firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=259200
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 05 Oct 2022 15:47:18 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: AAnzRVGzWMuX0Yp7f0Y0HKWbHa6dLt8-PkiLK7RAA7AJovekgaP98A==
Age: 17700
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash eabb7d9ffae717f7305d63c057755470
3b7f0baccfdbb8d9ffefa4a2215d4d6094be454a
ab48f17e54075e1ecf034278e82bcacd2e3689773186cc84fba9b79aac907294
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AB48F17E54075E1ECF034278E82BCACD2E3689773186CC84FBA9B79AAC907294"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2322
Expires: Wed, 05 Oct 2022 21:21:00 GMT
Date: Wed, 05 Oct 2022 20:42:18 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a1073a68ed38c8e3575e889224db944c
ee2a7a3e2da77a8540131f9ffaa0a20d4dd486bd
a9fb1f7ade7c8a79d2ee83e9b7215e66dc89ac733b11079297a8f4b9aceae1f5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A9FB1F7ADE7C8A79D2EE83E9B7215E66DC89AC733B11079297A8F4B9ACEAE1F5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11768
Expires: Wed, 05 Oct 2022 23:58:26 GMT
Date: Wed, 05 Oct 2022 20:42:18 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 6Oo6wOxwadtBR8tgKDR4C4sREWGAJ8GhCw5i6t1DXcqoTds+H0cG2FUSO9+PvRHV+yrwc13Hc0A=
x-amz-request-id: GVF399NEBZ65TX5P
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 05 Oct 2022 20:30:28 GMT
age: 710
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 05 Oct 2022 20:42:18 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Pragma, Content-Length, Backoff, Last-Modified, Cache-Control, Content-Type, Retry-After, ETag, Expires, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Date: Wed, 05 Oct 2022 20:32:19 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Wed, 05 Oct 2022 20:54:26 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 5lufJBbrBtloenihspTVVo5rI7oH73TTbijaVde74S2MfQYNg0xfAw==
Age: 765
safadosgulosos.blogspot.ug/
302 Moved Temporarily 181 B URL HTTP/1.1 safadosgulosos.blogspot.ug/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 9f8929faed5e245a05985ce9b89e607b
816dadb82793e3176a8981f2d5bf8bc9ccdf2b9d
60c672ba3146f39e7e828df67c512372b79027e096df10fd13ef3dcc25bceea2
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: safadosgulosos.blogspot.ug
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Location: http://safadosgulosos.blogspot.com/
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Wed, 05 Oct 2022 20:42:18 GMT
Expires: Wed, 05 Oct 2022 20:42:18 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 181
Server: GSE
ocsp.digicert.com/
200 OK 471 B IP
Hash 1561c6be7c89d1357a80d12de47b6e74
9a705277922ecca583c867af58b3efce099f83bd
e33dc034dbf4b3b627cd3c1af2d942e2ca5704ec9a4aad5c46ad39eb070e82ab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1926
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 20:42:19 GMT
Last-Modified: Wed, 05 Oct 2022 20:10:13 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 2pBa/hxwa1WFHT4MN2Qyug==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: FCUAsD9s5XFJU2XX+IE8BXTPflU=
safadosgulosos.blogspot.com/
200 OK 23 kB URL HTTP/1.1 safadosgulosos.blogspot.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6999)
Hash d8b207fa30a01ea1fe672feb0c53c7f5
92eb2595b64678047e5b50e60ff5c3ae3bb124bf
9f45acf4a3ccddde3793e506d22915ea2f7974f5d8bc204e42463c6e33cd265b
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: safadosgulosos.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Wed, 05 Oct 2022 20:42:19 GMT
Date: Wed, 05 Oct 2022 20:42:19 GMT
Cache-Control: private, max-age=0
Last-Modified: Mon, 06 Dec 2021 18:47:17 GMT
ETag: W/"5dc642c58de347339a51ef3a669c088ef6850c08b0fad085ce3c0269c5967862"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 23232
Server: GSE
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 29305d430d4a98929d99f493c8fa0e09
37e64cc35bce4869f3573c565fdd177dc4e128c0
0557db8eed6f9f794247c44d8b7a8cd99caf6716cc48932ce3b3c1d907493869
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 20:42:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 047374e90c9a1e02eb7294c0a9a316a2
3d043355314c0c408f547f1faafd3acd6d481f63
e01b0fb379931c35fd707f8cc75e2d6079f77fd5174c30b75934e130d68ed2a5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 20:42:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 29305d430d4a98929d99f493c8fa0e09
37e64cc35bce4869f3573c565fdd177dc4e128c0
0557db8eed6f9f794247c44d8b7a8cd99caf6716cc48932ce3b3c1d907493869
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 20:42:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css
200 OK 7.8 kB URL HTTP/2 www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css
IP
File type ASCII text, with very long lines (35959)
Hash 5aa2d3297bdc86bc81322aedecbb5e79
1c0a3c007e41726e167e79b70ddea76198650884
feae1fac625d0f30b5f10fa00b62df1a5600cd2178062c427e55f289b29cc630
GET /static/v1/widgets/2975350028-css_bundle_v2.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 7776
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 16:35:40 GMT
expires: Thu, 05 Oct 2023 16:35:40 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 04 Oct 2022 18:55:46 GMT
content-type: text/css
age: 14799
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.e-referrer.com/link.js
301 Moved Permanently 0 B URL HTTP/1.1 www.e-referrer.com/link.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /link.js HTTP/1.1
Host: www.e-referrer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Wed, 05 Oct 2022 20:42:19 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 05 Oct 2022 21:42:19 GMT
Location: https://www.e-referrer.com/link.js
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gvoR47aYiNruv6fI185UU1o8U0n3MKAWIQdIpme16sFTyGN3EIRkfY3RwH6EtJDvdukzQPQ6r3CGOCkLAjVbluQva6S9f7mD1bZcggbhA064hma%2F7N8B6nV%2FJS6oH6b0JIksew%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7558fbb1c893b505-OSL
