urlquery - report: soastudatel1971.blogspot.lt/

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
r3.o.lencr.org (9)	344	2020-12-02 08:52:13 UTC	2023-01-26 04:09:12 UTC	23.36.77.32
content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03 12:26:46 UTC	2023-01-26 04:11:33 UTC	34.160.144.191
ocsp.pki.goog (13)	175	2017-06-14 07:23:31 UTC	2023-01-26 04:09:45 UTC	142.250.74.131
push.services.mozilla.com (1)	2140	2014-10-24 08:27:06 UTC	2023-01-26 04:10:37 UTC	52.34.49.10
www.googletagmanager.com (1)	75	2012-10-04 01:07:32 UTC	2023-01-26 07:34:52 UTC	142.250.74.40
www.googletagservices.com (1)	169	2012-05-22 15:53:59 UTC	2023-01-25 16:53:27 UTC	142.250.74.98
soastudatel1971.blogspot.lt (1)	0	2022-07-28 02:52:26 UTC	2023-01-13 09:25:11 UTC	172.217.21.161	Unknown ranking
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2023-01-26 04:10:53 UTC	34.117.237.239
soastudatel1971.blogspot.com (3)	0	2022-06-08 06:04:42 UTC	2023-01-21 10:31:45 UTC	172.217.21.161	Unknown ranking
www.google-analytics.com (1)	40	2012-05-21 09:41:50 UTC	2023-01-26 07:42:44 UTC	142.250.74.14
securepubads.g.doubleclick.net (2)	190	2012-07-29 20:47:35 UTC	2023-01-25 14:19:57 UTC	142.250.74.130
6cfd7acb128aeebb14fb79ed73869328.safeframe.googlesyndication.com (1)	0	No data	No data	142.250.74.97	Domain (googlesyndication.com) ranked at: 1586
firefox.settings.services.mozilla.com (2)	867	2020-05-25 20:06:39 UTC	2023-01-26 04:09:24 UTC	35.241.9.150
www.blogger.com (2)	8975	2012-05-22 07:35:03 UTC	2023-01-26 02:43:01 UTC	216.58.207.233
cutt.us (2)	202632	2012-05-23 09:21:50 UTC	2023-01-26 03:47:39 UTC	69.61.26.122
img-getpocket.cdn.mozilla.net (6)	1631	2017-09-01 03:40:57 UTC	2023-01-26 11:05:54 UTC	34.120.237.76
adservice.google.com (1)	76	2017-09-26 14:24:07 UTC	2023-01-25 15:32:36 UTC	142.250.74.66
adservice.google.no (1)	96969	2017-09-26 14:23:08 UTC	2023-01-25 04:09:21 UTC	142.250.74.2

Scan Date	Severity	Indicator	Comment
2023-01-26	2	soastudatel1971.blogspot.com/	Phishing
2023-01-26	2	soastudatel1971.blogspot.com/	Phishing
2023-01-26	2	soastudatel1971.blogspot.com/js/cookienotice.js	Phishing

Date	UQ / IDS / BL	URL	IP
2023-03-22 03:57:23 +0000	0 - 3 - 1	googleweblight.com/i?u=eggfoodafv.com/pqf/vh1 (...)	172.217.21.161
2023-03-19 07:41:28 +0000	0 - 2 - 1	mummyrokiah.blogspot.com/2011/11/awas-cia-sed (...)	172.217.21.161
2023-03-19 07:41:19 +0000	0 - 1 - 3	5dfghdf5hgdf56hgf56hgsdf56hgfdgs.blogspot.qa/?m=1	172.217.21.161
2023-03-19 07:41:04 +0000	0 - 1 - 2	5dfghdf5hgdf56hgf56hgsdf56hgfdgs.blogspot.com.cy/	172.217.21.161
2023-03-19 07:41:01 +0000	0 - 1 - 3	5dfghdf5hgdf56hgf56hgsdf56hgfdgs.blogspot.no/	172.217.21.161

Date	UQ / IDS / BL	URL	IP
2023-03-23 11:19:18 +0000	0 - 15 - 3	sidewayssidle2112.blogspot.com/index.html	142.250.74.65
2023-03-23 11:12:45 +0000	0 - 1 - 0	zqikwg.13ruch.4ir8yy.76452.exea41.dfahyp.edu. (...)	35.205.61.67
2023-03-23 11:06:45 +0000	0 - 1 - 0	3uyol6.lchongfu.com/	35.205.61.67
2023-03-23 11:03:08 +0000	0 - 2 - 0	hippitoysuschatarritas.blogspot.com/2016_10_2 (...)	142.250.74.65
2023-03-23 11:01:09 +0000	0 - 1 - 0	download.cdn.mozilla.net/pub/firefox/releases (...)	34.117.35.28

Date	UQ / IDS / BL	URL	IP
2023-01-26 11:39:20 +0000	0 - 0 - 3	soastudatel1971.blogspot.lt/	172.217.21.161

Date	UQ / IDS / BL	URL	IP
2023-03-23 05:55:23 +0000	0 - 0 - 2	jmilayawarda.blogspot.qa/	142.250.74.65
2023-03-23 01:36:09 +0000	0 - 3 - 0	imghost.pics/image.php?id=NC22OL.exe	52.173.151.229
2023-03-22 20:26:49 +0000	0 - 20 - 0	padsy.lzekg.de/	192.162.84.226
2023-03-22 08:17:17 +0000	0 - 1 - 0	raceway.moviestostream.tv/	172.67.150.142
2023-03-22 08:08:59 +0000	0 - 0 - 1	famsung.com/	104.21.85.73

