,powered-by,powered-from,via,x-cache,x-cache-hits,x-served-by,x-timer,bcov-debug-cache-stats,bcov-instance,x-amz-cf-id,Policy-Key-Geo-Countries,Policy-Key-Geo-Exclude-Countries,Policy-Key-IP-Whitelist,Account-Status,Policy-Key-Raw,Policy-Key-Domains,Policy-Key-Require-Ad-Config,Policy-Key-AccountID,BCOV-Request-ID,BCOV-Error-Code,soapaction
access-control-allow-headers: content-type,accept,accept-language,content-language,bcov-policy,soapaction
access-control-allow-methods: HEAD,GET,OPTIONS
cache-control: max-age=0, no-cache, no-store
content-length: 105
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/f4TWTjhlG_M
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/f4TWTjhlG_M
IP
Hash c3724edc88189007773e0ce6dfe3b439
fefec3857cf0b8f7dcb30c5a1266c6a1c8cc61c5
221a277f50b72bffc674ac7b156121f874e0fa1b4b1becd383c856c7a5596e0e
POST /s/gts1d4/f4TWTjhlG_M HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:52 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/f4TWTjhlG_M
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/f4TWTjhlG_M
IP
Hash c3724edc88189007773e0ce6dfe3b439
fefec3857cf0b8f7dcb30c5a1266c6a1c8cc61c5
221a277f50b72bffc674ac7b156121f874e0fa1b4b1becd383c856c7a5596e0e
POST /s/gts1d4/f4TWTjhlG_M HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:52 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/f4TWTjhlG_M
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/f4TWTjhlG_M
IP
Hash c3724edc88189007773e0ce6dfe3b439
fefec3857cf0b8f7dcb30c5a1266c6a1c8cc61c5
221a277f50b72bffc674ac7b156121f874e0fa1b4b1becd383c856c7a5596e0e
POST /s/gts1d4/f4TWTjhlG_M HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:52 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=6a904781f41dfb9f467076d6&account=4405352761001&destination=https%3A%2F%2Frightway-tan.blogspot.com%2F&platform_version=6.66.4&player=players.brightcove.com%2F4405352761001%2Fdefault_default&player_name=Brightcove%20Default%20Player&event=player_init&time=1663298736105&autoplay=false&seq=0
200 OK 35 B URL HTTP/2 metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=6a904781f41dfb9f467076d6&account=4405352761001&destination=https%3A%2F%2Frightway-tan.blogspot.com%2F&platform_version=6.66.4&player=players.brightcove.com%2F4405352761001%2Fdefault_default&player_name=Brightcove%20Default%20Player&event=player_init&time=1663298736105&autoplay=false&seq=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /v2/tracker?domain=videocloud&platform=video-js&session=6a904781f41dfb9f467076d6&account=4405352761001&destination=https%3A%2F%2Frightway-tan.blogspot.com%2F&platform_version=6.66.4&player=players.brightcove.com%2F4405352761001%2Fdefault_default&player_name=Brightcove%20Default%20Player&event=player_init&time=1663298736105&autoplay=false&seq=0 HTTP/1.1
Host: metrics.brightcove.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://players.brightcove.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 35
content-type: image/gif
cache-control: must-revalidate,no-cache,no-store
strict-transport-security: max-age=300; includeSubDomains
date: Fri, 16 Sep 2022 03:25:52 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=6a904781f41dfb9f467076d6&account=4405352761001&destination=https%3A%2F%2Frightway-tan.blogspot.com%2F&platform_version=6.66.4&player=players.brightcove.com%2F4405352761001%2Fdefault_default&player_name=Brightcove%20Default%20Player&autoplay=false&ads_enabled=true&usage=social!3.14.0&usage=qualityLevels!2.0.9&usage=qualityMenu!1.4.0&usage=iframe-embed&event=player_load&time=1663298736287&qos.performance.navigation.redirectCount=0&qos.performance.navigation.type=0&qos.performance.navigation.directedMigration=false&qos.performance.timing.loadEventEnd=0&qos.performance.timing.loadEventStart=0&qos.performance.timing.domComplete=0&qos.performance.timing.domContentLoadedEventEnd=1663298736178&qos.performance.timing.domContentLoadedEventStart=1663298736176&qos.performance.timing.domInteractive=1663298736125&qos.performance.timing.domLoading=1663298735801&qos.performance.timing.responseEnd=1663298735761&qos.performance.timing.responseStart=1663298735360&qos.performance.timing.requestStart=1663298735319&qos.performance.timing.secureConnectionStart=1663298735146&qos.performance.timing.connectEnd=1663298735319&qos.performance.timing.connectStart=1663298735055&qos.performance.timing.domainLookupEnd=1663298735051&qos.performance.timing.domainLookupStart=1663298735045&qos.performance.timing.fetchStart=1663298735013&qos.performance.timing.redirectEnd=0&qos.performance.timing.redirectStart=0&qos.performance.timing.unloadEventEnd=0&qos.performance.timing.unloadEventStart=0&qos.performance.timing.navigationStart=1663298735013&qos.performance.bcParse=277&qos.player.dimensions=%5B%5B1663298736287%2C%220x0%22%2C%22640x425%22%5D%5D&qos.player.pixelratio=%5B%5B1663298736287%2C1%5D%5D&qos.player.screendimensions=%5B%5B1663298736287%2C%221280x1024%22%5D%5D&seq=2
200 OK 35 B URL HTTP/2 metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=6a904781f41dfb9f467076d6&account=4405352761001&destination=https%3A%2F%2Frightway-tan.blogspot.com%2F&platform_version=6.66.4&player=players.brightcove.com%2F4405352761001%2Fdefault_default&player_name=Brightcove%20Default%20Player&autoplay=false&ads_enabled=true&usage=social!3.14.0&usage=qualityLevels!2.0.9&usage=qualityMenu!1.4.0&usage=iframe-embed&event=player_load&time=1663298736287&qos.performance.navigation.redirectCount=0&qos.performance.navigation.type=0&qos.performance.navigation.directedMigration=false&qos.performance.timing.loadEventEnd=0&qos.performance.timing.loadEventStart=0&qos.performance.timing.domComplete=0&qos.performance.timing.domContentLoadedEventEnd=1663298736178&qos.performance.timing.domContentLoadedEventStart=1663298736176&qos.performance.timing.domInteractive=1663298736125&qos.performance.timing.domLoading=1663298735801&qos.performance.timing.responseEnd=1663298735761&qos.performance.timing.responseStart=1663298735360&qos.performance.timing.requestStart=1663298735319&qos.performance.timing.secureConnectionStart=1663298735146&qos.performance.timing.connectEnd=1663298735319&qos.performance.timing.connectStart=1663298735055&qos.performance.timing.domainLookupEnd=1663298735051&qos.performance.timing.domainLookupStart=1663298735045&qos.performance.timing.fetchStart=1663298735013&qos.performance.timing.redirectEnd=0&qos.performance.timing.redirectStart=0&qos.performance.timing.unloadEventEnd=0&qos.performance.timing.unloadEventStart=0&qos.performance.timing.navigationStart=1663298735013&qos.performance.bcParse=277&qos.player.dimensions=%5B%5B1663298736287%2C%220x0%22%2C%22640x425%22%5D%5D&qos.player.pixelratio=%5B%5B1663298736287%2C1%5D%5D&qos.player.screendimensions=%5B%5B1663298736287%2C%221280x1024%22%5D%5D&seq=2
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /v2/tracker?domain=videocloud&platform=video-js&session=6a904781f41dfb9f467076d6&account=4405352761001&destination=https%3A%2F%2Frightway-tan.blogspot.com%2F&platform_version=6.66.4&player=players.brightcove.com%2F4405352761001%2Fdefault_default&player_name=Brightcove%20Default%20Player&autoplay=false&ads_enabled=true&usage=social!3.14.0&usage=qualityLevels!2.0.9&usage=qualityMenu!1.4.0&usage=iframe-embed&event=player_load&time=1663298736287&qos.performance.navigation.redirectCount=0&qos.performance.navigation.type=0&qos.performance.navigation.directedMigration=false&qos.performance.timing.loadEventEnd=0&qos.performance.timing.loadEventStart=0&qos.performance.timing.domComplete=0&qos.performance.timing.domContentLoadedEventEnd=1663298736178&qos.performance.timing.domContentLoadedEventStart=1663298736176&qos.performance.timing.domInteractive=1663298736125&qos.performance.timing.domLoading=1663298735801&qos.performance.timing.responseEnd=1663298735761&qos.performance.timing.responseStart=1663298735360&qos.performance.timing.requestStart=1663298735319&qos.performance.timing.secureConnectionStart=1663298735146&qos.performance.timing.connectEnd=1663298735319&qos.performance.timing.connectStart=1663298735055&qos.performance.timing.domainLookupEnd=1663298735051&qos.performance.timing.domainLookupStart=1663298735045&qos.performance.timing.fetchStart=1663298735013&qos.performance.timing.redirectEnd=0&qos.performance.timing.redirectStart=0&qos.performance.timing.unloadEventEnd=0&qos.performance.timing.unloadEventStart=0&qos.performance.timing.navigationStart=1663298735013&qos.performance.bcParse=277&qos.player.dimensions=%5B%5B1663298736287%2C%220x0%22%2C%22640x425%22%5D%5D&qos.player.pixelratio=%5B%5B1663298736287%2C1%5D%5D&qos.player.screendimensions=%5B%5B1663298736287%2C%221280x1024%22%5D%5D&seq=2 HTTP/1.1
Host: metrics.brightcove.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://players.brightcove.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 35
content-type: image/gif
cache-control: must-revalidate,no-cache,no-store
strict-transport-security: max-age=300; includeSubDomains
date: Fri, 16 Sep 2022 03:25:52 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=6a904781f41dfb9f467076d6&account=4405352761001&destination=https%3A%2F%2Frightway-tan.blogspot.com%2F&platform_version=6.66.4&player=players.brightcove.com%2F4405352761001%2Fdefault_default&player_name=Brightcove%20Default%20Player&event=catalog_request&url=https%3A%2F%2Fedge.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F4405352761001%2Fvideos%2F5790576186001&time=1663298736112&autoplay=false&seq=1