alt-svc: h2=":443"; ma=60
resources.blogblog.com/img/icon18_edit_allbkg.gif
200 OK 162 B URL HTTP/2 resources.blogblog.com/img/icon18_edit_allbkg.gif
IP
File type GIF image data, version 89a, 18 x 18\012- data
Hash c991641178ff05adf0d004298b5eafa9
d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
GET /img/icon18_edit_allbkg.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 162
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 19:57:04 GMT
expires: Wed, 12 Oct 2022 19:57:04 GMT
cache-control: public, max-age=604800
last-modified: Wed, 05 Oct 2022 12:00:16 GMT
content-type: image/gif
age: 2715
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
4.bp.blogspot.com/-7b2uC5qQS_Q/TmI8vgZB5MI/AAAAAAAABkE/zfp6G9mq7sY/s200/VH_StiffSecurity%2B045_0001.jpg
200 OK 5.1 kB URL HTTP/1.1 4.bp.blogspot.com/-7b2uC5qQS_Q/TmI8vgZB5MI/AAAAAAAABkE/zfp6G9mq7sY/s200/VH_StiffSecurity%2B045_0001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 200x150, components 3\012- data
Hash e4dfd5cfc834dc802492fcfce8344f66
7ceca7cd255b20d95c1b1530d9b8b7d9c5c90f26
64b79695b1a5663bd0fbdd5b9a6c78919a5b398371ab597cf6ae03f9b94d2aba
GET /-7b2uC5qQS_Q/TmI8vgZB5MI/AAAAAAAABkE/zfp6G9mq7sY/s200/VH_StiffSecurity%2B045_0001.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="VH_StiffSecurity 045_0001.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 5119
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:22 GMT
Expires: Thu, 06 Oct 2022 20:41:22 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v641"
Content-Type: image/jpeg
Age: 57
4.bp.blogspot.com/-iT0LqXxpXco/TmI8vuj1v6I/AAAAAAAABj8/vyg47n7OpBw/s200/VH_StiffSecurity%2B050_0001.jpg
200 OK 6.5 kB URL HTTP/1.1 4.bp.blogspot.com/-iT0LqXxpXco/TmI8vuj1v6I/AAAAAAAABj8/vyg47n7OpBw/s200/VH_StiffSecurity%2B050_0001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 200x150, components 3\012- data
Hash c79811f1b193d37f0b7d99058715cd7c
738d3136c47618f4148516659d833e34627a62fc
70808cfbb0839dbe1c15ac1f16360798db584ed46688755da38525e3eff4966d
GET /-iT0LqXxpXco/TmI8vuj1v6I/AAAAAAAABj8/vyg47n7OpBw/s200/VH_StiffSecurity%2B050_0001.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="VH_StiffSecurity 050_0001.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 6514
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:22 GMT
Expires: Thu, 06 Oct 2022 20:41:22 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v63f"
Content-Type: image/jpeg
Age: 57
safadosgulosos.blogspot.com/js/cookienotice.js
200 OK 2.0 kB URL HTTP/1.1 safadosgulosos.blogspot.com/js/cookienotice.js
IP
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
Analyzer Verdict Alert fortinet Malware
GET /js/cookienotice.js HTTP/1.1
Host: safadosgulosos.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:22 GMT
Expires: Wed, 12 Oct 2022 20:41:22 GMT
Cache-Control: public, max-age=604800
Last-Modified: Wed, 05 Oct 2022 17:03:17 GMT
Content-Type: text/javascript
Age: 57
www.blogger.com/static/v1/widgets/792789798-widgets.js
200 OK 57 kB URL HTTP/2 www.blogger.com/static/v1/widgets/792789798-widgets.js
IP
File type ASCII text, with very long lines (2221)
Hash 02e6bf311e18828a522b4d3a4079084f
a63cd373fa23b4fe11f938d57737e6bfa1ebe789
25d469843aa09be2473931d33aaa37b65ac371874bd98ca84ec780bead3e33e4
GET /static/v1/widgets/792789798-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56804
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 03 Oct 2022 02:15:20 GMT
expires: Tue, 03 Oct 2023 02:15:20 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 03 Oct 2022 00:49:27 GMT
content-type: text/javascript
age: 239219
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
4.bp.blogspot.com/-k9ZWl0YbEBc/T4G8-iX-ahI/AAAAAAAAGO8/aTs18apD2_c/s320/dude-ranch-studs-s2%2B%2B025_0001.jpg
200 OK 16 kB URL HTTP/1.1 4.bp.blogspot.com/-k9ZWl0YbEBc/T4G8-iX-ahI/AAAAAAAAGO8/aTs18apD2_c/s320/dude-ranch-studs-s2%2B%2B025_0001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 320x240, components 3\012- data
Hash 615f7d309e4a115bfd5f684745b49ba8
72e4988cbb67d2da59093c7535f9cc760cddb183
f260c68c984480e10fb085acfa6d7ee24acc61b5536add27592eae3aa846f034
GET /-k9ZWl0YbEBc/T4G8-iX-ahI/AAAAAAAAGO8/aTs18apD2_c/s320/dude-ranch-studs-s2%2B%2B025_0001.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="dude-ranch-studs-s2 025_0001.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 15732
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:23 GMT
Expires: Thu, 06 Oct 2022 20:41:23 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v18ef"
Content-Type: image/jpeg
Age: 56
3.bp.blogspot.com/-7qA7RVdh0kU/Txrk7oJUSnI/AAAAAAAAMg4/J_l60Zj9P68/s200/Bareback_Shoot_To_Thrill_Scene6%2B043_0001.jpg
200 OK 4.6 kB URL HTTP/1.1 3.bp.blogspot.com/-7qA7RVdh0kU/Txrk7oJUSnI/AAAAAAAAMg4/J_l60Zj9P68/s200/Bareback_Shoot_To_Thrill_Scene6%2B043_0001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 200x150, components 3\012- data
Hash 908857b166f0f22d3419b65c9e246861
dfb7f8e36f62a0c9443750305009726fa461f4c4
2ec41cea1647a77a0e69446947c11c5b26d514122e11c655968c3c20460e7cc3
GET /-7qA7RVdh0kU/Txrk7oJUSnI/AAAAAAAAMg4/J_l60Zj9P68/s200/Bareback_Shoot_To_Thrill_Scene6%2B043_0001.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="Bareback_Shoot_To_Thrill_Scene6 043_0001.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 4599
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:23 GMT
Expires: Thu, 06 Oct 2022 20:41:23 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v320e"
Content-Type: image/jpeg
Age: 56
translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
301 Moved Permanently 0 B URL HTTP/1.1 translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: application/binary