Request	Response
GET / HTTP/1.1 Host: soastudatel1971.blogspot.lt User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: soastudatel1971.blogspot.lt/ FQDN: soastudatel1971.blogspot.lt IP: 172.217.21.161 HASH: c5d425d6096bbbdff2071a65746b939b76eef852b97a8139bd3243df6da13f2b 172.217.21.161 HTTP/1.1 302 Moved Temporarily Content-Type: text/html; charset=UTF-8 Location: http://soastudatel1971.blogspot.com/ Content-Encoding: gzip Date: Thu, 26 Jan 2023 11:39:09 GMT Expires: Thu, 26 Jan 2023 11:39:09 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Content-Length: 183 Server: GSE --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text Size: 183 Md5: ad105b0cec62a4a41ae0d05c44f7b9ef Sha1: 9c122f2e3b8289fe8e405d379c7e1a13e998f634 Sha256: c5d425d6096bbbdff2071a65746b939b76eef852b97a8139bd3243df6da13f2b
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 0582b6180687dd95c7fd728f1b9db4495b807151e309b608ad203d69708f9da6 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "0582B6180687DD95C7FD728F1B9DB4495B807151E309B608AD203D69708F9DA6" Last-Modified: Tue, 24 Jan 2023 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8155 Expires: Thu, 26 Jan 2023 13:55:04 GMT Date: Thu, 26 Jan 2023 11:39:09 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: f5e46725831d8d722872bf68d752f4c5 Sha1: cf37793a1b73e3f84fe6c37fb27382c83b49dbc0 Sha256: 0582b6180687dd95c7fd728f1b9db4495b807151e309b608ad203d69708f9da6
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: eb783cfa8c8544b0574b345abc0bf3c150979d4efce1a013f17b6cd48076fc63 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "EB783CFA8C8544B0574B345ABC0BF3C150979D4EFCE1A013F17B6CD48076FC63" Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4357 Expires: Thu, 26 Jan 2023 12:51:46 GMT Date: Thu, 26 Jan 2023 11:39:09 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 58ffdcb539c3b250fdf31ed761627fc1 Sha1: 5b55b1522ef84c39b5c42f9bbfbc62b806c1269f Sha256: eb783cfa8c8544b0574b345abc0bf3c150979d4efce1a013f17b6cd48076fc63
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 35.241.9.150 HASH: 6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e 35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Thu, 26 Jan 2023 11:35:16 GMT age: 233 cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: bf0c602d32b3c14606f22a86183b5e3c Sha1: 6eabd8d83475eba731968abe1a05a8bfd272f160 Sha256: 6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 02cf421968192286bb174ff0e6c818a843c4eca61a02cd493e6f95bb58a37015 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "02CF421968192286BB174FF0E6C818A843C4ECA61A02CD493E6F95BB58A37015" Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=12932 Expires: Thu, 26 Jan 2023 15:14:41 GMT Date: Thu, 26 Jan 2023 11:39:09 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 49049f3c92aad686cd7ff28ecd2a5a4f Sha1: 9cc2bc9c055450dbc4fae93eabe4ef8509b3ff57 Sha256: 02cf421968192286bb174ff0e6c818a843c4eca61a02cd493e6f95bb58a37015
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: L5MxEh1oqcAwTgZDYFoSxw4NwAvytdvbX+7qpt8yoi9uxYhZpD4hRknao0X+7KDlRc/X1rDjWSOGNCtV7oVVIw== x-amz-request-id: AYNJT2JZ4S6CHD59 content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Thu, 26 Jan 2023 10:48:56 GMT age: 3013 last-modified: Mon, 09 Jan 2023 18:04:21 GMT etag: "7b922915ebf1fa3639b333f994c74f24" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 7b922915ebf1fa3639b333f994c74f24 Sha1: 144a3f80b98fd0652d4614f24cf6cbbee40f8938 Sha256: adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Thu, 26 Jan 2023 11:39:09 GMT content-length: 12 vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers access-control-expose-headers: content-type access-control-allow-credentials: true strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET / HTTP/1.1 Host: soastudatel1971.blogspot.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: soastudatel1971.blogspot.com/ FQDN: soastudatel1971.blogspot.com IP: 172.217.21.161 HASH: 5fb9e53cecf42b969a454a0f47d8b12945070e0f0728a663d0b662647f9599a8 172.217.21.161 HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=UTF-8 Location: https://soastudatel1971.blogspot.com/ Content-Encoding: gzip Date: Thu, 26 Jan 2023 11:39:09 GMT Expires: Thu, 26 Jan 2023 11:39:09 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Content-Length: 183 Server: GSE --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text Size: 183 Md5: 7f31dfbb0caef38d693082271a192503 Sha1: dda284e52d5ca62748284e0b226878b5f96f3660 Sha256: 5fb9e53cecf42b969a454a0f47d8b12945070e0f0728a663d0b662647f9599a8 Alerts: Blocklists: - fortinet: Phishing
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: 31003504156e6fbb39c0880f835afc8a190d1639f533f0b3275dc429d72e5df4 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 26 Jan 2023 11:39:09 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 52d5f57c6743ac9e4f0703e44e653bf2 Sha1: cd3577e7ce28baed9fc2dcd0c707c25deaa74389 Sha256: 31003504156e6fbb39c0880f835afc8a190d1639f533f0b3275dc429d72e5df4
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 35.241.9.150 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Content-Type, Last-Modified, ETag, Expires, Backoff, Content-Length, Cache-Control, Alert, Retry-After, Pragma content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Thu, 26 Jan 2023 10:49:01 GMT age: 3008 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET / HTTP/1.1 Host: soastudatel1971.blogspot.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1	URL: soastudatel1971.blogspot.com/ FQDN: soastudatel1971.blogspot.com IP: 172.217.21.161 HASH: 769aa4e3bbefe7aa6722829cf6c13e44aa189afdce2847dbcb560c4e811a3799 172.217.21.161 HTTP/2 200 OK content-type: text/html; charset=UTF-8 expires: Thu, 26 Jan 2023 11:39:09 GMT date: Thu, 26 Jan 2023 11:39:09 GMT cache-control: private, max-age=0 last-modified: Fri, 06 Nov 2020 09:53:48 GMT etag: W/"b8652a4a353987b6279962f192695cf4ff6337562a5228e929f689959cb30f54" content-encoding: gzip x-content-type-options: nosniff x-xss-protection: 1; mode=block content-length: 3193 server: GSE alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (4121) Size: 3193 Md5: 8cbef9a34ba1848b9ded7f39cb6138de Sha1: de9afc2abbe609fcdd1a7a55b7a7bbd44d45d9f4 Sha256: 769aa4e3bbefe7aa6722829cf6c13e44aa189afdce2847dbcb560c4e811a3799 Alerts: Blocklists: - fortinet: Phishing
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: 31003504156e6fbb39c0880f835afc8a190d1639f533f0b3275dc429d72e5df4 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 26 Jan 2023 11:39:09 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 52d5f57c6743ac9e4f0703e44e653bf2 Sha1: cd3577e7ce28baed9fc2dcd0c707c25deaa74389 Sha256: 31003504156e6fbb39c0880f835afc8a190d1639f533f0b3275dc429d72e5df4
GET /js/cookienotice.js HTTP/1.1 Host: soastudatel1971.blogspot.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://soastudatel1971.blogspot.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: soastudatel1971.blogspot.com/js/cookienotice.js FQDN: soastudatel1971.blogspot.com IP: 172.217.21.161 HASH: afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2 172.217.21.161 HTTP/2 200 OK content-type: text/javascript accept-ranges: bytes vary: Accept-Encoding content-encoding: gzip cross-origin-resource-policy: cross-origin cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech" report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]} content-length: 2026 date: Thu, 26 Jan 2023 11:39:09 GMT expires: Thu, 02 Feb 2023 11:39:09 GMT cache-control: public, max-age=604800 last-modified: Thu, 26 Jan 2023 10:52:03 GMT x-content-type-options: nosniff server: sffe x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text Size: 2026 Md5: c4e1ed83d89245089b8a1203be20a377 Sha1: f3940e1215b89300ef97d57a25993f25243b8688 Sha256: afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2 Alerts: Blocklists: - fortinet: Phishing
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: a6f07f7c6a4746acc25457c726701df33120628dfb578bc4982448d8efee5855 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "A6F07F7C6A4746ACC25457C726701DF33120628DFB578BC4982448D8EFEE5855" Last-Modified: Tue, 24 Jan 2023 20:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=17542 Expires: Thu, 26 Jan 2023 16:31:32 GMT Date: Thu, 26 Jan 2023 11:39:10 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: c398b6b39d11d25b8ae9bc5cd94a1c98 Sha1: 640aa8c399ced71d0c2a9f5a90fbaf091b01d642 Sha256: a6f07f7c6a4746acc25457c726701df33120628dfb578bc4982448d8efee5855
