urlquery - report: waispajemic1972.blogspot.co.il/

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
waispajemic1972.blogspot.com (3)	0	2022-06-08 14:13:59 UTC	2023-01-13 09:31:15 UTC	142.250.74.1	Unknown ranking
cutt.us (2)	202632	2012-05-23 09:21:50 UTC	2023-01-26 03:47:39 UTC	69.61.26.122
93e12b577da74fd2e4a39b7a36c372a5.safeframe.googlesyndication.com (1)	0	No data	No data	142.250.74.97	Domain (googlesyndication.com) ranked at: 1586
www.googletagmanager.com (1)	75	2012-10-04 01:07:32 UTC	2023-01-26 07:34:52 UTC	142.250.74.168
www.googletagservices.com (1)	169	2012-05-22 15:53:59 UTC	2023-01-25 16:53:27 UTC	142.250.74.98
firefox.settings.services.mozilla.com (2)	867	2020-05-25 20:06:39 UTC	2023-01-26 04:09:24 UTC	35.241.9.150
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2023-01-26 04:10:53 UTC	34.117.237.239
waispajemic1972.blogspot.co.il (1)	0	2022-06-14 02:46:37 UTC	2023-01-13 09:31:16 UTC	142.250.74.1	Unknown ranking
push.services.mozilla.com (1)	2140	2014-10-24 08:27:06 UTC	2023-01-26 04:10:37 UTC	52.26.236.137
img-getpocket.cdn.mozilla.net (6)	1631	2017-09-01 03:40:57 UTC	2023-01-26 11:05:54 UTC	34.120.237.76
securepubads.g.doubleclick.net (2)	190	2012-07-29 20:47:35 UTC	2023-01-25 14:19:57 UTC	142.250.74.130
r3.o.lencr.org (8)	344	2020-12-02 08:52:13 UTC	2023-01-26 04:09:12 UTC	23.36.76.226
content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03 12:26:46 UTC	2023-01-26 04:11:33 UTC	34.160.144.191
ocsp.pki.goog (13)	175	2017-06-14 07:23:31 UTC	2023-01-26 04:09:45 UTC	142.250.74.131
www.blogger.com (3)	8975	2012-05-22 07:35:03 UTC	2023-01-26 02:43:01 UTC	216.58.207.233
www.google-analytics.com (1)	40	2012-05-21 09:41:50 UTC	2023-01-26 07:42:44 UTC	142.250.74.110
adservice.google.no (1)	96969	2017-09-26 14:23:08 UTC	2023-01-25 04:09:21 UTC	142.250.74.162
adservice.google.com (1)	76	2017-09-26 14:24:07 UTC	2023-01-25 15:32:36 UTC	142.250.74.66

Scan Date	Severity	Indicator	Comment
2023-01-26	2	waispajemic1972.blogspot.co.il/	Phishing
2023-01-26	2	waispajemic1972.blogspot.com/	Phishing
2023-01-26	2	waispajemic1972.blogspot.com/	Phishing
2023-01-26	2	waispajemic1972.blogspot.com/js/cookienotice.js	Phishing

Date	UQ / IDS / BL	URL	IP
2023-03-28 10:40:01 +0000	0 - 36 - 0	opoxmagazine.blogspot.co.uk/2011/02/	142.250.74.1
2023-03-28 10:24:41 +0000	3 - 0 - 0	blogluyoruz.blogspot.co.uk/search/label/tnt%2 (...)	142.250.74.1
2023-03-28 10:14:30 +0000	0 - 2 - 0	mastersexxxuploader.blogspot.de/search/label/ (...)	142.250.74.1
2023-03-28 06:53:40 +0000	0 - 2 - 0	helgasaaresto.blogspot.com/2013/03/blog-post_ (...)	142.250.74.1
2023-03-27 16:49:52 +0000	0 - 3 - 0	gataspiripiri.blogspot.com/search/label/instagram	142.250.74.1

Date	UQ / IDS / BL	URL	IP
2023-03-28 13:49:26 +0000	0 - 1 - 0	videoxy.blogspot.com.cy/	172.217.21.161
2023-03-28 13:49:18 +0000	0 - 1 - 0	queimadegordurabdominal.blogspot.com.br/	172.217.21.161
2023-03-28 13:46:50 +0000	0 - 1 - 0	g3414m.lchongfu.com/	35.205.61.67
2023-03-28 13:41:42 +0000	0 - 0 - 0	accounts.google.com/RecoverAccount?Email=&et= (...)	142.250.74.77
2023-03-28 13:39:36 +0000	0 - 1 - 0	sos7dj.4ir8yy.76452.exea41.dfahyp.edu.cn.lcho (...)	35.205.61.67

Date	UQ / IDS / BL	URL	IP
2023-01-26 11:42:57 +0000	0 - 0 - 4	waispajemic1972.blogspot.co.il/	142.250.74.1

Date	UQ / IDS / BL	URL	IP
2023-03-28 10:50:13 +0000	0 - 0 - 0	sitech.nl	185.92.61.11
2023-03-27 22:07:58 +0000	0 - 0 - 0	marlriott.com	188.114.97.1
2023-03-27 21:38:11 +0000	0 - 1 - 0	rf-yn.snprobbx.pbz.r.de.a2ip.ru/login.php?log (...)	172.67.132.184
2023-03-27 03:39:31 +0000	0 - 5 - 0	tools.dl-host.biz/	2a01:4f8:201:806b::4
2023-03-27 02:44:37 +0000	0 - 1 - 0	ns1.interact.sh	46.101.25.250