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Wed, 05 Oct 2022 20:42:19 GMT
Location: https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
Cross-Origin-Opener-Policy: same-origin-allow-popups
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
4.bp.blogspot.com/-AZqAN20aQR0/Txrkqh9FyKI/AAAAAAAAMfw/YD5Yey04vE0/s200/Bareback_Shoot_To_Thrill_Scene6%2B022_0001.jpg
200 OK 6.4 kB URL HTTP/1.1 4.bp.blogspot.com/-AZqAN20aQR0/Txrkqh9FyKI/AAAAAAAAMfw/YD5Yey04vE0/s200/Bareback_Shoot_To_Thrill_Scene6%2B022_0001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 200x150, components 3\012- data
Hash b3b1f8f2dfd84c0b73a2db2fb7f62d60
00e93c5c31ac76c5130042fa488b1770fc757c1d
6f76c8b3620ea68cf946d2c8fa5070be714d299ca0f1213aaab2fe67213d9962
GET /-AZqAN20aQR0/Txrkqh9FyKI/AAAAAAAAMfw/YD5Yey04vE0/s200/Bareback_Shoot_To_Thrill_Scene6%2B022_0001.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="Bareback_Shoot_To_Thrill_Scene6 022_0001.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 6385
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:23 GMT
Expires: Thu, 06 Oct 2022 20:41:23 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v31fc"
Content-Type: image/jpeg
Age: 56
4.bp.blogspot.com/-QaTmyfzmBmQ/Txrk70vw0BI/AAAAAAAAMhI/Ez4Tpzbezcw/s200/Bareback_Shoot_To_Thrill_Scene6%2B044_0001.jpg
200 OK 5.8 kB URL HTTP/1.1 4.bp.blogspot.com/-QaTmyfzmBmQ/Txrk70vw0BI/AAAAAAAAMhI/Ez4Tpzbezcw/s200/Bareback_Shoot_To_Thrill_Scene6%2B044_0001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 200x150, components 3\012- data
Hash 3a670fef504198fbad9ab7655b0e23c9
12a4dc9ce7eb33b3452a0b7eb1d66d2ba318b433
b2916f46583287c32a81cb26a3aa115e22f97f89543d23bdb835511329c16418
GET /-QaTmyfzmBmQ/Txrk70vw0BI/AAAAAAAAMhI/Ez4Tpzbezcw/s200/Bareback_Shoot_To_Thrill_Scene6%2B044_0001.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="Bareback_Shoot_To_Thrill_Scene6 044_0001.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 5848
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:22 GMT
Expires: Thu, 06 Oct 2022 20:41:22 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v3212"
Content-Type: image/jpeg
Age: 57
4.bp.blogspot.com/-Z8NwhXwX5yQ/TmI8v9vou2I/AAAAAAAABkM/anKiqfmjjDI/s200/VH_StiffSecurity%2B043_0001.jpg
200 OK 6.4 kB URL HTTP/1.1 4.bp.blogspot.com/-Z8NwhXwX5yQ/TmI8v9vou2I/AAAAAAAABkM/anKiqfmjjDI/s200/VH_StiffSecurity%2B043_0001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 200x150, components 3\012- data
Hash 08f8d84586bc9da1d08a9dbce8119429
30413cfe6f7dcd2d66cc75d04de818283c0b5482
92005047d450e18205a4453f9077da744ae7a0c57bdaedbd4caf4d9880390f62
GET /-Z8NwhXwX5yQ/TmI8v9vou2I/AAAAAAAABkM/anKiqfmjjDI/s200/VH_StiffSecurity%2B043_0001.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="VH_StiffSecurity 043_0001.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 6416
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:23 GMT
Expires: Thu, 06 Oct 2022 20:41:23 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v643"
Content-Type: image/jpeg
Age: 56
turbobit.net/ref/pt/turbobit_1_468x60.gif
404 Not Found 1.7 kB URL HTTP/1.1 turbobit.net/ref/pt/turbobit_1_468x60.gif
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash dee20d4fde8af0479936260fc50383b9
687a5e7335e82816e73a4d72ec322cd60c4e8e9e
c3f3a66a4518757f9b5892d52d9132880dbb93314d80a05de0b589c0981a1299
GET /ref/pt/turbobit_1_468x60.gif HTTP/1.1
Host: turbobit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 404 Not Found
Date: Wed, 05 Oct 2022 20:42:19 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
ETag: W/"5d19c403-10e5"
Content-Encoding: gzip
4.bp.blogspot.com/-cnXSevCIM2w/UAnxolni1iI/AAAAAAAAIoc/IT00ZhBiVr0/s1600/banner03.jpg
200 OK 64 kB URL HTTP/1.1 4.bp.blogspot.com/-cnXSevCIM2w/UAnxolni1iI/AAAAAAAAIoc/IT00ZhBiVr0/s1600/banner03.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1200x220, components 3\012- data
Hash fe41488757b8069a5cf0896553228cd3
1e3947594c2b1aa1e0311db52701ce098485aa52
95ab389bdb5294930113a02eb9a2accac9a55a192234caaa84bc301e721065b3
GET /-cnXSevCIM2w/UAnxolni1iI/AAAAAAAAIoc/IT00ZhBiVr0/s1600/banner03.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="banner03.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 63569
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:22 GMT
Expires: Thu, 06 Oct 2022 20:41:22 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2287"
Content-Type: image/jpeg
Age: 57
4.bp.blogspot.com/-9v9Bwop_3-g/T6P1tx3DD6I/AAAAAAAAG3c/dpj1_zN-py0/s320/bbb_1287_davi-mauro_042.JPG
200 OK 35 kB URL HTTP/1.1 4.bp.blogspot.com/-9v9Bwop_3-g/T6P1tx3DD6I/AAAAAAAAG3c/dpj1_zN-py0/s320/bbb_1287_davi-mauro_042.JPG
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 213x320, components 3\012- data
Hash 41ed1b1a9b0ec7dee72733c0ef756061
c5820401db32d0697070879efe3214d7f35509bb
eacadee99be4a567093c390631aafd0bf1c46c1ac63d61bf33fee77ef762555a
GET /-9v9Bwop_3-g/T6P1tx3DD6I/AAAAAAAAG3c/dpj1_zN-py0/s320/bbb_1287_davi-mauro_042.JPG HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="bbb_1287_davi-mauro_042.JPG"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 34947
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:23 GMT
Expires: Thu, 06 Oct 2022 20:41:23 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1b77"
Content-Type: image/jpeg
Age: 56
3.bp.blogspot.com/-hMCGvVNBIkY/T3-Uoc9ou4I/AAAAAAAAP-E/fu962qtitE4/s200/SX_Video_Raw_Ass_Fuckers3_Scena3%2B072_0001.jpg
200 OK 6.7 kB URL HTTP/1.1 3.bp.blogspot.com/-hMCGvVNBIkY/T3-Uoc9ou4I/AAAAAAAAP-E/fu962qtitE4/s200/SX_Video_Raw_Ass_Fuckers3_Scena3%2B072_0001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 200x150, components 3\012- data
Hash 1dfe747f9194908f02a9b1f71bb3151d
28426a5e2440c3ec02f7c45a1482050224dc2008
c383e66821ca8c8bd91f63550394362aadae423f8f23d7828a68849bffd83dcf