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: 286a44be3104de6e4d3359e0ab1ec667de78fa0b977babe87c649b8482d2109c 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 26 Jan 2023 11:39:10 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 0d00297e341a73b3903737968a306e01 Sha1: a689bd052fa5cce623ecd21ae8dd9739a6323ede Sha256: 286a44be3104de6e4d3359e0ab1ec667de78fa0b977babe87c649b8482d2109c
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: 342bf3346476d1f699c9c9487781351dcfa06467fb57c89bb4888f03ee6e0eec 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 26 Jan 2023 11:39:10 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: d72e962a579b678b57a9213e61869aa1 Sha1: 2f2d4ba36a4dafceae3e8ae8e337c78effb9b6a5 Sha256: 342bf3346476d1f699c9c9487781351dcfa06467fb57c89bb4888f03ee6e0eec
GET /static/v1/widgets/1253685842-widgets.js HTTP/1.1 Host: www.blogger.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://soastudatel1971.blogspot.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: www.blogger.com/static/v1/widgets/1253685842-widgets.js FQDN: www.blogger.com IP: 216.58.207.233 HASH: 6c3f04bab4d89e7ea271ecb6ffd98b1fb47634d30cc10aa52169c4d2bdefce77 216.58.207.233 HTTP/2 200 OK content-type: text/javascript accept-ranges: bytes vary: Accept-Encoding cross-origin-resource-policy: cross-origin cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech" report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]} content-length: 156311 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Mon, 23 Jan 2023 01:57:07 GMT expires: Tue, 23 Jan 2024 01:57:07 GMT cache-control: public, max-age=31536000 last-modified: Mon, 23 Jan 2023 00:54:53 GMT age: 294123 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (2221) Size: 156311 Md5: 282c3db331d4d3d06779b0b8a60ef7c2 Sha1: c0450142786dc1ce0f3875608b38591ff7eaaf1b Sha256: 6c3f04bab4d89e7ea271ecb6ffd98b1fb47634d30cc10aa52169c4d2bdefce77
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1 Host: www.blogger.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://soastudatel1971.blogspot.com/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: www.blogger.com/static/v1/widgets/55013136-widget_css_b (...) FQDN: www.blogger.com IP: 216.58.207.233 HASH: 0be7e26374fcff6f423b88e5f2a05d1cfdcb56abb4a78fa125e391989782ae0f 216.58.207.233 HTTP/2 200 OK content-type: text/css accept-ranges: bytes vary: Accept-Encoding content-encoding: gzip cross-origin-resource-policy: cross-origin cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech" report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]} content-length: 6620 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Thu, 26 Jan 2023 03:27:21 GMT expires: Fri, 26 Jan 2024 03:27:21 GMT cache-control: public, max-age=31536000 last-modified: Wed, 25 Jan 2023 14:53:31 GMT age: 29509 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (30596) Size: 6620 Md5: 6f46e6f68353c7911fe34f31faa1518f Sha1: ea4dbfa2f87c18e9c51c59a32dfa9afb9c2c3472 Sha256: 0be7e26374fcff6f423b88e5f2a05d1cfdcb56abb4a78fa125e391989782ae0f
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: 342bf3346476d1f699c9c9487781351dcfa06467fb57c89bb4888f03ee6e0eec 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 26 Jan 2023 11:39:10 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: d72e962a579b678b57a9213e61869aa1 Sha1: 2f2d4ba36a4dafceae3e8ae8e337c78effb9b6a5 Sha256: 342bf3346476d1f699c9c9487781351dcfa06467fb57c89bb4888f03ee6e0eec
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: YJRscDes9gkg3RySd2SKvQ== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 52.34.49.10 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 52.34.49.10 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: RP9ucmnryqFQI1n6NiD9t1BMxSk= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: f35432cfaeeebef40040fa80300c8a2b048be32a7abd6febd1689fe8d338ce4f 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "F35432CFAEEEBEF40040FA80300C8A2B048BE32A7ABD6FEBD1689FE8D338CE4F" Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=18463 Expires: Thu, 26 Jan 2023 16:46:54 GMT Date: Thu, 26 Jan 2023 11:39:11 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 90e8be9b414d0f07bd85c2bdfdfb8ff5 Sha1: 7906503b267b0e51b8ff054599e96e8b071ce943 Sha256: f35432cfaeeebef40040fa80300c8a2b048be32a7abd6febd1689fe8d338ce4f
GET /BpLCD HTTP/1.1 Host: cutt.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Cookie: __utma=255283994.1205496422.1653661467.1653661467.1653661467.1 Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: cutt.us/BpLCD FQDN: cutt.us IP: 69.61.26.122 HASH: e94680df08bb4816c32ed5910094e4850c620c4239f3c2c8828b8c143530ac47 69.61.26.122 HTTP/1.1 200 OK Content-Type: text/html; Charset=UTF-8;charset=UTF-8 Server: Hotcores.com Date: Thu, 26 Jan 2023 11:34:40 GMT Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Cache-Control: no-cache, must-revalidate, max-age=0 Pragma: no-cache X-Robots-Tag: noindex, nofollow I-AM: Beta Strict-Transport-Security: max-age=31536000; includeSubdomains; Content-Encoding: gzip --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2734) Size: 1453 Md5: 8258282c6115ec5d348441dc73c6adf9 Sha1: 5abce7b9b4dbb4044b54ac9d3027c9c1ae4b8174 Sha256: e94680df08bb4816c32ed5910094e4850c620c4239f3c2c8828b8c143530ac47
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: 991b03387ddbe0b07a9aee23ea7a98863fa85035cb26e631e0d22a1b999ee487 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 26 Jan 2023 11:39:11 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 0bf8fccb276521254634abcdcb4b3f0d Sha1: a5b7ffa58daf7d1ea3e312b68533d4d0271348f4 Sha256: 991b03387ddbe0b07a9aee23ea7a98863fa85035cb26e631e0d22a1b999ee487
GET /gtag/js?id=UA-31510493-1 HTTP/1.1 Host: www.googletagmanager.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://cutt.us/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: www.googletagmanager.com/gtag/js?id=UA-31510493-1 FQDN: www.googletagmanager.com IP: 142.250.74.40 HASH: 47bb20f7f8d5303577b2653a42d644eb8de7de657a3680c7e3c2029e6ec93985 142.250.74.40 HTTP/2 200 OK content-type: application/javascript; charset=UTF-8 access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-headers: Cache-Control content-encoding: br vary: Accept-Encoding date: Thu, 26 Jan 2023 11:39:11 GMT expires: Thu, 26 Jan 2023 11:39:11 GMT cache-control: private, max-age=900 last-modified: Thu, 26 Jan 2023 09:00:00 GMT strict-transport-security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin server: Google Tag Manager content-length: 44011 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (1759) Size: 44011 Md5: a63f199f3fc3a746dcecdcac0671c71d Sha1: f921db3cfd5ad4078138d9b392dcc267ab70ff45 Sha256: 47bb20f7f8d5303577b2653a42d644eb8de7de657a3680c7e3c2029e6ec93985
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: a55164c954f0255d6d360ac0fac8b4598f8e0e01ec646105eed2e9b0abf5e2bd 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 26 Jan 2023 11:39:11 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 78ed7b7d814d987601b30851546309b5 Sha1: 12a653dabfd738fef99fad2295eec55e4651bc7c Sha256: a55164c954f0255d6d360ac0fac8b4598f8e0e01ec646105eed2e9b0abf5e2bd
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404" Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7014 Expires: Thu, 26 Jan 2023 13:36:05 GMT Date: Thu, 26 Jan 2023 11:39:11 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: bd56ce22720c6e6072efdabae64669fd Sha1: 29194390d12177fe0d88e1bd2fb4436509366a1c Sha256: c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404" Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7014 Expires: Thu, 26 Jan 2023 13:36:05 GMT Date: Thu, 26 Jan 2023 11:39:11 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: bd56ce22720c6e6072efdabae64669fd Sha1: 29194390d12177fe0d88e1bd2fb4436509366a1c Sha256: c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: db58d2601ad2308da96f8998b9b5e39c3c48b910c0f141230a757b9985b536fb 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 26 Jan 2023 11:39:11 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: 34c6c87358e04f2487a4fcb466d2ad17 Sha1: 2e99bb20b81b80930471f736676e4dd3a093a9cd Sha256: db58d2601ad2308da96f8998b9b5e39c3c48b910c0f141230a757b9985b536fb
