Overview

URL la-vieillotte-catain-marocaine.blogspot.com.mt/
IP142.250.74.161
ASNGOOGLE
Location United States
Report completed2022-10-06 00:09:49 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-10-06 2 la-vieillotte-catain-marocaine.blogspot.com.mt/ Phishing
mnemonic secure dns  No alerts detected
Quad9 DNS  No alerts detected


Files

No files detected



Passive DNS (27)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS ocsp.pki.goog (13) 175 2017-06-14 07:23:31 UTC 2022-10-05 06:59:18 UTC 142.250.74.3
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-10-05 09:14:56 UTC 34.215.56.181
mnemonic passive DNS acces.directionplaisir.com (3) 0 2016-07-10 18:44:40 UTC 2022-10-05 21:19:23 UTC 163.172.244.88 Unknown ranking
mnemonic passive DNS la-vieillotte-catain-marocaine.blogspot.com.mt (1) 0 2022-10-04 10:53:11 UTC 2022-10-04 15:16:13 UTC 142.250.74.161 Unknown ranking
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-10-05 05:01:05 UTC 34.117.237.239
mnemonic passive DNS 3.bp.blogspot.com (8) 11048 2013-07-04 04:18:40 UTC 2022-10-05 17:50:20 UTC 142.250.74.161
mnemonic passive DNS 4.bp.blogspot.com (9) 11215 2013-05-06 20:18:52 UTC 2022-10-05 17:50:22 UTC 142.250.74.161
mnemonic passive DNS pagead2.googlesyndication.com (1) 101 2021-02-20 15:52:05 UTC 2022-10-05 23:14:00 UTC 216.58.207.226
mnemonic passive DNS themes.googleusercontent.com (2) 9661 2012-05-29 23:36:21 UTC 2022-10-05 17:07:59 UTC 142.250.74.33
mnemonic passive DNS sc.les-meilleurs-plans.com (1) 0 2017-02-03 13:07:38 UTC 2022-10-05 21:19:23 UTC 163.172.244.131 Unknown ranking
mnemonic passive DNS ww1.erogggggg.com (5) 0 2022-09-29 11:26:32 UTC 2022-10-05 19:15:28 UTC 208.91.196.145 Unknown ranking
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-10-05 06:03:19 UTC 34.160.144.191
mnemonic passive DNS resources.blogblog.com (1) 13274 2017-01-30 04:47:40 UTC 2022-10-05 17:50:19 UTC 216.58.207.201
mnemonic passive DNS pgcool.erogggggg.com (3) 0 2017-02-17 02:36:00 UTC 2022-10-04 17:54:21 UTC 37.48.65.143 Unknown ranking
mnemonic passive DNS img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-10-05 12:33:02 UTC 34.120.237.76
mnemonic passive DNS r3.o.lencr.org (8) 344 2020-12-02 08:52:13 UTC 2022-10-05 07:13:38 UTC 23.36.77.32
mnemonic passive DNS apis.google.com (2) 105 2013-05-30 23:17:44 UTC 2022-10-05 09:25:09 UTC 142.250.74.174
mnemonic passive DNS ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2022-10-05 22:41:55 UTC 93.184.220.29
mnemonic passive DNS acces.lesplansduweb.com (21) 0 2016-07-09 09:09:35 UTC 2022-10-05 21:29:21 UTC 163.172.244.88 Unknown ranking
mnemonic passive DNS statsroule.direction-x.com (6) 0 2016-07-06 09:29:45 UTC 2022-10-04 17:54:21 UTC 163.172.244.89 Domain (direction-x.com) ranked at: 64183
mnemonic passive DNS 1.bp.blogspot.com (9) 8403 2013-05-06 20:18:52 UTC 2022-10-05 14:13:57 UTC 142.250.74.161
mnemonic passive DNS 2.bp.blogspot.com (11) 11071 2013-07-04 03:01:31 UTC 2022-10-05 17:50:22 UTC 142.250.74.161
mnemonic passive DNS www.thumbs-share.com (2) 282992 2017-01-30 12:55:33 UTC 2022-10-05 21:19:23 UTC 212.129.39.153
mnemonic passive DNS www.gstatic.com (1) 0 2016-07-26 09:37:06 UTC 2022-10-05 10:37:57 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-05-27 20:08:30 UTC 2022-10-05 20:25:03 UTC 54.230.111.65
mnemonic passive DNS la-vieillotte-catain-marocaine.blogspot.com (2) 0 2022-08-09 21:42:58 UTC 2022-10-05 21:19:23 UTC 142.250.74.161 Unknown ranking
mnemonic passive DNS www.blogger.com (4) 8975 2012-05-22 07:35:03 UTC 2022-10-05 17:50:19 UTC 216.58.207.201


Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 142.250.74.161

Date UQ / IDS / BL URL IP
2022-12-08 09:17:02 +0000
0 - 0 - 2 aureidopnfpdlswcksei9533965752.blogspot.com/u (...) 142.250.74.161
2022-12-08 09:16:47 +0000
0 - 0 - 3 77581087.blogspot.com/search/label/porn 142.250.74.161
2022-12-08 08:36:37 +0000
0 - 0 - 2 ifsheocsfiuvirmmgifi6791227660.blogspot.com/u (...) 142.250.74.161
2022-12-08 08:12:30 +0000
0 - 0 - 2 iputokmo.blogspot.com/ 142.250.74.161
2022-12-08 08:08:17 +0000
0 - 0 - 24 rellsafan.blogspot.dk/2013/05/spongebob-red-m (...) 142.250.74.161

Last 5 reports on ASN: GOOGLE

Date UQ / IDS / BL URL IP
2022-12-08 09:22:05 +0000
0 - 0 - 1 trancrafts.com/?a=1188&oc=16127&c=44125&m=3&s (...) 34.78.74.19
2022-12-08 09:17:12 +0000
0 - 0 - 58 www.newsandpromotions.com/tracking/8539 34.117.221.220
2022-12-08 09:17:02 +0000
0 - 0 - 2 aureidopnfpdlswcksei9533965752.blogspot.com/u (...) 142.250.74.161
2022-12-08 09:16:47 +0000
0 - 0 - 3 77581087.blogspot.com/search/label/porn 142.250.74.161
2022-12-08 09:13:12 +0000
0 - 0 - 5 mp3sen.blogspot.com/2009_06_12_archive.html 172.217.21.161

Last 1 reports on domain: la-vieillotte-catain-marocaine.blogspot.com.mt

Date UQ / IDS / BL URL IP
2022-10-06 00:09:49 +0000
0 - 0 - 1 la-vieillotte-catain-marocaine.blogspot.com.mt/ 142.250.74.161

Last 5 reports with similar screenshot

Date UQ / IDS / BL URL IP
2022-12-08 08:25:36 +0000
0 - 0 - 1 thejunglees.com/ 209.99.64.43
2022-12-08 08:15:24 +0000
0 - 0 - 2 adrus.com/ 95.211.189.137
2022-12-08 06:00:10 +0000
0 - 0 - 1 martylevin.com/ 204.11.56.48
2022-12-08 05:59:10 +0000
0 - 0 - 2 narimohol.com/ 207.174.215.160
2022-12-08 05:59:08 +0000
0 - 0 - 2 narimohol.com/ 207.174.215.160


JavaScript

Executed Scripts (47)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (125)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: la-vieillotte-catain-marocaine.blogspot.com.mt
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         142.250.74.161
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
Location: http://la-vieillotte-catain-marocaine.blogspot.com/
Content-Encoding: gzip
Date: Thu, 06 Oct 2022 00:09:38 GMT
Expires: Thu, 06 Oct 2022 00:09:38 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 191
Server: GSE


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   191
Md5:    298c3ab50acc82d417d45cf92bb3f9b1
Sha1:   53db2df3eb122ee6f027bc5609ca312c53d1a9a0
Sha256: 744d44ce4b302f5e7585f4b44ba6bcace8740b1669439ae690bc4c71993efc28

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.65
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=259200
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 05 Oct 2022 15:47:18 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: FXfBH2pKMZTDn9s6aQLUVd7JYaC7yvN5qddsNNoMxdceSwS4MpAOnA==
Age: 30140


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    2d12f67fe57a87e7366b662d153a5582
Sha1:   d7b02d81cc74f24a251d9363e0f4b0a149264ec1
Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "AB48F17E54075E1ECF034278E82BCACD2E3689773186CC84FBA9B79AAC907294"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7549
Expires: Thu, 06 Oct 2022 02:15:27 GMT
Date: Thu, 06 Oct 2022 00:09:38 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A9FB1F7ADE7C8A79D2EE83E9B7215E66DC89AC733B11079297A8F4B9ACEAE1F5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8387
Expires: Thu, 06 Oct 2022 02:29:25 GMT
Date: Thu, 06 Oct 2022 00:09:38 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: FfLt2bYKdjRwggTERkDyo78DcnSpXb6k3j+J1dvE0HTViUJHz0NRVY0P39+Jqur9Wc+P5bFq46fbKqhDaluZmw==
x-amz-request-id: 2V9T4XMFAAWVGV8H
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 05 Oct 2022 23:30:31 GMT
age: 2347
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    67d5a988edcda47bc3b3b3f65d32b4b6
Sha1:   d4f0e0da8b3690cc7da925026d3414b68c7d954f
Sha256: 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Thu, 06 Oct 2022 00:09:38 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.65
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Pragma, Content-Length, Backoff, Last-Modified, Cache-Control, Content-Type, Retry-After, ETag, Expires, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Wed, 05 Oct 2022 23:29:33 GMT
Expires: Wed, 05 Oct 2022 23:55:14 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: MmBAb27kCxDAY_-1I0QzF7yH1WzIoK2YJ3yOmvNMND6jnij5CU3OLA==
Age: 2406


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6024
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 00:09:39 GMT
Last-Modified: Wed, 05 Oct 2022 22:29:16 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: la-vieillotte-catain-marocaine.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         142.250.74.161
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Expires: Thu, 06 Oct 2022 00:09:39 GMT
Date: Thu, 06 Oct 2022 00:09:39 GMT
Cache-Control: private, max-age=0
Last-Modified: Thu, 09 Dec 2021 23:03:35 GMT
ETag: W/"98cc15e19140195426154b9912081ce8b2232b855810c4ff7d65c7871f271f5f"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 20757
Server: GSE


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1535)
Size:   20757
Md5:    c84eaf274deb5d65b16909d638262459
Sha1:   ee958fd0af2e5c978d05122397f7ec1ebbecd102
Sha256: 493949d4227854a7d513fd62d43191576ac9c296e759033d2c04f86d97a9debe
                                        
                                            GET /js/cookienotice.js HTTP/1.1 
Host: la-vieillotte-catain-marocaine.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/

                                         
                                         142.250.74.161
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
Date: Thu, 06 Oct 2022 00:09:39 GMT
Expires: Thu, 13 Oct 2022 00:09:39 GMT
Cache-Control: public, max-age=604800
Last-Modified: Wed, 05 Oct 2022 17:03:17 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0


--- Additional Info ---
Magic:  ASCII text
Size:   2026
Md5:    c4e1ed83d89245089b8a1203be20a377
Sha1:   f3940e1215b89300ef97d57a25993f25243b8688
Sha256: afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 00:09:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 00:09:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 00:09:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 00:09:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 00:09:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /static/v1/widgets/2975350028-css_bundle_v2.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.58.207.201
HTTP/2 200 OK
content-type: text/css
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 7776
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 16:35:40 GMT
expires: Thu, 05 Oct 2023 16:35:40 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 04 Oct 2022 18:55:46 GMT
age: 27239
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (35959)
Size:   7776
Md5:    5aa2d3297bdc86bc81322aedecbb5e79
Sha1:   1c0a3c007e41726e167e79b70ddea76198650884
Sha256: feae1fac625d0f30b5f10fa00b62df1a5600cd2178062c427e55f289b29cc630
                                        