GET /-hMCGvVNBIkY/T3-Uoc9ou4I/AAAAAAAAP-E/fu962qtitE4/s200/SX_Video_Raw_Ass_Fuckers3_Scena3%2B072_0001.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="SX_Video_Raw_Ass_Fuckers3_Scena3 072_0001.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 6656
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:23 GMT
Expires: Wed, 05 Oct 2022 19:18:52 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 56
ETag: "v4015"
Content-Type: image/jpeg
3.bp.blogspot.com/-VXZpQRwfI-0/T4G9SY8amiI/AAAAAAAAGQA/TjE5nb0Umeo/s320/dude-ranch-studs-s2%2B%2B087_0001.jpg
200 OK 14 kB URL HTTP/1.1 3.bp.blogspot.com/-VXZpQRwfI-0/T4G9SY8amiI/AAAAAAAAGQA/TjE5nb0Umeo/s320/dude-ranch-studs-s2%2B%2B087_0001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 320x240, components 3\012- data
Hash 2cf9f1ca52bc3b0c91216313212c2e76
9b3f00b0a8ffae01702741a49ac7bbf10c02ee1f
67da9079289dfe222f4bb219ceac09d454a5c83e251183aea2cf6fc285381d49
GET /-VXZpQRwfI-0/T4G9SY8amiI/AAAAAAAAGQA/TjE5nb0Umeo/s320/dude-ranch-studs-s2%2B%2B087_0001.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="dude-ranch-studs-s2 087_0001.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 14046
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:22 GMT
Expires: Thu, 06 Oct 2022 20:41:22 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1900"
Content-Type: image/jpeg
Age: 57
3.bp.blogspot.com/-OrmUsUITzM0/T6P0wxS2hMI/AAAAAAAAG2U/zHwK8fYc_Es/s320/bbb_1287_davi-mauro_041.JPG
200 OK 26 kB URL HTTP/1.1 3.bp.blogspot.com/-OrmUsUITzM0/T6P0wxS2hMI/AAAAAAAAG2U/zHwK8fYc_Es/s320/bbb_1287_davi-mauro_041.JPG
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 213x320, components 3\012- data
Hash 357376de8e1ec89f3a76b8b5ef584cf1
a83b66767794db8680a884d69d12ed262d0dd902
82c91783b846fd03b1909aaffa3298ae11e516224495a06a718f73d029042c48
GET /-OrmUsUITzM0/T6P0wxS2hMI/AAAAAAAAG2U/zHwK8fYc_Es/s320/bbb_1287_davi-mauro_041.JPG HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="bbb_1287_davi-mauro_041.JPG"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 25905
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:23 GMT
Expires: Thu, 06 Oct 2022 20:41:23 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1b65"
Content-Type: image/jpeg
Age: 56
3.bp.blogspot.com/-1GImwjER41U/TftWH986zBI/AAAAAAAAElA/uWyNViKBAXg/s1600/down.gif
200 OK 3.7 kB URL HTTP/1.1 3.bp.blogspot.com/-1GImwjER41U/TftWH986zBI/AAAAAAAAElA/uWyNViKBAXg/s1600/down.gif
IP
File type GIF image data, version 89a, 137 x 50\012- data
Hash 547048184e6d3422bf7fcfbe8078cbc8
429ee1fdd468690c9fe7f5d3709e66374afeb650
289bbf1b7d5c0c8c322f93f2e1d23dbccd45d2f65acd4835860dc4bdb3c7315e
GET /-1GImwjER41U/TftWH986zBI/AAAAAAAAElA/uWyNViKBAXg/s1600/down.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="down.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 3735
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 18:22:43 GMT
Expires: Wed, 05 Oct 2022 19:18:01 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 8376
ETag: "v6ccc"
Content-Type: image/gif
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 29305d430d4a98929d99f493c8fa0e09
37e64cc35bce4869f3573c565fdd177dc4e128c0
0557db8eed6f9f794247c44d8b7a8cd99caf6716cc48932ce3b3c1d907493869
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 20:42:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.z9QjrzsHcOc.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/cb=gapi.loaded_0?le=scs
200 OK 58 kB URL HTTP/2 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.z9QjrzsHcOc.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/cb=gapi.loaded_0?le=scs
IP
File type ASCII text, with very long lines (580)
Hash d70fcc84d705c565b31a5835c0938d5b
d28e5dc9fcc6239d67986df3205468072023d2d7
1d558c94793446aa6a7832dde0c39ed7d9c77fd963ffb738c460e4f7369a7f4e
GET /_/scs/abc-static/_/js/k=gapi.lb.en.z9QjrzsHcOc.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 57995
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 02 Oct 2022 07:25:42 GMT
expires: Mon, 02 Oct 2023 07:25:42 GMT
cache-control: public, max-age=31536000
age: 306997
last-modified: Sat, 30 Jul 2022 15:17:53 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
3.bp.blogspot.com/-OhklutghQKM/UDrf4pW84yI/AAAAAAAAJwI/8dVuYzb_FJY/s72-c/black-force-s2%2B%2B053_0001.jpg
200 OK 2.3 kB URL HTTP/1.1 3.bp.blogspot.com/-OhklutghQKM/UDrf4pW84yI/AAAAAAAAJwI/8dVuYzb_FJY/s72-c/black-force-s2%2B%2B053_0001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 1e0cdab9061087aabb12433d555ce347
c27eef22f2e0d09d3816e373bde1b09011cf0698
e2942ff1951b8d7022004a8f8d57388bbff0c12ad59927a5e660ae7fc57f08f7
GET /-OhklutghQKM/UDrf4pW84yI/AAAAAAAAJwI/8dVuYzb_FJY/s72-c/black-force-s2%2B%2B053_0001.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="black-force-s2 053_0001.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 2252
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:22 GMT
Expires: Thu, 06 Oct 2022 20:41:22 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2702"
Content-Type: image/jpeg
Age: 57
www.blogger.com/dyn-css/authorization.css?targetBlogID=6026142258761590518&zx=0c9cc163-deb3-4221-8a4b-e6e64f0b85be
200 OK 21 B URL HTTP/2 www.blogger.com/dyn-css/authorization.css?targetBlogID=6026142258761590518&zx=0c9cc163-deb3-4221-8a4b-e6e64f0b85be
IP
File type very short file (no magic)
Hash a62e4d501434033d5d177e67d3aafdd0
34f7300c9ed47334cf10826d57af785321e3138b
b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522
GET /dyn-css/authorization.css?targetBlogID=6026142258761590518&zx=0c9cc163-deb3-4221-8a4b-e6e64f0b85be HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 05 Oct 2022 20:42:19 GMT
last-modified: Wed, 05 Oct 2022 20:42:19 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
200 OK 67 B URL HTTP/1.1 pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP
Hash 9bbc3ca32ec951a484589ce0e6b4db73