Request	Response
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 0582b6180687dd95c7fd728f1b9db4495b807151e309b608ad203d69708f9da6 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "0582B6180687DD95C7FD728F1B9DB4495B807151E309B608AD203D69708F9DA6" Last-Modified: Tue, 24 Jan 2023 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7948 Expires: Thu, 26 Jan 2023 13:55:14 GMT Date: Thu, 26 Jan 2023 11:42:46 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: f5e46725831d8d722872bf68d752f4c5 Sha1: cf37793a1b73e3f84fe6c37fb27382c83b49dbc0 Sha256: 0582b6180687dd95c7fd728f1b9db4495b807151e309b608ad203d69708f9da6
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 422cfa907461cb7b93b9089d600052f9e94951e5e0c93d97651905002e48ad3e 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "422CFA907461CB7B93B9089D600052F9E94951E5E0C93D97651905002E48AD3E" Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4073 Expires: Thu, 26 Jan 2023 12:50:39 GMT Date: Thu, 26 Jan 2023 11:42:46 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 2405562765b49b2782ebd2e2994851d5 Sha1: be7ac8e558f7875bb1fb86ab5ec674424a5ff269 Sha256: 422cfa907461cb7b93b9089d600052f9e94951e5e0c93d97651905002e48ad3e
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 35.241.9.150 HASH: 6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e 35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Thu, 26 Jan 2023 11:35:16 GMT age: 450 cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: bf0c602d32b3c14606f22a86183b5e3c Sha1: 6eabd8d83475eba731968abe1a05a8bfd272f160 Sha256: 6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: e81c685b2d8f0e31b89e5cfc911a2c5a99a556646830ac5a8468d991b5e871a3 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "E81C685B2D8F0E31B89E5CFC911A2C5A99A556646830AC5A8468D991B5E871A3" Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=5509 Expires: Thu, 26 Jan 2023 13:14:35 GMT Date: Thu, 26 Jan 2023 11:42:46 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 69f73ac59327cd9ad7d99816ccfcc03e Sha1: c54844f82dbee0d5ee4c8ce344eb0139373e6c6b Sha256: e81c685b2d8f0e31b89e5cfc911a2c5a99a556646830ac5a8468d991b5e871a3
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: L5MxEh1oqcAwTgZDYFoSxw4NwAvytdvbX+7qpt8yoi9uxYhZpD4hRknao0X+7KDlRc/X1rDjWSOGNCtV7oVVIw== x-amz-request-id: AYNJT2JZ4S6CHD59 content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Thu, 26 Jan 2023 10:48:56 GMT age: 3230 last-modified: Mon, 09 Jan 2023 18:04:21 GMT etag: "7b922915ebf1fa3639b333f994c74f24" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 7b922915ebf1fa3639b333f994c74f24 Sha1: 144a3f80b98fd0652d4614f24cf6cbbee40f8938 Sha256: adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Thu, 26 Jan 2023 11:42:46 GMT content-length: 12 access-control-allow-credentials: true vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers access-control-expose-headers: content-type strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET / HTTP/1.1 Host: waispajemic1972.blogspot.co.il User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: waispajemic1972.blogspot.co.il/ FQDN: waispajemic1972.blogspot.co.il IP: 142.250.74.1 HASH: f18a4dc572c23daa9152e1fd7058055b2a7ec488995ef0170483df84fed12cc3 142.250.74.1 HTTP/1.1 302 Moved Temporarily Content-Type: text/html; charset=UTF-8 Location: http://waispajemic1972.blogspot.com/ Content-Encoding: gzip Date: Thu, 26 Jan 2023 11:42:46 GMT Expires: Thu, 26 Jan 2023 11:42:46 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Content-Length: 185 Server: GSE --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text Size: 185 Md5: 5ed8de11a79891643162cd1ed0e812bf Sha1: 2617141190ab2b8baa50900b20f422824c8397fe Sha256: f18a4dc572c23daa9152e1fd7058055b2a7ec488995ef0170483df84fed12cc3 Alerts: Blocklists: - fortinet: Phishing
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 35.241.9.150 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Backoff, Pragma, Last-Modified, ETag, Content-Length, Expires, Cache-Control, Retry-After, Content-Type, Alert content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Thu, 26 Jan 2023 11:41:40 GMT age: 66 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 18e19ea4c9c262cb9a94f89172eef2604222e779346589d470bf2e95ea295563 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "18E19EA4C9C262CB9A94F89172EEF2604222E779346589D470BF2E95EA295563" Last-Modified: Tue, 24 Jan 2023 20:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=17254 Expires: Thu, 26 Jan 2023 16:30:21 GMT Date: Thu, 26 Jan 2023 11:42:47 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 1e2970e1480a4759282d63bb213051e4 Sha1: ed5194d4d25dfc199821129be5d74be0ce49197d Sha256: 18e19ea4c9c262cb9a94f89172eef2604222e779346589d470bf2e95ea295563
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: edtS+nz3O/uwBn986x9rbw== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 52.26.236.137 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 52.26.236.137 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: jZokbWnLs5fK31SHrIUPOhmwSyE= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1 Host: waispajemic1972.blogspot.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: waispajemic1972.blogspot.com/ FQDN: waispajemic1972.blogspot.com IP: 142.250.74.1 HASH: 657e2480c9eb43c463a29a9a198f0a80a852d8181d4631000ddb1dc4a6a2a565 142.250.74.1 HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=UTF-8 Location: https://waispajemic1972.blogspot.com/ Content-Encoding: gzip Date: Thu, 26 Jan 2023 11:42:47 GMT Expires: Thu, 26 Jan 2023 11:42:47 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Content-Length: 185 Server: GSE --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text Size: 185 Md5: 77146104199a100545efd4e41613a18a Sha1: d0f504cb403908fbc759c0a89152de36cce87f8e Sha256: 657e2480c9eb43c463a29a9a198f0a80a852d8181d4631000ddb1dc4a6a2a565 Alerts: Blocklists: - fortinet: Phishing
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: 31003504156e6fbb39c0880f835afc8a190d1639f533f0b3275dc429d72e5df4 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 26 Jan 2023 11:42:47 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 52d5f57c6743ac9e4f0703e44e653bf2 Sha1: cd3577e7ce28baed9fc2dcd0c707c25deaa74389 Sha256: 31003504156e6fbb39c0880f835afc8a190d1639f533f0b3275dc429d72e5df4
GET / HTTP/1.1 Host: waispajemic1972.blogspot.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1	URL: waispajemic1972.blogspot.com/ FQDN: waispajemic1972.blogspot.com IP: 142.250.74.1 HASH: 78f416d678baf516b6ddfb8dc871d2c8127f91dcd4d6908954c96af7ec360c17 142.250.74.1 HTTP/2 200 OK content-type: text/html; charset=UTF-8 expires: Thu, 26 Jan 2023 11:42:48 GMT date: Thu, 26 Jan 2023 11:42:48 GMT cache-control: private, max-age=0 last-modified: Fri, 06 Nov 2020 09:54:18 GMT etag: W/"662b572db0eee2c04a8a9532fb4a81b5d29e58887b23277069356da600fb2944" content-encoding: gzip x-content-type-options: nosniff x-xss-protection: 1; mode=block content-length: 3192 server: GSE alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (4121) Size: 3192 Md5: 3115036117074e97fd6bc8ad10e8837f Sha1: 0ac11c41d80ec93e2ab73629048e97f3bc0a4999 Sha256: 78f416d678baf516b6ddfb8dc871d2c8127f91dcd4d6908954c96af7ec360c17 Alerts: Blocklists: - fortinet: Phishing
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: 91142bf7dc5c9348aa10d0b9ab29837baa422df993c34a5b15872e03e0935ff8 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 26 Jan 2023 11:42:48 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 3dc680bcb44349df6358a2d71483230d Sha1: f4ea1707dfb41d083f309964b919c92718fb6a3e Sha256: 91142bf7dc5c9348aa10d0b9ab29837baa422df993c34a5b15872e03e0935ff8
GET /js/cookienotice.js HTTP/1.1 Host: waispajemic1972.blogspot.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://waispajemic1972.blogspot.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: waispajemic1972.blogspot.com/js/cookienotice.js FQDN: waispajemic1972.blogspot.com IP: 142.250.74.1 HASH: afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2 142.250.74.1 HTTP/2 200 OK content-type: text/javascript accept-ranges: bytes vary: Accept-Encoding content-encoding: gzip cross-origin-resource-policy: cross-origin cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech" report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]} content-length: 2026 date: Thu, 26 Jan 2023 11:42:48 GMT expires: Thu, 02 Feb 2023 11:42:48 GMT cache-control: public, max-age=604800 last-modified: Thu, 26 Jan 2023 10:52:03 GMT x-content-type-options: nosniff server: sffe x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text Size: 2026 Md5: c4e1ed83d89245089b8a1203be20a377 Sha1: f3940e1215b89300ef97d57a25993f25243b8688 Sha256: afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2 Alerts: Blocklists: - fortinet: Phishing