                                            GET /js/platform.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.174
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20361
date: Thu, 06 Oct 2022 00:09:39 GMT
expires: Thu, 06 Oct 2022 00:09:39 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "40c22a9ccbd70870"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1277)
Size:   20361
Md5:    b5a31516be83fe4f962609045d824f88
Sha1:   939a49a9858bf23561279f9ca2d1941d3256c66f
Sha256: edb661aa461800e97e3847608a8b2d81cfe345f69a6f84abaa001d8a60500328
                                        
                                            GET /img/icon18_edit_allbkg.gif HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         216.58.207.201
HTTP/2 200 OK
content-type: image/gif
                                        
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 162
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 19:57:04 GMT
expires: Wed, 12 Oct 2022 19:57:04 GMT
cache-control: public, max-age=604800
last-modified: Wed, 05 Oct 2022 12:00:16 GMT
age: 15155
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 18 x 18\012- data
Size:   162
Md5:    c991641178ff05adf0d004298b5eafa9
Sha1:   d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
Sha256: ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
                                        
                                            GET /-0t_4Zjdn-3Y/Wl1vA4xUG2I/AAAAAAAAAIg/OQN4QONUx2YIh7a7yxvwfsITsnqyUBJRgCPcBGAYYCw/s1600/042.jpg HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="042.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 70691
x-xss-protection: 0
date: Wed, 05 Oct 2022 21:19:23 GMT
expires: Thu, 06 Oct 2022 21:19:23 GMT
cache-control: public, max-age=86400, no-transform
etag: "v88"
age: 10216
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 682x1024, components 3\012- data
Size:   70691
Md5:    b87c79f31535fb5aa590c4e2c81212f1
Sha1:   64a5ecdbdc4a58522df5d88b95790f7acba801b2
Sha256: 9c7aa944d748b6b776aa299c4ec83e312ff3bfeb899d3c378d305c32887de5d7
                                        
                                            GET /-52YkmPs0yog/Wl1u4z_-III/AAAAAAAAAIk/YcgMuBrzzFcKk39jIX0CrxWa_Mw6gLpEACPcBGAYYCw/s1600/025.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="025.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 68068
x-xss-protection: 0
date: Wed, 05 Oct 2022 21:19:23 GMT
expires: Wed, 05 Oct 2022 10:27:37 GMT
cache-control: public, max-age=86400, no-transform
age: 10216
etag: "v89"
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 614x768, components 3\012- data
Size:   68068
Md5:    7c83694c77db66e40937d6bf56c96531
Sha1:   f709614e41dc98d03cf8d854c1db4fd889c5b9a5
Sha256: 0443b2092b7fa856509ca6f822cb14f9cd522c87ffe83285dd538a33bfd43e25
                                        
                                            GET /static/v1/widgets/792789798-widgets.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.58.207.201
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56804
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 22:56:10 GMT
expires: Thu, 05 Oct 2023 22:56:10 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 04 Oct 2022 09:10:01 GMT
age: 4409
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2221)
Size:   56804
Md5:    02e6bf311e18828a522b4d3a4079084f
Sha1:   a63cd373fa23b4fe11f938d57737e6bfa1ebe789
Sha256: 25d469843aa09be2473931d33aaa37b65ac371874bd98ca84ec780bead3e33e4
                                        
                                            GET /-wZaz5i05BhY/Wl1vQfF7gII/AAAAAAAAAIY/2DifOK_48lIT-AJ2jjtOjnRUOg2QgUfUQCPcBGAYYCw/s1600/080.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="080.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 45083
x-xss-protection: 0
date: Wed, 05 Oct 2022 21:19:23 GMT
expires: Thu, 06 Oct 2022 21:19:23 GMT
cache-control: public, max-age=86400, no-transform
etag: "v86"
age: 10216
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 600x800, components 3\012- data
Size:   45083
Md5:    2dea18ef45b51b4621ced495bf714acd
Sha1:   b1b8d1d730eba4292e25a8cde9edda1145fe9516
Sha256: 975c8fa92198a3fe61826a2aa61b1aebe6afe4a9912ac1bed600128871f26172
                                        
                                            GET /-WTxClAa8bi0/Wl1uy6o2NOI/AAAAAAAAAIk/bQdILhCUkzcLRNsJueoMoKyAWLd5T8IkgCPcBGAYYCw/w72-h72-p-k-no-nu/009.jpg HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="009.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 4232
x-xss-protection: 0
date: Thu, 06 Oct 2022 00:09:39 GMT
expires: Thu, 06 Oct 2022 19:52:24 GMT
cache-control: public, max-age=86400, no-transform
etag: "v89"
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Size:   4232
Md5:    a461ec065a1fa4f00839a8675412def1
Sha1:   83b6cef4bf2479d546048aacccaf7aae1983244f
Sha256: 02cffe58ab2b2dbdd69685422dab4523bf4b7682b7b97f7ec75605851cc44e4b
                                        
                                            GET /-6-On1wJWxVs/Wl1vAKAYebI/AAAAAAAAAIg/WPrkZVze2aYTYCpuxYhR7dNRW5pQnCcTgCPcBGAYYCw/s1600/040.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="040.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 67742
x-xss-protection: 0
date: Wed, 05 Oct 2022 21:19:23 GMT
expires: Wed, 05 Oct 2022 11:38:17 GMT
cache-control: public, max-age=86400, no-transform
age: 10216
etag: "v88"
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1024x682, components 3\012- data
Size:   67742
Md5:    15296a262a9af9fab8d9c4015a558f51
Sha1:   2c766f30b329ece61d5f8df854ee98b36c67bf41
Sha256: df62167971c0532fef779b6872b612eda42ab4db8060b285f49d4de2f98f3374
                                        
                                            GET /-OwRsKm50dg8/Wl1vXhfUciI/AAAAAAAAAJk/MkFOoY0i6HAZckZE6MPNNN88lywioow-QCPcBGAYYCw/s1600/094.jpg HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="094.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 51774
x-xss-protection: 0
date: Wed, 05 Oct 2022 21:19:23 GMT
expires: Wed, 05 Oct 2022 11:38:17 GMT
cache-control: public, max-age=86400, no-transform
age: 10216
etag: "v99"
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 427x640, components 3\012- data
Size:   51774
Md5:    16915c9b72cfc620b0b2c3bbceb936ad
Sha1:   b2b603e4c0c5187dbec16ba7c219baa2eb4bccdf
Sha256: f5f18dcf008cec0868033028bad86b73a88b043d5ba95c4ac83e44829ead52a1
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: YsfYPrxqS+elblj3g0pHNA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         34.215.56.181
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: qBxRApIOIyio0X0gLcnndR4b7Uc=

                                        
                                            GET /-0t_4Zjdn-3Y/Wl1vA4xUG2I/AAAAAAAAAIg/OQN4QONUx2YIh7a7yxvwfsITsnqyUBJRgCPcBGAYYCw/w72-h72-p-k-no-nu/042.jpg HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v88"
expires: Fri, 07 Oct 2022 00:09:39 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="042.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 06 Oct 2022 00:09:39 GMT
server: fife
content-length: 2837
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Size:   2837
Md5:    f8c1c057cc4dc28bee97334cf28a3421
Sha1:   11ae0816c57f5292a61073b034e178b1734a37a9
Sha256: 7a758786ae3d8d5ab3dc9ccf9a7d2604fcdeac2501450bbeff1c6c2f182a83d3
                                        
                                            GET /-wts46MDN9qk/Wl1vJ3LZneI/AAAAAAAAAIg/Z0JgcOy84FEP0S2VtsUIAwzgiyD0UbvowCPcBGAYYCw/s1600/066.jpg HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="066.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 105538
x-xss-protection: 0
date: Thu, 06 Oct 2022 00:09:39 GMT
expires: Thu, 06 Oct 2022 17:34:25 GMT
cache-control: public, max-age=86400, no-transform
etag: "v88"
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1000x927, components 3\012- data
Size:   105538
Md5:    35cfeeb8062fd74cd3e364e20b761466
Sha1:   e72c3a7155fae90ca6852117bd5f72ecd88001d7
Sha256: 7adfdf258acba4311dda22c3f098f5d8a79ec1b7f0d89a4c7ded24003810a3b8
                                        
                                            GET /-WTxClAa8bi0/Wl1uy6o2NOI/AAAAAAAAAIk/bQdILhCUkzcLRNsJueoMoKyAWLd5T8IkgCPcBGAYYCw/s1600/009.jpg HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="009.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 155431
x-xss-protection: 0
date: Thu, 06 Oct 2022 00:09:39 GMT
expires: Wed, 05 Oct 2022 11:38:17 GMT
cache-control: public, max-age=86400, no-transform
etag: "v89"
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1000x750, components 3\012- data
Size:   155431
Md5:    53e6eeb6b43ebb564ecd40be831d41f9
Sha1:   3cda0a12f592b57028e495c1173d2d54ce90e50c
Sha256: 47b3b6980f872cfa6d93d86a54344ba64ad5208e13ea4c3213104def8c3e575e
                                        
                                            GET /-wZaz5i05BhY/Wl1vQfF7gII/AAAAAAAAAIY/2DifOK_48lIT-AJ2jjtOjnRUOg2QgUfUQCPcBGAYYCw/w72-h72-p-k-no-nu/080.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v86"
expires: Fri, 07 Oct 2022 00:09:39 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="080.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 06 Oct 2022 00:09:39 GMT
server: fife
content-length: 2973
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Size:   2973
Md5:    b21db730452c88749bc88c42d47d0c42
Sha1:   e134cb9553d943f509f697722a5f40e006377542
Sha256: 31a502ae5ea794aa202c0d14487ac761105ca278a57d452b2410ec98c934f54d
                                        
                                            GET /-9dFMPkACR28/Wl1vHLI-wkI/AAAAAAAAAIg/H_alxYLgRBorUTf30RMt3lXyJLJc5OhFgCPcBGAYYCw/s1600/060.jpg HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="060.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 49432
x-xss-protection: 0
date: Thu, 06 Oct 2022 00:09:39 GMT
expires: Thu, 06 Oct 2022 19:52:24 GMT
cache-control: public, max-age=86400, no-transform
etag: "v88"
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 450x800, components 3\012- data
Size:   49432
Md5:    b9a0905f1ecebaed63d19cde2a30d58c
Sha1:   b43ab66a16845aa0b2c0c0373e2fde7135924197
Sha256: 1c15173bc3993be916d64d9a1a425250227c9ea7beb88b0d8d2d16d29e071f58
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 00:09:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /_/scs/abc-static/_/js/k=gapi.lb.en.z9QjrzsHcOc.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/cb=gapi.loaded_0?le=scs HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.174
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 57995
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 02 Oct 2022 07:25:42 GMT
expires: Mon, 02 Oct 2023 07:25:42 GMT
cache-control: public, max-age=31536000
age: 319437
last-modified: Sat, 30 Jul 2022 15:17:53 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (580)
Size:   57995
Md5:    d70fcc84d705c565b31a5835c0938d5b
Sha1:   d28e5dc9fcc6239d67986df3205468072023d2d7
Sha256: 1d558c94793446aa6a7832dde0c39ed7d9c77fd963ffb738c460e4f7369a7f4e
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 00:09:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /-9Qrj4baKqg0/Wl1vTUKfokI/AAAAAAAAAIU/uCb48ArKsb4LMLsfoUPyzqpbdFesfzNXACPcBGAYYCw/s1600/084.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="084.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 21528
x-xss-protection: 0
date: Thu, 06 Oct 2022 00:09:39 GMT
expires: Wed, 05 Oct 2022 11:38:17 GMT
cache-control: public, max-age=86400, no-transform
etag: "vb1"
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 333x333, components 3\012- data
Size:   21528
Md5:    3bad2487d20a887cdebe3e2d6cf61c04
Sha1:   a2c40f193b918b0e6964674c70fea9bbf85d15af
Sha256: fd130668104b79f787082a4de25adce3151c704f4c20d10b37cc384e5f01c301
                                        