753d6f6183b33b2dee5dde2208fca91c17f5bb13
b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 08:27:21 GMT
Expires: Wed, 19 Oct 2022 08:27:21 GMT
Cache-Control: public, max-age=1209600
ETag: 13036835877489095579
Content-Type: text/javascript; charset=UTF-8
Age: 44098
www.blogblog.com/1kt/awesomeinc/date_background_groovy.png
200 OK 307 B URL HTTP/1.1 www.blogblog.com/1kt/awesomeinc/date_background_groovy.png
IP
File type PNG image data, 600 x 100, 4-bit colormap, non-interlaced\012- data
Hash 080ec22cfe1fad76e781bd2c0fd273c2
08c39c3634c2b15d0961c8c0e0796f8715b8b4a8
ca64f9a22d97c6129091c2f8876e800f74a109f9ada6ec5be5357824131f12c8
GET /1kt/awesomeinc/date_background_groovy.png HTTP/1.1
Host: www.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 307
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 14:09:19 GMT
Expires: Wed, 12 Oct 2022 14:09:19 GMT
Cache-Control: public, max-age=604800
Last-Modified: Tue, 04 Oct 2022 16:56:41 GMT
Content-Type: image/png
Age: 23580
2.bp.blogspot.com/-GChG-SEQAxI/T3-VA6GpwUI/AAAAAAAAP_A/ij-HBCSSYs0/s200/SX_Video_Raw_Ass_Fuckers3_Scena3%2B112_0001.jpg
200 OK 11 kB URL HTTP/1.1 2.bp.blogspot.com/-GChG-SEQAxI/T3-VA6GpwUI/AAAAAAAAP_A/ij-HBCSSYs0/s200/SX_Video_Raw_Ass_Fuckers3_Scena3%2B112_0001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 200x150, components 3\012- data
Hash 90ce0661fbfba3a2f0e513a0967454db
1ab86c7ea5559fd075b4800905e58d0d09bcdbcc
5514f2b1715187eeb66a4d26fc57a7dd9a087fe26c6c2dad5fc6526f007f07a0
GET /-GChG-SEQAxI/T3-VA6GpwUI/AAAAAAAAP_A/ij-HBCSSYs0/s200/SX_Video_Raw_Ass_Fuckers3_Scena3%2B112_0001.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="SX_Video_Raw_Ass_Fuckers3_Scena3 112_0001.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 11359
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:23 GMT
Expires: Thu, 06 Oct 2022 20:41:23 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v3ff0"
Content-Type: image/jpeg
Age: 56
2.bp.blogspot.com/-MMc2fzIzt_g/T3-V3bWrQ5I/AAAAAAAAP_o/-TN03Xr-i7M/s200/SX_Video_Raw_Ass_Fuckers3_Scena3%2B135_0001.jpg
200 OK 8.4 kB URL HTTP/1.1 2.bp.blogspot.com/-MMc2fzIzt_g/T3-V3bWrQ5I/AAAAAAAAP_o/-TN03Xr-i7M/s200/SX_Video_Raw_Ass_Fuckers3_Scena3%2B135_0001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 200x150, components 3\012- data
Hash 7cb07cba9b2dae6abbd3bb5a5b6585be
c070e5d34bf1e2ad8bf068fc22820df0ed5d5d87
0788c89abc270c0c13dae2a2bb0422e9ac7fc70707f99e0dd00f338ba9563d6d
GET /-MMc2fzIzt_g/T3-V3bWrQ5I/AAAAAAAAP_o/-TN03Xr-i7M/s200/SX_Video_Raw_Ass_Fuckers3_Scena3%2B135_0001.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="SX_Video_Raw_Ass_Fuckers3_Scena3 135_0001.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 8358
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:23 GMT
Expires: Wed, 05 Oct 2022 19:18:52 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 56
ETag: "v3ffa"
Content-Type: image/jpeg
www.linkwithin.com/widget.js
404 Not Found 162 B URL HTTP/1.1 www.linkwithin.com/widget.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 1b7c22a214949975556626d7217e9a39
d01c97e2944166ed23e47e4a62ff471ab8fa031f
340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87
GET /widget.js HTTP/1.1
Host: www.linkwithin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 05 Oct 2022 20:42:19 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
2.bp.blogspot.com/-53wzJkoExKQ/T3-UnNm8HnI/AAAAAAAAP9Y/hGL8csnY3kc/s200/SX_Video_Raw_Ass_Fuckers3_Scena3%2B032_0001.jpg
200 OK 8.5 kB URL HTTP/1.1 2.bp.blogspot.com/-53wzJkoExKQ/T3-UnNm8HnI/AAAAAAAAP9Y/hGL8csnY3kc/s200/SX_Video_Raw_Ass_Fuckers3_Scena3%2B032_0001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 200x150, components 3\012- data
Hash 781269c0249bb003eefc2729ba825458
988ab98f6591639d9abc36a4195d1e2b12c2eac2
43758259302fdb55cf0eae94b56c887f17d9022af8d10f685fb7a2aab7038c11
GET /-53wzJkoExKQ/T3-UnNm8HnI/AAAAAAAAP9Y/hGL8csnY3kc/s200/SX_Video_Raw_Ass_Fuckers3_Scena3%2B032_0001.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="SX_Video_Raw_Ass_Fuckers3_Scena3 032_0001.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 8495
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:23 GMT
Expires: Wed, 05 Oct 2022 19:18:52 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 57
ETag: "v3fd6"
Content-Type: image/jpeg
2.bp.blogspot.com/-oF8ruoAxeLM/T3-UnT5r7KI/AAAAAAAAP9k/HChaL1LgkcQ/s200/SX_Video_Raw_Ass_Fuckers3_Scena3%2B039_0001.jpg
200 OK 12 kB URL HTTP/1.1 2.bp.blogspot.com/-oF8ruoAxeLM/T3-UnT5r7KI/AAAAAAAAP9k/HChaL1LgkcQ/s200/SX_Video_Raw_Ass_Fuckers3_Scena3%2B039_0001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 200x150, components 3\012- data
Hash 9920804a95ba8d6b415e4fbba4aa9a8a
0a0c6325b6109a6d6bc165f11be7eebb47023ebd
df29d4557f0344deef32b8dcf4998e0f4015b93d6678c078b52ac6bb47c9016f
GET /-oF8ruoAxeLM/T3-UnT5r7KI/AAAAAAAAP9k/HChaL1LgkcQ/s200/SX_Video_Raw_Ass_Fuckers3_Scena3%2B039_0001.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="SX_Video_Raw_Ass_Fuckers3_Scena3 039_0001.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 12119
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:22 GMT
Expires: Wed, 05 Oct 2022 19:18:52 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 58
ETag: "v3fd9"
Content-Type: image/jpeg
2.bp.blogspot.com/-MDM7jzgoN8E/T3-U_yZd66I/AAAAAAAAP-g/2_kTaRkb5HE/s200/SX_Video_Raw_Ass_Fuckers3_Scena3%2B088_0001.jpg
200 OK 6.8 kB URL HTTP/1.1 2.bp.blogspot.com/-MDM7jzgoN8E/T3-U_yZd66I/AAAAAAAAP-g/2_kTaRkb5HE/s200/SX_Video_Raw_Ass_Fuckers3_Scena3%2B088_0001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 200x150, components 3\012- data
Hash 20faa44d250a4d39dc983f48262779cb
76e9edb57cea629456c841f28ba506d4beffcb7a
73a534c7123a3cefda1e9426cb4f284c98cc541c8e88d917586684e9d48301b3