200 OK 35 B URL HTTP/2 metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=6a904781f41dfb9f467076d6&account=4405352761001&destination=https%3A%2F%2Frightway-tan.blogspot.com%2F&platform_version=6.66.4&player=players.brightcove.com%2F4405352761001%2Fdefault_default&player_name=Brightcove%20Default%20Player&event=catalog_request&url=https%3A%2F%2Fedge.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F4405352761001%2Fvideos%2F5790576186001&time=1663298736112&autoplay=false&seq=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /v2/tracker?domain=videocloud&platform=video-js&session=6a904781f41dfb9f467076d6&account=4405352761001&destination=https%3A%2F%2Frightway-tan.blogspot.com%2F&platform_version=6.66.4&player=players.brightcove.com%2F4405352761001%2Fdefault_default&player_name=Brightcove%20Default%20Player&event=catalog_request&url=https%3A%2F%2Fedge.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F4405352761001%2Fvideos%2F5790576186001&time=1663298736112&autoplay=false&seq=1 HTTP/1.1
Host: metrics.brightcove.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://players.brightcove.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 35
content-type: image/gif
cache-control: must-revalidate,no-cache,no-store
strict-transport-security: max-age=300; includeSubDomains
date: Fri, 16 Sep 2022 03:25:52 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/f4TWTjhlG_M
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/f4TWTjhlG_M
IP
Hash c3724edc88189007773e0ce6dfe3b439
fefec3857cf0b8f7dcb30c5a1266c6a1c8cc61c5
221a277f50b72bffc674ac7b156121f874e0fa1b4b1becd383c856c7a5596e0e
POST /s/gts1d4/f4TWTjhlG_M HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:52 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 5d0c50b57a216e5f608b3dcc0d22f0bc
7d2205d17b38b88aa9e6986334b8688789382f27
0ad151d761a127d0000f05cc0e202fe612c4f1593daa59077743695307a3a973
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Fri, 16 Sep 2022 03:25:52 GMT
Server: ECS (dcb/7EC8)
X-Cache: Miss from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 6Arq7_P899645iwL1vwhX3gmwvJp7av4OwUOFw0_17C-aa7BhJlSow==
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5cb573d3c9bcfd0aca93d5064638773c
8389db960285c5b7a5a3beaa026b0ece6b362d8a
618e5bc351dfee8d072d1357971e52a5891de7d89e8cfc57affc7ddc55082e8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s0.2mdn.net/instream/video/client.js
200 OK 17 kB URL HTTP/2 s0.2mdn.net/instream/video/client.js
IP
File type ASCII text, with very long lines (2156)
Hash 49295de6ccd23cf80b6418a2d209868f
42a955b4560bb22cb9b5b39577f7a691ea345018
d5a29c73c6200af2ed6918a61106e649b92098ecd476830d725ed4d2ea5a8efa
GET /instream/video/client.js HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://players.brightcove.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
content-length: 16746
date: Fri, 16 Sep 2022 03:25:52 GMT
expires: Fri, 16 Sep 2022 03:25:52 GMT
cache-control: private, max-age=900
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5cb573d3c9bcfd0aca93d5064638773c
8389db960285c5b7a5a3beaa026b0ece6b362d8a
618e5bc351dfee8d072d1357971e52a5891de7d89e8cfc57affc7ddc55082e8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
clksite.com/adServe/banners?tid=RIGHTWAYTAN_25267_3&pause=5
301 Moved Permanently 162 B URL HTTP/2 clksite.com/adServe/banners?tid=RIGHTWAYTAN_25267_3&pause=5
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /adServe/banners?tid=RIGHTWAYTAN_25267_3&pause=5 HTTP/1.1
Host: clksite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Fri, 16 Sep 2022 03:25:52 GMT
content-type: text/html
content-length: 162
location: https://mybetterck.com/adServe/banners?tid=RIGHTWAYTAN_25267_3&pause=5
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha0bFhmn9wx-CXkk4S3ZAv2GVtM0zrE6oFhYCQMXSgMRB_8mdk2aebDRozDT2deeo4dnN55tnoWBCQVe-FTIGO0N9mf4YlED-w=s0-d
200 OK 446 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha0bFhmn9wx-CXkk4S3ZAv2GVtM0zrE6oFhYCQMXSgMRB_8mdk2aebDRozDT2deeo4dnN55tnoWBCQVe-FTIGO0N9mf4YlED-w=s0-d
IP
File type PNG image data, 699 x 481, 8-bit/color RGB, non-interlaced\012- data
Size 446 kB (445601 bytes)
Hash df974ac946e33866090d2c05040f0730
ac8599197cc9a75b08102a8410bdce88c875d60a
bcea025ad670fd24aba0e94c5c3bb85fca5dbe20a94d3b0c24752634966e88cb
GET /blogger_img_proxy/ANbyha0bFhmn9wx-CXkk4S3ZAv2GVtM0zrE6oFhYCQMXSgMRB_8mdk2aebDRozDT2deeo4dnN55tnoWBCQVe-FTIGO0N9mf4YlED-w=s0-d HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Sat, 17 Sep 2022 03:25:52 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: attachment;filename="unnamed.png"
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 16 Sep 2022 03:25:52 GMT
server: fife
content-length: 445601
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
p18334.mycdn.co/banners/script/ui_tag_143-0.js
200 OK 66 kB URL HTTP/2 p18334.mycdn.co/banners/script/ui_tag_143-0.js
IP
File type ASCII text, with very long lines (1632)
Hash 797eb25f42a10ba24ac7c66f236ccf1f
c0f82cca4ed826633c1b062fccd247dee8172de7
b77fbc2b0a7902a4de275889bf3efc9d28df62d513ea5ef54f0e95c68b30a7f3
GET /banners/script/ui_tag_143-0.js HTTP/1.1
Host: p18334.mycdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 16 Sep 2022 03:25:52 GMT
content-encoding: gzip
content-length: 66518
content-type: application/javascript
last-modified: Sun, 05 Dec 2021 08:29:13 GMT
accept-ranges: bytes
server: nginx
etag: W/"61ac7859-48cdf"
cache-control: max-age=172800
x-hw: 1663298752.cds023.sk1.hn,1663298752.cds255.sk1.c
X-Firefox-Spdy: h2
p18334.mycdn.co/uicomp/styles/dist/143-0/it-ui-comp-26.css
200 OK 4.3 kB URL HTTP/2 p18334.mycdn.co/uicomp/styles/dist/143-0/it-ui-comp-26.css
IP
File type ASCII text, with very long lines (24018), with no line terminators
Hash 00cbd303cd4c9857ef92d24f8155f21e
38bea983ada33acc17f48fd29ced114956526166
5fa1b861dc45a45fbf9687ac36b9631c37d2f3805ec4c04bfae3d1bdbf3ab7f9
GET /uicomp/styles/dist/143-0/it-ui-comp-26.css HTTP/1.1
Host: p18334.mycdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 16 Sep 2022 03:25:52 GMT
etag: "1638712671"
content-encoding: gzip
content-length: 4273
content-type: text/css
last-modified: Sun, 05 Dec 2021 13:57:51 GMT
accept-ranges: bytes
server: nginx
cache-control: max-age=315360000
x-hw: 1663298752.cds023.sk1.hn,1663298752.cds214.sk1.c
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 1.3 kB IP
ASN #20940 Akamai International B.V.
File type gzip compressed data\012- data
Hash 99c1d9007c62f231704905e94eb1045c
967af4f36d956c3cfd4491071b24f4f5238062f2
6453a8a1a82c5cb192a13b0a87b5346aa32daf72f03c9598d4c3c1886e52e3f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1D5C76A54A4AB121CCF5F456516EC99FB7F5129A491E078D97C749B94060970A"
Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2627
Expires: Fri, 16 Sep 2022 04:09:39 GMT
Date: Fri, 16 Sep 2022 03:25:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 35f3deb94b2a985eb02f5a14f033c44f
2076e4cb6faf9a7bf1cbfc8947db9a8550f556bd
1d5c76a54a4ab121ccf5f456516ec99fb7f5129a491e078d97c749b94060970a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1D5C76A54A4AB121CCF5F456516EC99FB7F5129A491E078D97C749B94060970A"
Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2627
Expires: Fri, 16 Sep 2022 04:09:39 GMT
Date: Fri, 16 Sep 2022 03:25:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 35f3deb94b2a985eb02f5a14f033c44f
2076e4cb6faf9a7bf1cbfc8947db9a8550f556bd
1d5c76a54a4ab121ccf5f456516ec99fb7f5129a491e078d97c749b94060970a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1D5C76A54A4AB121CCF5F456516EC99FB7F5129A491E078D97C749B94060970A"
Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2627
Expires: Fri, 16 Sep 2022 04:09:39 GMT
Date: Fri, 16 Sep 2022 03:25:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 35f3deb94b2a985eb02f5a14f033c44f
2076e4cb6faf9a7bf1cbfc8947db9a8550f556bd
1d5c76a54a4ab121ccf5f456516ec99fb7f5129a491e078d97c749b94060970a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1D5C76A54A4AB121CCF5F456516EC99FB7F5129A491E078D97C749B94060970A"
Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2627
Expires: Fri, 16 Sep 2022 04:09:39 GMT
Date: Fri, 16 Sep 2022 03:25:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 35f3deb94b2a985eb02f5a14f033c44f
2076e4cb6faf9a7bf1cbfc8947db9a8550f556bd
1d5c76a54a4ab121ccf5f456516ec99fb7f5129a491e078d97c749b94060970a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1D5C76A54A4AB121CCF5F456516EC99FB7F5129A491E078D97C749B94060970A"
Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2627
Expires: Fri, 16 Sep 2022 04:09:39 GMT
Date: Fri, 16 Sep 2022 03:25:52 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2cc7f760-37bd-48b3-a202-6f1423e82c4d.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2cc7f760-37bd-48b3-a202-6f1423e82c4d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c6df210d4ad73c1cb4bf14a8b68aaaf6
50cb093cd31e53a67e0a27d9ce9439fbb8a03df8
832d746a04665e8fd808e02a3d4c4d2525fb55e8685f2c654836ebea37c4ca92
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2cc7f760-37bd-48b3-a202-6f1423e82c4d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8551
x-amzn-requestid: fcb8406f-a0a4-463a-8d6c-86a465867db4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YhUkiG2FIAMFQsg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63239ae9-4e2927b52b5ac3f907f52027;Sampled=0
x-amzn-remapped-date: Thu, 15 Sep 2022 21:36:41 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: f7ER8lbphHucpnBSlWF1oGktAVq-lmLrZQUtLCSXrkEYdhYYaX6W3g==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Sep 2022 21:45:53 GMT