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404" Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7014 Expires: Thu, 26 Jan 2023 13:36:05 GMT Date: Thu, 26 Jan 2023 11:39:11 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: bd56ce22720c6e6072efdabae64669fd Sha1: 29194390d12177fe0d88e1bd2fb4436509366a1c Sha256: c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404" Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7014 Expires: Thu, 26 Jan 2023 13:36:05 GMT Date: Thu, 26 Jan 2023 11:39:11 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: bd56ce22720c6e6072efdabae64669fd Sha1: 29194390d12177fe0d88e1bd2fb4436509366a1c Sha256: c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8017df09-37d9-4c4b-9051-0442b3eb8fbf.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 7094ef64e04573bea7a81bbcc8ab59d721c5ef433e3fa9203e5861040ced549c 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 9285 x-amzn-requestid: 526bd945-31d8-490e-af9d-5e6fc6ea3561 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fUYT2HzvoAMFYYA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63d1a0e5-6812fe4354bbdac4472e7e81;Sampled=0 x-amzn-remapped-date: Wed, 25 Jan 2023 21:36:37 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: QEH9CmjfV8QZFNxFz_tEk06i_ELUSNC2QjdTF4K3xc3vS651BZ3NlQ== via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google date: Wed, 25 Jan 2023 21:52:28 GMT age: 49603 etag: "07e48bf3565e00d093d72dd4ada606f5d39a4838" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 9285 Md5: 17e1b6f3caa98b0e0972802408dd3f93 Sha1: 07e48bf3565e00d093d72dd4ada606f5d39a4838 Sha256: 7094ef64e04573bea7a81bbcc8ab59d721c5ef433e3fa9203e5861040ced549c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3177e0c-fa06-470b-bb9e-800d246a5096.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: f174d5678154412cdbf71f93c345d28cfb8bad7c190fa31dd78e9314c510f7ca 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8648 x-amzn-requestid: 19beb9c1-4e85-47ba-9275-7fb5d25f055f x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fUYMlENLoAMFhIg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63d1a0b6-016533de5b42b3a573a66c78;Sampled=0 x-amzn-remapped-date: Wed, 25 Jan 2023 21:35:50 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: jkExt4JNW6KtzDm8mDdb-AvXWXeyZr14XifDN_XVzKiwFAru_1HcSA== via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google date: Wed, 25 Jan 2023 21:55:21 GMT age: 49430 etag: "f2b0a5738ec9e3b178b2bf5513de3e604b86eadf" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8648 Md5: 4e013ee2e3a5287de55de4c2437a279d Sha1: f2b0a5738ec9e3b178b2bf5513de3e604b86eadf Sha256: f174d5678154412cdbf71f93c345d28cfb8bad7c190fa31dd78e9314c510f7ca
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 7276a38c9ba6b13a06f24ab8b802f210f98c5541df53fbcd8e879a14d2957d95 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 5943 x-amzn-requestid: 6774f4a4-ed83-49df-868f-4517c2af914b x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fUXxNF2UIAMFlYw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63d1a007-75b1e8975c3f4b503e0a1c5b;Sampled=0 x-amzn-remapped-date: Wed, 25 Jan 2023 21:32:55 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: VATQ0SjZfM_btXwR4M5keLmd-EE6717EHEiXrF2zpHNrli93EhN6Rw== via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google date: Wed, 25 Jan 2023 21:48:42 GMT age: 49829 etag: "4d825b74865effa4a858ddcad1d0969671facc07" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 5943 Md5: ba0a42dadf6a976df148f652e9cc1844 Sha1: 4d825b74865effa4a858ddcad1d0969671facc07 Sha256: 7276a38c9ba6b13a06f24ab8b802f210f98c5541df53fbcd8e879a14d2957d95
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F602ef184-7161-4092-91b7-61e14eef28a5.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 66268668c1a970268d75beb1b57f66a759bedac76958a3359cb23104de40fbeb 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 3411 x-amzn-requestid: 62afd364-e94f-45ff-ba6c-9b589fc53e5f x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: e-EyCEzrIAMFb8A= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63c8b4d9-203f51040f82f12d535446c4;Sampled=0 x-amzn-remapped-date: Thu, 19 Jan 2023 03:11:21 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: 3Ke5d5WguVrF_Phnhu9ojzN5Md0VkYnFfxKNoh5HHrmHwPI90IAIdA== via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google date: Thu, 26 Jan 2023 03:41:17 GMT etag: "2bd02a45c8b407e36a41a482b121ea3e14f7c722" age: 28674 cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 3411 Md5: 805711aaab303931f8966bbf73aeda52 Sha1: 2bd02a45c8b407e36a41a482b121ea3e14f7c722 Sha256: 66268668c1a970268d75beb1b57f66a759bedac76958a3359cb23104de40fbeb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ffb1709-216c-4bf0-9b98-e3a355f000bb.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: a300a4fde1863c8b806d0557d9f0adaed19e1c612989d7e3f79a7bb45e6e74dd 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8822 x-amzn-requestid: e16ae781-25f3-4b7d-b62b-85b35d6571c6 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fUYRwF2KIAMFjDA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63d1a0d7-377f24bd18dea32564b148bd;Sampled=0 x-amzn-remapped-date: Wed, 25 Jan 2023 21:36:23 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: n2ULSpeRMRZ9CDjmrwd56ti_gPYh9ApC521naXURI2Bh1eiKwjyHZw== via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google date: Wed, 25 Jan 2023 21:51:26 GMT age: 49665 etag: "c4802b06b87ab97f3ccd80d1c9bbdb4fab9886c1" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8822 Md5: 13cd008fb3e2739ec7caadadbd427655 Sha1: c4802b06b87ab97f3ccd80d1c9bbdb4fab9886c1 Sha256: a300a4fde1863c8b806d0557d9f0adaed19e1c612989d7e3f79a7bb45e6e74dd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa3e6d9a5-dd7d-4337-a00f-a145350a1a29.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 9f928ec6f194340e5543a4bf757aac31d545def67a56ae804a2039a3effd3fe0 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10379 x-amzn-requestid: 419e5a80-cb6d-4904-9545-a0f815149701 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fUYMREwmIAMFhQQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63d1a0b4-64c49f7d49687d9e5324ec64;Sampled=0 x-amzn-remapped-date: Wed, 25 Jan 2023 21:35:48 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: rZHSgPIPZyea2griEvL-3semlrUDichGSL8Rin4YeYKN909f9e0lyQ== via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google date: Wed, 25 Jan 2023 21:41:09 GMT age: 50282 etag: "c70d46aa2210c4f7c397fa20e1225b7d0734ac35" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10379 Md5: 653bf5a34e9f99c9eef73a21d98d792f Sha1: c70d46aa2210c4f7c397fa20e1225b7d0734ac35 Sha256: 9f928ec6f194340e5543a4bf757aac31d545def67a56ae804a2039a3effd3fe0
GET /tag/js/gpt.js HTTP/1.1 Host: www.googletagservices.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://cutt.us/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: www.googletagservices.com/tag/js/gpt.js FQDN: www.googletagservices.com IP: 142.250.74.98 HASH: af229fa1de217c24598320f47bd44d65b958904c791776bf2d742e328f630c3c 142.250.74.98 HTTP/2 200 OK content-type: text/javascript vary: Accept-Encoding content-encoding: gzip cross-origin-resource-policy: cross-origin cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs" report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]} timing-allow-origin: * content-length: 27673 date: Thu, 26 Jan 2023 11:39:11 GMT expires: Thu, 26 Jan 2023 11:39:11 GMT cache-control: private, max-age=900, stale-while-revalidate=3600 etag: "1463 / 809 of 1000 / last-modified: 1674726461" x-content-type-options: nosniff server: sffe x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (39378) Size: 27673 Md5: b52b054ee09d59d3f19fbd3a7ed860fd Sha1: d90304218e9f61a0bbe70e66fa2a01dc98b8cd53 Sha256: af229fa1de217c24598320f47bd44d65b958904c791776bf2d742e328f630c3c
GET /analytics.js HTTP/1.1 Host: www.google-analytics.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://cutt.us/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: www.google-analytics.com/analytics.js FQDN: www.google-analytics.com IP: 142.250.74.14 HASH: 847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db 142.250.74.14 HTTP/2 200 OK content-type: text/javascript strict-transport-security: max-age=10886400; includeSubDomains; preload x-content-type-options: nosniff vary: Accept-Encoding content-encoding: gzip cross-origin-resource-policy: cross-origin server: Golfe2 content-length: 20085 date: Thu, 26 Jan 2023 09:45:20 GMT expires: Thu, 26 Jan 2023 11:45:20 GMT cache-control: public, max-age=7200 age: 6831 last-modified: Tue, 10 Jan 2023 21:29:14 GMT alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (1490) Size: 20085 Md5: ca7fbbfd120e3e329633044190bbf134 Sha1: d17f81e03dd827554ddd207ea081fb46b3415445 Sha256: 847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: 7c432d209fcf9dde0ca59bf93f76526d98aab474041f19b2d6fe79942ed3a7e2 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 26 Jan 2023 11:39:11 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: dda854cb90cda40c6a6dbc19eb186eca Sha1: 0d23775c5af739aac0a41844d09c704ab850a1bd Sha256: 7c432d209fcf9dde0ca59bf93f76526d98aab474041f19b2d6fe79942ed3a7e2