                                            GET /-rXotMsE47o4/Wl1u3_dVxcI/AAAAAAAAAIk/Mp4jN0-OPbk9YjDN-7-fKCQ5GvZAvP4igCPcBGAYYCw/s1600/022.jpg HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="022.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 46701
x-xss-protection: 0
date: Thu, 06 Oct 2022 00:09:39 GMT
expires: Wed, 05 Oct 2022 11:38:17 GMT
cache-control: public, max-age=86400, no-transform
etag: "v89"
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 600x603, components 3\012- data
Size:   46701
Md5:    6ec366c98c457f94385fae3b7cd49f17
Sha1:   906c17f5e4e1e0d78bc8f5f6da09ac0701f200d7
Sha256: a68736e73ef38f238d6d28947dbfa3bb1f0dde808275bad79275848fb93fc8cb
                                        
                                            GET /img/share_buttons_20_3.png HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         216.58.207.201
HTTP/2 200 OK
content-type: image/png
                                        
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 5080
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 20:46:12 GMT
expires: Wed, 12 Oct 2022 20:46:12 GMT
cache-control: public, max-age=604800
last-modified: Wed, 05 Oct 2022 00:52:39 GMT
age: 12207
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced\012- data
Size:   5080
Md5:    ad9999106d5f550920b586e8e1704e5a
Sha1:   93fd02c51166402a41f96509cd0ca3fb917877dd
Sha256: 3829a5b2ade7cfc416c80b8f3df71e49e68672875f025d525223978f5cee3fd3
                                        
                                            GET /-kNEc9FRTOSc/Wl1vWY-XEFI/AAAAAAAAAJk/RYWwvlmpdYAhyI8dm2OZCK3sDVfuRuxqgCPcBGAYYCw/s1600/090.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="090.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 187987
x-xss-protection: 0
date: Wed, 05 Oct 2022 21:19:23 GMT
expires: Thu, 06 Oct 2022 21:19:23 GMT
cache-control: public, max-age=86400, no-transform
etag: "v99"
age: 10216
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1000x1414, components 3\012- data
Size:   187987
Md5:    9f894cdccea5b82143b5ca424e1fe7d7
Sha1:   52e7d9e241f8d54e5f78655bf0be9d1a4a9284c6
Sha256: b7cbafd29360980937a6ced60b0bb4d84a51a8c27d3d65644ea30d441adbffcb
                                        
                                            GET /-goklkF-Axu0/Wl1u0HEQovI/AAAAAAAAAIk/9e4ydV7EqTsfzPCSN-6Hs7dfvdMCSTzRwCPcBGAYYCw/s1600/013.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="013.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 159717
x-xss-protection: 0
date: Thu, 06 Oct 2022 00:09:39 GMT
expires: Wed, 05 Oct 2022 10:27:37 GMT
cache-control: public, max-age=86400, no-transform
etag: "v89"
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1000x750, components 3\012- data
Size:   159717
Md5:    9e3f940590d1163400d0d682b2723f0a
Sha1:   425375bc15552ac8791fff72d2366837020f4985
Sha256: 3e7599057f1963ba7cb5bfbfd0718cfde6dbba43d7da5954f2091eb6b57a1d0b
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 00:09:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 00:09:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /-YEu6AYs9N_c/V4yACe96gFI/AAAAAAAAABk/ZRFItbe5te4HsDs3Yr4HACI2qJ-mO4fJgCLcB/w72-h72-p-k-no-nu/418_1000.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="418_1000.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 3602
x-xss-protection: 0
date: Wed, 05 Oct 2022 21:19:23 GMT
expires: Wed, 05 Oct 2022 11:38:17 GMT
cache-control: public, max-age=86400, no-transform
age: 10216
etag: "v24"
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Size:   3602
Md5:    303e3beae2df4a0e47340aae6115bc2f
Sha1:   67d14caf104b26ba44ad98958d44f234c1d5150b
Sha256: 92906e22bbdd029dc12352402665d7d8779e6063c1c7800e6b9e2f8c8bfa38d5
                                        
                                            GET /-9OnPdpcEKOM/Wl1vKR1RdzI/AAAAAAAAAIg/0OPu4hLkS5sLwp-wyY0fxnw7cT8SDCMgACPcBGAYYCw/s1600/067.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="067.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 115387
x-xss-protection: 0
date: Wed, 05 Oct 2022 21:19:23 GMT
expires: Wed, 05 Oct 2022 11:38:17 GMT
cache-control: public, max-age=86400, no-transform
age: 10216
etag: "v88"
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1000x923, components 3\012- data
Size:   115387
Md5:    fd5a15e444f9f5f87fa6ef022d700815
Sha1:   f227d6594acf00439d3ea8395b184bea8b596eaa
Sha256: 19d42477d5f054d3363ee943d5149a19e75c963ef1544a775bfcffec42d8127e
                                        
                                            GET /-ikyTrYJEPJg/Wl1vN2b-4EI/AAAAAAAAAIg/DU5ahYEMbkYSPmwtFuELTAX2aTf9-VXggCPcBGAYYCw/s1600/075.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="075.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 74156
x-xss-protection: 0
date: Thu, 06 Oct 2022 00:09:39 GMT
expires: Wed, 05 Oct 2022 11:38:17 GMT
cache-control: public, max-age=86400, no-transform
etag: "v88"
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 720x540, components 3\012- data
Size:   74156
Md5:    c62c39ed44996d1c0b651869805d98e9
Sha1:   127e4e82aa556d16a2be5df95df099d8c983ed21
Sha256: 9eaef262b045754806b82e242b1fc9a23f9a9125e33f459c0fd09e3ed5e42696
                                        
                                            GET /-GUMT6aAF1dc/Wl1wkDjkbUI/AAAAAAAAAJ0/5HjFKfef-LgcqUkUm7tcRTrbxs0RUblGQCPcBGAYYCw/s1600/012.jpg HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="012.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 123845
x-xss-protection: 0
date: Thu, 06 Oct 2022 00:09:39 GMT
expires: Wed, 05 Oct 2022 11:38:17 GMT
cache-control: public, max-age=86400, no-transform
etag: "v9d"
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1000x750, components 3\012- data
Size:   123845
Md5:    aa6fe7a569c25aae7d13ba506835b8bd
Sha1:   e837ac4d267768e7c03e0a0d8b5f09b7e3f97439
Sha256: 476bf2758a3d6f6b88058942a974fc5b8904ad8fbb918c20eaa46d21d71ab8b7
                                        
                                            GET /pagead/js/google_top_exp.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/

                                         
                                         216.58.207.226
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 12:52:19 GMT
Expires: Wed, 19 Oct 2022 12:52:19 GMT
Cache-Control: public, max-age=1209600
ETag: 13036835877489095579
Age: 40640


--- Additional Info ---
Magic:  ASCII text
Size:   67
Md5:    9bbc3ca32ec951a484589ce0e6b4db73
Sha1:   753d6f6183b33b2dee5dde2208fca91c17f5bb13
Sha256: b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
                                        
                                            GET /-n2q4Z8nsBYE/W-T-LtlShYI/AAAAAAAABBs/isqf-NHM6fIiLtPe4-IbtqKUW-G1nhAqQCPcBGAYYCw/s1600/171_1000.png HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/png
                                        
access-control-expose-headers: Content-Length
etag: "v41b"
expires: Fri, 07 Oct 2022 00:09:39 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="171_1000.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 06 Oct 2022 00:09:39 GMT
server: fife
content-length: 505246
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 822 x 588, 8-bit/color RGBA, non-interlaced\012- data
Size:   505246
Md5:    0b2c6b9cf391c05fd981bcfc76207310
Sha1:   754338ca429c86f34a6b552d02f654d2bd41dbcb
Sha256: 993961ae53d2565926fd7f12b9168118e4cc16b1fe0df7937b957e701b31f3f1
                                        
                                            GET /-ISsEtg5aYfw/Wl1u26tBKYI/AAAAAAAAAIk/PXIuffjcZnQ4V1jiYbCXcjFsQHeEiDw6QCPcBGAYYCw/s1600/018.jpg HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v89"
expires: Fri, 07 Oct 2022 00:09:39 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="018.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 06 Oct 2022 00:09:39 GMT
server: fife
content-length: 96701
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 768x1024, components 3\012- data
Size:   96701
Md5:    309269a27b8b9017ad55ac4008d2dd1a
Sha1:   41afb7d10b8880e05e67615ba60b8592da2d2100
Sha256: a624164a3f5cf85ad07a307e810597a9da8bbfa5ddc902aa557a5792ac28ec65
                                        
                                            GET /?t=29&mode=1&pg_b_format=21&tc1=blogger&tc2=160x600&pgid=4568&rebill=0&o=b&urls_rd=60&urls=http%3A%2F%2Fjeveuxunemeuf.com%2F%2Chttp%3A%2F%2Fannonces.zone-sexe.com%2F%23 HTTP/1.1 
Host: pgcool.erogggggg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Upgrade-Insecure-Requests: 1

                                         
                                         37.48.65.143
HTTP/1.1 200 OK
content-type: text/html; charset=utf-8
                                        
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 644
date: Thu, 06 Oct 2022 00:09:39 GMT
server: nginx
set-cookie: sid=2ba71e0c-450b-11ed-a578-7dff398d0768; path=/; domain=.erogggggg.com; expires=Tue, 24 Oct 2090 03:23:46 GMT; max-age=2147483647; HttpOnly


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (644), with no line terminators
Size:   644
Md5:    324ac9ee8eb79829cee6d6095dc8a926
Sha1:   44e72d94de0c5893f62bbe1505f8277442fff085
Sha256: 574b9cb189af7f40bf05e4951f977ef6d5ca7a86ba0e7e7afd01e50c855aa0a2
                                        
                                            GET /-mYP73k_TQp8/Wl1vSHd63aI/AAAAAAAAAII/bKpsSRDQ61MotjdSZLTQBvUvYM2JQBrxACPcBGAYYCw/s1600/082.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="082.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 51169
x-xss-protection: 0
date: Thu, 06 Oct 2022 00:09:39 GMT
expires: Wed, 05 Oct 2022 11:38:17 GMT
cache-control: public, max-age=86400, no-transform
etag: "vb1"
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 430x500, components 3\012- data
Size:   51169
Md5:    9e194afdb2c7ec29f4b33e441f559ba3
Sha1:   09610beb5ab5c6404574e04cbac7ac60fd409618
Sha256: 5a3914492d70d618bcb0dd51362ab5d022cfb254628f0503b792502e3adaca21
                                        
                                            GET /-QJMYq-4f5ho/Wl1vXTw6nlI/AAAAAAAAAJk/vwCFgztaic4k5pWBzOXHYhTR0q4zN4fygCPcBGAYYCw/s1600/093.jpg HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v99"
expires: Fri, 07 Oct 2022 00:09:39 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="093.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 06 Oct 2022 00:09:39 GMT
server: fife
content-length: 48045
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 480x642, components 3\012- data
Size:   48045
Md5:    758b4dd3f07eafd18d8609f2ed6a8db1
Sha1:   23934d60559b54bf25b30a114bb9ed5a6ab9d23b
Sha256: 75972b298239c7e85b5e794dd6384c1e58e0ea25b1cced0f313a788a2c249dfe
                                        
                                            GET /-oabAzZAkHdU/Wl1u_Moqy_I/AAAAAAAAAIg/wq8cBjnbMsQHhM1R24l70bcJ79rOKcc0wCPcBGAYYCw/w72-h72-p-k-no-nu/037.jpg HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="037.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 3538
x-xss-protection: 0
date: Thu, 06 Oct 2022 00:09:39 GMT
expires: Wed, 05 Oct 2022 11:38:17 GMT
cache-control: public, max-age=86400, no-transform
etag: "v88"
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Size:   3538
Md5:    df3848ea206275292f2ba9dad6eec5ca
Sha1:   edd18d10e84f5305fe3bf1c69f3aad6c8dcb3dce
Sha256: 0df871bf0c4f44f11a97f26a8172df9f7a985b8d1d74ddc8a0907deba1b6ba9c
                                        