age: 20399
etag: "50cb093cd31e53a67e0a27d9ce9439fbb8a03df8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
mybetterck.com/adServe/banners?tid=RIGHTWAYTAN_25267_1&size=26
200 OK 39 kB URL HTTP/2 mybetterck.com/adServe/banners?tid=RIGHTWAYTAN_25267_1&size=26
IP
Hash c1cd853ccfe8177caf6b1b78b943dcbb
fbd98b793f9075305e656a8074ee1a880d4fa433
6b44ecd088b4f4b710533646dbd5bfb080ea128932ff9a418644ce7819030607
GET /adServe/banners?tid=RIGHTWAYTAN_25267_1&size=26 HTTP/1.1
Host: mybetterck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rightway-tan.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 03:25:52 GMT
content-type: text/javascript;charset=utf-8
vary: Accept-Encoding
cache-control: no-cache
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2e1c925-7f52-4acd-b350-ece9de960341.webp
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2e1c925-7f52-4acd-b350-ece9de960341.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f61608eae6c6b04627343f86832ba892
89c6a9d2cbe149235409a42424a0c7c91593d7fb
382e3f8d016a88e952f6a8da65b8933c345497bcb7b76cd27ad58ec021e023a4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2e1c925-7f52-4acd-b350-ece9de960341.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9349
x-amzn-requestid: a4654952-01b4-43cf-a4a5-638a012cc3e0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YhVAAH5foAMFqFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63239b99-4d4883b824ac4fcf14a53983;Sampled=0
x-amzn-remapped-date: Thu, 15 Sep 2022 21:39:37 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: E1ybwRysIph_3C8YOM81bvRNYk9q8AdOij_mIzLgDkRF7d88DA4PNg==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Sep 2022 21:50:35 GMT
age: 20117
etag: "89c6a9d2cbe149235409a42424a0c7c91593d7fb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8e3eca0d-da18-4b3c-8625-afa9f187d0e3.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8e3eca0d-da18-4b3c-8625-afa9f187d0e3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8bedb04287b8f09d30fed0ae386b9bcc
2b8a6de0faac5c1a99b48c28da9c05f520ef6add
cec3955f3330184ace4388b7c00262b52c9ca43e9ece6fb8f2fdec2ee9e53a9e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8e3eca0d-da18-4b3c-8625-afa9f187d0e3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4955
x-amzn-requestid: e7c21397-14e0-42fd-86f3-3f1e6940da8a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YhU0zG1uIAMF_mA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63239b51-386abef75b6435a0656e86cd;Sampled=0
x-amzn-remapped-date: Thu, 15 Sep 2022 21:38:25 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: w0izptVhe4GTDP0l4M18uTvK6vQeKiiaGSZ5UfZATWGIyjL5C8sURQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 b13f158bdf9805ca47e07c0c35870c12.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Sep 2022 21:55:30 GMT
etag: "2b8a6de0faac5c1a99b48c28da9c05f520ef6add"
content-type: image/jpeg
age: 19822
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbf0d71b3-30ed-483e-8bef-18d7a833ff57.jpeg
200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbf0d71b3-30ed-483e-8bef-18d7a833ff57.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 300d3b6181f9bcb7318b0706646787fa
9cf371e2ecdd46de7ea1290bb158b144a9de57bb
7059364a6076210e603301e0e3ad0009a5c1cd0b8821e321f704532e17b95e5e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbf0d71b3-30ed-483e-8bef-18d7a833ff57.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6560
x-amzn-requestid: 0532b908-dbda-4d51-8574-dba85e33bfcf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YUrG7GTnoAMF9-A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631e8bc5-35c25a2a76c8e0db6d7b06df;Sampled=0
x-amzn-remapped-date: Mon, 12 Sep 2022 01:30:45 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Xvgf5sF1GJNaJ2uERewkTcfwr3cUHVwU8-CXI7fK2K4t6JCsyPnzJg==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Sep 2022 22:27:11 GMT
age: 17921
etag: "9cf371e2ecdd46de7ea1290bb158b144a9de57bb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
hearty.me/?utm_source=roodo&utm_medium=roodo&utm_campaign=roodo
200 OK 11 kB URL HTTP/2 hearty.me/?utm_source=roodo&utm_medium=roodo&utm_campaign=roodo
IP
Hash 8b89a168cac4947b8229ae8f309013e6
7c1f75c1806c1c103a7c897ce02d00dec6a7fe5e
16c314c0283e1acb531b83d93e0164593ce413ad4b9f0ce3084a4e5e80278cf4
GET /?utm_source=roodo&utm_medium=roodo&utm_campaign=roodo HTTP/1.1
Host: hearty.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rightway-tan.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: embed
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 16 Sep 2022 03:25:52 GMT
content-type: text/html; charset = utf-8;charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=psgq3h0u0fhodov4vp43n5lhp1; expires=Sat, 17-Sep-2022 03:25:52 GMT; Max-Age=86400; path=/; domain=.hearty.me; secure; SameSite=None
vary: Accept-Encoding
x-frame-options: sameorigin
content-security-policy: frame-ancestors 'self'; object-src 'none'; upgrade-insecure-requests; block-all-mixed-content
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
referrer-policy: origin-when-cross-origin
expect-ct: max-age=86400, report-uri="https://nien.report-uri.com/r/d/ct/reportOnly"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VQwUmr9QA%2FS0irWqDXi9KW%2FGp7jRr7%2BY3BEvCS477f17BJca7CjmXfr80WwFuoi1SnR5Byb0qI7Wpu2WHmwLaYPCBWehJnM38sRclAMd2lUDNs9An5LuTQ2Kkmg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74b67f527e02b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
p18334.mycdn.co/banners/bounce/bounce-tag_80.2-1.js
200 OK 18 kB URL HTTP/2 p18334.mycdn.co/banners/bounce/bounce-tag_80.2-1.js
IP
File type ASCII text, with very long lines (47097)
Hash 3c50756d4811b2134a5753ad4bff7535
d3927bff2e0de7fe55f3ad4670109a4cd18dd436
2ca9a059be99fff8e6616e04dc20f4d35e06cc5812eea9abcc9e717ad6dd1ca1
GET /banners/bounce/bounce-tag_80.2-1.js HTTP/1.1
Host: p18334.mycdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 16 Sep 2022 03:25:52 GMT
etag: "1561375996"
content-encoding: gzip
content-length: 17978
content-type: application/javascript
last-modified: Mon, 24 Jun 2019 11:33:16 GMT
accept-ranges: bytes
server: nginx
cache-control: max-age=172800
x-hw: 1663298752.cds023.sk1.hn,1663298752.cds242.sk1.c
X-Firefox-Spdy: h2
mybetterck.com/adServe/banners/findBanner?num=1&keyword=Rightway%3A%20Ethnocracy&tid=RIGHTWAYTAN_25267_1&type=js&ar=b&ts=c&ito=https%3A%2F%2Fp18334.mycdn.co&bs=26&referrer=https%3A%2F%2Frightway-tan.blogspot.com%2Fsearch%2Flabel%2FEthnocracy&ap=cmp%3DBANNER%26evp%3DHFz5zNIIs96fzq49jFkHXcQzYObQGwwUVnopfaBNrCzspNJ6LaC0adbA2XswhrCc%26sjv%3D143.1%26ctid%3D0%26th%3D898%26tw%3D1280%26inco%3D0%26tip%3DRightway%253A%2520Ethnocracy&pid=18334&popeye=bXg9bnVsbCZteT1udWxsJmN4PW51bGwmY3k9bnVsbCZ3PTEyODAmaD04OTgmYz0xJnM9MSZ0PTEmaT0wJm89MCZzb19mYj0tMSZzb19nbz0tMSZzb19ncD0tMSZzb190dz0tMSZzcD0wMDAwMDAwMDAwMDAxMDAwMDAwMDAwMCZtbV9tbj0wJm1tX2FzPTAmbW1fYWQ9MCZtbV9tdD0wJm1tX3NjPTAmbW1fc2RjPTAmbmNycz0xNg%3D%3D&olive=1&callback=ITC2vtgx3vmtz2
200 OK 1.4 kB URL HTTP/2 mybetterck.com/adServe/banners/findBanner?num=1&keyword=Rightway%3A%20Ethnocracy&tid=RIGHTWAYTAN_25267_1&type=js&ar=b&ts=c&ito=https%3A%2F%2Fp18334.mycdn.co&bs=26&referrer=https%3A%2F%2Frightway-tan.blogspot.com%2Fsearch%2Flabel%2FEthnocracy&ap=cmp%3DBANNER%26evp%3DHFz5zNIIs96fzq49jFkHXcQzYObQGwwUVnopfaBNrCzspNJ6LaC0adbA2XswhrCc%26sjv%3D143.1%26ctid%3D0%26th%3D898%26tw%3D1280%26inco%3D0%26tip%3DRightway%253A%2520Ethnocracy&pid=18334&popeye=bXg9bnVsbCZteT1udWxsJmN4PW51bGwmY3k9bnVsbCZ3PTEyODAmaD04OTgmYz0xJnM9MSZ0PTEmaT0wJm89MCZzb19mYj0tMSZzb19nbz0tMSZzb19ncD0tMSZzb190dz0tMSZzcD0wMDAwMDAwMDAwMDAxMDAwMDAwMDAwMCZtbV9tbj0wJm1tX2FzPTAmbW1fYWQ9MCZtbV9tdD0wJm1tX3NjPTAmbW1fc2RjPTAmbmNycz0xNg%3D%3D&olive=1&callback=ITC2vtgx3vmtz2
IP
File type ASCII text, with very long lines (2952), with no line terminators
Hash 227b9b2f6adbf86db6970544abbe54b9
4f53ab82d1cb48ee979bcf9aa5964f79a487ba7c
d07a55483e5dca74fe4d484f1fb5fd8d9cc6e7d19a1c702d0f5cf4b85c2cfd3a
GET /adServe/banners/findBanner?num=1&keyword=Rightway%3A%20Ethnocracy&tid=RIGHTWAYTAN_25267_1&type=js&ar=b&ts=c&ito=https%3A%2F%2Fp18334.mycdn.co&bs=26&referrer=https%3A%2F%2Frightway-tan.blogspot.com%2Fsearch%2Flabel%2FEthnocracy&ap=cmp%3DBANNER%26evp%3DHFz5zNIIs96fzq49jFkHXcQzYObQGwwUVnopfaBNrCzspNJ6LaC0adbA2XswhrCc%26sjv%3D143.1%26ctid%3D0%26th%3D898%26tw%3D1280%26inco%3D0%26tip%3DRightway%253A%2520Ethnocracy&pid=18334&popeye=bXg9bnVsbCZteT1udWxsJmN4PW51bGwmY3k9bnVsbCZ3PTEyODAmaD04OTgmYz0xJnM9MSZ0PTEmaT0wJm89MCZzb19mYj0tMSZzb19nbz0tMSZzb19ncD0tMSZzb190dz0tMSZzcD0wMDAwMDAwMDAwMDAxMDAwMDAwMDAwMCZtbV9tbj0wJm1tX2FzPTAmbW1fYWQ9MCZtbV9tdD0wJm1tX3NjPTAmbW1fc2RjPTAmbmNycz0xNg%3D%3D&olive=1&callback=ITC2vtgx3vmtz2 HTTP/1.1
Host: mybetterck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 03:25:52 GMT
content-type: text/javascript;charset=utf-8
vary: Accept-Encoding
cache-control: no-cache
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
set-cookie: rhid=82027821477; Max-Age=15552000; Expires=Wed, 15-Mar-2023 03:25:52 GMT; Domain=mybetterck.com; Path=/; SameSite=None; secure;
capdata=50289s.1_1663298752; Max-Age=86400; Expires=Sat, 17-Sep-2022 03:25:52 GMT; Domain=mybetterck.com; Path=/adServe; SameSite=None; secure;
content-encoding: gzip
X-Firefox-Spdy: h2
p18334.mycdn.co/ext/ib/31/dpp_26__black_english.gif
200 OK 5.5 kB URL HTTP/2 p18334.mycdn.co/ext/ib/31/dpp_26__black_english.gif
IP
File type GIF image data, version 89a, 468 x 60\012- data
Hash 25ca3588b2bf792d461dbd6bfb3c68cb