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: 286a44be3104de6e4d3359e0ab1ec667de78fa0b977babe87c649b8482d2109c 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 26 Jan 2023 11:42:48 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 0d00297e341a73b3903737968a306e01 Sha1: a689bd052fa5cce623ecd21ae8dd9739a6323ede Sha256: 286a44be3104de6e4d3359e0ab1ec667de78fa0b977babe87c649b8482d2109c
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: 342bf3346476d1f699c9c9487781351dcfa06467fb57c89bb4888f03ee6e0eec 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 26 Jan 2023 11:42:48 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: d72e962a579b678b57a9213e61869aa1 Sha1: 2f2d4ba36a4dafceae3e8ae8e337c78effb9b6a5 Sha256: 342bf3346476d1f699c9c9487781351dcfa06467fb57c89bb4888f03ee6e0eec
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1 Host: www.blogger.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://waispajemic1972.blogspot.com/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: www.blogger.com/static/v1/widgets/55013136-widget_css_b (...) FQDN: www.blogger.com IP: 216.58.207.233 HASH: 0be7e26374fcff6f423b88e5f2a05d1cfdcb56abb4a78fa125e391989782ae0f 216.58.207.233 HTTP/2 200 OK content-type: text/css accept-ranges: bytes vary: Accept-Encoding content-encoding: gzip cross-origin-resource-policy: cross-origin cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech" report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]} content-length: 6620 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Thu, 26 Jan 2023 03:27:21 GMT expires: Fri, 26 Jan 2024 03:27:21 GMT cache-control: public, max-age=31536000 last-modified: Wed, 25 Jan 2023 14:53:31 GMT age: 29727 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (30596) Size: 6620 Md5: 6f46e6f68353c7911fe34f31faa1518f Sha1: ea4dbfa2f87c18e9c51c59a32dfa9afb9c2c3472 Sha256: 0be7e26374fcff6f423b88e5f2a05d1cfdcb56abb4a78fa125e391989782ae0f
GET /static/v1/widgets/1253685842-widgets.js HTTP/1.1 Host: www.blogger.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://waispajemic1972.blogspot.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: www.blogger.com/static/v1/widgets/1253685842-widgets.js FQDN: www.blogger.com IP: 216.58.207.233 HASH: 6c3f04bab4d89e7ea271ecb6ffd98b1fb47634d30cc10aa52169c4d2bdefce77 216.58.207.233 HTTP/2 200 OK content-type: text/javascript accept-ranges: bytes vary: Accept-Encoding cross-origin-resource-policy: cross-origin cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech" report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]} content-length: 156311 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Mon, 23 Jan 2023 01:57:07 GMT expires: Tue, 23 Jan 2024 01:57:07 GMT cache-control: public, max-age=31536000 last-modified: Mon, 23 Jan 2023 00:54:53 GMT age: 294341 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (2221) Size: 156311 Md5: 282c3db331d4d3d06779b0b8a60ef7c2 Sha1: c0450142786dc1ce0f3875608b38591ff7eaaf1b Sha256: 6c3f04bab4d89e7ea271ecb6ffd98b1fb47634d30cc10aa52169c4d2bdefce77
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: 342bf3346476d1f699c9c9487781351dcfa06467fb57c89bb4888f03ee6e0eec 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 26 Jan 2023 11:42:48 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: d72e962a579b678b57a9213e61869aa1 Sha1: 2f2d4ba36a4dafceae3e8ae8e337c78effb9b6a5 Sha256: 342bf3346476d1f699c9c9487781351dcfa06467fb57c89bb4888f03ee6e0eec
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404" Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6708 Expires: Thu, 26 Jan 2023 13:34:36 GMT Date: Thu, 26 Jan 2023 11:42:48 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: bd56ce22720c6e6072efdabae64669fd Sha1: 29194390d12177fe0d88e1bd2fb4436509366a1c Sha256: c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404" Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6708 Expires: Thu, 26 Jan 2023 13:34:36 GMT Date: Thu, 26 Jan 2023 11:42:48 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: bd56ce22720c6e6072efdabae64669fd Sha1: 29194390d12177fe0d88e1bd2fb4436509366a1c Sha256: c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404" Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6708 Expires: Thu, 26 Jan 2023 13:34:36 GMT Date: Thu, 26 Jan 2023 11:42:48 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: bd56ce22720c6e6072efdabae64669fd Sha1: 29194390d12177fe0d88e1bd2fb4436509366a1c Sha256: c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa3e6d9a5-dd7d-4337-a00f-a145350a1a29.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 9f928ec6f194340e5543a4bf757aac31d545def67a56ae804a2039a3effd3fe0 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10379 x-amzn-requestid: 419e5a80-cb6d-4904-9545-a0f815149701 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fUYMREwmIAMFhQQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63d1a0b4-64c49f7d49687d9e5324ec64;Sampled=0 x-amzn-remapped-date: Wed, 25 Jan 2023 21:35:48 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: rZHSgPIPZyea2griEvL-3semlrUDichGSL8Rin4YeYKN909f9e0lyQ== via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google date: Wed, 25 Jan 2023 21:41:09 GMT age: 50499 etag: "c70d46aa2210c4f7c397fa20e1225b7d0734ac35" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10379 Md5: 653bf5a34e9f99c9eef73a21d98d792f Sha1: c70d46aa2210c4f7c397fa20e1225b7d0734ac35 Sha256: 9f928ec6f194340e5543a4bf757aac31d545def67a56ae804a2039a3effd3fe0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 7276a38c9ba6b13a06f24ab8b802f210f98c5541df53fbcd8e879a14d2957d95 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 5943 x-amzn-requestid: 6774f4a4-ed83-49df-868f-4517c2af914b x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fUXxNF2UIAMFlYw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63d1a007-75b1e8975c3f4b503e0a1c5b;Sampled=0 x-amzn-remapped-date: Wed, 25 Jan 2023 21:32:55 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: VATQ0SjZfM_btXwR4M5keLmd-EE6717EHEiXrF2zpHNrli93EhN6Rw== via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google date: Wed, 25 Jan 2023 21:48:42 GMT age: 50046 etag: "4d825b74865effa4a858ddcad1d0969671facc07" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 5943 Md5: ba0a42dadf6a976df148f652e9cc1844 Sha1: 4d825b74865effa4a858ddcad1d0969671facc07 Sha256: 7276a38c9ba6b13a06f24ab8b802f210f98c5541df53fbcd8e879a14d2957d95
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8017df09-37d9-4c4b-9051-0442b3eb8fbf.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 7094ef64e04573bea7a81bbcc8ab59d721c5ef433e3fa9203e5861040ced549c 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 9285 x-amzn-requestid: 526bd945-31d8-490e-af9d-5e6fc6ea3561 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fUYT2HzvoAMFYYA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63d1a0e5-6812fe4354bbdac4472e7e81;Sampled=0 x-amzn-remapped-date: Wed, 25 Jan 2023 21:36:37 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: QEH9CmjfV8QZFNxFz_tEk06i_ELUSNC2QjdTF4K3xc3vS651BZ3NlQ== via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google date: Wed, 25 Jan 2023 21:52:28 GMT age: 49820 etag: "07e48bf3565e00d093d72dd4ada606f5d39a4838" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 9285 Md5: 17e1b6f3caa98b0e0972802408dd3f93 Sha1: 07e48bf3565e00d093d72dd4ada606f5d39a4838 Sha256: 7094ef64e04573bea7a81bbcc8ab59d721c5ef433e3fa9203e5861040ced549c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3177e0c-fa06-470b-bb9e-800d246a5096.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: f174d5678154412cdbf71f93c345d28cfb8bad7c190fa31dd78e9314c510f7ca 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8648 x-amzn-requestid: 19beb9c1-4e85-47ba-9275-7fb5d25f055f x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fUYMlENLoAMFhIg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63d1a0b6-016533de5b42b3a573a66c78;Sampled=0 x-amzn-remapped-date: Wed, 25 Jan 2023 21:35:50 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: jkExt4JNW6KtzDm8mDdb-AvXWXeyZr14XifDN_XVzKiwFAru_1HcSA== via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google date: Wed, 25 Jan 2023 21:55:21 GMT age: 49647 etag: "f2b0a5738ec9e3b178b2bf5513de3e604b86eadf" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8648 Md5: 4e013ee2e3a5287de55de4c2437a279d Sha1: f2b0a5738ec9e3b178b2bf5513de3e604b86eadf Sha256: f174d5678154412cdbf71f93c345d28cfb8bad7c190fa31dd78e9314c510f7ca