                                            GET /-9t3eCOfHxNQ/Wl1u0wae1GI/AAAAAAAAAIk/CWC_w2xqBeAHMFWOGz8a41fa4vCU2WEZACPcBGAYYCw/s1600/014.jpg HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="014.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 157492
x-xss-protection: 0
date: Thu, 06 Oct 2022 00:09:39 GMT
expires: Wed, 05 Oct 2022 10:27:37 GMT
cache-control: public, max-age=86400, no-transform
etag: "v89"
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1000x750, components 3\012- data
Size:   157492
Md5:    5a518132a55dd5a756b0594ee57c8622
Sha1:   17b2e3d40c4787fbf378517d88817dd05825a6f4
Sha256: 4ddb020523461a7683ea13b8f0969142b88ac36630de3bd57865a1d81cb616d9
                                        
                                            GET /-oabAzZAkHdU/Wl1u_Moqy_I/AAAAAAAAAIg/wq8cBjnbMsQHhM1R24l70bcJ79rOKcc0wCPcBGAYYCw/s1600/037.jpg HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="037.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 142414
x-xss-protection: 0
date: Thu, 06 Oct 2022 00:09:39 GMT
expires: Wed, 05 Oct 2022 11:38:17 GMT
cache-control: public, max-age=86400, no-transform
etag: "v88"
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1024x682, components 3\012- data
Size:   142414
Md5:    0e6b5c46aea9520150548d145abb96e4
Sha1:   0f935faaf866bf00c088219f687726d895a4aff0
Sha256: e6bd6ac3fde2dd93d323ca956893526953e8f9889ec9ba984ed16330f7eb89a8
                                        
                                            GET /-X18QKCjlEXg/Wl1u6vt8yUI/AAAAAAAAAIk/2voW5xDtByEl3qbL3ZA5m5avupNtczpSgCPcBGAYYCw/s1600/028.jpg HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="028.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 109143
x-xss-protection: 0
date: Thu, 06 Oct 2022 00:09:39 GMT
expires: Wed, 05 Oct 2022 11:38:17 GMT
cache-control: public, max-age=86400, no-transform
etag: "v89"
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 766x991, components 3\012- data
Size:   109143
Md5:    5b12a70f00d5ae15b7376a9ce936da20
Sha1:   58a1a35e9a9e2df612efc11b3f9d8331a6ca61c6
Sha256: 9c5c04b9067d9bec10cbb87de3dfa0de5d2c9c7ac61e3f996860383ced877c6f
                                        
                                            GET /-H1Ol3mr-bkk/Wl1vBKBn8mI/AAAAAAAAAIg/nCaMc9sRHWEYakp2h_lclb7MCUtYfDibQCPcBGAYYCw/w72-h72-p-k-no-nu/043.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v88"
expires: Fri, 07 Oct 2022 00:09:39 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="043.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 06 Oct 2022 00:09:39 GMT
server: fife
content-length: 3364
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Size:   3364
Md5:    859072cd65e9b0afe3652891a05687ca
Sha1:   a057651d75009d99634e4914d5c1bb9cdd3d5d80
Sha256: ddfa7726444f33a8173eef4094d1f8cad6e62a7d00868d434d18a150466c84a4
                                        
                                            GET /-QcQq6n8_ers/Wl1u8N2wKkI/AAAAAAAAAIk/MAcVAOBu_FYXK0fBdkGv3CYs1RnYSS7VQCPcBGAYYCw/w72-h72-p-k-no-nu/032.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="032.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 3458
x-xss-protection: 0
date: Thu, 06 Oct 2022 00:09:39 GMT
expires: Wed, 05 Oct 2022 11:38:17 GMT
cache-control: public, max-age=86400, no-transform
etag: "v89"
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Size:   3458
Md5:    e2ff9cfb77c86c972f685cd8d61553d2
Sha1:   eb56c508d3f496d567c1989c3b7517997ba1854a
Sha256: 52655741299191e0d6fde8c3c4f31adc18919f36137f7558e6bea523124d2e7f
                                        
                                            GET /-G1Sd2aYx7Cs/Wl1u7QHBSHI/AAAAAAAAAIk/35dLFX6J6n8Yc_nzNs5BOGMCJLXjb4uEQCPcBGAYYCw/w72-h72-p-k-no-nu/030.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v89"
expires: Fri, 07 Oct 2022 00:09:39 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="030.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 06 Oct 2022 00:09:39 GMT
server: fife
content-length: 3464
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Size:   3464
Md5:    3fa923fa9236119571798638e0c09798
Sha1:   4d28a9bd283b9a6620f68216cd00300721ab793a
Sha256: 4d51af5b8770b40e1bf4c3573f13a95063d68ef3e0acd3c0393b57ad250812bb
                                        
                                            GET /-H1Ol3mr-bkk/Wl1vBKBn8mI/AAAAAAAAAIg/nCaMc9sRHWEYakp2h_lclb7MCUtYfDibQCPcBGAYYCw/s1600/043.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v88"
expires: Fri, 07 Oct 2022 00:09:39 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="043.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 06 Oct 2022 00:09:39 GMT
server: fife
content-length: 69954
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 900x600, components 3\012- data
Size:   69954
Md5:    b39b09bda8649d0c318b91e6ff1482d4
Sha1:   3bb8e4958c33a5007a8db9bb458689bcd5083768
Sha256: 15a7fff1b22d6df9bdd29d430dffb09663f03c5c80dbd5632af095e5584b41e0
                                        
                                            GET /-XcFtfRBMNIk/Wl1uv_ppIjI/AAAAAAAAAIk/6MFzwn9qAs875ZyRnZ2F4OXkemtX5VvwgCPcBGAYYCw/s1600/002.jpg HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="002.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 113008
x-xss-protection: 0
date: Thu, 06 Oct 2022 00:09:39 GMT
expires: Wed, 05 Oct 2022 10:27:37 GMT
cache-control: public, max-age=86400, no-transform
etag: "v89"
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 750x1000, components 3\012- data
Size:   113008
Md5:    6244a4d6f552bb6b1d2560022642deeb
Sha1:   1435cd9f5aac7703ed8d6487640e694f3f31553c
Sha256: 46c2797a0592649a017e77f98d63ed83f024f34906fe85e737479f4a165bb3ad
                                        
                                            GET /-G1Sd2aYx7Cs/Wl1u7QHBSHI/AAAAAAAAAIk/35dLFX6J6n8Yc_nzNs5BOGMCJLXjb4uEQCPcBGAYYCw/s1600/030.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v89"
expires: Fri, 07 Oct 2022 00:09:39 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="030.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 06 Oct 2022 00:09:39 GMT
server: fife
content-length: 73664
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1024x682, components 3\012- data
Size:   73664
Md5:    5333d3abc0719649a18b0530243cba96
Sha1:   1c41d57b861082e12cbf426a7944f0eb7989d8f5
Sha256: ed49eb2a6465f523594e77f9788062e8f0bf931013299ab8666aabd06d321d40
                                        
                                            GET /image?id=1Cxq2mmU6b4suhXCYbNpzMNvwD-acXF1pLq8RI1LQKWZptzYY1lMgxJDE3-YVa6EWkKEC HTTP/1.1 
Host: themes.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/

                                         
                                         142.250.74.33
HTTP/1.1 301 Moved Permanently
Content-Type: application/binary
                                        
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 06 Oct 2022 00:09:39 GMT
Location: https://themes.googleusercontent.com/image?id=1Cxq2mmU6b4suhXCYbNpzMNvwD-acXF1pLq8RI1LQKWZptzYY1lMgxJDE3-YVa6EWkKEC
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff

                                        
                                            GET /-QcQq6n8_ers/Wl1u8N2wKkI/AAAAAAAAAIk/MAcVAOBu_FYXK0fBdkGv3CYs1RnYSS7VQCPcBGAYYCw/s1600/032.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v89"
expires: Fri, 07 Oct 2022 00:09:39 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="032.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 06 Oct 2022 00:09:39 GMT
server: fife
content-length: 116582
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 682x1024, components 3\012- data
Size:   116582
Md5:    d8ff4dc034ed2ef870723b0531d98509
Sha1:   319250f31f25c76840f0bc2b7c5c07b87a3d41ff
Sha256: d72b44247130f0a5132f14e21923262e32e1c779bfb9c61c66a80249328b2066
                                        
                                            GET /-JHDyZZ7sVhE/Wl1vL4AmkEI/AAAAAAAAAIg/INxEj_PHWqMAYw86MinzsqeIDI_1IsN1gCPcBGAYYCw/s1600/071.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="071.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 78341
x-xss-protection: 0
date: Thu, 06 Oct 2022 00:09:39 GMT
expires: Wed, 05 Oct 2022 10:27:37 GMT
cache-control: public, max-age=86400, no-transform
etag: "v88"
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1000x698, components 3\012- data
Size:   78341
Md5:    0b69fd26149e00a826e05f773ae79714
Sha1:   fab5cbf27eea95597f8fd7a9692d7640f9ce808a
Sha256: 0acb8d6b3d1941cdb5697e207a9a9b1ee9d6adf88cf47841339e57de141e5051
                                        
                                            GET /-WMkQOHqwsjk/Vsc7q1n9w5I/AAAAAAAAADo/UyQCPCpIltc/w72-h72-p-k-no-nu/223_1000.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="223_1000.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 2947
x-xss-protection: 0
date: Thu, 06 Oct 2022 00:09:39 GMT
expires: Wed, 05 Oct 2022 11:38:18 GMT
cache-control: public, max-age=86400, no-transform
etag: "v4e"
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Size:   2947
Md5:    cb05496c89b9f5d1173d80dc1898d352
Sha1:   8f0a061ecd8b875b625fea981a6337852a96a45a
Sha256: f106c226d6fa96d3e04494e4e6f106e120814b10f40c6dec0aa959bc08d6bc25
                                        
                                            GET /a.php?t=31&pg_b_format=21&tc1=bnew160x600&tc2=160x600&pgid=4568&rebill=0&o=b&urls_rd=60&urls=18ans-webcam.zone-sexe.com,chatte-webcam.zone-sexe.com,planqwebcam.zone-sexe.com,salopewebcam.zone-sexe.com,webcam-amatrice.zone-sexe.com,live-sexe.zone-sexe.com,chaturbate.zone-sexe.com,livejasmin.zone-sexe.com,webcamdesexe.zone-sexe.com,webcamsexy.zone-sexe.com,cam-hot.zone-sexe.com/,cams.zone-sexe.com/,sexeliveshow.zone-sexe.com/,camcokine.zone-sexe.com/,yeslovecam.zone-sexe.com/,sexecam.zone-sexe.com/,camera-salope.zone-sexe.com/,semater.zone-sexe.com/,live-visio.zone-sexe.com/,camdeporno.zone-sexe.com/ HTTP/1.1 
Host: acces.directionplaisir.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Upgrade-Insecure-Requests: 1

                                         
                                         163.172.244.88
HTTP/1.1 200 OK
content-type: text/html; charset=utf-8
                                        
server: nginx
date: Thu, 06 Oct 2022 00:09:39 GMT
transfer-encoding: chunked
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
x-server: php6-2
content-encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1693)
Size:   4106
Md5:    95234cabc898e77b1f10a80072b10cac
Sha1:   b479a9602b68748479d2cb2d250df9c77bfc7f34
Sha256: 2baad9bc7a0bed30717cbc86929458574e0e6bb35f8da590bb4fa1db615bdd8d
                                        
                                            GET /a.php?t=29&mode=1&pg_b_format=3&tc1=bloggerarabe&tc2=468x60&pgid=4568&rebill=0&o=b HTTP/1.1 
Host: acces.lesplansduweb.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Upgrade-Insecure-Requests: 1