eb783e0550a6eda349b453d1abfdf2f799149554
62b9ed1fa40bd3ddaee96c48b1fe3ff4c3c27833f16c29c32659a39302635a56
GET /ext/ib/31/dpp_26__black_english.gif HTTP/1.1
Host: p18334.mycdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 16 Sep 2022 03:25:53 GMT
content-length: 5482
content-type: image/gif
last-modified: Sun, 04 Feb 2018 10:12:45 GMT
accept-ranges: bytes
server: nginx
etag: "5a76dc9d-156a"
cache-control: max-age=315360000
x-hw: 1663298752.cds023.sk1.hn,1663298753.cds066.sk1.c
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3c4ccde3c005912d7beb96d384b682bb
32921158136d33b968ae900879201217e2eb4ff3
4e53060ab4fb2227c698e4f3487ced9512af7bea2c5842c106d9970bbb3842a2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
platform.twitter.com/widgets/widget_iframe.c4bdc17e77719578b594d5555bee90db.html?origin=https%3A%2F%2Frightway-tan.blogspot.com
200 OK 105 kB URL HTTP/1.1 platform.twitter.com/widgets/widget_iframe.c4bdc17e77719578b594d5555bee90db.html?origin=https%3A%2F%2Frightway-tan.blogspot.com
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (56168)
Size 105 kB (105445 bytes)
Hash aa228863765c3263e12f1d7c71015518
619739a12e0f16eab26a43a913b35779edea57a6
cf9a241903646ee9b88b76da2bb3e11d16f36246f7bbc53bbe2c98466e5ea12a
GET /widgets/widget_iframe.c4bdc17e77719578b594d5555bee90db.html?origin=https%3A%2F%2Frightway-tan.blogspot.com HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 1320162
Cache-Control: public, max-age=315360000
Content-Type: text/html; charset=utf-8
Date: Fri, 16 Sep 2022 03:25:53 GMT
Etag: "50d73c0b4a4c7e4697b9c6ac6f1ecd75+gzip"
Last-Modified: Wed, 31 Aug 2022 20:40:57 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F706)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 105445
accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Frightway-tan.blogspot.com&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.z9QjrzsHcOc.O%2Fd%3D1%2Frs%3DAHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA%2Fm%3D__features__
200 OK 1.7 kB URL HTTP/2 accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Frightway-tan.blogspot.com&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.z9QjrzsHcOc.O%2Fd%3D1%2Frs%3DAHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA%2Fm%3D__features__
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (581)
Hash 65bca59b0cc2e45815b3ff4023f81095
73f1ffe0e13f7da40cf2f39a22ce18601603fe69
9c24577d6eb0567d6cd910e301bc6b43848b54531c61a519aead4a02b02f7ae1
GET /o/oauth2/postmessageRelay?parent=https%3A%2F%2Frightway-tan.blogspot.com&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.z9QjrzsHcOc.O%2Fd%3D1%2Frs%3DAHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA%2Fm%3D__features__ HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 16 Sep 2022 03:25:53 GMT
content-security-policy: script-src 'nonce-CDJNhb4OkEUdIp4YoOHdlA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /o/cspreport, require-trusted-types-for 'script';report-uri /o/cspreport
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash 0d6d880bbb3a13bfcd24eeceddf4a8bc
05fc95f19b944ad8323db106b6538232a8f77cc2
84a5f406cd91c0bd0533748fae6f90ec88692f3d13260008a923e602d2bd96bc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4194
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:53 GMT
Last-Modified: Fri, 16 Sep 2022 02:15:59 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 312
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d65b161562e9954cbbfa1fe751b894b6
b07c476e717ee82ebee32f34350b5a26b9dab949
4d6d53c250f858e6fb4c677243c0b04a520038455cfbb2f42ab4fb9fa7f07f76
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 29df771358c022fe0b4de59cd16d3054
762b2b601a2ee8cf1d55be8608ce18c2b26e1324
ba1567895d80048f078cc1bea3ae79eadd8aa764df104e6717516ca8d728e4e6
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 16 Sep 2022 03:25:53 GMT
Last-Modified: Fri, 16 Sep 2022 01:46:28 GMT
Server: ECS (nyb/1D18)
X-Cache: Miss from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: rOwm9OwFb-6uA-LDDZLCgyOnNAKeyoPfvNHZIfLDwkhhyZhRTyT8vw==
Age: 5965
ssl.gstatic.com/accounts/o/1832714284-postmessagerelay.js
200 OK 4.3 kB URL HTTP/2 ssl.gstatic.com/accounts/o/1832714284-postmessagerelay.js
IP
File type ASCII text, with very long lines (2267)
Hash 3f7502705229ccec9d066c5cd75e6c31
ede1663155afaa5a5213d075e6295c6d839b05c3
2be5113d3022d1819a19f327235d287a2538a03741fc08ccd9d55cc1d78b6282
GET /accounts/o/1832714284-postmessagerelay.js HTTP/1.1
Host: ssl.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://accounts.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/federated-signon-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="federated-signon-mpm-access"
report-to: {"group":"federated-signon-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/federated-signon-mpm-access"}]}
content-length: 4294
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Sep 2022 08:39:19 GMT
expires: Thu, 14 Sep 2023 08:39:19 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 09 Sep 2022 22:15:28 GMT
content-type: text/javascript
age: 153994
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 91dad4479f7dcb623266cf0dcfef5875
9fcf1f0e16c17a43021ab8fb01089d2d9c9f1d3a
0dc4f9c3ecdccb7e1b7a651c72ee63acc06482b362f060547534c3196e561412
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
l.sharethis.com/pview?event=pview&hostname=rightway-tan.blogspot.com&location=%2Fsearch%2Flabel%2FEthnocracy&product=sticky-share-buttons&url=https%3A%2F%2Frightway-tan.blogspot.com%2Fsearch%2Flabel%2FEthnocracy&source=sharethis.js&fcmp=false&fcmpv2=false&has_segmentio=false&title=Rightway%3A%20Ethnocracy&cms=unknown&publisher=5b12620943e7c90011853fed&sop=true&version=st_sop.js&lang=en
204 No Content 0 B URL HTTP/1.1 l.sharethis.com/pview?event=pview&hostname=rightway-tan.blogspot.com&location=%2Fsearch%2Flabel%2FEthnocracy&product=sticky-share-buttons&url=https%3A%2F%2Frightway-tan.blogspot.com%2Fsearch%2Flabel%2FEthnocracy&source=sharethis.js&fcmp=false&fcmpv2=false&has_segmentio=false&title=Rightway%3A%20Ethnocracy&cms=unknown&publisher=5b12620943e7c90011853fed&sop=true&version=st_sop.js&lang=en
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pview?event=pview&hostname=rightway-tan.blogspot.com&location=%2Fsearch%2Flabel%2FEthnocracy&product=sticky-share-buttons&url=https%3A%2F%2Frightway-tan.blogspot.com%2Fsearch%2Flabel%2FEthnocracy&source=sharethis.js&fcmp=false&fcmpv2=false&has_segmentio=false&title=Rightway%3A%20Ethnocracy&cms=unknown&publisher=5b12620943e7c90011853fed&sop=true&version=st_sop.js&lang=en HTTP/1.1
Host: l.sharethis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rightway-tan.blogspot.com
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: *
Access-Control-Allow-Origin: https://rightway-tan.blogspot.com
Access-Control-Expose-Headers: stid
Access-Control-Max-Age: 1728000
Cache-Control: no-cache, no-store, must-revalidate
Date: Fri, 16 Sep 2022 03:25:53 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains;
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d65b161562e9954cbbfa1fe751b894b6
b07c476e717ee82ebee32f34350b5a26b9dab949
4d6d53c250f858e6fb4c677243c0b04a520038455cfbb2f42ab4fb9fa7f07f76
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/images/cleardot.gif
200 OK 43 B URL HTTP/2 www.google.com/images/cleardot.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /images/cleardot.gif HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/gif
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 43
date: Fri, 16 Sep 2022 03:25:53 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Tue, 22 Oct 2019 18:30:00 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
syndication.twitter.com/settings?session_id=5115363a00b44fcf2920cc03a2cce845004825fa
200 OK 1.1 kB URL HTTP/2 syndication.twitter.com/settings?session_id=5115363a00b44fcf2920cc03a2cce845004825fa
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (2415), with no line terminators
Hash c65700aedb1c0e4b57c240346a4f3d2a
f30d62574b232aa108dd8a0e335c0a6d8f56c564
08de7d806f14b06c2d87accd5a48f6f356413ba0ecc77c555fc353f16fef9602
GET /settings?session_id=5115363a00b44fcf2920cc03a2cce845004825fa HTTP/1.1
Host: syndication.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://platform.twitter.com/
Origin: https://platform.twitter.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Fri, 16 Sep 2022 03:25:52 GMT
vary: Origin
server: tsa_o
content-type: application/json; charset=utf-8
cache-control: must-revalidate, max-age=600
last-modified: Fri, 16 Sep 2022 03:25:53 GMT
content-length: 327
content-encoding: gzip
strict-transport-security: max-age=631138519
access-control-allow-origin: https://platform.twitter.com
access-control-allow-credentials: true
x-response-time: 112
x-connection-hash: 585bef3219c7d8ff74f86d982ce3d5ce75970b2924d4cff1167461a94f49179e
X-Firefox-Spdy: h2
platform-cdn.sharethis.com/img/arrow_right.svg
200 OK 565 B URL HTTP/2 platform-cdn.sharethis.com/img/arrow_right.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (409)
Hash 9928d025bd5792b718ee0a185f62e67c
16406d7b5b6d383b12859b853cf6cb7e3733e33d
1bae747c7fd090f56608956a97c870391e1c43f89d24d5766129b75628985c1e
GET /img/arrow_right.svg HTTP/1.1
Host: platform-cdn.sharethis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 565
date: Sun, 11 Sep 2022 09:21:07 GMT
last-modified: Thu, 10 Oct 2019 01:20:12 GMT
etag: "9928d025bd5792b718ee0a185f62e67c"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=2592000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _ZyePh1JOLrCXHD0kVv1SODTcDGTtYoHxPOHchz2c0Y7BOpBAtcdzg==