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F602ef184-7161-4092-91b7-61e14eef28a5.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 66268668c1a970268d75beb1b57f66a759bedac76958a3359cb23104de40fbeb 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 3411 x-amzn-requestid: 62afd364-e94f-45ff-ba6c-9b589fc53e5f x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: e-EyCEzrIAMFb8A= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63c8b4d9-203f51040f82f12d535446c4;Sampled=0 x-amzn-remapped-date: Thu, 19 Jan 2023 03:11:21 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: 3Ke5d5WguVrF_Phnhu9ojzN5Md0VkYnFfxKNoh5HHrmHwPI90IAIdA== via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google date: Thu, 26 Jan 2023 03:41:17 GMT etag: "2bd02a45c8b407e36a41a482b121ea3e14f7c722" age: 28891 cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 3411 Md5: 805711aaab303931f8966bbf73aeda52 Sha1: 2bd02a45c8b407e36a41a482b121ea3e14f7c722 Sha256: 66268668c1a970268d75beb1b57f66a759bedac76958a3359cb23104de40fbeb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ffb1709-216c-4bf0-9b98-e3a355f000bb.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: a300a4fde1863c8b806d0557d9f0adaed19e1c612989d7e3f79a7bb45e6e74dd 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8822 x-amzn-requestid: e16ae781-25f3-4b7d-b62b-85b35d6571c6 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fUYRwF2KIAMFjDA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63d1a0d7-377f24bd18dea32564b148bd;Sampled=0 x-amzn-remapped-date: Wed, 25 Jan 2023 21:36:23 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: n2ULSpeRMRZ9CDjmrwd56ti_gPYh9ApC521naXURI2Bh1eiKwjyHZw== via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google date: Wed, 25 Jan 2023 21:51:26 GMT age: 49882 etag: "c4802b06b87ab97f3ccd80d1c9bbdb4fab9886c1" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8822 Md5: 13cd008fb3e2739ec7caadadbd427655 Sha1: c4802b06b87ab97f3ccd80d1c9bbdb4fab9886c1 Sha256: a300a4fde1863c8b806d0557d9f0adaed19e1c612989d7e3f79a7bb45e6e74dd
GET /dyn-css/authorization.css?targetBlogID=3395413338201243475&zx=7e79895d-ac9c-4a7c-b822-ec86a44a90d2 HTTP/1.1 Host: www.blogger.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://waispajemic1972.blogspot.com/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers	URL: www.blogger.com/dyn-css/authorization.css?targetBlogID= (...) FQDN: www.blogger.com IP: 216.58.207.233 HASH: b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522 216.58.207.233 HTTP/2 200 OK content-type: text/css; charset=UTF-8 p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info." content-security-policy: script-src 'self' .google.com .google-analytics.com 'unsafe-inline' 'unsafe-eval' .gstatic.com .googlesyndication.com .blogger.com .googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport cache-control: no-cache, no-store, max-age=0, must-revalidate pragma: no-cache expires: Mon, 01 Jan 1990 00:00:00 GMT date: Thu, 26 Jan 2023 11:42:49 GMT last-modified: Thu, 26 Jan 2023 11:42:49 GMT content-encoding: gzip x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block content-length: 21 server: GSE alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: very short file (no magic) Size: 21 Md5: a62e4d501434033d5d177e67d3aafdd0 Sha1: 34f7300c9ed47334cf10826d57af785321e3138b Sha256: b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: f35432cfaeeebef40040fa80300c8a2b048be32a7abd6febd1689fe8d338ce4f 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "F35432CFAEEEBEF40040FA80300C8A2B048BE32A7ABD6FEBD1689FE8D338CE4F" Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=13238 Expires: Thu, 26 Jan 2023 15:23:27 GMT Date: Thu, 26 Jan 2023 11:42:49 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 90e8be9b414d0f07bd85c2bdfdfb8ff5 Sha1: 7906503b267b0e51b8ff054599e96e8b071ce943 Sha256: f35432cfaeeebef40040fa80300c8a2b048be32a7abd6febd1689fe8d338ce4f
GET /BpLCD HTTP/1.1 Host: cutt.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Cookie: __utma=255283994.1205496422.1653661467.1653661467.1653661467.1 Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: cutt.us/BpLCD FQDN: cutt.us IP: 69.61.26.122 HASH: e94680df08bb4816c32ed5910094e4850c620c4239f3c2c8828b8c143530ac47 69.61.26.122 HTTP/1.1 200 OK Content-Type: text/html; Charset=UTF-8;charset=UTF-8 Server: Hotcores.com Date: Thu, 26 Jan 2023 11:38:19 GMT Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Cache-Control: no-cache, must-revalidate, max-age=0 Pragma: no-cache X-Robots-Tag: noindex, nofollow I-AM: Beta Strict-Transport-Security: max-age=31536000; includeSubdomains; Content-Encoding: gzip --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2734) Size: 1453 Md5: 8258282c6115ec5d348441dc73c6adf9 Sha1: 5abce7b9b4dbb4044b54ac9d3027c9c1ae4b8174 Sha256: e94680df08bb4816c32ed5910094e4850c620c4239f3c2c8828b8c143530ac47
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: 991b03387ddbe0b07a9aee23ea7a98863fa85035cb26e631e0d22a1b999ee487 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 26 Jan 2023 11:42:49 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 0bf8fccb276521254634abcdcb4b3f0d Sha1: a5b7ffa58daf7d1ea3e312b68533d4d0271348f4 Sha256: 991b03387ddbe0b07a9aee23ea7a98863fa85035cb26e631e0d22a1b999ee487
GET /gtag/js?id=UA-31510493-1 HTTP/1.1 Host: www.googletagmanager.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://cutt.us/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: www.googletagmanager.com/gtag/js?id=UA-31510493-1 FQDN: www.googletagmanager.com IP: 142.250.74.168 HASH: 25a9fe7037eb02aff25e291cae9d150007145c5e122d9c7450675dbb2ce1652c 142.250.74.168 HTTP/2 200 OK content-type: application/javascript; charset=UTF-8 access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-headers: Cache-Control content-encoding: br vary: Accept-Encoding date: Thu, 26 Jan 2023 11:42:49 GMT expires: Thu, 26 Jan 2023 11:42:49 GMT cache-control: private, max-age=900 last-modified: Thu, 26 Jan 2023 09:00:00 GMT strict-transport-security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin server: Google Tag Manager content-length: 44011 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (1759) Size: 44011 Md5: a6f134f3c860238d922f368e0ead577c Sha1: 7077defd2e9a126cca56ad278119d5666c49986c Sha256: 25a9fe7037eb02aff25e291cae9d150007145c5e122d9c7450675dbb2ce1652c
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: 991b03387ddbe0b07a9aee23ea7a98863fa85035cb26e631e0d22a1b999ee487 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 26 Jan 2023 11:42:49 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 0bf8fccb276521254634abcdcb4b3f0d Sha1: a5b7ffa58daf7d1ea3e312b68533d4d0271348f4 Sha256: 991b03387ddbe0b07a9aee23ea7a98863fa85035cb26e631e0d22a1b999ee487
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: 7c432d209fcf9dde0ca59bf93f76526d98aab474041f19b2d6fe79942ed3a7e2 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 26 Jan 2023 11:42:49 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: dda854cb90cda40c6a6dbc19eb186eca Sha1: 0d23775c5af739aac0a41844d09c704ab850a1bd Sha256: 7c432d209fcf9dde0ca59bf93f76526d98aab474041f19b2d6fe79942ed3a7e2
GET /tag/js/gpt.js HTTP/1.1 Host: www.googletagservices.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://cutt.us/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: www.googletagservices.com/tag/js/gpt.js FQDN: www.googletagservices.com IP: 142.250.74.98 HASH: af229fa1de217c24598320f47bd44d65b958904c791776bf2d742e328f630c3c 142.250.74.98 HTTP/2 200 OK content-type: text/javascript vary: Accept-Encoding content-encoding: gzip cross-origin-resource-policy: cross-origin cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs" report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]} timing-allow-origin: * content-length: 27673 date: Thu, 26 Jan 2023 11:42:50 GMT expires: Thu, 26 Jan 2023 11:42:50 GMT cache-control: private, max-age=900, stale-while-revalidate=3600 etag: "1463 / 811 of 1000 / last-modified: 1674726461" x-content-type-options: nosniff server: sffe x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (39378) Size: 27673 Md5: b52b054ee09d59d3f19fbd3a7ed860fd Sha1: d90304218e9f61a0bbe70e66fa2a01dc98b8cd53 Sha256: af229fa1de217c24598320f47bd44d65b958904c791776bf2d742e328f630c3c
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: 7c432d209fcf9dde0ca59bf93f76526d98aab474041f19b2d6fe79942ed3a7e2 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 26 Jan 2023 11:42:50 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: dda854cb90cda40c6a6dbc19eb186eca Sha1: 0d23775c5af739aac0a41844d09c704ab850a1bd Sha256: 7c432d209fcf9dde0ca59bf93f76526d98aab474041f19b2d6fe79942ed3a7e2