                                         
                                         163.172.244.88
HTTP/1.1 200 OK
content-type: text/html; charset=utf-8
                                        
server: nginx
date: Thu, 06 Oct 2022 00:09:39 GMT
transfer-encoding: chunked
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
x-server: php6-6
content-encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1331)
Size:   3807
Md5:    ba4d2b3ce8f2b1a7cfbcac30db464513
Sha1:   007c6e9d402ec4ed1c54de5e58d74cd0a53ea62f
Sha256: ae161e2c65dab5700336e2839c50c4a11fc2973dae260e48d468fe9da8e0256e
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 00:09:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /track.php?v&i=755-2242-1-5646 HTTP/1.1 
Host: statsroule.direction-x.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://acces.directionplaisir.com/

                                         
                                         163.172.244.89
HTTP/1.1 200 OK
content-type: text/html; charset=ISO-8859-1
                                        
server: nginx
date: Thu, 06 Oct 2022 00:09:39 GMT
transfer-encoding: chunked
vary: Accept-Encoding
x-server: php6-6
content-encoding: gzip

                                        
                                            GET /track.php?v&i=847-2341-1-5206 HTTP/1.1 
Host: statsroule.direction-x.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://acces.lesplansduweb.com/

                                         
                                         163.172.244.89
HTTP/1.1 200 OK
content-type: text/html; charset=ISO-8859-1
                                        
server: nginx
date: Thu, 06 Oct 2022 00:09:39 GMT
transfer-encoding: chunked
vary: Accept-Encoding
x-server: php6-10
content-encoding: gzip

                                        
                                            GET /cft/view.php?token=e8cabd997f461f903388fcb22dda6892&_t=1665014979857 HTTP/1.1 
Host: acces.directionplaisir.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://acces.directionplaisir.com/a.php?t=31&pg_b_format=21&tc1=bnew160x600&tc2=160x600&pgid=4568&rebill=0&o=b&urls_rd=60&urls=18ans-webcam.zone-sexe.com,chatte-webcam.zone-sexe.com,planqwebcam.zone-sexe.com,salopewebcam.zone-sexe.com,webcam-amatrice.zone-sexe.com,live-sexe.zone-sexe.com,chaturbate.zone-sexe.com,livejasmin.zone-sexe.com,webcamdesexe.zone-sexe.com,webcamsexy.zone-sexe.com,cam-hot.zone-sexe.com/,cams.zone-sexe.com/,sexeliveshow.zone-sexe.com/,camcokine.zone-sexe.com/,yeslovecam.zone-sexe.com/,sexecam.zone-sexe.com/,camera-salope.zone-sexe.com/,semater.zone-sexe.com/,live-visio.zone-sexe.com/,camdeporno.zone-sexe.com/

                                         
                                         163.172.244.88
HTTP/1.1 200 OK
content-type: image/gif
                                        
server: nginx
date: Thu, 06 Oct 2022 00:09:39 GMT
content-length: 42
expires: Mon, 26 Jul 1997 05:00:00 GMT
last-modified: Thu, 06 Oct 2022 00:09:39 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-time-process: 0.0001
x-server: php6-3


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    9b5e8704c89f018cff215cb5ed3e0128
Sha1:   2a9fa3661b326c503e492b89cdd9130d12ead03d
Sha256: b2c78c910f5ea29e3a9d223dabc203c055c8708b1fe7d83788b490638126db4d
                                        
                                            GET /a.php?t=29&mode=1&pg_b_format=3&tc1=bloggerarabe&tc2=468x60&pgid=4568&rebill=0&o=b HTTP/1.1 
Host: acces.lesplansduweb.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Upgrade-Insecure-Requests: 1

                                         
                                         163.172.244.88
HTTP/1.1 200 OK
content-type: text/html; charset=utf-8
                                        
server: nginx
date: Thu, 06 Oct 2022 00:09:39 GMT
transfer-encoding: chunked
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
x-server: php6-10
content-encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1331)
Size:   3814
Md5:    04a151769e4edf3fb1e839a3592d5597
Sha1:   1785c3b8fb5669e25e24b7ec19b4cdf5a6ad2dfe
Sha256: 3160e3c055c929183050cba1d93803e374c726b0ed9263d59641c202658f08e2
                                        
                                            GET /-pqOEQ12yEPU/Wl1vGwv6LZI/AAAAAAAAAIg/bg5lSZCIVRE2w2FW17FIzHSrVm_EoBwwgCPcBGAYYCw/s1600/059.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v88"
expires: Fri, 07 Oct 2022 00:09:39 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="059.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 06 Oct 2022 00:09:39 GMT
server: fife
content-length: 58273
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 720x960, components 3\012- data
Size:   58273
Md5:    1b6ab692893e1a942396401b2a52add7
Sha1:   b916788343a6a6b8fcbaa3b06cc4e6e0ee1e34d7
Sha256: e6681eb4d0e0ec7f847c6d753f89138eaadb62bedbc812bd56016cac093f4945
                                        
                                            GET /a.php?t=29&mode=1&pg_b_format=3&tc1=bloggerarabe&tc2=468x60&pgid=4568&rebill=0&o=b HTTP/1.1 
Host: acces.lesplansduweb.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Upgrade-Insecure-Requests: 1

                                         
                                         163.172.244.88
HTTP/1.1 200 OK
content-type: text/html; charset=utf-8
                                        
server: nginx
date: Thu, 06 Oct 2022 00:09:39 GMT
transfer-encoding: chunked
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
x-server: php6-4
content-encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1331)
Size:   3810
Md5:    173924316fc16df9cc93ed7b571e4cd9
Sha1:   29e11e96c605bd8a5e86e4579f7c18a9b31841f4
Sha256: 3adfc0a51bbad98e1c925b3f14651782e9cd47f44e0944a7bb448672262271b6
                                        
                                            GET /a.php?t=29&mode=1&pg_b_format=3&tc1=bloggerarabe&tc2=468x60&pgid=4568&rebill=0&o=b HTTP/1.1 
Host: acces.lesplansduweb.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Upgrade-Insecure-Requests: 1

                                         
                                         163.172.244.88
HTTP/1.1 200 OK
content-type: text/html; charset=utf-8
                                        
server: nginx
date: Thu, 06 Oct 2022 00:09:39 GMT
transfer-encoding: chunked
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
x-server: php6-2
content-encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1331)
Size:   3801
Md5:    316714b63ab549572dd483d23dad8c90
Sha1:   c4dbd5a5468db4703da6b070974d8529da3ed647
Sha256: 8534ec8911e44852387b9d5cf4afeda1d1fbd2473b1911e52208a09076c381a6
                                        
                                            GET /a.php?t=29&mode=1&pg_b_format=3&tc1=bloggerarabe&tc2=468x60&pgid=4568&rebill=0&o=b HTTP/1.1 
Host: acces.lesplansduweb.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Upgrade-Insecure-Requests: 1

                                         
                                         163.172.244.88
HTTP/1.1 200 OK
content-type: text/html; charset=utf-8
                                        
server: nginx
date: Thu, 06 Oct 2022 00:09:39 GMT
transfer-encoding: chunked
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
x-server: php6-5
content-encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1331)
Size:   3810
Md5:    173924316fc16df9cc93ed7b571e4cd9
Sha1:   29e11e96c605bd8a5e86e4579f7c18a9b31841f4
Sha256: 3adfc0a51bbad98e1c925b3f14651782e9cd47f44e0944a7bb448672262271b6
                                        
                                            GET /article/load.php?file=07199f8a35db6b104144a2b0814f4295.htm&_target_url=http%3A//acces.directionplaisir.com/a.php%3Ft%3D31%26pg_b_format%3D21%26tc1%3Dbnew160x600%26tc2%3D160x600%26pgid%3D4568%26rebill%3D0%26o%3Dif%26urls_rd%3D60%26urls%3D18ans-webcam.zone-sexe.com%2Cchatte-webcam.zone-sexe.com%2Cplanqwebcam.zone-sexe.com%2Csalopewebcam.zone-sexe.com%2Cwebcam-amatrice.zone-sexe.com%2Clive-sexe.zone-sexe.com%2Cchaturbate.zone-sexe.com%2Clivejasmin.zone-sexe.com%2Cwebcamdesexe.zone-sexe.com%2Cwebcamsexy.zone-sexe.com%2Ccam-hot.zone-sexe.com/%2Ccams.zone-sexe.com/%2Csexeliveshow.zone-sexe.com/%2Ccamcokine.zone-sexe.com/%2Cyeslovecam.zone-sexe.com/%2Csexecam.zone-sexe.com/%2Ccamera-salope.zone-sexe.com/%2Csemater.zone-sexe.com/%2Clive-visio.zone-sexe.com/%2Ccamdeporno.zone-sexe.com/%26%26pg_from%3Db%26tci13%3Dban-755-2242-1-5646&_track_click_url=http%3A//statsroule.direction-x.com/track.php%3Fc%26i%3D755-2242-1-5646&pgid=4568&t=31&n=11&mode=1&tc1=bnew160x600&tc2=160x600 HTTP/1.1 
Host: acces.directionplaisir.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://acces.directionplaisir.com/a.php?t=31&pg_b_format=21&tc1=bnew160x600&tc2=160x600&pgid=4568&rebill=0&o=b&urls_rd=60&urls=18ans-webcam.zone-sexe.com,chatte-webcam.zone-sexe.com,planqwebcam.zone-sexe.com,salopewebcam.zone-sexe.com,webcam-amatrice.zone-sexe.com,live-sexe.zone-sexe.com,chaturbate.zone-sexe.com,livejasmin.zone-sexe.com,webcamdesexe.zone-sexe.com,webcamsexy.zone-sexe.com,cam-hot.zone-sexe.com/,cams.zone-sexe.com/,sexeliveshow.zone-sexe.com/,camcokine.zone-sexe.com/,yeslovecam.zone-sexe.com/,sexecam.zone-sexe.com/,camera-salope.zone-sexe.com/,semater.zone-sexe.com/,live-visio.zone-sexe.com/,camdeporno.zone-sexe.com/
Upgrade-Insecure-Requests: 1

                                         
                                         163.172.244.88
HTTP/1.1 200 OK
content-type: text/html; charset=utf-8
                                        
server: nginx
date: Thu, 06 Oct 2022 00:09:39 GMT
transfer-encoding: chunked
x-server: php6-1
content-encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document, ASCII text, with very long lines (710), with CRLF, LF line terminators
Size:   1756
Md5:    b28d9b6c24421bc0e4072ba64892781d
Sha1:   2832212e8a29d9e734a0ea0997bd8b8e87f4d19d
Sha256: 8cd6fbafee5ed8b880794ccf14c9629b3444a5cb1c13bcc73ab07dd3fe197516
                                        
                                            GET /a.php?t=29&mode=1&pg_b_format=3&tc1=bloggerarabe&tc2=468x60&pgid=4568&rebill=0&o=b HTTP/1.1 
Host: acces.lesplansduweb.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Upgrade-Insecure-Requests: 1

                                         
                                         163.172.244.88
HTTP/1.1 200 OK
content-type: text/html; charset=utf-8
                                        
server: nginx
date: Thu, 06 Oct 2022 00:09:39 GMT
transfer-encoding: chunked
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
x-server: php6-6
content-encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1331)
Size:   3801
Md5:    316714b63ab549572dd483d23dad8c90
Sha1:   c4dbd5a5468db4703da6b070974d8529da3ed647
Sha256: 8534ec8911e44852387b9d5cf4afeda1d1fbd2473b1911e52208a09076c381a6
                                        
                                            GET /a.php?t=29&mode=1&pg_b_format=3&tc1=bloggerarabe&tc2=468x60&pgid=4568&rebill=0&o=b HTTP/1.1 
Host: acces.lesplansduweb.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Upgrade-Insecure-Requests: 1

                                         
                                         163.172.244.88
HTTP/1.1 200 OK
content-type: text/html; charset=utf-8
                                        
server: nginx
date: Thu, 06 Oct 2022 00:09:39 GMT
transfer-encoding: chunked
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
x-server: php6-9
content-encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1331)
Size:   3807
Md5:    ba4d2b3ce8f2b1a7cfbcac30db464513
Sha1:   007c6e9d402ec4ed1c54de5e58d74cd0a53ea62f
Sha256: ae161e2c65dab5700336e2839c50c4a11fc2973dae260e48d468fe9da8e0256e
                                        