GET /-MDM7jzgoN8E/T3-U_yZd66I/AAAAAAAAP-g/2_kTaRkb5HE/s200/SX_Video_Raw_Ass_Fuckers3_Scena3%2B088_0001.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="SX_Video_Raw_Ass_Fuckers3_Scena3 088_0001.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 6808
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:22 GMT
Expires: Wed, 05 Oct 2022 19:18:52 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 58
ETag: "v3fe8"
Content-Type: image/jpeg
2.bp.blogspot.com/-yB_hrfqJL5Q/Txrkz1J25JI/AAAAAAAAMgQ/h5YjLnsYpKU/s200/Bareback_Shoot_To_Thrill_Scene6%2B036_0001.jpg
200 OK 6.7 kB URL HTTP/1.1 2.bp.blogspot.com/-yB_hrfqJL5Q/Txrkz1J25JI/AAAAAAAAMgQ/h5YjLnsYpKU/s200/Bareback_Shoot_To_Thrill_Scene6%2B036_0001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 200x150, components 3\012- data
Hash 2d90edd556da74b80a36d17952b0dbc7
a04c456938037788dc32874b687c53f84961661d
7c0807b35b440715f795c76051a6ccfc4c51d8904bc0cba4bc3bd84fc1ebda3d
GET /-yB_hrfqJL5Q/Txrkz1J25JI/AAAAAAAAMgQ/h5YjLnsYpKU/s200/Bareback_Shoot_To_Thrill_Scene6%2B036_0001.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="Bareback_Shoot_To_Thrill_Scene6 036_0001.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 6723
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:22 GMT
Expires: Thu, 06 Oct 2022 20:41:22 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v3204"
Content-Type: image/jpeg
Age: 58
www.linkwithin.com/pixel.png
200 OK 83 B URL HTTP/1.1 www.linkwithin.com/pixel.png
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash ca1dba98f5e46c0e7a1549b3d8af9b93
37284bda145ed93cee64997e3d6688cae7d98468
88021da4a13d993a2c94e4d8ddc9bd98b34985d806371e71e0531b37b8a0e081
GET /pixel.png HTTP/1.1
Host: www.linkwithin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 05 Oct 2022 20:42:20 GMT
Content-Type: image/png
Content-Length: 83
Last-Modified: Thu, 18 Jun 2020 22:02:28 GMT
Connection: keep-alive
ETag: "5eebe474-53"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
1.bp.blogspot.com/-ZekA3E6NDQ0/VFKXckhCitI/AAAAAAAAD6M/KUDZm-0WM2A/s72-c/huge-cock-sex-97-85.jpg
200 OK 3.3 kB URL HTTP/1.1 1.bp.blogspot.com/-ZekA3E6NDQ0/VFKXckhCitI/AAAAAAAAD6M/KUDZm-0WM2A/s72-c/huge-cock-sex-97-85.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash fd39c6c9e547e0e8798336fbc1ef3ea8
885678c2134c44c79fbb3ad128ca0f4421b93d7c
b8c62bb0b914c07ef1694ce548ef3792ee255c1b18e0abcf17d8578e32304f99
GET /-ZekA3E6NDQ0/VFKXckhCitI/AAAAAAAAD6M/KUDZm-0WM2A/s72-c/huge-cock-sex-97-85.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="huge-cock-sex-97-85.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 3309
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 18:22:43 GMT
Expires: Thu, 06 Oct 2022 18:22:43 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "vfa6"
Content-Type: image/jpeg
Age: 8377
themes.googleusercontent.com/image?id=1H4RPagP3NxwlkCrVuQKUYUd5snXvaKTagGtkdgXEgve0VpSn-G5s8eBYdMsiQzVSvRpe&options=w1200
301 Moved Permanently 0 B URL HTTP/1.1 themes.googleusercontent.com/image?id=1H4RPagP3NxwlkCrVuQKUYUd5snXvaKTagGtkdgXEgve0VpSn-G5s8eBYdMsiQzVSvRpe&options=w1200
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /image?id=1H4RPagP3NxwlkCrVuQKUYUd5snXvaKTagGtkdgXEgve0VpSn-G5s8eBYdMsiQzVSvRpe&options=w1200 HTTP/1.1
Host: themes.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: application/binary
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Wed, 05 Oct 2022 20:42:20 GMT
Location: https://themes.googleusercontent.com/image?id=1H4RPagP3NxwlkCrVuQKUYUd5snXvaKTagGtkdgXEgve0VpSn-G5s8eBYdMsiQzVSvRpe&options=w1200
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
1.bp.blogspot.com/-ZH6qonlQVTo/T6P1tgO9taI/AAAAAAAAG3Q/GNkrTsT6bfk/s320/bbb_1287_davi-mauro_053.JPG
200 OK 22 kB URL HTTP/1.1 1.bp.blogspot.com/-ZH6qonlQVTo/T6P1tgO9taI/AAAAAAAAG3Q/GNkrTsT6bfk/s320/bbb_1287_davi-mauro_053.JPG
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 213x320, components 3\012- data
Hash 3809e41fcf2d5ff84d7e85b3bce8c79e
ac519a0c811bbf14c17be1d92757c6f5980d429b
56b1814c04daaff66ef57c1fd202cbd865f6553c9bd83a5b06f7d02551008676
GET /-ZH6qonlQVTo/T6P1tgO9taI/AAAAAAAAG3Q/GNkrTsT6bfk/s320/bbb_1287_davi-mauro_053.JPG HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="bbb_1287_davi-mauro_053.JPG"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 21762
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:22 GMT
Expires: Thu, 06 Oct 2022 20:41:22 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1b74"
Content-Type: image/jpeg
Age: 58
www.surfactif.fr/tag/underLight.js?ref=boysgulosos
301 Moved Permanently 0 B URL HTTP/1.1 www.surfactif.fr/tag/underLight.js?ref=boysgulosos
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tag/underLight.js?ref=boysgulosos HTTP/1.1
Host: www.surfactif.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Wed, 05 Oct 2022 20:42:36 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
X-Powered-By: PHP/7.3.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Redirect-By: WordPress
Location: https://www.surfactif.fr/tag/underLight.js?ref=boysgulosos
Server: o2switch-PowerBoost-v3
www.777seo.com/pop.php?username=boysgulosos&max=5
302 Found 0 B URL HTTP/1.1 www.777seo.com/pop.php?username=boysgulosos&max=5
IP
ASN #133618 Trellian Pty. Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pop.php?username=boysgulosos&max=5 HTTP/1.1
Host: www.777seo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 302 Found
Date: Wed, 05 Oct 2022 20:42:19 GMT
Server: Apache/2.4.38 (Debian)
Set-Cookie: __tad=1665002539.4863119; expires=Sat, 02-Oct-2032 20:42:19 GMT; Max-Age=315360000
Location: http://ww38.777seo.com/pop.php?username=boysgulosos&max=5&subid1=20221006-0742-1973-a764-44230c7b4f09
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8
1.bp.blogspot.com/-VVmy83DAEoo/T6P00PUPIVI/AAAAAAAAG3E/jB4HzN2iacw/s320/bbb_1287_davi-mauro_036.JPG