GET /analytics.js HTTP/1.1 Host: www.google-analytics.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://cutt.us/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: www.google-analytics.com/analytics.js FQDN: www.google-analytics.com IP: 142.250.74.110 HASH: 847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db 142.250.74.110 HTTP/2 200 OK content-type: text/javascript strict-transport-security: max-age=10886400; includeSubDomains; preload x-content-type-options: nosniff vary: Accept-Encoding content-encoding: gzip cross-origin-resource-policy: cross-origin server: Golfe2 content-length: 20085 date: Thu, 26 Jan 2023 11:36:22 GMT expires: Thu, 26 Jan 2023 13:36:22 GMT cache-control: public, max-age=7200 age: 388 last-modified: Tue, 10 Jan 2023 21:29:14 GMT alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (1490) Size: 20085 Md5: ca7fbbfd120e3e329633044190bbf134 Sha1: d17f81e03dd827554ddd207ea081fb46b3415445 Sha256: 847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /pagead/ppub_config?ippd=cutt.us HTTP/1.1 Host: securepubads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://cutt.us Connection: keep-alive Referer: https://cutt.us/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: securepubads.g.doubleclick.net/pagead/ppub_config?ippd= (...) FQDN: securepubads.g.doubleclick.net IP: 142.250.74.130 HASH: 6e50ade02efd3f6a6fc8f6caf3b66aab87ce816ef0fad48bf388b1fa680fec88 142.250.74.130 HTTP/2 200 OK content-type: application/json; charset=UTF-8 p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" timing-allow-origin: * cross-origin-resource-policy: cross-origin access-control-allow-origin: * date: Thu, 26 Jan 2023 11:42:50 GMT expires: Thu, 26 Jan 2023 11:42:50 GMT cache-control: private, max-age=3600, stale-while-revalidate=3600 x-content-type-options: nosniff content-disposition: attachment; filename="f.txt" content-encoding: br server: cafe content-length: 32 x-xss-protection: 0 set-cookie: test_cookie=CheckForPermission; expires=Thu, 26-Jan-2023 11:57:50 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 32 Md5: 6a25915591f4dc7ff02016d9d0a7f591 Sha1: ef6f0d1fdb5696e75e85ec057dc212a8e21d5c18 Sha256: 6e50ade02efd3f6a6fc8f6caf3b66aab87ce816ef0fad48bf388b1fa680fec88
GET /gpt/pubads_impl_2023011901.js HTTP/1.1 Host: securepubads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://cutt.us/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: securepubads.g.doubleclick.net/gpt/pubads_impl_2023011901.js FQDN: securepubads.g.doubleclick.net IP: 142.250.74.130 HASH: 200d5b946446ce49bf169938879e90dbaff02275ddd43aa4bfc39e365fe641ea 142.250.74.130 HTTP/2 200 OK content-type: text/javascript accept-ranges: bytes vary: Accept-Encoding content-encoding: gzip cross-origin-resource-policy: cross-origin cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs" report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]} timing-allow-origin: * content-length: 133253 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Tue, 24 Jan 2023 19:37:09 GMT expires: Wed, 24 Jan 2024 19:37:09 GMT cache-control: public, immutable, max-age=31536000 last-modified: Thu, 19 Jan 2023 09:34:48 GMT age: 144341 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (65395) Size: 133253 Md5: 7b9a06dc1065c57999c41007d6156374 Sha1: a72a063166413b60de20ba8639c41e9a39f309d4 Sha256: 200d5b946446ce49bf169938879e90dbaff02275ddd43aa4bfc39e365fe641ea
GET /favicon.ico HTTP/1.1 Host: cutt.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://cutt.us/BpLCD Cookie: __utma=255283994.1205496422.1653661467.1653661467.1653661467.1 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: cutt.us/favicon.ico FQDN: cutt.us IP: 69.61.26.122 HASH: 8f047469a1cb0c72bb0d65f14d8b633eeb071d419cc80a38663a2e5ba867e8f9 69.61.26.122 HTTP/1.1 200 OK Content-Type: image/x-icon Server: Hotcores.com Date: Thu, 26 Jan 2023 11:38:19 GMT Last-Modified: Tue, 07 May 2013 07:26:19 GMT Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding ETag: W/"5188ac9b-1855e" Expires: Thu, 02 Feb 2023 11:38:19 GMT Cache-Control: max-age=604800 Strict-Transport-Security: max-age=31536000; includeSubdomains; Content-Encoding: gzip --- Additional Info --- Magic: MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data Size: 34298 Md5: ce5b2cfb326ff4b2579b79ce601a4877 Sha1: afeb1aa32be59849ad83e9cb4a8e02a6fb3c0c5a Sha256: 8f047469a1cb0c72bb0d65f14d8b633eeb071d419cc80a38663a2e5ba867e8f9
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: 7077e5a7a6aeee95ad600ca2a943f7062f593e12fa61e74bbb860f6019bf67b7 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 26 Jan 2023 11:42:50 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: fdded3d5e68d5358634880be3d3f2d04 Sha1: 6a02176ed7735b46393d51bd142e0deace6a5007 Sha256: 7077e5a7a6aeee95ad600ca2a943f7062f593e12fa61e74bbb860f6019bf67b7
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: 1c745d8ace7ea6f8e5d7da5e9c067b7b3427ce9c5a5e2c5c35d1c345266de518 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 26 Jan 2023 11:42:50 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 04cb7fc8b1e2a65a0b198cc53eb5e5cd Sha1: 6d04611612d81108e856467f0e4b0479cbb37d33 Sha256: 1c745d8ace7ea6f8e5d7da5e9c067b7b3427ce9c5a5e2c5c35d1c345266de518
GET /adsid/integrator.js?domain=cutt.us HTTP/1.1 Host: adservice.google.no User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://cutt.us/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: adservice.google.no/adsid/integrator.js?domain=cutt.us FQDN: adservice.google.no IP: 142.250.74.162 HASH: cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac 142.250.74.162 HTTP/2 200 OK content-type: application/javascript; charset=UTF-8 p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info." timing-allow-origin: * cross-origin-resource-policy: cross-origin cache-control: private, no-cache, no-store x-content-type-options: nosniff content-disposition: attachment; filename="f.txt" content-encoding: gzip date: Thu, 26 Jan 2023 11:42:50 GMT server: cafe content-length: 100 x-xss-protection: 0 alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with no line terminators Size: 100 Md5: 917951a58be8c6c6f3680159550ba3c2 Sha1: 21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4 Sha256: cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=cutt.us HTTP/1.1 Host: adservice.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://cutt.us/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: adservice.google.com/adsid/integrator.js?domain=cutt.us FQDN: adservice.google.com IP: 142.250.74.66 HASH: cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac 142.250.74.66 HTTP/2 200 OK content-type: application/javascript; charset=UTF-8 p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info." timing-allow-origin: * cross-origin-resource-policy: cross-origin cache-control: private, no-cache, no-store x-content-type-options: nosniff content-disposition: attachment; filename="f.txt" content-encoding: gzip date: Thu, 26 Jan 2023 11:42:50 GMT server: cafe content-length: 100 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with no line terminators Size: 100 Md5: 917951a58be8c6c6f3680159550ba3c2 Sha1: 21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4 Sha256: cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: 7077e5a7a6aeee95ad600ca2a943f7062f593e12fa61e74bbb860f6019bf67b7 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 26 Jan 2023 11:42:50 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: fdded3d5e68d5358634880be3d3f2d04 Sha1: 6a02176ed7735b46393d51bd142e0deace6a5007 Sha256: 7077e5a7a6aeee95ad600ca2a943f7062f593e12fa61e74bbb860f6019bf67b7
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: 8b7ce4c8269941cf55ca12415b1abfd7d4ae7bf5823657f3afe5e8dd34bed80b 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 26 Jan 2023 11:42:50 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 47d71bf163265666c21e2410fb568043 Sha1: 54a4b0f241af261f878967ce058f5885be476cc4 Sha256: 8b7ce4c8269941cf55ca12415b1abfd7d4ae7bf5823657f3afe5e8dd34bed80b
GET /safeframe/1-0-40/html/container.html HTTP/1.1 Host: 93e12b577da74fd2e4a39b7a36c372a5.safeframe.googlesyndication.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://cutt.us/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: iframe Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: 93e12b577da74fd2e4a39b7a36c372a5.safeframe.googlesyndic (...) FQDN: 93e12b577da74fd2e4a39b7a36c372a5.safeframe.googlesyndication.com IP: 142.250.74.97 HASH: 09e42988871806c7f0a897bda7bc4247f47f4d8590749eaa245b8ff1fa907303 142.250.74.97 HTTP/2 200 OK content-type: text/html accept-ranges: bytes vary: Accept-Encoding content-encoding: br cross-origin-resource-policy: cross-origin cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs" report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]} timing-allow-origin: * content-length: 2653 date: Thu, 26 Jan 2023 11:42:50 GMT expires: Fri, 26 Jan 2024 11:42:50 GMT cache-control: public, immutable, max-age=31536000 last-modified: Thu, 03 Nov 2022 19:10:08 GMT x-content-type-options: nosniff server: sffe x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5657) Size: 2653 Md5: e8ee9c011ff8e1f464e74c37113119ee Sha1: 64ad72134ea05877de0f2b6503f5c0d8c3f78197 Sha256: 09e42988871806c7f0a897bda7bc4247f47f4d8590749eaa245b8ff1fa907303