                                            GET /article/image.php?file=http%3A//roule.super-plans.com/9fa80f7df7802154324d315224b678db.gif HTTP/1.1 
Host: acces.lesplansduweb.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://acces.lesplansduweb.com/a.php?t=29&mode=1&pg_b_format=3&tc1=bloggerarabe&tc2=468x60&pgid=4568&rebill=0&o=b

                                         
                                         163.172.244.88
HTTP/1.1 200 OK
content-type: image/gif
                                        
server: nginx
date: Thu, 06 Oct 2022 00:09:40 GMT
transfer-encoding: chunked
x-server: php6-4


--- Additional Info ---
Magic:  GIF image data, version 89a, 468 x 60\012- data
Size:   5841
Md5:    9fa80f7df7802154324d315224b678db
Sha1:   12dcd6b50beedf62a2851b7fd88f8c5e43a838c9
Sha256: a18e0082e73df4353c01342b642932d1d1f2657268e9ca28dee37fcd88311179
                                        
                                            GET /track.php?v&i=847-2341-1-2807 HTTP/1.1 
Host: statsroule.direction-x.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://acces.lesplansduweb.com/

                                         
                                         163.172.244.89
HTTP/1.1 200 OK
content-type: text/html; charset=ISO-8859-1
                                        
server: nginx
date: Thu, 06 Oct 2022 00:09:40 GMT
transfer-encoding: chunked
vary: Accept-Encoding
x-server: php6-9
content-encoding: gzip

                                        
                                            GET /cft/view.php?token=a83f3d572ab4581242a41b2a77fd8ba9&_t=1665014979875 HTTP/1.1 
Host: acces.lesplansduweb.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://acces.lesplansduweb.com/a.php?t=29&mode=1&pg_b_format=3&tc1=bloggerarabe&tc2=468x60&pgid=4568&rebill=0&o=b

                                         
                                         163.172.244.88
HTTP/1.1 200 OK
content-type: image/gif
                                        
server: nginx
date: Thu, 06 Oct 2022 00:09:40 GMT
content-length: 42
expires: Mon, 26 Jul 1997 05:00:00 GMT
last-modified: Thu, 06 Oct 2022 00:09:40 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-time-process: 0.0001
x-server: php6-1


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    9b5e8704c89f018cff215cb5ed3e0128
Sha1:   2a9fa3661b326c503e492b89cdd9130d12ead03d
Sha256: b2c78c910f5ea29e3a9d223dabc203c055c8708b1fe7d83788b490638126db4d
                                        
                                            GET /track.php?v&i=847-2341-1-5950 HTTP/1.1 
Host: statsroule.direction-x.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://acces.lesplansduweb.com/

                                         
                                         163.172.244.89
HTTP/1.1 200 OK
content-type: text/html; charset=ISO-8859-1
                                        
server: nginx
date: Thu, 06 Oct 2022 00:09:40 GMT
transfer-encoding: chunked
vary: Accept-Encoding
x-server: php6-5
content-encoding: gzip

                                        
                                            GET /article/image.php?file=http%3A//roule.les-meilleurs-plans.com/183a4944b7445fd4c85e569469f9d595.gif HTTP/1.1 
Host: acces.lesplansduweb.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://acces.lesplansduweb.com/a.php?t=29&mode=1&pg_b_format=3&tc1=bloggerarabe&tc2=468x60&pgid=4568&rebill=0&o=b

                                         
                                         163.172.244.88
HTTP/1.1 200 OK
content-type: image/gif
                                        
server: nginx
date: Thu, 06 Oct 2022 00:09:40 GMT
transfer-encoding: chunked
x-server: php6-7


--- Additional Info ---
Magic:  GIF image data, version 89a, 468 x 60\012- data
Size:   6783
Md5:    183a4944b7445fd4c85e569469f9d595
Sha1:   7cf11a5679b59671e44c9f300d7cccd7f52c8341
Sha256: 6b63c5c8156ce0358c735f7c6263cf079d59663a30325caee16b8e2986ce186e
                                        
                                            GET /cft/view.php?token=a83f3d572ab4581242a41b2a77fd8ba9&_t=1665014979996 HTTP/1.1 
Host: acces.lesplansduweb.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://acces.lesplansduweb.com/a.php?t=29&mode=1&pg_b_format=3&tc1=bloggerarabe&tc2=468x60&pgid=4568&rebill=0&o=b

                                         
                                         163.172.244.88
HTTP/1.1 200 OK
content-type: image/gif
                                        
server: nginx
date: Thu, 06 Oct 2022 00:09:40 GMT
content-length: 42
expires: Mon, 26 Jul 1997 05:00:00 GMT
last-modified: Thu, 06 Oct 2022 00:09:40 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-time-process: 0.0001
x-server: php6-3


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    9b5e8704c89f018cff215cb5ed3e0128
Sha1:   2a9fa3661b326c503e492b89cdd9130d12ead03d
Sha256: b2c78c910f5ea29e3a9d223dabc203c055c8708b1fe7d83788b490638126db4d
                                        
                                            GET /article/image.php?file=http%3A//roule.lewebfacilement.com/12e5288d1992d774bde5c6de7e164d95.gif HTTP/1.1 
Host: acces.lesplansduweb.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://acces.lesplansduweb.com/a.php?t=29&mode=1&pg_b_format=3&tc1=bloggerarabe&tc2=468x60&pgid=4568&rebill=0&o=b

                                         
                                         163.172.244.88
HTTP/1.1 200 OK
content-type: image/gif
                                        
server: nginx
date: Thu, 06 Oct 2022 00:09:40 GMT
transfer-encoding: chunked
x-server: php6-2


--- Additional Info ---
Magic:  GIF image data, version 89a, 468 x 60\012- data
Size:   7237
Md5:    12e5288d1992d774bde5c6de7e164d95
Sha1:   98c797272346435cece5d92600aa62f457421fb7
Sha256: b8ad7eb38a1d6cf8f1dd606c55c9f8fe145b74e47771a694ad98dc598a1f26cf
                                        
                                            GET /track.php?v&i=847-2341-1-5815 HTTP/1.1 
Host: statsroule.direction-x.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://acces.lesplansduweb.com/

                                         
                                         163.172.244.89
HTTP/1.1 200 OK
content-type: text/html; charset=ISO-8859-1
                                        
server: nginx
date: Thu, 06 Oct 2022 00:09:40 GMT
transfer-encoding: chunked
vary: Accept-Encoding
x-server: php6-8
content-encoding: gzip

                                        
                                            GET /article/image.php?file=http%3A//roule.lesplansduweb.com/12e5288d1992d774bde5c6de7e164d95.gif HTTP/1.1 
Host: acces.lesplansduweb.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://acces.lesplansduweb.com/a.php?t=29&mode=1&pg_b_format=3&tc1=bloggerarabe&tc2=468x60&pgid=4568&rebill=0&o=b

                                         
                                         163.172.244.88
HTTP/1.1 200 OK
content-type: image/gif
                                        
server: nginx
date: Thu, 06 Oct 2022 00:09:40 GMT
transfer-encoding: chunked
x-server: php6-4


--- Additional Info ---
Magic:  GIF image data, version 89a, 468 x 60\012- data
Size:   7237
Md5:    12e5288d1992d774bde5c6de7e164d95
Sha1:   98c797272346435cece5d92600aa62f457421fb7
Sha256: b8ad7eb38a1d6cf8f1dd606c55c9f8fe145b74e47771a694ad98dc598a1f26cf
                                        
                                            GET /cft/view.php?token=a83f3d572ab4581242a41b2a77fd8ba9&_t=1665014980014 HTTP/1.1 
Host: acces.lesplansduweb.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://acces.lesplansduweb.com/a.php?t=29&mode=1&pg_b_format=3&tc1=bloggerarabe&tc2=468x60&pgid=4568&rebill=0&o=b

                                         
                                         163.172.244.88
HTTP/1.1 200 OK
content-type: image/gif
                                        
server: nginx
date: Thu, 06 Oct 2022 00:09:40 GMT
content-length: 42
expires: Mon, 26 Jul 1997 05:00:00 GMT
last-modified: Thu, 06 Oct 2022 00:09:40 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-time-process: 0.0001
x-server: php6-10


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    9b5e8704c89f018cff215cb5ed3e0128
Sha1:   2a9fa3661b326c503e492b89cdd9130d12ead03d
Sha256: b2c78c910f5ea29e3a9d223dabc203c055c8708b1fe7d83788b490638126db4d
                                        
                                            GET /track.php?v&i=847-2341-1-5206 HTTP/1.1 
Host: statsroule.direction-x.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://acces.lesplansduweb.com/

                                         
                                         163.172.244.89
HTTP/1.1 200 OK
content-type: text/html; charset=ISO-8859-1
                                        
server: nginx
date: Thu, 06 Oct 2022 00:09:40 GMT
transfer-encoding: chunked
vary: Accept-Encoding
x-server: php6-9
content-encoding: gzip

                                        
                                            GET /api/thumbs.js HTTP/1.1 
Host: www.thumbs-share.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://acces.directionplaisir.com/

                                         
                                         212.129.39.153
HTTP/1.1 200 OK
content-type: text/javascript; charset=utf-8
                                        
date: Thu, 06 Oct 2022 00:09:40 GMT
server: Apache
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
set-cookie: THSESSID=b0ODw5fQ69pdW6777KNUre4bzd; expires=Fri, 06-Oct-2023 00:09:40 GMT; path=/; domain=www.thumbs-share.com
cache-control: max-age=2592000
expires: Sat, 05 Nov 2022 00:09:40 GMT
x-server: ec-front4-3
vary: User-Agent,Accept-Encoding
x-my-header: value
content-encoding: gzip
content-length: 1627
connection: close


--- Additional Info ---
Magic:  ASCII text, with very long lines (4143)
Size:   1627
Md5:    523d1c6ce6e96407cb4554642879c23f
Sha1:   460683f9e5f99853579b616203be88fd3f0bd31f
Sha256: 5e913973308dc096e69bd6cab6482c55df00f3d003a4cf3a11e0d8f13b7d483d
                                        
                                            GET /cft/view.php?token=a83f3d572ab4581242a41b2a77fd8ba9&_t=1665014980023 HTTP/1.1 
Host: acces.lesplansduweb.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://acces.lesplansduweb.com/a.php?t=29&mode=1&pg_b_format=3&tc1=bloggerarabe&tc2=468x60&pgid=4568&rebill=0&o=b

                                         
                                         163.172.244.88
HTTP/1.1 200 OK
content-type: image/gif
                                        
server: nginx
date: Thu, 06 Oct 2022 00:09:40 GMT
content-length: 42
expires: Mon, 26 Jul 1997 05:00:00 GMT
last-modified: Thu, 06 Oct 2022 00:09:40 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-time-process: 0.0001
x-server: php6-7


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    9b5e8704c89f018cff215cb5ed3e0128
Sha1:   2a9fa3661b326c503e492b89cdd9130d12ead03d
Sha256: b2c78c910f5ea29e3a9d223dabc203c055c8708b1fe7d83788b490638126db4d
                                        
                                            GET /image?id=1Cxq2mmU6b4suhXCYbNpzMNvwD-acXF1pLq8RI1LQKWZptzYY1lMgxJDE3-YVa6EWkKEC HTTP/1.1 
Host: themes.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.33
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 07 Oct 2022 00:09:40 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 06 Oct 2022 00:09:40 GMT
server: fife
content-length: 115220
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 1800x1197, components 3\012- data
Size:   115220
Md5:    b92263a18b5ad263c24e8d063969b567
Sha1:   e65b287ad91b98ddb8e06ffdb43451220116570c
Sha256: 15de8ffb13c6bab78273edbf014eef2626155953b906141a639031e52a81983e
                                        