GET /pagead/ppub_config?ippd=cutt.us HTTP/1.1 Host: securepubads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://cutt.us Connection: keep-alive Referer: https://cutt.us/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: securepubads.g.doubleclick.net/pagead/ppub_config?ippd= (...) FQDN: securepubads.g.doubleclick.net IP: 142.250.74.130 HASH: 6e50ade02efd3f6a6fc8f6caf3b66aab87ce816ef0fad48bf388b1fa680fec88 142.250.74.130 HTTP/2 200 OK content-type: application/json; charset=UTF-8 p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" timing-allow-origin: * cross-origin-resource-policy: cross-origin access-control-allow-origin: * date: Thu, 26 Jan 2023 11:39:11 GMT expires: Thu, 26 Jan 2023 11:39:11 GMT cache-control: private, max-age=3600, stale-while-revalidate=3600 x-content-type-options: nosniff content-disposition: attachment; filename="f.txt" content-encoding: br server: cafe content-length: 32 x-xss-protection: 0 set-cookie: test_cookie=CheckForPermission; expires=Thu, 26-Jan-2023 11:54:11 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 32 Md5: 6a25915591f4dc7ff02016d9d0a7f591 Sha1: ef6f0d1fdb5696e75e85ec057dc212a8e21d5c18 Sha256: 6e50ade02efd3f6a6fc8f6caf3b66aab87ce816ef0fad48bf388b1fa680fec88
GET /gpt/pubads_impl_2023011901.js HTTP/1.1 Host: securepubads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://cutt.us/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: securepubads.g.doubleclick.net/gpt/pubads_impl_2023011901.js FQDN: securepubads.g.doubleclick.net IP: 142.250.74.130 HASH: 200d5b946446ce49bf169938879e90dbaff02275ddd43aa4bfc39e365fe641ea 142.250.74.130 HTTP/2 200 OK content-type: text/javascript accept-ranges: bytes vary: Accept-Encoding content-encoding: gzip cross-origin-resource-policy: cross-origin cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs" report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]} timing-allow-origin: * content-length: 133253 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Tue, 24 Jan 2023 19:37:09 GMT expires: Wed, 24 Jan 2024 19:37:09 GMT cache-control: public, immutable, max-age=31536000 last-modified: Thu, 19 Jan 2023 09:34:48 GMT age: 144122 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (65395) Size: 133253 Md5: 7b9a06dc1065c57999c41007d6156374 Sha1: a72a063166413b60de20ba8639c41e9a39f309d4 Sha256: 200d5b946446ce49bf169938879e90dbaff02275ddd43aa4bfc39e365fe641ea
GET /favicon.ico HTTP/1.1 Host: cutt.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://cutt.us/BpLCD Cookie: __utma=255283994.1205496422.1653661467.1653661467.1653661467.1 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: cutt.us/favicon.ico FQDN: cutt.us IP: 69.61.26.122 HASH: 8f047469a1cb0c72bb0d65f14d8b633eeb071d419cc80a38663a2e5ba867e8f9 69.61.26.122 HTTP/1.1 200 OK Content-Type: image/x-icon Server: Hotcores.com Date: Thu, 26 Jan 2023 11:34:40 GMT Last-Modified: Tue, 07 May 2013 07:26:19 GMT Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding ETag: W/"5188ac9b-1855e" Expires: Thu, 02 Feb 2023 11:34:40 GMT Cache-Control: max-age=604800 Strict-Transport-Security: max-age=31536000; includeSubdomains; Content-Encoding: gzip --- Additional Info --- Magic: MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data Size: 34298 Md5: ce5b2cfb326ff4b2579b79ce601a4877 Sha1: afeb1aa32be59849ad83e9cb4a8e02a6fb3c0c5a Sha256: 8f047469a1cb0c72bb0d65f14d8b633eeb071d419cc80a38663a2e5ba867e8f9
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: 1c745d8ace7ea6f8e5d7da5e9c067b7b3427ce9c5a5e2c5c35d1c345266de518 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 26 Jan 2023 11:39:12 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 04cb7fc8b1e2a65a0b198cc53eb5e5cd Sha1: 6d04611612d81108e856467f0e4b0479cbb37d33 Sha256: 1c745d8ace7ea6f8e5d7da5e9c067b7b3427ce9c5a5e2c5c35d1c345266de518
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: ac898dcf507ac6aea5bed267e6b94e2e187b3255d12f13b6dc7a983547727518 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 26 Jan 2023 11:39:12 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: 6535ae9529ced8e4fe9cab67dbfbcd06 Sha1: cd8a01acf3cc5ba2797073d284f5d2f03965ea23 Sha256: ac898dcf507ac6aea5bed267e6b94e2e187b3255d12f13b6dc7a983547727518
GET /adsid/integrator.js?domain=cutt.us HTTP/1.1 Host: adservice.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://cutt.us/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: adservice.google.com/adsid/integrator.js?domain=cutt.us FQDN: adservice.google.com IP: 142.250.74.66 HASH: cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac 142.250.74.66 HTTP/2 200 OK content-type: application/javascript; charset=UTF-8 p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info." timing-allow-origin: * cross-origin-resource-policy: cross-origin cache-control: private, no-cache, no-store x-content-type-options: nosniff content-disposition: attachment; filename="f.txt" content-encoding: gzip date: Thu, 26 Jan 2023 11:39:12 GMT server: cafe content-length: 100 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with no line terminators Size: 100 Md5: 917951a58be8c6c6f3680159550ba3c2 Sha1: 21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4 Sha256: cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=cutt.us HTTP/1.1 Host: adservice.google.no User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://cutt.us/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: adservice.google.no/adsid/integrator.js?domain=cutt.us FQDN: adservice.google.no IP: 142.250.74.2 HASH: cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac 142.250.74.2 HTTP/2 200 OK content-type: application/javascript; charset=UTF-8 p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info." timing-allow-origin: * cross-origin-resource-policy: cross-origin cache-control: private, no-cache, no-store x-content-type-options: nosniff content-disposition: attachment; filename="f.txt" content-encoding: gzip date: Thu, 26 Jan 2023 11:39:12 GMT server: cafe content-length: 100 x-xss-protection: 0 alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with no line terminators Size: 100 Md5: 917951a58be8c6c6f3680159550ba3c2 Sha1: 21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4 Sha256: cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: 8b7ce4c8269941cf55ca12415b1abfd7d4ae7bf5823657f3afe5e8dd34bed80b 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 26 Jan 2023 11:39:12 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 47d71bf163265666c21e2410fb568043 Sha1: 54a4b0f241af261f878967ce058f5885be476cc4 Sha256: 8b7ce4c8269941cf55ca12415b1abfd7d4ae7bf5823657f3afe5e8dd34bed80b
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: ac898dcf507ac6aea5bed267e6b94e2e187b3255d12f13b6dc7a983547727518 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 26 Jan 2023 11:39:12 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: 6535ae9529ced8e4fe9cab67dbfbcd06 Sha1: cd8a01acf3cc5ba2797073d284f5d2f03965ea23 Sha256: ac898dcf507ac6aea5bed267e6b94e2e187b3255d12f13b6dc7a983547727518
GET /safeframe/1-0-40/html/container.html HTTP/1.1 Host: 6cfd7acb128aeebb14fb79ed73869328.safeframe.googlesyndication.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://cutt.us/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: iframe Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: 6cfd7acb128aeebb14fb79ed73869328.safeframe.googlesyndic (...) FQDN: 6cfd7acb128aeebb14fb79ed73869328.safeframe.googlesyndication.com IP: 142.250.74.97 HASH: 09e42988871806c7f0a897bda7bc4247f47f4d8590749eaa245b8ff1fa907303 142.250.74.97 HTTP/2 200 OK content-type: text/html accept-ranges: bytes vary: Accept-Encoding content-encoding: br cross-origin-resource-policy: cross-origin cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs" report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]} timing-allow-origin: * content-length: 2653 date: Thu, 26 Jan 2023 11:39:12 GMT expires: Fri, 26 Jan 2024 11:39:12 GMT cache-control: public, immutable, max-age=31536000 last-modified: Thu, 03 Nov 2022 19:10:08 GMT x-content-type-options: nosniff server: sffe x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5657) Size: 2653 Md5: e8ee9c011ff8e1f464e74c37113119ee Sha1: 64ad72134ea05877de0f2b6503f5c0d8c3f78197 Sha256: 09e42988871806c7f0a897bda7bc4247f47f4d8590749eaa245b8ff1fa907303