200 OK 23 kB URL HTTP/1.1 1.bp.blogspot.com/-VVmy83DAEoo/T6P00PUPIVI/AAAAAAAAG3E/jB4HzN2iacw/s320/bbb_1287_davi-mauro_036.JPG
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 213x320, components 3\012- data
Hash 00b91014b6aac714af3fedf5a7ce4681
8ac9382ab4398f54d339014bbe1c3eaf3bcad576
941ed2f3e57d82e600a7cc7bf52355d43089bfcf536f99b3fc80077ed91f6b2f
GET /-VVmy83DAEoo/T6P00PUPIVI/AAAAAAAAG3E/jB4HzN2iacw/s320/bbb_1287_davi-mauro_036.JPG HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="bbb_1287_davi-mauro_036.JPG"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 23061
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:22 GMT
Expires: Thu, 06 Oct 2022 20:41:22 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1b71"
Content-Type: image/jpeg
Age: 58
1.bp.blogspot.com/-lbrvVHmilaU/Txrkzpp-OjI/AAAAAAAAMgI/RI3SuO0IIvw/s200/Bareback_Shoot_To_Thrill_Scene6%2B024_0001.jpg
200 OK 5.7 kB URL HTTP/1.1 1.bp.blogspot.com/-lbrvVHmilaU/Txrkzpp-OjI/AAAAAAAAMgI/RI3SuO0IIvw/s200/Bareback_Shoot_To_Thrill_Scene6%2B024_0001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 200x150, components 3\012- data
Hash c884e57b4ea2cafae2129891e2f9aa37
9ca703ed1bfd38222dba6b5efcbe3630af7f112f
dc9e1680544a13b9328a6d8da3ee50757ec0319d9cba965305efca04ba97fc64
GET /-lbrvVHmilaU/Txrkzpp-OjI/AAAAAAAAMgI/RI3SuO0IIvw/s200/Bareback_Shoot_To_Thrill_Scene6%2B024_0001.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="Bareback_Shoot_To_Thrill_Scene6 024_0001.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 5729
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:23 GMT
Expires: Thu, 06 Oct 2022 20:41:23 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v3202"
Content-Type: image/jpeg
Age: 57
1.bp.blogspot.com/-VRrjkIdqVpg/T6P38QaeWoI/AAAAAAAAG3o/68F_sy37h8s/s320/bbb_1287_davi-mauro_002.JPG
200 OK 23 kB URL HTTP/1.1 1.bp.blogspot.com/-VRrjkIdqVpg/T6P38QaeWoI/AAAAAAAAG3o/68F_sy37h8s/s320/bbb_1287_davi-mauro_002.JPG
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 213x320, components 3\012- data
Hash 685b6bf189abac9c71d1d72caba1c997
e635fa6051c3026d2196c4ec2141cc84842534dc
760dbf86edbe6b121e6107d338a155991789fee599b479db11b6ce4a24df04be
GET /-VRrjkIdqVpg/T6P38QaeWoI/AAAAAAAAG3o/68F_sy37h8s/s320/bbb_1287_davi-mauro_002.JPG HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="bbb_1287_davi-mauro_002.JPG"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 23429
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:22 GMT
Expires: Thu, 06 Oct 2022 20:41:22 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1b7a"
Content-Type: image/jpeg
Age: 58
ptp24.com/promote.js
404 Not Found 196 B IP
ASN #133618 Trellian Pty. Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
GET /promote.js HTTP/1.1
Host: ptp24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 404 Not Found
Date: Wed, 05 Oct 2022 20:42:20 GMT
Server: Apache/2.4.38 (Debian)
Content-Length: 196
Connection: close
Content-Type: text/html; charset=iso-8859-1
1.bp.blogspot.com/-7naYHat9f0E/T4G9R6rOBgI/AAAAAAAAGP4/BFrZ3NHyc9I/s320/dude-ranch-studs-s2%2B%2B059_0001.jpg
200 OK 13 kB URL HTTP/1.1 1.bp.blogspot.com/-7naYHat9f0E/T4G9R6rOBgI/AAAAAAAAGP4/BFrZ3NHyc9I/s320/dude-ranch-studs-s2%2B%2B059_0001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 320x240, components 3\012- data
Hash a6b1cc41b1a32cd789c8079cb2c4fdca
4eda2dfdb97221776820238e6f444093cb17c070
90e112d73cfd4dc5673812d74c945687d2e6414da0c9bbe45e347179e231050d
GET /-7naYHat9f0E/T4G9R6rOBgI/AAAAAAAAGP4/BFrZ3NHyc9I/s320/dude-ranch-studs-s2%2B%2B059_0001.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="dude-ranch-studs-s2 059_0001.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 12772
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:23 GMT
Expires: Thu, 06 Oct 2022 20:41:23 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v18fe"
Content-Type: image/jpeg
Age: 57
img62.imageshack.us/img62/5972/mensagemk.jpg
404 Not Found 168 B URL HTTP/1.1 img62.imageshack.us/img62/5972/mensagemk.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 341d15013ba4391483b2d5e34cbc5c5c
986399b390a9aaa9a33e459099aaf9f1dbc227ab
376f5045e4dd8bf68ac9e374518a01c18b2fdf76344f2cc08cac143acc4f3cb8
GET /img62/5972/mensagemk.jpg HTTP/1.1
Host: img62.imageshack.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 404 Not Found
Server: nginx/1.2.8
Date: Wed, 05 Oct 2022 20:42:20 GMT
Content-Type: text/html
Content-Length: 168
Connection: keep-alive
i35.tinypic.com/33mu8hx.jpg
301 Moved Permanently 0 B URL HTTP/1.1 i35.tinypic.com/33mu8hx.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /33mu8hx.jpg HTTP/1.1
Host: i35.tinypic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Length: 0
Connection: keep-alive
Date: Wed, 05 Oct 2022 18:40:40 GMT
Location: http://tinypic.com/images/goodbye.jpg
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: H5KNKfEyTcJsnqf7pr7UJFtxZFUNnFLXR7lgDpeB-4pTL8h4LiQJzw==
Age: 7301
uploaded.to/img/public/i468x60.jpg
200 OK 22 kB URL HTTP/1.1 uploaded.to/img/public/i468x60.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2011:01:07 19:49:40], progressive, precision 8, 468x60, components 3\012- data
Hash e13e36c1c708adfa6be8e8d811859989
c72be56af9a9138446adbd188a101b97b0f0068a
b4f83e66bd33d05e8152d48771941518e60b4961e08cdd1420f477a8586fc08a
GET /img/public/i468x60.jpg HTTP/1.1
Host: uploaded.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 20:42:20 GMT
Content-Type: image/jpeg
Content-Length: 22061
Connection: keep-alive
Cf-Bgj: h2pri
ETag: "623868e2-562d"
Last-Modified: Mon, 21 Mar 2022 12:00:34 GMT
CF-Cache-Status: HIT
Age: 57
Expires: Thu, 06 Oct 2022 00:42:20 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7558fbb42a6b0b51-OSL
apis.google.com/js/platform:gapi.iframes.style.common.js
200 OK 20 kB URL HTTP/2 apis.google.com/js/platform:gapi.iframes.style.common.js