                                            GET /api/thumbs-deps.js HTTP/1.1 
Host: www.thumbs-share.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://acces.directionplaisir.com/

                                         
                                         212.129.39.153
HTTP/1.1 200 OK
content-type: application/javascript
                                        
date: Thu, 06 Oct 2022 00:09:40 GMT
server: Apache
last-modified: Wed, 12 Jun 2013 12:48:14 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sat, 05 Nov 2022 00:09:40 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-server: ec-front4-2
x-my-header: value
content-length: 33074
connection: close


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32769)
Size:   33074
Md5:    5d5558fd56e036ee62781bd8f58847e9
Sha1:   fb05f28732bd28571e80604d75aefa6b7a11d95a
Sha256: dae1f089c640d533a3fa034df6087eee1130b5687746674d704ae4bad3e9627c
                                        
                                            GET /article/image.php?file=http%3A//roule.lesplansduweb.com/9fa80f7df7802154324d315224b678db.gif HTTP/1.1 
Host: acces.lesplansduweb.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://acces.lesplansduweb.com/a.php?t=29&mode=1&pg_b_format=3&tc1=bloggerarabe&tc2=468x60&pgid=4568&rebill=0&o=b

                                         
                                         163.172.244.88
HTTP/1.1 200 OK
content-type: image/gif
                                        
server: nginx
date: Thu, 06 Oct 2022 00:09:40 GMT
transfer-encoding: chunked
x-server: php6-5


--- Additional Info ---
Magic:  GIF image data, version 89a, 468 x 60\012- data
Size:   5841
Md5:    9fa80f7df7802154324d315224b678db
Sha1:   12dcd6b50beedf62a2851b7fd88f8c5e43a838c9
Sha256: a18e0082e73df4353c01342b642932d1d1f2657268e9ca28dee37fcd88311179
                                        
                                            GET /cft/view.php?token=a83f3d572ab4581242a41b2a77fd8ba9&_t=1665014980040 HTTP/1.1 
Host: acces.lesplansduweb.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://acces.lesplansduweb.com/a.php?t=29&mode=1&pg_b_format=3&tc1=bloggerarabe&tc2=468x60&pgid=4568&rebill=0&o=b

                                         
                                         163.172.244.88
HTTP/1.1 200 OK
content-type: image/gif
                                        
server: nginx
date: Thu, 06 Oct 2022 00:09:40 GMT
content-length: 42
expires: Mon, 26 Jul 1997 05:00:00 GMT
last-modified: Thu, 06 Oct 2022 00:09:40 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-time-process: 0.0001
x-server: php6-2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    9b5e8704c89f018cff215cb5ed3e0128
Sha1:   2a9fa3661b326c503e492b89cdd9130d12ead03d
Sha256: b2c78c910f5ea29e3a9d223dabc203c055c8708b1fe7d83788b490638126db4d
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 00:09:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /article/image.php?file=http%3A//roule.super-plans.com/9fa80f7df7802154324d315224b678db.gif HTTP/1.1 
Host: acces.lesplansduweb.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://acces.lesplansduweb.com/a.php?t=29&mode=1&pg_b_format=3&tc1=bloggerarabe&tc2=468x60&pgid=4568&rebill=0&o=b

                                         
                                         163.172.244.88
HTTP/1.1 200 OK
content-type: image/gif
                                        
server: nginx
date: Thu, 06 Oct 2022 00:09:40 GMT
transfer-encoding: chunked
x-server: php6-8


--- Additional Info ---
Magic:  GIF image data, version 89a, 468 x 60\012- data
Size:   5841
Md5:    9fa80f7df7802154324d315224b678db
Sha1:   12dcd6b50beedf62a2851b7fd88f8c5e43a838c9
Sha256: a18e0082e73df4353c01342b642932d1d1f2657268e9ca28dee37fcd88311179
                                        
                                            GET /cft/view.php?token=a83f3d572ab4581242a41b2a77fd8ba9&_t=1665014980054 HTTP/1.1 
Host: acces.lesplansduweb.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://acces.lesplansduweb.com/a.php?t=29&mode=1&pg_b_format=3&tc1=bloggerarabe&tc2=468x60&pgid=4568&rebill=0&o=b

                                         
                                         163.172.244.88
HTTP/1.1 200 OK
content-type: image/gif
                                        
server: nginx
date: Thu, 06 Oct 2022 00:09:40 GMT
content-length: 42
expires: Mon, 26 Jul 1997 05:00:00 GMT
last-modified: Thu, 06 Oct 2022 00:09:40 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-time-process: 0
x-server: php6-4


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    9b5e8704c89f018cff215cb5ed3e0128
Sha1:   2a9fa3661b326c503e492b89cdd9130d12ead03d
Sha256: b2c78c910f5ea29e3a9d223dabc203c055c8708b1fe7d83788b490638126db4d
                                        
                                            GET /cft/view.php?token=a83f3d572ab4581242a41b2a77fd8ba9&_t=1665014980073 HTTP/1.1 
Host: acces.lesplansduweb.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://acces.lesplansduweb.com/a.php?t=29&mode=1&pg_b_format=3&tc1=bloggerarabe&tc2=468x60&pgid=4568&rebill=0&o=b

                                         
                                         163.172.244.88
HTTP/1.1 200 OK
content-type: image/gif
                                        
server: nginx
date: Thu, 06 Oct 2022 00:09:40 GMT
content-length: 42
expires: Mon, 26 Jul 1997 05:00:00 GMT
last-modified: Thu, 06 Oct 2022 00:09:40 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-time-process: 0.0001
x-server: php6-3


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    9b5e8704c89f018cff215cb5ed3e0128
Sha1:   2a9fa3661b326c503e492b89cdd9130d12ead03d
Sha256: b2c78c910f5ea29e3a9d223dabc203c055c8708b1fe7d83788b490638126db4d
                                        
                                            GET /article/image.php?file=http%3A//roule.lewebfacilement.com/8137430b48f16c9469f4d75f37bbbf56.gif HTTP/1.1 
Host: acces.lesplansduweb.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://acces.lesplansduweb.com/a.php?t=29&mode=1&pg_b_format=3&tc1=bloggerarabe&tc2=468x60&pgid=4568&rebill=0&o=b

                                         
                                         163.172.244.88
HTTP/1.1 200 OK
content-type: image/gif
                                        
server: nginx
date: Thu, 06 Oct 2022 00:09:40 GMT
transfer-encoding: chunked
x-server: php6-3


--- Additional Info ---
Magic:  GIF image data, version 89a, 468 x 60\012- data
Size:   105966
Md5:    8137430b48f16c9469f4d75f37bbbf56
Sha1:   ee579be4b2828eab128a7a7349be48859a40359b
Sha256: 06546b0bc397aef86b6e4c92881aedb2e0544871f624d4ca45157a01fa396a3f
                                        
                                            GET /?mode=1&tc1=blogger&tc2=fakebarr&pgid=4568&rebill=0&t=29&o=fakebarchat HTTP/1.1 
Host: pgcool.erogggggg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/

                                         
                                         37.48.65.143
HTTP/1.1 302 Found
                                        
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Thu, 06 Oct 2022 00:09:39 GMT
location: http://ww1.erogggggg.com
server: nginx
set-cookie: sid=2b8ad166-450b-11ed-b058-7dff6ea55397; path=/; domain=.erogggggg.com; expires=Tue, 24 Oct 2090 03:23:47 GMT; max-age=2147483647; HttpOnly


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   11
Md5:    32682312d17c7cbf18e73594f5570319
Sha1:   60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
Sha256: e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
                                        
                                            GET /statsroule/21/10.gif HTTP/1.1 
Host: sc.les-meilleurs-plans.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://acces.directionplaisir.com/

                                         
                                         163.172.244.131
HTTP/1.1 200 OK
content-type: image/gif
                                        
server: nginx
date: Thu, 06 Oct 2022 00:09:40 GMT
content-length: 45896
last-modified: Thu, 19 Dec 2013 08:47:29 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
pragma: public
access-control-allow-origin: *
accept-ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 160 x 600\012- data
Size:   45896
Md5:    25f344959321c5cf420f3767ef6bab99
Sha1:   f421ff78be1dce70c6ffb7f4f366c81e42e4baee
Sha256: b16d90c809b0d75b7fca631e635df8d7051ceb6142f985f6d194378568986468
                                        
                                            GET /dyn-css/authorization.css?targetBlogID=2541043838409624609&zx=6437d5fe-f900-4ce9-91dc-f39a07c7ab65 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         216.58.207.201
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                        
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 06 Oct 2022 00:09:40 GMT
last-modified: Thu, 06 Oct 2022 00:09:40 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  very short file (no magic)
Size:   21
Md5:    a62e4d501434033d5d177e67d3aafdd0
Sha1:   34f7300c9ed47334cf10826d57af785321e3138b
Sha256: b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "5E3859994E6BF739AC223C08B61B20365939021B5BC8FC8B06AD90EA3EF68B16"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18545
Expires: Thu, 06 Oct 2022 05:18:45 GMT
Date: Thu, 06 Oct 2022 00:09:40 GMT
Connection: keep-alive

                                        
                                            GET /?js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY2NTAyMjE3OSwiaWF0IjoxNjY1MDE0OTc5LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc2RsNGpiZjM1ZWhvNTY3ZGcxc3VrdWsiLCJuYmYiOjE2NjUwMTQ5NzksInRzIjoxNjY1MDE0OTc5NzczMzU3fQ.JN78tzLybQEXx5wahb3Vb0AuiKGOY2c-T8TgR7CJGLU&mode=1&o=b&pg_b_format=21&pgid=4568&rebill=0&sid=2ba71e0c-450b-11ed-a578-7dff398d0768&t=29&tc1=blogger&tc2=160x600&urls=http%3A%2F%2Fjeveuxunemeuf.com%2F%2Chttp%3A%2F%2Fannonces.zone-sexe.com%2F%23&urls_rd=60 HTTP/1.1 
Host: pgcool.erogggggg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pgcool.erogggggg.com/?t=29&mode=1&pg_b_format=21&tc1=blogger&tc2=160x600&pgid=4568&rebill=0&o=b&urls_rd=60&urls=http%3A%2F%2Fjeveuxunemeuf.com%2F%2Chttp%3A%2F%2Fannonces.zone-sexe.com%2F%23
Upgrade-Insecure-Requests: 1

                                         
                                         37.48.65.143
HTTP/1.1 302 Found
                                        
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Thu, 06 Oct 2022 00:09:39 GMT
location: http://ww1.erogggggg.com
server: nginx
set-cookie: sid=2ba71e0c-450b-11ed-a578-7dff398d0768; path=/; domain=.erogggggg.com; expires=Tue, 24 Oct 2090 03:23:47 GMT; max-age=2147483647; HttpOnly