age: 410687
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 12bf16f54f35521707d8553f01f5ef77
d2352fdafb9ca1a0578f230832adf335770d44f1
151977d5788e540f46357f731c6846903682f2d0c9e2273f113eeca05c138912
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 03:25:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpc.googlesyndication.com/sodar/sodar2.js
200 OK 6.4 kB URL HTTP/2 tpc.googlesyndication.com/sodar/sodar2.js
IP
File type ASCII text, with very long lines (1321)
Hash ac906814ed812c4ecdbb624a3bd2f6c3
8e4547eaffaa66a1ee61b36028dbcd7091d0e7de
8ab8cef6156022c4547455defd8252b48b6bcb8b734072849345bb99758705fe
GET /sodar/sodar2.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 6386
date: Fri, 16 Sep 2022 03:25:53 GMT
expires: Fri, 16 Sep 2022 03:25:53 GMT
cache-control: private, max-age=3000
etag: "1637097310169751"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
platform-cdn.sharethis.com/img/facebook.svg
200 OK 301 B URL HTTP/2 platform-cdn.sharethis.com/img/facebook.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash c6e9be45643e197ce1db1d7e24a99adc
d7338e398bb0f7a9082d24f121140d2cf9e88859
768d97ec0916217ae82c70aeda3a61b9b0dab344edc4a3240a4f7cd94af00307
GET /img/facebook.svg HTTP/1.1
Host: platform-cdn.sharethis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 301
date: Fri, 02 Sep 2022 05:08:41 GMT
last-modified: Thu, 10 Oct 2019 01:20:12 GMT
etag: "c6e9be45643e197ce1db1d7e24a99adc"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=2592000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: c9U3IQ3bAY3Gtvb7SPUBSualUzKlOx6nyPX_P8hNfEb0bbTx5UqtYQ==
age: 1203433
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
platform-cdn.sharethis.com/img/twitter.svg
200 OK 731 B URL HTTP/2 platform-cdn.sharethis.com/img/twitter.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (575)
Hash 0af2fb38987598376c99e21af17ade45
bfbdfd0b1a2dcef714e347928bd11b8410dc7ca2
7c93346d4f681a0be90d1dfc19346382a4700f1810f41caa54415688dee1777f
GET /img/twitter.svg HTTP/1.1
Host: platform-cdn.sharethis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 731
date: Thu, 18 Aug 2022 01:05:31 GMT
last-modified: Thu, 10 Oct 2019 01:20:13 GMT
etag: "0af2fb38987598376c99e21af17ade45"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=2592000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fwPv1n8Sc-g17R6ziKEFWfHt_ES_E9v8fGZJ1jgi3MpqxULfgShfOg==
age: 2514023
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
platform-cdn.sharethis.com/img/linkedin.svg
200 OK 456 B URL HTTP/2 platform-cdn.sharethis.com/img/linkedin.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash fa43b4ede18498b114fc7185993f6da7
53c9d2acffab46dd9da8872ee6d8c0d7cab42fd8
cb8c2b19fd9b56c41db14bd71b5c0616c1ba4e99b08c8e75084cf695f74b7120
GET /img/linkedin.svg HTTP/1.1
Host: platform-cdn.sharethis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 456
date: Mon, 29 Aug 2022 03:10:45 GMT
last-modified: Thu, 10 Oct 2019 01:20:12 GMT
etag: "fa43b4ede18498b114fc7185993f6da7"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=2592000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AZ5oW4xFj5DE8cYvrIcpD8TmXhaqs7yhxln2wRlCZNSprpJKhHZO-Q==
age: 1556109
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
platform-cdn.sharethis.com/img/messenger.svg
200 OK 372 B URL HTTP/2 platform-cdn.sharethis.com/img/messenger.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash a5aa43fa302867d3e888ac2f69b7b288
952b104251965ac706baca3a022c103104e8fabe
2986551fd9e82929eabb8cba7c44f74a28d8496c744893432f067b320dff55da
GET /img/messenger.svg HTTP/1.1
Host: platform-cdn.sharethis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 372
last-modified: Thu, 10 Oct 2019 01:20:13 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Fri, 26 Aug 2022 06:11:47 GMT
cache-control: public, max-age=2592000
etag: "a5aa43fa302867d3e888ac2f69b7b288"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JRfbZlFTL6G007q2SpMxXS9QGvnnpPnj8YAV3-RociRwQA6bmph48Q==
age: 1804450
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
platform-cdn.sharethis.com/img/email.svg
200 OK 343 B URL HTTP/2 platform-cdn.sharethis.com/img/email.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 5977437466e857c7ddcadda6f6d88c2a
19c6378daa1f946ca225fb8d9e039e1f7762fb0d
5f5012132c752db2433e17712d91ef8689f1bc95167b2720e23224c2ae62e009
GET /img/email.svg HTTP/1.1
Host: platform-cdn.sharethis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 343
date: Mon, 22 Aug 2022 04:56:04 GMT
last-modified: Thu, 10 Oct 2019 01:20:12 GMT
etag: "5977437466e857c7ddcadda6f6d88c2a"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=2592000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -D1hDf32z__uT3LPGaRRg6LoCSUkmRtYcoP267g7j4QKpQ1CkBf3-Q==
age: 2154590
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
platform-cdn.sharethis.com/img/youtube.svg
200 OK 738 B URL HTTP/2 platform-cdn.sharethis.com/img/youtube.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (582)
Hash cc49b319ef1cd644b88b6b4d6901d041
a9e64052e5cc0b903c31b758b500cdbc27631de0
3f3a42ccfe495e929036b2d088188905398eb6804f6f8aa31a6293c1434dd7ac
GET /img/youtube.svg HTTP/1.1
Host: platform-cdn.sharethis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 738
last-modified: Thu, 10 Oct 2019 01:20:13 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Thu, 08 Sep 2022 01:07:53 GMT
cache-control: public, max-age=2592000
etag: "cc49b319ef1cd644b88b6b4d6901d041"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hHAyGi8UCYHcbVJV18PomWzyB4fr5sYxz8Q1Hf_9hjxEUMx1x-wAqQ==
age: 699481
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
platform-cdn.sharethis.com/img/whatsapp.svg
200 OK 832 B URL HTTP/2 platform-cdn.sharethis.com/img/whatsapp.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (676)
Hash afe7fc60ed757db39a88d2950fce69c9
e120b53e856848419275723e24a539359cf41b4a
847eb36b4dc4b05f94052dcd98077319e74d882334a106bb9ca451ba211c9c2c
GET /img/whatsapp.svg HTTP/1.1
Host: platform-cdn.sharethis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 832
last-modified: Thu, 10 Oct 2019 01:20:13 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Tue, 13 Sep 2022 22:10:43 GMT
cache-control: public, max-age=2592000
etag: "afe7fc60ed757db39a88d2950fce69c9"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: sdgfY9FRmk-Y5tem-Tdzux3vx0stPdWd5LQAqSb7guWtN2UipsPJyw==
age: 191711
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
platform-cdn.sharethis.com/img/sharethis.svg
200 OK 514 B URL HTTP/2 platform-cdn.sharethis.com/img/sharethis.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (358)
Hash deecdaa377907db5cc1722fc831670a1
4e39e0fd5742cc1460e24620df4a360abb71290e
9a83c65bdd0ff9488af9d25720686457ea7295c9c44f9f1d285a0c9ec89bab99
GET /img/sharethis.svg HTTP/1.1
Host: platform-cdn.sharethis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 514
date: Fri, 09 Sep 2022 00:38:14 GMT
last-modified: Thu, 10 Oct 2019 01:20:13 GMT
etag: "deecdaa377907db5cc1722fc831670a1"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=2592000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AxTdd60kPYcyca_MRrFpgmmztUDdYO-LzcgBKGdZ6IO27i-PNZCZ3w==
age: 614860
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
platform-cdn.sharethis.com/img/pinterest.svg
200 OK 771 B URL HTTP/2 platform-cdn.sharethis.com/img/pinterest.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (615)
Hash 2b10a062e719c64b686e2e8fcdc216dc
38bd37fa3975f4d5b849763359481d8b31bb80ba
efc737b4f58cfe73a9bd0e57d7570365701381da31e628b269e7217a0ce3359d
GET /img/pinterest.svg HTTP/1.1
Host: platform-cdn.sharethis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 771
date: Sat, 20 Aug 2022 03:57:45 GMT
last-modified: Thu, 10 Oct 2019 01:20:13 GMT
etag: "2b10a062e719c64b686e2e8fcdc216dc"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=2592000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lfeC2pxFZRwuv8ugAW-fru-l7jts7qvZl5yYSivl3MuDevRwXOESeQ==
age: 2330889
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
platform-cdn.sharethis.com/img/arrow_left.svg
200 OK 565 B URL HTTP/2 platform-cdn.sharethis.com/img/arrow_left.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (409)
Hash b55d8d2b9321e381a3c38a4bddb74037
000c29635758e608bbe15d191e953adb27627c2e
5c833b1818762f1e134fbb158447fb0b92f2b018b15aa36f2e2405213f830d38
GET /img/arrow_left.svg HTTP/1.1
Host: platform-cdn.sharethis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 565
last-modified: Thu, 10 Oct 2019 01:20:12 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Wed, 07 Sep 2022 05:01:50 GMT
cache-control: public, max-age=2592000
etag: "b55d8d2b9321e381a3c38a4bddb74037"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6OIFB4Rr081y-f4eyP6bp2OZuEtGoQuxtpRBxDNTQzt8uY2GG09g0Q==
age: 771847
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
platform.twitter.com/js/button.c6c95b9789db97ea1e9742d215fff751.js
200 OK 2.4 kB URL HTTP/1.1 platform.twitter.com/js/button.c6c95b9789db97ea1e9742d215fff751.js
IP
File type ASCII text, with very long lines (7017), with no line terminators
Hash 4f1f60563bf717e97c0a9d0ea41656bd
e81bc1de4809ad69c612311ef322d10920f565c9
76b3c3593522fdfb24ca4b06087d457bad98ae873958f032deea5151ad8762ca
GET /js/button.c6c95b9789db97ea1e9742d215fff751.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 1320161
Cache-Control: public, max-age=315360000