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "422CFA907461CB7B93B9089D600052F9E94951E5E0C93D97651905002E48AD3E" 

                                        
                                            
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=4073 

                                        
                                            
Expires: Thu, 26 Jan 2023 12:50:39 GMT 

                                        
                                            
Date: Thu, 26 Jan 2023 11:42:46 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    2405562765b49b2782ebd2e2994851d5

                                                Sha1:   be7ac8e558f7875bb1fb86ab5ec674424a5ff269

                                                Sha256: 422cfa907461cb7b93b9089d600052f9e94951e5e0c93d97651905002e48ad3e

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "E81C685B2D8F0E31B89E5CFC911A2C5A99A556646830AC5A8468D991B5E871A3" 

                                        
                                            
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=5509 

                                        
                                            
Expires: Thu, 26 Jan 2023 13:14:35 GMT 

                                        
                                            
Date: Thu, 26 Jan 2023 11:42:46 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    69f73ac59327cd9ad7d99816ccfcc03e

                                                Sha1:   c54844f82dbee0d5ee4c8ce344eb0139373e6c6b

                                                Sha256: e81c685b2d8f0e31b89e5cfc911a2c5a99a556646830ac5a8468d991b5e871a3

                                        
                                            GET /v1/tiles HTTP/1.1 

                                        
                                            
Host: contile.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.117.237.239

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Thu, 26 Jan 2023 11:42:46 GMT 

                                        
                                            
content-length: 12 

                                        
                                            
access-control-allow-credentials: true 

                                        
                                            
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers 

                                        
                                            
access-control-expose-headers: content-type 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
via: 1.1 google 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with no line terminators

                                                Size:   12

                                                Md5:    23e88fb7b99543fb33315b29b1fad9d6

                                                Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

                                                Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: application/json 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Content-Type: application/json 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         35.241.9.150

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-expose-headers: Backoff, Pragma, Last-Modified, ETag, Content-Length, Expires, Cache-Control, Retry-After, Content-Type, Alert 

                                        
                                            
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
content-length: 329 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Thu, 26 Jan 2023 11:41:40 GMT 

                                        
                                            
age: 66 

                                        
                                            
last-modified: Fri, 25 Mar 2022 17:45:46 GMT 

                                        
                                            
etag: "1648230346554" 

                                        
                                            
cache-control: max-age=3600,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators

                                                Size:   329

                                                Md5:    0333b0655111aa68de771adfcc4db243

                                                Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb

                                                Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

                                        
                                            GET / HTTP/1.1 

                                        
                                            
Host: push.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Sec-WebSocket-Version: 13 

                                        
                                            
Origin: wss://push.services.mozilla.com/ 

                                        
                                            
Sec-WebSocket-Protocol: push-notification 

                                        
                                            
Sec-WebSocket-Extensions: permessage-deflate 

                                        
                                            
Sec-WebSocket-Key: edtS+nz3O/uwBn986x9rbw== 

                                        
                                            
Connection: keep-alive, Upgrade 

                                        
                                            
Sec-Fetch-Dest: websocket 

                                        
                                            
Sec-Fetch-Mode: websocket 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache 

                                        
                                            
Upgrade: websocket

                                         52.26.236.137

                                        
                                            HTTP/1.1 101 Switching Protocols

                                        

                                        
                                            
Connection: Upgrade 

                                        
                                            
Upgrade: websocket 

                                        
                                            
Sec-WebSocket-Accept: jZokbWnLs5fK31SHrIUPOhmwSyE= 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.131

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Thu, 26 Jan 2023 11:42:47 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 471 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    52d5f57c6743ac9e4f0703e44e653bf2

                                                Sha1:   cd3577e7ce28baed9fc2dcd0c707c25deaa74389

                                                Sha256: 31003504156e6fbb39c0880f835afc8a190d1639f533f0b3275dc429d72e5df4

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.131

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Thu, 26 Jan 2023 11:42:48 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 471 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    3dc680bcb44349df6358a2d71483230d

                                                Sha1:   f4ea1707dfb41d083f309964b919c92718fb6a3e

                                                Sha256: 91142bf7dc5c9348aa10d0b9ab29837baa422df993c34a5b15872e03e0935ff8

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.131

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Thu, 26 Jan 2023 11:42:48 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 471 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    0d00297e341a73b3903737968a306e01