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   11
Md5:    32682312d17c7cbf18e73594f5570319
Sha1:   60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
Sha256: e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13480
Expires: Thu, 06 Oct 2022 03:54:20 GMT
Date: Thu, 06 Oct 2022 00:09:40 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13480
Expires: Thu, 06 Oct 2022 03:54:20 GMT
Date: Thu, 06 Oct 2022 00:09:40 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13480
Expires: Thu, 06 Oct 2022 03:54:20 GMT
Date: Thu, 06 Oct 2022 00:09:40 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13480
Expires: Thu, 06 Oct 2022 03:54:20 GMT
Date: Thu, 06 Oct 2022 00:09:40 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13480
Expires: Thu, 06 Oct 2022 03:54:20 GMT
Date: Thu, 06 Oct 2022 00:09:40 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F585959dc-efc9-453b-bdef-59b834c43800.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6363
x-amzn-requestid: d0de2bff-da5b-487b-9058-6f33b35b594d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjO8FHWAIAMFbUA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df84d-736ce6cb2fc072a22e65a803;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:34:05 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: Rlg9tzQaVbL_qon437VaTKEpDWQdmrMPkXXSUu8xZRMeRBmnmx9n6w==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 c21a0d27ceec21e266c9f962d0349438.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 22:58:20 GMT
age: 4280
etag: "4897d9af4414d827043507c90b992d5c8d8344f1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6363
Md5:    fa6c2f48dc4f2d67c8918e35396e901f
Sha1:   4897d9af4414d827043507c90b992d5c8d8344f1
Sha256: 0b287a86cf539a00b0b0c839c07f0453796ed71b571664bb2ea64363198bd633
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d3175ca-da8b-4a6f-a315-9f1d92299891.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6693
x-amzn-requestid: 1531f482-cdf5-4506-ba1c-18a66173457b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjQNxF45oAMFxJQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633dfa57-28e8e572281d5f110c26dcf1;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:42:47 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: EimZGdrj091jlG994mCq23siOMuN9SVgRGfKRMGeZW_nifQS_yUXaA==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 d2575afea3774df33dcf5e5ff475025e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:58:48 GMT
etag: "0f37ee870c8855919900c99204ffffe736548a3f"
age: 7852
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6693
Md5:    57f90a95d91632baf3b89d7b3b46361f
Sha1:   0f37ee870c8855919900c99204ffffe736548a3f
Sha256: a3449e46854b90fdcda4a0ba83b4b0892a7888b17211d814c0db930116bb9a32
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbffd8689-87c3-4efb-b880-4109e3dc9294.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7919
x-amzn-requestid: 01497827-07e5-4129-abf2-120b00eed8c0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjPs5F1LoAMF8Ww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df985-4b0c175142a6ace915d5e5d2;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:39:17 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: QElSCxuAj2dM9Psp2_fPTSi1goaNKkylf7D9ITOplorOFLIGIV332g==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 d8d9c12d1a621129f4bc739038e7c72e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:52:46 GMT
age: 8214
etag: "a9cd62230d4aabfcc2e8b2494e687d854254113e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7919
Md5:    72ad6f9b79e7a3d11e3ace6b0e969614
Sha1:   a9cd62230d4aabfcc2e8b2494e687d854254113e
Sha256: 1d59cd22b3316da6f1d44076089ba983faed5327d174ddb3cb3d58f487ccae51
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6646df0-31a7-4c5a-8148-5fe9e20f3baf.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9338
x-amzn-requestid: 4ca2eb3c-eba4-43a4-b79a-89546da3d660
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjQBfG7soAMF9cw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633dfa09-1b5bd53052718f620b920a00;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:41:29 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: 6pHftE0vUMqrH2NR_7DzrWlnD0yal7BkAfee7UeVG7DKZNEAYRa9HQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 d1d67b07408bba8c682597d8303642e2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 22:03:23 GMT
age: 7577
etag: "f350f295dd70152712162d4be5b3b5f0d12cde57"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9338
Md5:    b5958f828ccc16a41b22d9ae812bccfc
Sha1:   f350f295dd70152712162d4be5b3b5f0d12cde57
Sha256: 230d7d8e570e433d18ec53b6ca114e2a206e8c265c0c66d73388c49db5c91c64
                                        
                                            GET / HTTP/1.1 
Host: ww1.erogggggg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Connection: keep-alive

                                         
                                         208.91.196.145
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 06 Oct 2022 00:09:40 GMT
Server: Apache
Referrer-Policy: no-referrer-when-downgrade
Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
Permissions-Policy: ch-ua-platform-version=(self https://dts.gnpge.com), ch-ua-model=(self https://dts.gnpge.com)
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_XwnvOLTjNACncBCckom7KaU25Grq+OxGJAZmKoO4vs9/VkYTe3QZIaBgZRnaQ4G+cN7vQvMjnViCrurxqdJXrQ==
Cteonnt-Length: 2312
Keep-Alive: timeout=5, max=125
Connection: Keep-Alive
Cache-Control: private
Content-Encoding: gzip
Content-Length: 1014


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (533), with CRLF line terminators
Size:   1014
Md5:    797a3f8a977ad299e39ead5f47616100
Sha1:   1613f01f1a200d1fda51468cae41e9a3e75e818a
Sha256: 19adec680adaaca0a2413caaabb6c9374a72d40427d04312016024b64719d066
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ca20164-9b52-49c5-9e63-1fc0ae719f45.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10158
x-amzn-requestid: def1fc7e-8008-466f-9271-20fa1ab0fa5a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZaqZCH7doAMFcPQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a8aa0-7fd2fb1249366f2277d719d6;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 07:09:20 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: aeOU8fGkf5uHuYZ79k17EzxiFnwm0_z7SeZJElgwECzRyhR2N_SYJA==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 04:06:09 GMT
age: 72211
etag: "bbe71936b78a8c34d03ab87948dc840b35c6948f"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10158
Md5:    4fc2ddd86450d64d3fb659ab4e78be58
Sha1:   bbe71936b78a8c34d03ab87948dc840b35c6948f
Sha256: 84a760397a5912bd05f61bc8a953c13a88a677e2d17fbbf74bdf7d7ff4d3942f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4aaf2d0a-832d-4fe3-85f6-f6f55993a48e.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8192
x-amzn-requestid: b61498b4-22cd-4860-98e0-c7aad18a4d96
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjO6sGTXoAMFZpA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df844-23d0f24731d3bfab253f2677;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:33:56 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: oRlpmDZZ8uLu-tcn-j2H5XMAxfUCtHkm_xq9jUlROKsPgth0Gu-ugg==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 ece5d4a731ece5ff46c564ab2b946ede.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:37:06 GMT
age: 9154
etag: "f2f4664206335b080db6a5608b463945e89de346"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8192
Md5:    83c37f49b9fb5eeb70a244a759a4ce0d
Sha1:   f2f4664206335b080db6a5608b463945e89de346
Sha256: cbb8e24144c2118f3e2f2f9db09f2b4d582bca01da68fc2fb29b4d8a6df4dab5
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 00:09:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /feedback/js/help/prod/service/lazy.min.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/product-feedback-gathering
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="product-feedback-gathering"
report-to: {"group":"product-feedback-gathering","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/product-feedback-gathering"}]}
content-length: 33871
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 06 Oct 2022 00:02:29 GMT
expires: Thu, 06 Oct 2022 00:52:29 GMT
cache-control: public, max-age=3000
last-modified: Tue, 04 Oct 2022 15:24:36 GMT
age: 431
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2800)
Size:   33871
Md5:    2e2eb8ca65dfdc046d0b954f898024b1
Sha1:   6ed5c92832af02c6eb2f3921775922e25e84bacc
Sha256: 0b7eefc089178c4e032417958a2892d47b758136ef3b2a5c1dd36c77d1fa08ae
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 00:09:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /?fp=uI9uDTuUb5QTlEfYR8LH3RlWMN2yhyVX4vAfFl%2BOG4z9GoDmqYhWCDYYXX7QwFf1DSO5fcITuNXzqjAa%2By0Q67zFLAytSBf9d5yzRyNUfmbF6rKW2mLjwGr3792fHLkbM7IxT9q5yP0cjc9rA4KEjq0QpxbJnDy3RWO0UI3ke%2FA5WsisRVga1wLnhygBjLuhICFuFYuIWx3Ev1juGabPkYlD0QS8Von8zRt%2BOKu2hteZLqsiNv5egeZzbGT39p7NToHgIbgj7evd0HNyvqxwqg%3D%3D&prvtof=O%2FH3TVTC%2FpTjXmLNZOMM5at7fOvoqo6lft7dM%2Bo3Bn1nvpylclrCKgCX31EBIwKS%2BROKz1hwXY4OTZERUBt1mQ%3D%3D&poru=A3u0gv8D5zWL28eIVuyv8TP0ipgFZ%2FEtTRBmOhYQcXg%3D&cifr=1& HTTP/1.1 
Host: ww1.erogggggg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Upgrade-Insecure-Requests: 1

                                         
                                         208.91.196.145
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 06 Oct 2022 00:09:41 GMT
Server: Apache
Referrer-Policy: no-referrer-when-downgrade
Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com")
Location: http://ww1.erogggggg.com/
Content-Length: 0
Keep-Alive: timeout=5, max=120
Connection: Keep-Alive

                                        
                                            GET / HTTP/1.1 
Host: ww1.erogggggg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://la-vieillotte-catain-marocaine.blogspot.com/
Upgrade-Insecure-Requests: 1

                                         
                                         208.91.196.145
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 06 Oct 2022 00:09:41 GMT
Server: Apache
Referrer-Policy: no-referrer-when-downgrade
Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com")
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_XwnvOLTjNACncBCckom7KaU25Grq+OxGJAZmKoO4vs9/VkYTe3QZIaBgZRnaQ4G+cN7vQvMjnViCrurxqdJXrQ==
Cteonnt-Length: 2336
Keep-Alive: timeout=5, max=114
Connection: Keep-Alive
Cache-Control: private
Content-Encoding: gzip
Content-Length: 1016


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (541), with CRLF line terminators
Size:   1016
Md5:    17acb069ca186a8cbfd653ca9a14f691
Sha1:   65b3771ff3b2bf2ccd59e7fe8a8effe69e2fe0c9
Sha256: 8b427c21682eb4e7ef7f7b4bc8e1245014e0b2f5455296249246f2990367ac49
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: ww1.erogggggg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww1.erogggggg.com/
Connection: keep-alive
Cookie: isframesetenabled=1

                                         
                                         208.91.196.145
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Thu, 06 Oct 2022 00:09:41 GMT
Server: Apache
Referrer-Policy: no-referrer-when-downgrade
Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com")
ntCoent-Length: 10
Keep-Alive: timeout=5, max=125
Connection: Keep-Alive
Cache-Control: private
Content-Encoding: gzip
Content-Length: 30


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   30
Md5:    c4609c83d6054d974c265b208bdc2a21
Sha1:   7e963e7185900347babd1f2797312c0ca21fa4ae
Sha256: 6cd85e3008758f2e06eeff9efdf9b4ad2981f6654f87918d155b0aced68d959a
                                        
                                            GET /?fp=uI9uDTuUb5QTlEfYR8LH3RlWMN2yhyVX4vAfFl%2BOG4ypE3FXrMimaGggC79%2FZHe%2F2Wt7VtOrHWFnR3pkM7c5SdYI1enNXeK2cAlE2Knd1pUhHSIBh9BAdQO6YhOCR1wAYZSWi9x5oyfhX%2BLezYIdL%2BmD0nq4wTQkDbvQbON0mhMc28bjqmc6Iz%2B%2Btm9m6XIFwAGoqD4AOm4jfVIDsnwUyPzr025L5Z2Lks7rFST3wVhDnLAaVGQx1QBVN2rLs9qO3iA76LsPG59mwvTV%2BCThSg%3D%3D&prvtof=O%2FH3TVTC%2FpTjXmLNZOMM5at7fOvoqo6lft7dM%2Bo3Bn1nvpylclrCKgCX31EBIwKS%2BROKz1hwXY4OTZERUBt1mQ%3D%3D&poru=A3u0gv8D5zWL28eIVuyv8TP0ipgFZ%2FEtTRBmOhYQcXg%3D&_opnslfp=1& HTTP/1.1 
Host: ww1.erogggggg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww1.erogggggg.com/
Connection: keep-alive
Cookie: isframesetenabled=1
Upgrade-Insecure-Requests: 1

                                         
                                         208.91.196.145
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 06 Oct 2022 00:09:41 GMT
Server: Apache
Referrer-Policy: no-referrer-when-downgrade
Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com")
Cteonnt-Length: 272
Keep-Alive: timeout=5, max=124
Connection: Keep-Alive
Cache-Control: private
Content-Encoding: gzip
Content-Length: 195


--- Additional Info ---
Magic:  HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   195
Md5:    f31fdb2c45af1b9ccb937f597203db22
Sha1:   99496c54ce7f283b6c0c50e1331cdbe3856e01fe
Sha256: bbcfe2884044d776d5e6f337aea76d2fb5bf1f90049ae29622c02bb768b7d2ea