Content-Type: application/javascript; charset=utf-8
Date: Fri, 16 Sep 2022 03:25:54 GMT
Etag: "3b5d132d3d3780b86a6d19d169faef45+gzip"
Last-Modified: Wed, 31 Aug 2022 20:40:49 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F708)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=3
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 2361
count-server.sharethis.com/v2.0/get_counts?cb=window.__sharethis__.cb&url=https%3A%2F%2Frightway-tan.blogspot.com%2Fsearch%2Flabel%2FEthnocracy
200 OK 157 B URL HTTP/2 count-server.sharethis.com/v2.0/get_counts?cb=window.__sharethis__.cb&url=https%3A%2F%2Frightway-tan.blogspot.com%2Fsearch%2Flabel%2FEthnocracy
IP
File type ASCII text, with no line terminators
Hash a1f1b67f4623cd1eb488efa122176bea
2305c6961a56aaaa8fbcbc5a2a1dabe1f0451c1f
ec437dcd85179cda4fd66bcc6969fec9d3bdec8d1daa5eee5ba55920f1794f60
GET /v2.0/get_counts?cb=window.__sharethis__.cb&url=https%3A%2F%2Frightway-tan.blogspot.com%2Fsearch%2Flabel%2FEthnocracy HTTP/1.1
Host: count-server.sharethis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
content-length: 157
date: Fri, 16 Sep 2022 03:25:54 GMT
cache-control: no-cache, no-store, must-revalidate
etag: a1f1b67f4623cd1eb488efa122176bea
apigw-requestid: YiHuWivNoAMEJxQ=
x-cache: Miss from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4J4S3fj24nlBZuQGVpA7lpom-wfrmdyGraSs6u-CYMKGjJ9jISjpSQ==
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
platform-cdn.sharethis.com/img/weibo.svg
200 OK 5.7 kB URL HTTP/2 platform-cdn.sharethis.com/img/weibo.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2020)
Hash a138bed1b2e014729bb9501a4ab3fa98
2d44276c9787c04a4751b55f47709795fb35f07f
ec4b9f244de1fc8591e50260cc31641a17484df7061b4e2a109ed18f1421c8d4
GET /img/weibo.svg HTTP/1.1
Host: platform-cdn.sharethis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Tue, 30 Aug 2022 02:20:32 GMT
last-modified: Thu, 10 Oct 2019 01:20:13 GMT
etag: W/"66af87221f9c1ee574d843bfea27738d"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=2592000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1JtPDml3X_66U8vIv-cokH3zXVA7INGeeyFzY-GBVPw6xnjrS1qZBA==
age: 1472722
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
platform-api.sharethis.com/js/sharethis.js
200 OK 45 kB URL HTTP/2 platform-api.sharethis.com/js/sharethis.js
IP
File type ASCII text, with very long lines (2054)
Hash 54876b030a9ce9557d3c422ff6163cae
fb8b7d5739c1ad4665403b3cec66a3775cea5bc3
1c38c8c8933bbcfc1a3d47a69027f74c5bb1321283dae8b719ce15415550ea44
GET /js/sharethis.js HTTP/1.1
Host: platform-api.sharethis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-encoding: gzip
edge-control: cache-maxage=60m,downstream-ttl=60m
x-frame-options: SAMEORIGIN
date: Fri, 16 Sep 2022 03:17:46 GMT
cache-control: max-age=600, public
etag: W/"2f749-jZtDoLQECLv0cAmOiJJ6B61Kdic"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: tEPA-Ct2JRI4EjMw6Ls_9ynCoh1Ik6bmhMJxN3WPx0mumDeO-qXJJw==
age: 514
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
platform.twitter.com/widgets/tweet_button.c4bdc17e77719578b594d5555bee90db.en.html
200 OK 14 kB URL HTTP/1.1 platform.twitter.com/widgets/tweet_button.c4bdc17e77719578b594d5555bee90db.en.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (32033)
Hash a3a527d0a0daa14605d5020968a1aa8e
632cc0481704d98c9e63aa597d4632b8040ad1de
bcfd903642a1f9cde4b2ad8f4397aa8abb3cb7c423e04f485de5c6207dccb2bb
GET /widgets/tweet_button.c4bdc17e77719578b594d5555bee90db.en.html HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 1320161
Cache-Control: public, max-age=315360000
Content-Type: text/html; charset=utf-8
Date: Fri, 16 Sep 2022 03:25:54 GMT
Etag: "6408b1570a7587a221e1976192be413c+gzip"
Last-Modified: Wed, 31 Aug 2022 20:40:55 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F708)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 13752
syndication.twitter.com/i/jot/embeds?l=%7B%22widget_origin%22%3A%22https%3A%2F%2Frightway-tan.blogspot.com%2Fsearch%2Flabel%2FEthnocracy%22%2C%22widget_frame%22%3Afalse%2C%22language%22%3A%22en%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22context%22%3A%22rufous-eol%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1663298738554%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%221bfeb5c3714e8%3A1661975971032%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=5115363a00b44fcf2920cc03a2cce845004825fa
200 OK 43 B URL HTTP/2 syndication.twitter.com/i/jot/embeds?l=%7B%22widget_origin%22%3A%22https%3A%2F%2Frightway-tan.blogspot.com%2Fsearch%2Flabel%2FEthnocracy%22%2C%22widget_frame%22%3Afalse%2C%22language%22%3A%22en%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22context%22%3A%22rufous-eol%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1663298738554%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%221bfeb5c3714e8%3A1661975971032%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=5115363a00b44fcf2920cc03a2cce845004825fa
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/jot/embeds?l=%7B%22widget_origin%22%3A%22https%3A%2F%2Frightway-tan.blogspot.com%2Fsearch%2Flabel%2FEthnocracy%22%2C%22widget_frame%22%3Afalse%2C%22language%22%3A%22en%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22context%22%3A%22rufous-eol%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1663298738554%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%221bfeb5c3714e8%3A1661975971032%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=5115363a00b44fcf2920cc03a2cce845004825fa HTTP/1.1
Host: syndication.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 16 Sep 2022 03:25:53 GMT
vary: Origin
server: tsa_o
content-type: image/gif
cache-control: must-revalidate, max-age=600
last-modified: Fri, 16 Sep 2022 03:25:54 GMT
content-length: 43
strict-transport-security: max-age=631138519
x-response-time: 109
x-connection-hash: 585bef3219c7d8ff74f86d982ce3d5ce75970b2924d4cff1167461a94f49179e
X-Firefox-Spdy: h2
csi.gstatic.com/csi?v=2&s=pagead&action=csi_pagead&top=1&puid=1~l83x4e69&c=2587220450940149&e=44759876%2C44759927%2C44759842%2C44772486%2C31061691%2C31061693&ctx=1&met.3=1001.12j_1__1~164.12z_1~165.12i_i~166.11m_1i~1032.18d~326.18f_2~832.18w~868.18w~216.18c_k~215.18c_k~843.18c_k~779.18x~112.1b5_1~629.1el_1~889.1et~639.1ey~914.1ey~113.37x_2&met.7=CBsQCMABzpPIyQg~CBsQByCOBjj8AcABu5-qigI~CAEQChgBILIGKLIGMJ4JOOwCQPsGSJYHUKoHWNEIYLkHaNUIcJYJeIrLA4AB_MQDiAG5vAqwAQG4AQPAAd6Ov5sB~CBsQBiCyBjhcwAGO4MaTAg~CBsQChgBILIGKLIGMM4IOJwCQP4GSKkHUKoHWLAIYLkHaLQIcM0IeNemAYABip8BiAG0oQOwAQG4AQPAAaDY9RY~CBsQBiCzBjiBA8ABhZGO-g4~CBsQBiC0BjjFBMAB1LGingw~CBsQBiC2BjiaBsABtvvEzA4~CBsQBiC2BjiQBsABtvvEzA4~CBsQBiCKBzjdBMABnLqQsA4~CBsQBiCKBzjXAsAB7o70vQU~CBsQBhgBIIsHKIsHMLsKOLADQKMHSLYHUJ8JWM4JYJ8JaN8JcLoKeJkfgAGsGogBrBqwAQG4AQPAAfirj9IF~CBsQBhgBIIsHKIsHMMMKOLgDQKIHSKwHUPMHWIkJYPMHaNcJcMMKeLgcgAHLF4gByxewAQG4AQPAAcqX_wY~CBsQBiCLBzi6BcAB9OORkAg~CBsQBiCLBzi6BcABioK7kwg~CBsQBhgBIIsHKIsHMIUKOPoCQKoHSLUHUI0IWKMJYLQIaL0JcIQKeJ8lgAGyIIgBsiCwAQG4AQPAAdW3g_oG~CBsQBiCMBzijAcABu9vivwU~CBsQBiCMBzi3BMABnMDLrwM~CBsQBiCMBzjTBcAByODM9wo~CBsQBiCMBzibAcAB5OmLLw~CBsQBiCACDiJA8ABk4CVhws~CBsQCiCbCMABtbi7jQo~CBsQBiCbCDiGBMABgO7xyQ4~CBsQBiCbCDjWA8AB4fO2zw0~CBsQChgBIJwIKJwIMNEMOLUEwAH04ZbaDA~CBsQBhgBIJwIKJwIMP4JOOIBQMgISN0IaN4JcP4JeJwjgAGsHogBrB6wAQG4AQPAAcHxgq0M~CBsQBhgBIJwIKJwIMIQKOOgBaN4JcIQKeO8QgAGzDYgBsw2wAQG4AQPAAbulv9AI~CBsQAiCiCDhzwAHi6pr0BA~CBsQBiCyCDhAwAG87s_cBQ~CBsQBiCyCDh1wAGpj7fOAw~CBsQBiCyCDh6wAHi3-7GAg~CBsQBiCzCDihAcABtp32rQI~CBsQChgBILMIKLMIMJIMON8DwAH1osyyAQ~CBsQCiCzCDj1A8AB_eTe3Aw~CBsQCiCzCDiTBMABgYzwtw4~CBsQBhgBILMIKLMIMOYMOLMEaN0JcOQMeIl9gAGCeIgBgniwAQG4AQPAAf-1gboK~CBsQCiC0CMABo8qq3A8~CBsQCiC0CMAB_tKK6Ac~CBsQBhgBILQIKLQIMIkKONUBaN4JcIgKePMQgAG3DYgBtw2wAQG4AQPAAfGMurMF~CBsQBhgBILQIKLQIMMAKOIwCaN4JcL8KeO4QgAGyDYgBsg2wAQG4AQPAAfbv34IE~CBsQCiC0CMABo8qq3A8~CBsQBiC1CDiCAcAByYba3AM~CBsQBiC2CDh_wAH0tJCgBA~CBsQBiC2CDjmAsAB2MTr2Ag~CBsQBiC2CDjnAsABl4jB9wc~CBsQBiC2CDiAAcABy8zivg4~CBsQBiC3CDh-wAHrzNKBCQ~CBsQBiC3CDjlAsAB8bqevAQ~CBsQBiC3CDh-wAGdu6y8Aw~CBsQBiC4CDiAAcAB1NSIiAg~CBsQBiC4CDiBAcABxrfBsgU~CBsQCiC5CDjFAcAB-_ua-A4~CBsQCiC5CDh_wAG-0P_XDg~CBsQChgBIPoIKPoIMNYJOFzAAdz9pssM~CBsQChgBIP4IKP4IMOAJOGLAAeHo-okO~CBwQChgBIP8IKP8IML0JOD5opglwvQl4zwaAAUOIAS-wAQG4AQPAAbLe8vsL~CBsQAiCSCThLwAHK3M3rDQ~CBsQAiCuCThVwAGo4c-CCA~CAMQChgBIOsKKOsKMM0LOGJohgtwxAt44dQHgAHDzgeIAbTQFbABAbgBA8ABo_jMpA4~CBsQBhgBIJcMKJcMMMYMOC9opQxwxQx47xCAAbMNiAGzDbABAbgBA8ABu6W_0Ag~CBwQChgBIMEMKMEMMPEMODBo1gxw5wx49rABgAH7qgGIAYe4A7ABAbgBA8AB-ciF_w8~CAwQBRgBIP8KKP8KMKYNOKcCQJALSJILULULWJcNYO0LaJgNcKUNeMoogAHEIogB-UywAQG4AQPAAcyziOgG~CBsQCiCNDThIwAGBjPC3Dg~CBsQByCeCDi-BcAB4t3A1w0~CBsQBSCbCzjFAsAB3uLm5Q4~CBsQCiDmDcABo8qq3A8~CC8QBxgBIN8MKN8MMIwOOK0BQIgNSKcNUKsNWPYNYLYNaPgNcIwOeIoGgAFkiAFrsAEBuAEDwAGb_4nHBw~CBsQCiC5CDjXBcAByb6nvQE~CBsQChgBINUMKNUMMJIOOL0BQIINSKwNULENWP4NYLsNaP4NcJIOeOEGgAHLAYgB2AGwAQG4AQPAAeSq4PAC~CC8QBxgBIN4MKN4MMJgOOLoBQIkNSLcNULgNWIQOYMUNaIQOcJgOeM8IgAFkiAFrsAEBuAEDwAHzit38Aw~CBsQBxgBIIINKIINMJ4OOJwBwAGfi87MDg~CBsQBhgBILgIKLgIMK0OOPUFaN4JcK0OeOIQgAGmDYgBpg2wAQG4AQPAAei0tcsP~CBsQCiCIDsABo8qq3A8~CBsQChgBIIMNKIMNMMMOOMABwAH5-oPkAg~CBsQBiDoDThjwAGyw_XjAQ~CBsQCiC5CDjEBsAB9rGY9A4~CBsQCiDEDsAB_tKK6Ac~CBsQCiC5CDiJB8AB8IuRhwI~CBsQBSCGCTjsBcAB0PqXugY~CBsQBiDoDTiXAcAB2OD07AE~CBsQBiC2Bjj9CMABtvvEzA4~CBsQBiC2BjiJCcABtvvEzA4~CBsQBhgBIIwHKIwHMIoQOP4IQLIHSLYHUI0IWNkJYJUIaPMKcP0PeIKTBIABkY4EiAGRjgSwAQG4AQPAAemLv_II~CBsQBhgBIMIOKMIOMKQPOGJo-w5wpA942hCAAbINiAGyDbABAbgBA8AB9u_fggQ~CBsQBhgBIMMOKMMOMLsPOHho-w5wug943xCAAbcNiAG3DbABAbgBA8AB8Yy6swU~CBsQCiDZEcAB_tKK6Ac~CBsQBiCzBji5C8ABtvvEzA4~CAUQBRgBIKkOKKkOMPMOOEpoug5w8g544waAAS6IAdsEsAEBuAEDwAGQx7LwCA~CBsQBSCQEjgpwAHN9uClDA~CBsQCiDXCDjZC8AB-Zyvjwo~CBsQBhgBIIAIKIAIMNoWONoOaN0JcM4VeJOeG4ABoZkbiAGhmRuwAQG4AQPAAc_3j5sM~CBsQCiDGFjhHwAH36ZTiCg~CBsgmAw49gvAAZPHvJoB~CBsQByCsGDgfwAGTw5j8Dw~CBsQCiDGFTiaA8AB9rGY9A4~CBsQCiC8FTitA8ABvPHXjwQ~CBsQCiDjGDhCwAHJvqe9AQ~CBsQCiDRGTgYwAHHx_qfBw~CBsQCiC1GDi_AcABu97DvQs~CBsQBhgBIMUVKMUVMP4ZOLkEaMwVcP4ZeM4QgAGmDYgBpg2wAQG4AQPAAei0tcsP~CBsQCiCoGTh1wAHwi5GHAg~CBsQAiDRGjgZwAGE69veBg~CBsQChgBIOAaKOAaMO4aOA7AAdmP7e0C~CBsQChgBIOIaKOIaMPIaOBDAAZLkyJIJ~CBsQChgBIIAbKIAbMJQbOBTAAYL5uogL~CBsQBRgBIOsaKOsaMIEbOBbAAcWp5tcI~CBsQDSDIGji7AcAB0Njk4AE~CBsQCiCzBjjuFcABxJ-RxQ8~CBsQCiCzBjj2FcABxJ-RxQ8~CBsQBhgBIJYcKJYcMKocOBTAAca4uZ4O~CBsQCiCJDTinD8AB3dLLkgQ~CBsQBhgBIJwcKJwcMLAcOBTAAZi5gsgM~CBsQBSDwHDgYwAHciNaHBw~CBsQBRgBIM8bKM8bMLYdOOcBwAGPhbv9AQ~CBsQBhgBIP8dKP8dMKIeOCPAAc6cveME~CBsQDSDRHDiRAsABu6iu5A8~CBsgkQc47RjAAeDJ-gk~CBsQCiDQHDjuA8AB6YuG3Q0~CBsQCDjHIMABzpPIyQg~CCcQDRgBIMQgKMQgMPkgODVo2yBw-CB4sF2AAYtYiAGCdLABAbgBA8AB8_LLrgs~CBsQByDGIDggwAHRl8mCCQ~CBsQBiCHITg8wAG_hc2nAw~CBsQChgBIJYhKJYhMMUhOC_AAbjE_8cC~CBsQCiCiITg6wAGJ34ySDA~CBsQBxgBIOohKOohMIAiOBbAAbzv-OAN~CBsQBxgBIOohKOohMJAiOCbAAeSwx-4N~CBsQChgBIOwhKOwhMJoiOC7AAdvd_vAB~CBsQBiDRIDjlAcABmtCKrg4~CBsQBiDRIDjmAcAByozH6gw~CBsQBiDSIDjnAcAB_MTa9AU~CBsQBiDTIDjlAcABwMO16gc~CBsQBiDUIDjlAcAB093wjgE~CBsQBiDUIDjmAcAB47bGFg~CBsQBiDVIDjlAcABl5OgxwI~CBsQBiDtIDjMAcABvNL6oQE~CBsQBiDuIDjMAcAB_crukgI~CBsQBiDuIDjMAcABqs-29wY~CBsQBiDvIDjMAcAB8eSC0AM~CBsQBiDvIDjOAcABu-PjqA4~CBsQCiDwIDiPA8AB37quoQs~CBsQBiCGITi7AcAB0aCh3ws~CCcQChgBIKAhKKAhMKoiOIoBwAHiwZvaBQ~CBsQCiCpITibAcABouDEgQM~CBsQChgBIO0hKO0hMLMiOEbAAb-uneUM~CBsQChgBIO0hKO0hMJsiOC7AAdSS1JAM~CBsQChgBIO4hKO4hMJwiOC7AAdD0ycEH~CCcQBRgBIMgkKMgkMOIkOBrAAZmVn6AL~CBsQBRgBIMkkKMkkMOgkOB_AAc_G2uIB~CBsQBSDZJDgVwAHA64jIDg~CBsQBiDaJDiXAcABkLmIywk&met.1=1.l83x4cv3~6.9e~7.9k~8.9l~9.9l~10.c4~11.9v~12.c4~13.l6~14.th~15.lk~16.2mi~17.2mw~18.2nm~19.37n~20.37n~21.37q~23.w9
204 No Content 0 B URL HTTP/2 csi.gstatic.com/csi?v=2&s=pagead&action=csi_pagead&top=1&puid=1~l83x4e69&c=2587220450940149&e=44759876%2C44759927%2C44759842%2C44772486%2C31061691%2C31061693&ctx=1&met.3=1001.12j_1__1~164.12z_1~165.12i_i~166.11m_1i~1032.18d~326.18f_2~832.18w~868.18w~216.18c_k~215.18c_k~843.18c_k~779.18x~112.1b5_1~629.1el_1~889.1et~639.1ey~914.1ey~113.37x_2&met.7=CBsQCMABzpPIyQg~CBsQByCOBjj8AcABu5-qigI~CAEQChgBILIGKLIGMJ4JOOwCQPsGSJYHUKoHWNEIYLkHaNUIcJYJeIrLA4AB_MQDiAG5vAqwAQG4AQPAAd6Ov5sB~CBsQBiCyBjhcwAGO4MaTAg~CBsQChgBILIGKLIGMM4IOJwCQP4GSKkHUKoHWLAIYLkHaLQIcM0IeNemAYABip8BiAG0oQOwAQG4AQPAAaDY9RY~CBsQBiCzBjiBA8ABhZGO-g4~CBsQBiC0BjjFBMAB1LGingw~CBsQBiC2BjiaBsABtvvEzA4~CBsQBiC2BjiQBsABtvvEzA4~CBsQBiCKBzjdBMABnLqQsA4~CBsQBiCKBzjXAsAB7o70vQU~CBsQBhgBIIsHKIsHMLsKOLADQKMHSLYHUJ8JWM4JYJ8JaN8JcLoKeJkfgAGsGogBrBqwAQG4AQPAAfirj9IF~CBsQBhgBIIsHKIsHMMMKOLgDQKIHSKwHUPMHWIkJYPMHaNcJcMMKeLgcgAHLF4gByxewAQG4AQPAAcqX_wY~CBsQBiCLBzi6BcAB9OORkAg~CBsQBiCLBzi6BcABioK7kwg~CBsQBhgBIIsHKIsHMIUKOPoCQKoHSLUHUI0IWKMJYLQIaL0JcIQKeJ8lgAGyIIgBsiCwAQG4AQPAAdW3g_oG~CBsQBiCMBzijAcABu9vivwU~CBsQBiCMBzi3BMABnMDLrwM~CBsQBiCMBzjTBcAByODM9wo~CBsQBiCMBzibAcAB5OmLLw~CBsQBiCACDiJA8ABk4CVhws~CBsQCiCbCMABtbi7jQo~CBsQBiCbCDiGBMABgO7xyQ4~CBsQBiCbCDjWA8AB4fO2zw0~CBsQChgBIJwIKJwIMNEMOLUEwAH04ZbaDA~CBsQBhgBIJwIKJwIMP4JOOIBQMgISN0IaN4JcP4JeJwjgAGsHogBrB6wAQG4AQPAAcHxgq0M~CBsQBhgBIJwIKJwIMIQKOOgBaN4JcIQKeO8QgAGzDYgBsw2wAQG4AQPAAbulv9AI~CBsQAiCiCDhzwAHi6pr0BA~CBsQBiCyCDhAwAG87s_cBQ~CBsQBiCyCDh1wAGpj7fOAw~CBsQBiCyCDh6wAHi3-7GAg~CBsQBiCzCDihAcABtp32rQI~CBsQChgBILMIKLMIMJIMON8DwAH1osyyAQ~CBsQCiCzCDj1A8AB_eTe3Aw~CBsQCiCzCDiTBMABgYzwtw4~CBsQBhgBILMIKLMIMOYMOLMEaN0JcOQMeIl9gAGCeIgBgniwAQG4AQPAAf-1gboK~CBsQCiC0CMABo8qq3A8~CBsQCiC0CMAB_tKK6Ac~CBsQBhgBILQIKLQIMIkKONUBaN4JcIgKePMQgAG3DYgBtw2wAQG4AQPAAfGMurMF~CBsQBhgBILQIKLQIMMAKOIwCaN4JcL8KeO4QgAGyDYgBsg2wAQG4AQPAAfbv34IE~CBsQCiC0CMABo8qq3A8~CBsQBiC1CDiCAcAByYba3AM~CBsQBiC2CDh_wAH0tJCgBA~CBsQBiC2CDjmAsAB2MTr2Ag~CBsQBiC2CDjnAsABl4jB9wc~CBsQBiC2CDiAAcABy8zivg4~CBsQBiC3CDh-wAHrzNKBCQ~CBsQBiC3CDjlAsAB8bqevAQ~CBsQBiC3CDh-wAGdu6y8Aw~CBsQBiC4CDiAAcAB1NSIiAg~CBsQBiC4CDiBAcABxrfBsgU~CBsQCiC5CDjFAcAB-_ua-A4~CBsQCiC5CDh_wAG-0P_XDg~CBsQChgBIPoIKPoIMNYJOFzAAdz9pssM~CBsQChgBIP4IKP4IMOAJOGLAAeHo-okO~CBwQChgBIP8IKP8IML0JOD5opglwvQl4zwaAAUOIAS-wAQG4AQPAAbLe8vsL~CBsQAiCSCThLwAHK3M3rDQ~CBsQAiCuCThVwAGo4c-CCA~CAMQChgBIOsKKOsKMM0LOGJohgtwxAt44dQHgAHDzgeIAbTQFbABAbgBA8ABo_jMpA4~CBsQBhgBIJcMKJcMMMYMOC9opQxwxQx47xCAAbMNiAGzDbABAbgBA8ABu6W_0Ag~CBwQChgBIMEMKMEMMPEMODBo1gxw5wx49rABgAH7qgGIAYe4A7ABAbgBA8AB-ciF_w8~CAwQBRgBIP8KKP8KMKYNOKcCQJALSJILULULWJcNYO0LaJgNcKUNeMoogAHEIogB-UywAQG4AQPAAcyziOgG~CBsQCiCNDThIwAGBjPC3Dg~CBsQByCeCDi-BcAB4t3A1w0~CBsQBSCbCzjFAsAB3uLm5Q4~CBsQCiDmDcABo8qq3A8~CC8QBxgBIN8MKN8MMIwOOK0BQIgNSKcNUKsNWPYNYLYNaPgNcIwOeIoGgAFkiAFrsAEBuAEDwAGb_4nHBw~CBsQCiC5CDjXBcAByb6nvQE~CBsQChgBINUMKNUMMJIOOL0BQIINSKwNULENWP4NYLsNaP4NcJIOeOEGgAHLAYgB2AGwAQG4AQPAAeSq4PAC~CC8QBxgBIN4MKN4MMJgOOLoBQIkNSLcNULgNWIQOYMUNaIQOcJgOeM8IgAFkiAFrsAEBuAEDwAHzit38Aw~CBsQBxgBIIINKIINMJ4OOJwBwAGfi87MDg~CBsQBhgBILgIKLgIMK0OOPUFaN4JcK0OeOIQgAGmDYgBpg2wAQG4AQPAAei0tcsP~CBsQCiCIDsABo8qq3A8~CBsQChgBIIMNKIMNMMMOOMABwAH5-oPkAg~CBsQBiDoDThjwAGyw_XjAQ~CBsQCiC5CDjEBsAB9rGY9A4~CBsQCiDEDsAB_tKK6Ac~CBsQCiC5CDiJB8AB8IuRhwI~CBsQBSCGCTjsBcAB0PqXugY~CBsQBiDoDTiXAcAB2OD07AE~CBsQBiC2Bjj9CMABtvvEzA4~CBsQBiC2BjiJCcABtvvEzA4~CBsQBhgBIIwHKIwHMIoQOP4IQLIHSLYHUI0IWNkJYJUIaPMKcP0PeIKTBIABkY4EiAGRjgSwAQG4AQPAAemLv_II~CBsQBhgBIMIOKMIOMKQPOGJo-w5wpA942hCAAbINiAGyDbABAbgBA8AB9u_fggQ~CBsQBhgBIMMOKMMOMLsPOHho-w5wug943xCAAbcNiAG3DbABAbgBA8AB8Yy6swU~CBsQCiDZEcAB_tKK6Ac~CBsQBiCzBji5C8ABtvvEzA4~CAUQBRgBIKkOKKkOMPMOOEpoug5w8g544waAAS6IAdsEsAEBuAEDwAGQx7LwCA~CBsQBSCQEjgpwAHN9uClDA~CBsQCiDXCDjZC8AB-Zyvjwo~CBsQBhgBIIAIKIAIMNoWONoOaN0JcM4VeJOeG4ABoZkbiAGhmRuwAQG4AQPAAc_3j5sM~CBsQCiDGFjhHwAH36ZTiCg~CBsgmAw49gvAAZPHvJoB~CBsQByCsGDgfwAGTw5j8Dw~CBsQCiDGFTiaA8AB9rGY9A4~CBsQCiC8FTitA8ABvPHXjwQ~CBsQCiDjGDhCwAHJvqe9AQ~CBsQCiDRGTgYwAHHx_qfBw~CBsQCiC1GDi_AcABu97DvQs~CBsQBhgBIMUVKMUVMP4ZOLkEaMwVcP4ZeM4QgAGmDYgBpg2wAQG4AQPAAei0tcsP~CBsQCiCoGTh1wAHwi5GHAg~CBsQAiDRGjgZwAGE69veBg~CBsQChgBIOAaKOAaMO4aOA7AAdmP7e0C~CBsQChgBIOIaKOIaMPIaOBDAAZLkyJIJ~CBsQChgBIIAbKIAbMJQbOBTAAYL5uogL~CBsQBRgBIOsaKOsaMIEbOBbAAcWp5tcI~CBsQDSDIGji7AcAB0Njk4AE~CBsQCiCzBjjuFcABxJ-RxQ8~CBsQCiCzBjj2FcABxJ-RxQ8~CBsQBhgBIJYcKJYcMKocOBTAAca4uZ4O~CBsQCiCJDTinD8AB3dLLkgQ~CBsQBhgBIJwcKJwcMLAcOBTAAZi5gsgM~CBsQBSDwHDgYwAHciNaHBw~CBsQBRgBIM8bKM8bMLYdOOcBwAGPhbv9AQ~CBsQBhgBIP8dKP8dMKIeOCPAAc6cveME~CBsQDSDRHDiRAsABu6iu5A8~CBsgkQc47RjAAeDJ-gk~CBsQCiDQHDjuA8AB6YuG3Q0~CBsQCDjHIMABzpPIyQg~CCcQDRgBIMQgKMQgMPkgODVo2yBw-CB4sF2AAYtYiAGCdLABAbgBA8AB8_LLrgs~CBsQByDGIDggwAHRl8mCCQ~CBsQBiCHITg8wAG_hc2nAw~CBsQChgBIJYhKJYhMMUhOC_AAbjE_8cC~CBsQCiCiITg6wAGJ34ySDA~CBsQBxgBIOohKOohMIAiOBbAAbzv-OAN~CBsQBxgBIOohKOohMJAiOCbAAeSwx-4N~CBsQChgBIOwhKOwhMJoiOC7AAdvd_vAB~CBsQBiDRIDjlAcABmtCKrg4~CBsQBiDRIDjmAcAByozH6gw~CBsQBiDSIDjnAcAB_MTa9AU~CBsQBiDTIDjlAcABwMO16gc~CBsQBiDUIDjlAcAB093wjgE~CBsQBiDUIDjmAcAB47bGFg~CBsQBiDVIDjlAcABl5OgxwI~CBsQBiDtIDjMAcABvNL6oQE~CBsQBiDuIDjMAcAB_crukgI~CBsQBiDuIDjMAcABqs-29wY~CBsQBiDvIDjMAcAB8eSC0AM~CBsQBiDvIDjOAcABu-PjqA4~CBsQCiDwIDiPA8AB37quoQs~CBsQBiCGITi7AcAB0aCh3ws~CCcQChgBIKAhKKAhMKoiOIoBwAHiwZvaBQ~CBsQCiCpITibAcABouDEgQM~CBsQChgBIO0hKO0hMLMiOEbAAb-uneUM~CBsQChgBIO0hKO0hMJsiOC7AAdSS1JAM~CBsQChgBIO4hKO4hMJwiOC7AAdD0ycEH~CCcQBRgBIMgkKMgkMOIkOBrAAZmVn6AL~CBsQBRgBIMkkKMkkMOgkOB_AAc_G2uIB~CBsQBSDZJDgVwAHA64jIDg~CBsQBiDaJDiXAcABkLmIywk&met.1=1.l83x4cv3~6.9e~7.9k~8.9l~9.9l~10.c4~11.9v~12.c4~13.l6~14.th~15.lk~16.2mi~17.2mw~18.2nm~19.37n~20.37n~21.37q~23.w9
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /csi?v=2&s=pagead&action=csi_pagead&top=1&puid=1~l83x4e69&c=2587220450940149&e=44759876%2C44759927%2C44759842%2C44772486%2C31061691%2C31061693&ctx=1&met.3=1001.12j_1__1~164.12z_1~165.12i_i~166.11m_1i~1032.18d~326.18f_2~832.18w~868.18w~216.18c_k~215.18c_k~843.18c_k~779.18x~112.1b5_1~629.1el_1~889.1et~639.1ey~914.1ey~113.37x_2&met.7=CBsQCMABzpPIyQg~CBsQByCOBjj8AcABu5-qigI~CAEQChgBILIGKLIGMJ4JOOwCQPsGSJYHUKoHWNEIYLkHaNUIcJYJeIrLA4AB_MQDiAG5vAqwAQG4AQPAAd6Ov5sB~CBsQBiCyBjhcwAGO4MaTAg~CBsQChgBILIGKLIGMM4IOJwCQP4GSKkHUKoHWLAIYLkHaLQIcM0IeNemAYABip8BiAG0oQOwAQG4AQPAAaDY9RY~CBsQBiCzBjiBA8ABhZGO-g4~CBsQBiC0BjjFBMAB1LGingw~CBsQBiC2BjiaBsABtvvEzA4~CBsQBiC2BjiQBsABtvvEzA4~CBsQBiCKBzjdBMABnLqQsA4~CBsQBiCKBzjXAsAB7o70vQU~CBsQBhgBIIsHKIsHMLsKOLADQKMHSLYHUJ8JWM4JYJ8JaN8JcLoKeJkfgAGsGogBrBqwAQG4AQPAAfirj9IF~CBsQBhgBIIsHKIsHMMMKOLgDQKIHSKwHUPMHWIkJYPMHaNcJcMMKeLgcgAHLF4gByxewAQG4AQPAAcqX_wY~CBsQBiCLBzi6BcAB9OORkAg~CBsQBiCLBzi6BcABioK7kwg~CBsQBhgBIIsHKIsHMIUKOPoCQKoHSLUHUI0IWKMJYLQIaL0JcIQKeJ8lgAGyIIgBsiCwAQG4AQPAAdW3g_oG~CBsQBiCMBzijAcABu9vivwU~CBsQBiCMBzi3BMABnMDLrwM~CBsQBiCMBzjTBcAByODM9wo~CBsQBiCMBzibAcAB5OmLLw~CBsQBiCACDiJA8ABk4CVhws~CBsQCiCbCMABtbi7jQo~CBsQBiCbCDiGBMABgO7xyQ4~CBsQBiCbCDjWA8AB4fO2zw0~CBsQChgBIJwIKJwIMNEMOLUEwAH04ZbaDA~CBsQBhgBIJwIKJwIMP4JOOIBQMgISN0IaN4JcP4JeJwjgAGsHogBrB6wAQG4AQPAAcHxgq0M~CBsQBhgBIJwIKJwIMIQKOOgBaN4JcIQKeO8QgAGzDYgBsw2wAQG4AQPAAbulv9AI~CBsQAiCiCDhzwAHi6pr0BA~CBsQBiCyCDhAwAG87s_cBQ~CBsQBiCyCDh1wAGpj7fOAw~CBsQBiCyCDh6wAHi3-7GAg~CBsQBiCzCDihAcABtp32rQI~CBsQChgBILMIKLMIMJIMON8DwAH1osyyAQ~CBsQCiCzCDj1A8AB_eTe3Aw~CBsQCiCzCDiTBMABgYzwtw4~CBsQBhgBILMIKLMIMOYMOLMEaN0JcOQMeIl9gAGCeIgBgniwAQG4AQPAAf-1gboK~CBsQCiC0CMABo8qq3A8~CBsQCiC0CMAB_tKK6Ac~CBsQBhgBILQIKLQIMIkKONUBaN4JcIgKePMQgAG3DYgBtw2wAQG4AQPAAfGMurMF~CBsQBhgBILQIKLQIMMAKOIwCaN4JcL8KeO4QgAGyDYgBsg2wAQG4AQPAAfbv34IE~CBsQCiC0CMABo8qq3A8~CBsQBiC1CDiCAcAByYba3AM~CBsQBiC2CDh_wAH0tJCgBA~CBsQBiC2CDjmAsAB2MTr2Ag~CBsQBiC2CDjnAsABl4jB9wc