                                                Sha1:   a689bd052fa5cce623ecd21ae8dd9739a6323ede

                                                Sha256: 286a44be3104de6e4d3359e0ab1ec667de78fa0b977babe87c649b8482d2109c

                                        
                                            GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1 

                                        
                                            
Host: www.blogger.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://waispajemic1972.blogspot.com/ 

                                        
                                            
Sec-Fetch-Dest: style 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         216.58.207.233

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/css

                                        

                                        
                                            
accept-ranges: bytes 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
content-encoding: gzip 

                                        
                                            
cross-origin-resource-policy: cross-origin 

                                        
                                            
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech" 

                                        
                                            
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]} 

                                        
                                            
content-length: 6620 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
server: sffe 

                                        
                                            
x-xss-protection: 0 

                                        
                                            
date: Thu, 26 Jan 2023 03:27:21 GMT 

                                        
                                            
expires: Fri, 26 Jan 2024 03:27:21 GMT 

                                        
                                            
cache-control: public, max-age=31536000 

                                        
                                            
last-modified: Wed, 25 Jan 2023 14:53:31 GMT 

                                        
                                            
age: 29727 

                                        
                                            
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (30596)

                                                Size:   6620

                                                Md5:    6f46e6f68353c7911fe34f31faa1518f

                                                Sha1:   ea4dbfa2f87c18e9c51c59a32dfa9afb9c2c3472

                                                Sha256: 0be7e26374fcff6f423b88e5f2a05d1cfdcb56abb4a78fa125e391989782ae0f

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.131

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Thu, 26 Jan 2023 11:42:48 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 471 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    d72e962a579b678b57a9213e61869aa1

                                                Sha1:   2f2d4ba36a4dafceae3e8ae8e337c78effb9b6a5

                                                Sha256: 342bf3346476d1f699c9c9487781351dcfa06467fb57c89bb4888f03ee6e0eec

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404" 

                                        
                                            
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=6708 

                                        
                                            
Expires: Thu, 26 Jan 2023 13:34:36 GMT 

                                        
                                            
Date: Thu, 26 Jan 2023 11:42:48 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    bd56ce22720c6e6072efdabae64669fd

                                                Sha1:   29194390d12177fe0d88e1bd2fb4436509366a1c

                                                Sha256: c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa3e6d9a5-dd7d-4337-a00f-a145350a1a29.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 10379 

                                        
                                            
x-amzn-requestid: 419e5a80-cb6d-4904-9545-a0f815149701 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: fUYMREwmIAMFhQQ= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63d1a0b4-64c49f7d49687d9e5324ec64;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Wed, 25 Jan 2023 21:35:48 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: rZHSgPIPZyea2griEvL-3semlrUDichGSL8Rin4YeYKN909f9e0lyQ== 

                                        
                                            
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Wed, 25 Jan 2023 21:41:09 GMT 

                                        
                                            
age: 50499 

                                        
                                            
etag: "c70d46aa2210c4f7c397fa20e1225b7d0734ac35" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   10379

                                                Md5:    653bf5a34e9f99c9eef73a21d98d792f

                                                Sha1:   c70d46aa2210c4f7c397fa20e1225b7d0734ac35

                                                Sha256: 9f928ec6f194340e5543a4bf757aac31d545def67a56ae804a2039a3effd3fe0

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8017df09-37d9-4c4b-9051-0442b3eb8fbf.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 9285 

                                        
                                            
x-amzn-requestid: 526bd945-31d8-490e-af9d-5e6fc6ea3561 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: fUYT2HzvoAMFYYA= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63d1a0e5-6812fe4354bbdac4472e7e81;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Wed, 25 Jan 2023 21:36:37 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: QEH9CmjfV8QZFNxFz_tEk06i_ELUSNC2QjdTF4K3xc3vS651BZ3NlQ== 

                                        
                                            
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Wed, 25 Jan 2023 21:52:28 GMT 

                                        
                                            
age: 49820 

                                        
                                            
etag: "07e48bf3565e00d093d72dd4ada606f5d39a4838" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   9285

                                                Md5:    17e1b6f3caa98b0e0972802408dd3f93

                                                Sha1:   07e48bf3565e00d093d72dd4ada606f5d39a4838

                                                Sha256: 7094ef64e04573bea7a81bbcc8ab59d721c5ef433e3fa9203e5861040ced549c

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F602ef184-7161-4092-91b7-61e14eef28a5.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 3411 

                                        
                                            
x-amzn-requestid: 62afd364-e94f-45ff-ba6c-9b589fc53e5f 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: e-EyCEzrIAMFb8A= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63c8b4d9-203f51040f82f12d535446c4;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Thu, 19 Jan 2023 03:11:21 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: 3Ke5d5WguVrF_Phnhu9ojzN5Md0VkYnFfxKNoh5HHrmHwPI90IAIdA== 

                                        
                                            
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Thu, 26 Jan 2023 03:41:17 GMT 

                                        
                                            
etag: "2bd02a45c8b407e36a41a482b121ea3e14f7c722" 

                                        
                                            
age: 28891 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   3411

                                                Md5:    805711aaab303931f8966bbf73aeda52

                                                Sha1:   2bd02a45c8b407e36a41a482b121ea3e14f7c722

                                                Sha256: 66268668c1a970268d75beb1b57f66a759bedac76958a3359cb23104de40fbeb

                                        
                                            GET /dyn-css/authorization.css?targetBlogID=3395413338201243475&zx=7e79895d-ac9c-4a7c-b822-ec86a44a90d2 HTTP/1.1 

                                        
                                            
Host: www.blogger.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://waispajemic1972.blogspot.com/ 

                                        
                                            
Sec-Fetch-Dest: style 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
TE: trailers

                                         216.58.207.233

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/css; charset=UTF-8

                                        

                                        
                                            
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info." 

                                        
                                            
content-security-policy: script-src   'self' *.google.com *.google-analytics.com 'unsafe-inline'   'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com   *.googleapis.com uds.googleusercontent.com https://s.ytimg.com   https://i18n-cloud.appspot.com   https://www.youtube.com   www-onepick-opensocial.googleusercontent.com   www-bloggervideo-opensocial.googleusercontent.com   www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport 

                                        
                                            
cache-control: no-cache, no-store, max-age=0, must-revalidate 

                                        
                                            
pragma: no-cache 

                                        
                                            
expires: Mon, 01 Jan 1990 00:00:00 GMT 

                                        
                                            
date: Thu, 26 Jan 2023 11:42:49 GMT 

                                        
                                            
last-modified: Thu, 26 Jan 2023 11:42:49 GMT 

                                        
                                            
content-encoding: gzip 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-frame-options: SAMEORIGIN 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
content-length: 21 

                                        
                                            
server: GSE 

                                        
                                            
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  very short file (no magic)

                                                Size:   21

                                                Md5:    a62e4d501434033d5d177e67d3aafdd0

                                                Sha1:   34f7300c9ed47334cf10826d57af785321e3138b

                                                Sha256: b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522

                                        
                                            GET /BpLCD HTTP/1.1 

                                        
                                            
Host: cutt.us

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Cookie: __utma=255283994.1205496422.1653661467.1653661467.1653661467.1 

                                        
                                            
Upgrade-Insecure-Requests: 1 

                                        
                                            
Sec-Fetch-Dest: document 

                                        
                                            
Sec-Fetch-Mode: navigate 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         69.61.26.122

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/html; Charset=UTF-8;charset=UTF-8

                                        

                                        
                                            
Server: Hotcores.com 

                                        
                                            