                                        
                                            GET / HTTP/1.1 

                                        
                                            
Host: soastudatel1971.blogspot.lt

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Upgrade-Insecure-Requests: 1

                                         172.217.21.161

                                        
                                            HTTP/1.1 302 Moved Temporarily 

                                        
                                            
Content-Type: text/html; charset=UTF-8

                                        

                                        
                                            
Location: http://soastudatel1971.blogspot.com/ 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
Date: Thu, 26 Jan 2023 11:39:09 GMT 

                                        
                                            
Expires: Thu, 26 Jan 2023 11:39:09 GMT 

                                        
                                            
Cache-Control: private, max-age=0 

                                        
                                            
X-Content-Type-Options: nosniff 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
Content-Security-Policy: frame-ancestors 'self' 

                                        
                                            
X-XSS-Protection: 1; mode=block 

                                        
                                            
Content-Length: 183 

                                        
                                            
Server: GSE 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text

                                                Size:   183

                                                Md5:    ad105b0cec62a4a41ae0d05c44f7b9ef

                                                Sha1:   9c122f2e3b8289fe8e405d379c7e1a13e998f634

                                                Sha256: c5d425d6096bbbdff2071a65746b939b76eef852b97a8139bd3243df6da13f2b

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "EB783CFA8C8544B0574B345ABC0BF3C150979D4EFCE1A013F17B6CD48076FC63" 

                                        
                                            
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=4357 

                                        
                                            
Expires: Thu, 26 Jan 2023 12:51:46 GMT 

                                        
                                            
Date: Thu, 26 Jan 2023 11:39:09 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    58ffdcb539c3b250fdf31ed761627fc1

                                                Sha1:   5b55b1522ef84c39b5c42f9bbfbc62b806c1269f

                                                Sha256: eb783cfa8c8544b0574b345abc0bf3c150979d4efce1a013f17b6cd48076fc63

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "02CF421968192286BB174FF0E6C818A843C4ECA61A02CD493E6F95BB58A37015" 

                                        
                                            
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=12932 

                                        
                                            
Expires: Thu, 26 Jan 2023 15:14:41 GMT 

                                        
                                            
Date: Thu, 26 Jan 2023 11:39:09 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    49049f3c92aad686cd7ff28ecd2a5a4f

                                                Sha1:   9cc2bc9c055450dbc4fae93eabe4ef8509b3ff57

                                                Sha256: 02cf421968192286bb174ff0e6c818a843c4eca61a02cd493e6f95bb58a37015

                                        
                                            GET /v1/tiles HTTP/1.1 

                                        
                                            
Host: contile.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.117.237.239

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Thu, 26 Jan 2023 11:39:09 GMT 