~CBsQBiC2CDiAAcABy8zivg4~CBsQBiC3CDh-wAHrzNKBCQ~CBsQBiC3CDjlAsAB8bqevAQ~CBsQBiC3CDh-wAGdu6y8Aw~CBsQBiC4CDiAAcAB1NSIiAg~CBsQBiC4CDiBAcABxrfBsgU~CBsQCiC5CDjFAcAB-_ua-A4~CBsQCiC5CDh_wAG-0P_XDg~CBsQChgBIPoIKPoIMNYJOFzAAdz9pssM~CBsQChgBIP4IKP4IMOAJOGLAAeHo-okO~CBwQChgBIP8IKP8IML0JOD5opglwvQl4zwaAAUOIAS-wAQG4AQPAAbLe8vsL~CBsQAiCSCThLwAHK3M3rDQ~CBsQAiCuCThVwAGo4c-CCA~CAMQChgBIOsKKOsKMM0LOGJohgtwxAt44dQHgAHDzgeIAbTQFbABAbgBA8ABo_jMpA4~CBsQBhgBIJcMKJcMMMYMOC9opQxwxQx47xCAAbMNiAGzDbABAbgBA8ABu6W_0Ag~CBwQChgBIMEMKMEMMPEMODBo1gxw5wx49rABgAH7qgGIAYe4A7ABAbgBA8AB-ciF_w8~CAwQBRgBIP8KKP8KMKYNOKcCQJALSJILULULWJcNYO0LaJgNcKUNeMoogAHEIogB-UywAQG4AQPAAcyziOgG~CBsQCiCNDThIwAGBjPC3Dg~CBsQByCeCDi-BcAB4t3A1w0~CBsQBSCbCzjFAsAB3uLm5Q4~CBsQCiDmDcABo8qq3A8~CC8QBxgBIN8MKN8MMIwOOK0BQIgNSKcNUKsNWPYNYLYNaPgNcIwOeIoGgAFkiAFrsAEBuAEDwAGb_4nHBw~CBsQCiC5CDjXBcAByb6nvQE~CBsQChgBINUMKNUMMJIOOL0BQIINSKwNULENWP4NYLsNaP4NcJIOeOEGgAHLAYgB2AGwAQG4AQPAAeSq4PAC~CC8QBxgBIN4MKN4MMJgOOLoBQIkNSLcNULgNWIQOYMUNaIQOcJgOeM8IgAFkiAFrsAEBuAEDwAHzit38Aw~CBsQBxgBIIINKIINMJ4OOJwBwAGfi87MDg~CBsQBhgBILgIKLgIMK0OOPUFaN4JcK0OeOIQgAGmDYgBpg2wAQG4AQPAAei0tcsP~CBsQCiCIDsABo8qq3A8~CBsQChgBIIMNKIMNMMMOOMABwAH5-oPkAg~CBsQBiDoDThjwAGyw_XjAQ~CBsQCiC5CDjEBsAB9rGY9A4~CBsQCiDEDsAB_tKK6Ac~CBsQCiC5CDiJB8AB8IuRhwI~CBsQBSCGCTjsBcAB0PqXugY~CBsQBiDoDTiXAcAB2OD07AE~CBsQBiC2Bjj9CMABtvvEzA4~CBsQBiC2BjiJCcABtvvEzA4~CBsQBhgBIIwHKIwHMIoQOP4IQLIHSLYHUI0IWNkJYJUIaPMKcP0PeIKTBIABkY4EiAGRjgSwAQG4AQPAAemLv_II~CBsQBhgBIMIOKMIOMKQPOGJo-w5wpA942hCAAbINiAGyDbABAbgBA8AB9u_fggQ~CBsQBhgBIMMOKMMOMLsPOHho-w5wug943xCAAbcNiAG3DbABAbgBA8AB8Yy6swU~CBsQCiDZEcAB_tKK6Ac~CBsQBiCzBji5C8ABtvvEzA4~CAUQBRgBIKkOKKkOMPMOOEpoug5w8g544waAAS6IAdsEsAEBuAEDwAGQx7LwCA~CBsQBSCQEjgpwAHN9uClDA~CBsQCiDXCDjZC8AB-Zyvjwo~CBsQBhgBIIAIKIAIMNoWONoOaN0JcM4VeJOeG4ABoZkbiAGhmRuwAQG4AQPAAc_3j5sM~CBsQCiDGFjhHwAH36ZTiCg~CBsgmAw49gvAAZPHvJoB~CBsQByCsGDgfwAGTw5j8Dw~CBsQCiDGFTiaA8AB9rGY9A4~CBsQCiC8FTitA8ABvPHXjwQ~CBsQCiDjGDhCwAHJvqe9AQ~CBsQCiDRGTgYwAHHx_qfBw~CBsQCiC1GDi_AcABu97DvQs~CBsQBhgBIMUVKMUVMP4ZOLkEaMwVcP4ZeM4QgAGmDYgBpg2wAQG4AQPAAei0tcsP~CBsQCiCoGTh1wAHwi5GHAg~CBsQAiDRGjgZwAGE69veBg~CBsQChgBIOAaKOAaMO4aOA7AAdmP7e0C~CBsQChgBIOIaKOIaMPIaOBDAAZLkyJIJ~CBsQChgBIIAbKIAbMJQbOBTAAYL5uogL~CBsQBRgBIOsaKOsaMIEbOBbAAcWp5tcI~CBsQDSDIGji7AcAB0Njk4AE~CBsQCiCzBjjuFcABxJ-RxQ8~CBsQCiCzBjj2FcABxJ-RxQ8~CBsQBhgBIJYcKJYcMKocOBTAAca4uZ4O~CBsQCiCJDTinD8AB3dLLkgQ~CBsQBhgBIJwcKJwcMLAcOBTAAZi5gsgM~CBsQBSDwHDgYwAHciNaHBw~CBsQBRgBIM8bKM8bMLYdOOcBwAGPhbv9AQ~CBsQBhgBIP8dKP8dMKIeOCPAAc6cveME~CBsQDSDRHDiRAsABu6iu5A8~CBsgkQc47RjAAeDJ-gk~CBsQCiDQHDjuA8AB6YuG3Q0~CBsQCDjHIMABzpPIyQg~CCcQDRgBIMQgKMQgMPkgODVo2yBw-CB4sF2AAYtYiAGCdLABAbgBA8AB8_LLrgs~CBsQByDGIDggwAHRl8mCCQ~CBsQBiCHITg8wAG_hc2nAw~CBsQChgBIJYhKJYhMMUhOC_AAbjE_8cC~CBsQCiCiITg6wAGJ34ySDA~CBsQBxgBIOohKOohMIAiOBbAAbzv-OAN~CBsQBxgBIOohKOohMJAiOCbAAeSwx-4N~CBsQChgBIOwhKOwhMJoiOC7AAdvd_vAB~CBsQBiDRIDjlAcABmtCKrg4~CBsQBiDRIDjmAcAByozH6gw~CBsQBiDSIDjnAcAB_MTa9AU~CBsQBiDTIDjlAcABwMO16gc~CBsQBiDUIDjlAcAB093wjgE~CBsQBiDUIDjmAcAB47bGFg~CBsQBiDVIDjlAcABl5OgxwI~CBsQBiDtIDjMAcABvNL6oQE~CBsQBiDuIDjMAcAB_crukgI~CBsQBiDuIDjMAcABqs-29wY~CBsQBiDvIDjMAcAB8eSC0AM~CBsQBiDvIDjOAcABu-PjqA4~CBsQCiDwIDiPA8AB37quoQs~CBsQBiCGITi7AcAB0aCh3ws~CCcQChgBIKAhKKAhMKoiOIoBwAHiwZvaBQ~CBsQCiCpITibAcABouDEgQM~CBsQChgBIO0hKO0hMLMiOEbAAb-uneUM~CBsQChgBIO0hKO0hMJsiOC7AAdSS1JAM~CBsQChgBIO4hKO4hMJwiOC7AAdD0ycEH~CCcQBRgBIMgkKMgkMOIkOBrAAZmVn6AL~CBsQBRgBIMkkKMkkMOgkOB_AAc_G2uIB~CBsQBSDZJDgVwAHA64jIDg~CBsQBiDaJDiXAcABkLmIywk&met.1=1.l83x4cv3~6.9e~7.9k~8.9l~9.9l~10.c4~11.9v~12.c4~13.l6~14.th~15.lk~16.2mi~17.2mw~18.2nm~19.37n~20.37n~21.37q~23.w9 HTTP/1.1
Host: csi.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rightway-tan.blogspot.com
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: *
date: Fri, 16 Sep 2022 03:25:55 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Wed, 21 Jan 2004 19:51:30 GMT
content-type: image/gif
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.thestar.com.my/~/media/online/2018/05/29/01/25/btn5.ashx?h=868&w=330&la=en
404 Not Found 0 B URL HTTP/2 www.thestar.com.my/~/media/online/2018/05/29/01/25/btn5.ashx?h=868&w=330&la=en
IP
GET /~/media/online/2018/05/29/01/25/btn5.ashx?h=868&w=330&la=en HTTP/1.1
Host: www.thestar.com.my
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Fri, 16 Sep 2022 03:25:50 GMT
server: nginx
cache-control: no-cache, private
referrer-policy: no-referrer-when-downgrade
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
vary: Accept-Encoding
x-cache: Error from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vlo8Zn4pscSN0iYEIqrT01iukSIzXoVmn_kOAvnF4EVOphOopkppWg==
X-Firefox-Spdy: h2
feeds.feedburner.com/blogspot/GeRlG?format=sigpro
403 Forbidden 0 B URL HTTP/2 feeds.feedburner.com/blogspot/GeRlG?format=sigpro
IP
GET /blogspot/GeRlG?format=sigpro HTTP/1.1
Host: feeds.feedburner.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 16 Sep 2022 03:25:51 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
content-security-policy: script-src 'nonce-JbKHJ-Opnj0GSIBwwFBVaQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/RaichuFeedServer/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/RaichuFeedServer/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/RaichuFeedServer/cspreport
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: same-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
mybetterck.com/adServe/banners?tid=RIGHTWAYTAN_25267_3&pause=5
200 OK 0 B URL HTTP/2 mybetterck.com/adServe/banners?tid=RIGHTWAYTAN_25267_3&pause=5
IP
GET /adServe/banners?tid=RIGHTWAYTAN_25267_3&pause=5 HTTP/1.1
Host: mybetterck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rightway-tan.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 03:25:52 GMT
content-type: text/javascript;charset=utf-8
vary: Accept-Encoding
cache-control: no-cache
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
buttons-config.sharethis.com/js/5b12620943e7c90011853fed.js
200 OK 0 B URL HTTP/2 buttons-config.sharethis.com/js/5b12620943e7c90011853fed.js
IP
GET /js/5b12620943e7c90011853fed.js HTTP/1.1
Host: buttons-config.sharethis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
last-modified: Tue, 05 Jun 2018 07:17:34 GMT
server: AmazonS3
content-encoding: gzip
date: Fri, 16 Sep 2022 03:25:54 GMT
cache-control: max-age=60,public
etag: W/"e147f36ea2764b8c721e5074ab836607"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: I0LoZDeQTImlx0Tzz7qYMsDc9nN9faz2p7JrgGZ0ttbve24yTDfmpQ==
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
go.hearty.me/roodo
302 Found 0 B IP
GET /roodo HTTP/1.1
Host: go.hearty.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rightway-tan.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: embed
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 16 Sep 2022 03:25:52 GMT
content-type: text/html; charset=UTF-8
location: https://hearty.me/?utm_source=roodo&utm_medium=roodo&utm_campaign=roodo
server: Apache/2.4.7 (Ubuntu)
set-cookie: roodo=1; expires=Sun, 16-Oct-2022 03:31:43 GMT; Max-Age=2592000; path=/roodo; domain=go.hearty.me
/roodo=1; expires=Sun, 16-Oct-2022 03:31:43 GMT; Max-Age=2592000; path=/roodo; domain=go.hearty.me
X-Firefox-Spdy: h2
feeds.feedburner.com/blogspot/NYbGpK?format=sigpro
200 OK 0 B URL HTTP/2 feeds.feedburner.com/blogspot/NYbGpK?format=sigpro
IP
GET /blogspot/NYbGpK?format=sigpro HTTP/1.1
Host: feeds.feedburner.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/xml; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
feedburnerv2:
last-modified: Fri, 16 Sep 2022 01:56:46 GMT
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 16 Sep 2022 03:25:51 GMT
content-security-policy: script-src 'report-sample' 'nonce-GdJlAgVd6TAYrL_pk6NnUA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/RaichuFeedServer/cspreport;worker-src 'self'
cross-origin-resource-policy: same-site
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
report-to: {"group":"RaichuFeedServer","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/RaichuFeedServer/external"}]}
cross-origin-opener-policy: same-origin; report-to="RaichuFeedServer"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
feeds.feedburner.com/blogspot/fpdSbA?format=sigpro
200 OK 0 B URL HTTP/2 feeds.feedburner.com/blogspot/fpdSbA?format=sigpro
IP
GET /blogspot/fpdSbA?format=sigpro HTTP/1.1
Host: feeds.feedburner.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/xml; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
feedburnerv2:
last-modified: Fri, 16 Sep 2022 01:09:51 GMT
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 16 Sep 2022 03:25:51 GMT
content-security-policy: require-trusted-types-for 'script';report-uri /_/RaichuFeedServer/cspreport
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: same-site
cross-origin-opener-policy: same-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blog.roodo.com/alame/21368698.swf
301 Moved Permanently 0 B URL HTTP/2 blog.roodo.com/alame/21368698.swf
IP
GET /alame/21368698.swf HTTP/1.1
Host: blog.roodo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: embed
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Fri, 16 Sep 2022 03:25:51 GMT
content-type: text/html; charset=utf-8
location: https://go.hearty.me/roodo
cf-ray: 74b67f4baffcb4eb-OSL
vary: Accept-Encoding
cf-cache-status: DYNAMIC
cache-tag: srv-c61rig1g7hp1rg03ajh0
cloudflare-cdn-cache-control: public, max-age=300
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
142.250.74.161
93.184.220.29
23.36.77.32
185.44.104.99
151.101.86.217
104.16.97.55