Date: Thu, 26 Jan 2023 11:38:19 GMT 

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Cache-Control: no-cache, must-revalidate, max-age=0 

                                        
                                            
Pragma: no-cache 

                                        
                                            
X-Robots-Tag: noindex, nofollow 

                                        
                                            
I-AM: Beta 

                                        
                                            
Strict-Transport-Security: max-age=31536000; includeSubdomains; 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2734)

                                                Size:   1453

                                                Md5:    8258282c6115ec5d348441dc73c6adf9

                                                Sha1:   5abce7b9b4dbb4044b54ac9d3027c9c1ae4b8174

                                                Sha256: e94680df08bb4816c32ed5910094e4850c620c4239f3c2c8828b8c143530ac47

                                        
                                            GET /gtag/js?id=UA-31510493-1 HTTP/1.1 

                                        
                                            
Host: www.googletagmanager.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://cutt.us/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         142.250.74.168

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/javascript; charset=UTF-8

                                        

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-allow-credentials: true 

                                        
                                            
access-control-allow-headers: Cache-Control 

                                        
                                            
content-encoding: br 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
date: Thu, 26 Jan 2023 11:42:49 GMT 

                                        
                                            
expires: Thu, 26 Jan 2023 11:42:49 GMT 

                                        
                                            
cache-control: private, max-age=900 

                                        
                                            
last-modified: Thu, 26 Jan 2023 09:00:00 GMT 

                                        
                                            
strict-transport-security: max-age=31536000; includeSubDomains 

                                        
                                            
cross-origin-resource-policy: cross-origin 

                                        
                                            
server: Google Tag Manager 

                                        
                                            
content-length: 44011 

                                        
                                            
x-xss-protection: 0 

                                        
                                            
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (1759)

                                                Size:   44011

                                                Md5:    a6f134f3c860238d922f368e0ead577c

                                                Sha1:   7077defd2e9a126cca56ad278119d5666c49986c

                                                Sha256: 25a9fe7037eb02aff25e291cae9d150007145c5e122d9c7450675dbb2ce1652c

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.131

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Thu, 26 Jan 2023 11:42:49 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 472 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   472

                                                Md5:    dda854cb90cda40c6a6dbc19eb186eca

                                                Sha1:   0d23775c5af739aac0a41844d09c704ab850a1bd

                                                Sha256: 7c432d209fcf9dde0ca59bf93f76526d98aab474041f19b2d6fe79942ed3a7e2

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.131

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Thu, 26 Jan 2023 11:42:50 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 472 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   472

                                                Md5:    dda854cb90cda40c6a6dbc19eb186eca

                                                Sha1:   0d23775c5af739aac0a41844d09c704ab850a1bd

                                                Sha256: 7c432d209fcf9dde0ca59bf93f76526d98aab474041f19b2d6fe79942ed3a7e2

                                        
                                            GET /pagead/ppub_config?ippd=cutt.us HTTP/1.1 

                                        
                                            
Host: securepubads.g.doubleclick.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: https://cutt.us 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://cutt.us/ 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         142.250.74.130

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json; charset=UTF-8

                                        

                                        
                                            
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" 

                                        
                                            
timing-allow-origin: * 

                                        
                                            
cross-origin-resource-policy: cross-origin 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
date: Thu, 26 Jan 2023 11:42:50 GMT 

                                        
                                            
expires: Thu, 26 Jan 2023 11:42:50 GMT 

                                        
                                            
cache-control: private, max-age=3600, stale-while-revalidate=3600 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
content-disposition: attachment; filename="f.txt" 

                                        
                                            
content-encoding: br 

                                        
                                            
server: cafe 

                                        
                                            
content-length: 32 

                                        
                                            
x-xss-protection: 0 

                                        
                                            
set-cookie: test_cookie=CheckForPermission; expires=Thu, 26-Jan-2023 11:57:50 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none 

                                        
                                            
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with no line terminators

                                                Size:   32

                                                Md5:    6a25915591f4dc7ff02016d9d0a7f591

                                                Sha1:   ef6f0d1fdb5696e75e85ec057dc212a8e21d5c18

                                                Sha256: 6e50ade02efd3f6a6fc8f6caf3b66aab87ce816ef0fad48bf388b1fa680fec88

                                        
                                            GET /favicon.ico HTTP/1.1 

                                        
                                            
Host: cutt.us

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://cutt.us/BpLCD 

                                        
                                            
Cookie: __utma=255283994.1205496422.1653661467.1653661467.1653661467.1 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin

                                         69.61.26.122

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/x-icon

                                        

                                        
                                            
Server: Hotcores.com 

                                        
                                            
Date: Thu, 26 Jan 2023 11:38:19 GMT 

                                        
                                            
Last-Modified: Tue, 07 May 2013 07:26:19 GMT 

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
ETag: W/"5188ac9b-1855e" 

                                        
                                            
Expires: Thu, 02 Feb 2023 11:38:19 GMT 

                                        
                                            
Cache-Control: max-age=604800 

                                        
                                            
Strict-Transport-Security: max-age=31536000; includeSubdomains; 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data

                                                Size:   34298

                                                Md5:    ce5b2cfb326ff4b2579b79ce601a4877

                                                Sha1:   afeb1aa32be59849ad83e9cb4a8e02a6fb3c0c5a

                                                Sha256: 8f047469a1cb0c72bb0d65f14d8b633eeb071d419cc80a38663a2e5ba867e8f9

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.131

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Thu, 26 Jan 2023 11:42:50 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 471 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    04cb7fc8b1e2a65a0b198cc53eb5e5cd

                                                Sha1:   6d04611612d81108e856467f0e4b0479cbb37d33

                                                Sha256: 1c745d8ace7ea6f8e5d7da5e9c067b7b3427ce9c5a5e2c5c35d1c345266de518

                                        
                                            GET /adsid/integrator.js?domain=cutt.us HTTP/1.1 

                                        
                                            
Host: adservice.google.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://cutt.us/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         142.250.74.66

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/javascript; charset=UTF-8

                                        

                                        
                                            
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info." 

                                        
                                            
timing-allow-origin: * 

                                        
                                            
cross-origin-resource-policy: cross-origin 

                                        
                                            
cache-control: private, no-cache, no-store 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
content-disposition: attachment; filename="f.txt" 

                                        
                                            
content-encoding: gzip 

                                        
                                            
date: Thu, 26 Jan 2023 11:42:50 GMT 

                                        
                                            
server: cafe 

                                        
                                            
content-length: 100 

                                        
                                            
x-xss-protection: 0 

                                        
                                            
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with no line terminators

                                                Size:   100

                                                Md5:    917951a58be8c6c6f3680159550ba3c2

                                                Sha1:   21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4

                                                Sha256: cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.131

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Thu, 26 Jan 2023 11:42:50 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 471 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    47d71bf163265666c21e2410fb568043

                                                Sha1:   54a4b0f241af261f878967ce058f5885be476cc4

                                                Sha256: 8b7ce4c8269941cf55ca12415b1abfd7d4ae7bf5823657f3afe5e8dd34bed80b

URL	waispajemic1972.blogspot.co.il/
IP	142.250.74.1 (United States)
ASN	#15169 GOOGLE
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2023-01-26 11:42:57 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	4
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (18)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 142.250.74.1

Last 5 reports on ASN: GOOGLE

Last 1 reports on domain: waispajemic1972.blogspot.co.il

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (15)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (49)

Overview

Domain Summary (18)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 142.250.74.1

Last 5 reports on ASN: GOOGLE

Last 1 reports on domain: waispajemic1972.blogspot.co.il

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (15)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (49)

Network Intrusion Detection Systems