                                        
                                            
content-length: 12 

                                        
                                            
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers 

                                        
                                            
access-control-expose-headers: content-type 

                                        
                                            
access-control-allow-credentials: true 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
via: 1.1 google 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with no line terminators

                                                Size:   12

                                                Md5:    23e88fb7b99543fb33315b29b1fad9d6

                                                Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

                                                Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.131

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Thu, 26 Jan 2023 11:39:09 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 471 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    52d5f57c6743ac9e4f0703e44e653bf2

                                                Sha1:   cd3577e7ce28baed9fc2dcd0c707c25deaa74389

                                                Sha256: 31003504156e6fbb39c0880f835afc8a190d1639f533f0b3275dc429d72e5df4

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.131

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Thu, 26 Jan 2023 11:39:10 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 471 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    0d00297e341a73b3903737968a306e01

                                                Sha1:   a689bd052fa5cce623ecd21ae8dd9739a6323ede

                                                Sha256: 286a44be3104de6e4d3359e0ab1ec667de78fa0b977babe87c649b8482d2109c

                                        
                                            GET /static/v1/widgets/1253685842-widgets.js HTTP/1.1 

                                        
                                            
Host: www.blogger.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://soastudatel1971.blogspot.com/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         216.58.207.233

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/javascript

                                        

                                        
                                            
accept-ranges: bytes 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
cross-origin-resource-policy: cross-origin 

                                        
                                            
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech" 

                                        
                                            
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]} 

                                        
                                            
content-length: 156311 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
server: sffe 

                                        
                                            
x-xss-protection: 0 

                                        
                                            
date: Mon, 23 Jan 2023 01:57:07 GMT 

                                        
                                            
expires: Tue, 23 Jan 2024 01:57:07 GMT 

                                        
                                            
cache-control: public, max-age=31536000 

                                        
                                            
last-modified: Mon, 23 Jan 2023 00:54:53 GMT 

                                        
                                            
age: 294123 

                                        
                                            
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (2221)

                                                Size:   156311

                                                Md5:    282c3db331d4d3d06779b0b8a60ef7c2

                                                Sha1:   c0450142786dc1ce0f3875608b38591ff7eaaf1b

                                                Sha256: 6c3f04bab4d89e7ea271ecb6ffd98b1fb47634d30cc10aa52169c4d2bdefce77

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.131

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Thu, 26 Jan 2023 11:39:10 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 471 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    d72e962a579b678b57a9213e61869aa1

                                                Sha1:   2f2d4ba36a4dafceae3e8ae8e337c78effb9b6a5

                                                Sha256: 342bf3346476d1f699c9c9487781351dcfa06467fb57c89bb4888f03ee6e0eec

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "F35432CFAEEEBEF40040FA80300C8A2B048BE32A7ABD6FEBD1689FE8D338CE4F" 

                                        
                                            
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=18463 

                                        
                                            
Expires: Thu, 26 Jan 2023 16:46:54 GMT 

                                        
                                            
Date: Thu, 26 Jan 2023 11:39:11 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    90e8be9b414d0f07bd85c2bdfdfb8ff5

                                                Sha1:   7906503b267b0e51b8ff054599e96e8b071ce943

                                                Sha256: f35432cfaeeebef40040fa80300c8a2b048be32a7abd6febd1689fe8d338ce4f

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.131

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Thu, 26 Jan 2023 11:39:11 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 471 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    0bf8fccb276521254634abcdcb4b3f0d

                                                Sha1:   a5b7ffa58daf7d1ea3e312b68533d4d0271348f4

                                                Sha256: 991b03387ddbe0b07a9aee23ea7a98863fa85035cb26e631e0d22a1b999ee487

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.131

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Thu, 26 Jan 2023 11:39:11 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 471 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    78ed7b7d814d987601b30851546309b5

                                                Sha1:   12a653dabfd738fef99fad2295eec55e4651bc7c

                                                Sha256: a55164c954f0255d6d360ac0fac8b4598f8e0e01ec646105eed2e9b0abf5e2bd

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404" 

                                        
                                            
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=7014 

                                        
                                            
Expires: Thu, 26 Jan 2023 13:36:05 GMT 

                                        
                                            
Date: Thu, 26 Jan 2023 11:39:11 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    bd56ce22720c6e6072efdabae64669fd

                                                Sha1:   29194390d12177fe0d88e1bd2fb4436509366a1c

                                                Sha256: c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404" 

                                        
                                            
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=7014 

                                        
                                            
Expires: Thu, 26 Jan 2023 13:36:05 GMT 

                                        
                                            
Date: Thu, 26 Jan 2023 11:39:11 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    bd56ce22720c6e6072efdabae64669fd

                                                Sha1:   29194390d12177fe0d88e1bd2fb4436509366a1c

                                                Sha256: c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8017df09-37d9-4c4b-9051-0442b3eb8fbf.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 9285 

                                        
                                            
x-amzn-requestid: 526bd945-31d8-490e-af9d-5e6fc6ea3561 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: fUYT2HzvoAMFYYA= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63d1a0e5-6812fe4354bbdac4472e7e81;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Wed, 25 Jan 2023 21:36:37 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: QEH9CmjfV8QZFNxFz_tEk06i_ELUSNC2QjdTF4K3xc3vS651BZ3NlQ== 

                                        
                                            
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Wed, 25 Jan 2023 21:52:28 GMT 

                                        
                                            
age: 49603 

                                        
                                            
etag: "07e48bf3565e00d093d72dd4ada606f5d39a4838" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   9285

                                                Md5:    17e1b6f3caa98b0e0972802408dd3f93

                                                Sha1:   07e48bf3565e00d093d72dd4ada606f5d39a4838

                                                Sha256: 7094ef64e04573bea7a81bbcc8ab59d721c5ef433e3fa9203e5861040ced549c

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 5943 

                                        
                                            
x-amzn-requestid: 6774f4a4-ed83-49df-868f-4517c2af914b 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: fUXxNF2UIAMFlYw= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63d1a007-75b1e8975c3f4b503e0a1c5b;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Wed, 25 Jan 2023 21:32:55 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: VATQ0SjZfM_btXwR4M5keLmd-EE6717EHEiXrF2zpHNrli93EhN6Rw== 

                                        
                                            
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Wed, 25 Jan 2023 21:48:42 GMT 

                                        
                                            
age: 49829 

                                        
                                            
etag: "4d825b74865effa4a858ddcad1d0969671facc07" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   5943

                                                Md5:    ba0a42dadf6a976df148f652e9cc1844

                                                Sha1:   4d825b74865effa4a858ddcad1d0969671facc07

                                                Sha256: 7276a38c9ba6b13a06f24ab8b802f210f98c5541df53fbcd8e879a14d2957d95

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ffb1709-216c-4bf0-9b98-e3a355f000bb.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 8822 

                                        
                                            
x-amzn-requestid: e16ae781-25f3-4b7d-b62b-85b35d6571c6 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: fUYRwF2KIAMFjDA= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63d1a0d7-377f24bd18dea32564b148bd;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Wed, 25 Jan 2023 21:36:23 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: n2ULSpeRMRZ9CDjmrwd56ti_gPYh9ApC521naXURI2Bh1eiKwjyHZw== 

                                        
                                            
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Wed, 25 Jan 2023 21:51:26 GMT 

                                        
                                            
age: 49665 

                                        
                                            
etag: "c4802b06b87ab97f3ccd80d1c9bbdb4fab9886c1" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   8822

                                                Md5:    13cd008fb3e2739ec7caadadbd427655

                                                Sha1:   c4802b06b87ab97f3ccd80d1c9bbdb4fab9886c1

                                                Sha256: a300a4fde1863c8b806d0557d9f0adaed19e1c612989d7e3f79a7bb45e6e74dd

                                        
                                            GET /tag/js/gpt.js HTTP/1.1 

                                        
                                            
Host: www.googletagservices.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://cutt.us/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         142.250.74.98

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/javascript

                                        

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
content-encoding: gzip 

                                        
                                            
cross-origin-resource-policy: cross-origin 

                                        
                                            
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs" 

                                        
                                            
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]} 

                                        
                                            
timing-allow-origin: * 

                                        
                                            
content-length: 27673 

                                        
                                            
date: Thu, 26 Jan 2023 11:39:11 GMT 

                                        
                                            
expires: Thu, 26 Jan 2023 11:39:11 GMT 

                                        
                                            
cache-control: private, max-age=900, stale-while-revalidate=3600 

                                        
                                            
etag: "1463 / 809 of 1000 / last-modified: 1674726461" 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
server: sffe 

                                        
                                            
x-xss-protection: 0 

                                        
                                            
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (39378)

                                                Size:   27673

                                                Md5:    b52b054ee09d59d3f19fbd3a7ed860fd

                                                Sha1:   d90304218e9f61a0bbe70e66fa2a01dc98b8cd53

                                                Sha256: af229fa1de217c24598320f47bd44d65b958904c791776bf2d742e328f630c3c

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.131

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Thu, 26 Jan 2023 11:39:11 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 472 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   472

                                                Md5:    dda854cb90cda40c6a6dbc19eb186eca

                                                Sha1:   0d23775c5af739aac0a41844d09c704ab850a1bd

                                                Sha256: 7c432d209fcf9dde0ca59bf93f76526d98aab474041f19b2d6fe79942ed3a7e2

                                        
                                            GET /gpt/pubads_impl_2023011901.js HTTP/1.1 

                                        
                                            
Host: securepubads.g.doubleclick.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://cutt.us/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         142.250.74.130

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/javascript

                                        

                                        
                                            
accept-ranges: bytes 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
content-encoding: gzip 

                                        
                                            
cross-origin-resource-policy: cross-origin 

                                        
                                            
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs" 

                                        
                                            
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]} 

                                        
                                            
timing-allow-origin: * 

                                        
                                            
content-length: 133253 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
server: sffe 

                                        
                                            
x-xss-protection: 0 

                                        
                                            
date: Tue, 24 Jan 2023 19:37:09 GMT 

                                        
                                            
expires: Wed, 24 Jan 2024 19:37:09 GMT 

                                        
                                            
cache-control: public, immutable, max-age=31536000 

                                        
                                            
last-modified: Thu, 19 Jan 2023 09:34:48 GMT 

                                        
                                            
age: 144122 

                                        
                                            
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (65395)

                                                Size:   133253

                                                Md5:    7b9a06dc1065c57999c41007d6156374

                                                Sha1:   a72a063166413b60de20ba8639c41e9a39f309d4

                                                Sha256: 200d5b946446ce49bf169938879e90dbaff02275ddd43aa4bfc39e365fe641ea

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.131

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Thu, 26 Jan 2023 11:39:12 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 471 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    04cb7fc8b1e2a65a0b198cc53eb5e5cd

                                                Sha1:   6d04611612d81108e856467f0e4b0479cbb37d33

                                                Sha256: 1c745d8ace7ea6f8e5d7da5e9c067b7b3427ce9c5a5e2c5c35d1c345266de518

                                        
                                            GET /adsid/integrator.js?domain=cutt.us HTTP/1.1 

                                        
                                            
Host: adservice.google.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://cutt.us/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         142.250.74.66

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/javascript; charset=UTF-8

                                        

                                        
                                            
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info." 

                                        
                                            
timing-allow-origin: * 

                                        
                                            
cross-origin-resource-policy: cross-origin 

                                        
                                            
cache-control: private, no-cache, no-store 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
content-disposition: attachment; filename="f.txt" 

                                        
                                            
content-encoding: gzip 

                                        
                                            
date: Thu, 26 Jan 2023 11:39:12 GMT 

                                        
                                            
server: cafe 

                                        
                                            
content-length: 100 

                                        
                                            
x-xss-protection: 0 

                                        
                                            
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with no line terminators

                                                Size:   100

                                                Md5:    917951a58be8c6c6f3680159550ba3c2

                                                Sha1:   21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4

                                                Sha256: cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.131

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Thu, 26 Jan 2023 11:39:12 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 471 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    47d71bf163265666c21e2410fb568043

                                                Sha1:   54a4b0f241af261f878967ce058f5885be476cc4

                                                Sha256: 8b7ce4c8269941cf55ca12415b1abfd7d4ae7bf5823657f3afe5e8dd34bed80b

                                        
                                            GET /safeframe/1-0-40/html/container.html HTTP/1.1 

                                        
                                            
Host: 6cfd7acb128aeebb14fb79ed73869328.safeframe.googlesyndication.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://cutt.us/ 

                                        
                                            
Upgrade-Insecure-Requests: 1 

                                        
                                            
Sec-Fetch-Dest: iframe 

                                        
                                            
Sec-Fetch-Mode: navigate 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         142.250.74.97

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/html

                                        

                                        
                                            
accept-ranges: bytes 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
content-encoding: br 

                                        
                                            
cross-origin-resource-policy: cross-origin 

                                        
                                            
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs" 

                                        
                                            
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]} 

                                        
                                            
timing-allow-origin: * 

                                        
                                            
content-length: 2653 

                                        
                                            
date: Thu, 26 Jan 2023 11:39:12 GMT 

                                        
                                            
expires: Fri, 26 Jan 2024 11:39:12 GMT 

                                        
                                            
cache-control: public, immutable, max-age=31536000 

                                        
                                            
last-modified: Thu, 03 Nov 2022 19:10:08 GMT 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
server: sffe 

                                        
                                            
x-xss-protection: 0 

                                        
                                            
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5657)

                                                Size:   2653

                                                Md5:    e8ee9c011ff8e1f464e74c37113119ee

                                                Sha1:   64ad72134ea05877de0f2b6503f5c0d8c3f78197

                                                Sha256: 09e42988871806c7f0a897bda7bc4247f47f4d8590749eaa245b8ff1fa907303

URL	soastudatel1971.blogspot.lt/
IP	172.217.21.161 (United States)
ASN	#15169 GOOGLE
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2023-01-26 11:39:20 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	3
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (18)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 172.217.21.161

Last 5 reports on ASN: GOOGLE

Last 1 reports on domain: soastudatel1971.blogspot.lt

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (15)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (49)

Overview

Domain Summary (18)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 172.217.21.161

Last 5 reports on ASN: GOOGLE

Last 1 reports on domain: soastudatel1971.blogspot.lt

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (15)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (49)

Network Intrusion Detection Systems