IP
File type ASCII text, with very long lines (1277)
Hash 789b1578022d06cdd9b9e08cc163b273
a0c8e6ee8eeab30a9e4694b4dce6114e8cf54694
a16daf81412962fc6dcd03dd2a513298533add37bd8e5566861385fcc61b01bc
GET /js/platform:gapi.iframes.style.common.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20370
date: Wed, 05 Oct 2022 20:42:20 GMT
expires: Wed, 05 Oct 2022 20:42:20 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "ad26d8ca372feb90"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
3.bp.blogspot.com/--IiWff2T-Kk/TmI8vZuBJvI/AAAAAAAABj0/V8lF3FBwnPw/s200/VH_StiffSecurity%2B056_0001.jpg
200 OK 6.7 kB URL HTTP/1.1 3.bp.blogspot.com/--IiWff2T-Kk/TmI8vZuBJvI/AAAAAAAABj0/V8lF3FBwnPw/s200/VH_StiffSecurity%2B056_0001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 200x150, components 3\012- data
Hash ba7d96f57dbb8cdccb73b14496381233
7186f98519c7b98c6979f5925d0f7df484535418
49b2b4bc9333115f105fbaf6492480c014ce170614b1f8c1835557a5e4e7989c
GET /--IiWff2T-Kk/TmI8vZuBJvI/AAAAAAAABj0/V8lF3FBwnPw/s200/VH_StiffSecurity%2B056_0001.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="VH_StiffSecurity 056_0001.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 6664
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:22 GMT
Expires: Thu, 06 Oct 2022 20:41:22 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v63d"
Content-Type: image/jpeg
Age: 58
img94.imageshack.us/img94/5199/welcomeiy.gif
404 Not Found 168 B URL HTTP/1.1 img94.imageshack.us/img94/5199/welcomeiy.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 341d15013ba4391483b2d5e34cbc5c5c
986399b390a9aaa9a33e459099aaf9f1dbc227ab
376f5045e4dd8bf68ac9e374518a01c18b2fdf76344f2cc08cac143acc4f3cb8
GET /img94/5199/welcomeiy.gif HTTP/1.1
Host: img94.imageshack.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 404 Not Found
Server: nginx/1.2.8
Date: Wed, 05 Oct 2022 20:42:20 GMT
Content-Type: text/html
Content-Length: 168
Connection: keep-alive
3.bp.blogspot.com/-Pqx_Q3WCqxY/T3-VAdXkrXI/AAAAAAAAP-s/O-WMeD22bEc/s200/SX_Video_Raw_Ass_Fuckers3_Scena3%2B093_0001.jpg
200 OK 8.2 kB URL HTTP/1.1 3.bp.blogspot.com/-Pqx_Q3WCqxY/T3-VAdXkrXI/AAAAAAAAP-s/O-WMeD22bEc/s200/SX_Video_Raw_Ass_Fuckers3_Scena3%2B093_0001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 200x150, components 3\012- data
Hash 9cf749d9eb2e842a5b7b7149282953ad
823b5f0c2183295cdc042f626d4e25de5e3b5264
cd3f340a0dbec69df665e4862da391d04ca24b931a65209e3494ff534c5ca22d
GET /-Pqx_Q3WCqxY/T3-VAdXkrXI/AAAAAAAAP-s/O-WMeD22bEc/s200/SX_Video_Raw_Ass_Fuckers3_Scena3%2B093_0001.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="SX_Video_Raw_Ass_Fuckers3_Scena3 093_0001.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 8222
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:23 GMT
Expires: Wed, 05 Oct 2022 19:18:52 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 57
ETag: "v4014"
Content-Type: image/jpeg
3.bp.blogspot.com/-w9a0kzrlbIw/TxrkpnTo2gI/AAAAAAAAMfA/QP-6ONO4LxU/s200/Bareback_Shoot_To_Thrill_Scene6%2B004_0001.jpg
200 OK 5.5 kB URL HTTP/1.1 3.bp.blogspot.com/-w9a0kzrlbIw/TxrkpnTo2gI/AAAAAAAAMfA/QP-6ONO4LxU/s200/Bareback_Shoot_To_Thrill_Scene6%2B004_0001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 200x150, components 3\012- data
Hash f13c7a93d4518c3fade1716da3e2cc61
42bb5bdb6fab4ff778e4b47b4bd789e2f0b21c3d
812723fb953512db2839ae148946f418d89ca4957643c73f6cba54da96f67f05
GET /-w9a0kzrlbIw/TxrkpnTo2gI/AAAAAAAAMfA/QP-6ONO4LxU/s200/Bareback_Shoot_To_Thrill_Scene6%2B004_0001.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="Bareback_Shoot_To_Thrill_Scene6 004_0001.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 5532
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:23 GMT
Expires: Thu, 06 Oct 2022 20:41:23 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v31f0"
Content-Type: image/jpeg
Age: 57
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.z9QjrzsHcOc.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/cb=gapi.loaded_0?le=scs
200 OK 43 kB URL HTTP/2 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.z9QjrzsHcOc.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/cb=gapi.loaded_0?le=scs
IP
File type ASCII text, with very long lines (580)
Hash 6f5213b2449bca74603ca0872c7c5bf2
3e80b1dc9892c312080821c3091ee1c8a0a75a08
d21a47712165af1fd19cd69b9c30045cedc94acb4e62d8e6ed1965e972a95aa8
GET /_/scs/abc-static/_/js/k=gapi.lb.en.z9QjrzsHcOc.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 42573
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 00:21:26 GMT
expires: Thu, 05 Oct 2023 00:21:26 GMT
cache-control: public, max-age=31536000
age: 73254
last-modified: Sat, 30 Jul 2022 15:17:53 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
3.bp.blogspot.com/-rWWtfMPUurs/TmI8v0yzIKI/AAAAAAAABkU/uOMludbu318/s200/VH_StiffSecurity%2B035_0001.jpg
200 OK 6.6 kB URL HTTP/1.1 3.bp.blogspot.com/-rWWtfMPUurs/TmI8v0yzIKI/AAAAAAAABkU/uOMludbu318/s200/VH_StiffSecurity%2B035_0001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 200x150, components 3\012- data
Hash fb46937df02970dd2f547b784d425708
77fe7a25646c0b5e1163e89ca0af3058f3a5e096
7878a8dd848d2a4022528aa10b830de204f43a2c9ffd8413700a73551c712018
GET /-rWWtfMPUurs/TmI8v0yzIKI/AAAAAAAABkU/uOMludbu318/s200/VH_StiffSecurity%2B035_0001.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="VH_StiffSecurity 035_0001.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 6624
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:23 GMT
Expires: Thu, 06 Oct 2022 20:41:23 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v645"
Content-Type: image/jpeg
Age: 57
3.bp.blogspot.com/-a1P_e1kEx0Q/UCvSfBIRSFI/AAAAAAAAJU4/SuehpGOt-7U/s72-c/bbb_898_michel-victor_195.JPG
200 OK 3.3 kB URL HTTP/1.1 3.bp.blogspot.com/-a1P_e1kEx0Q/UCvSfBIRSFI/AAAAAAAAJU4/SuehpGOt-7U/s72-c/bbb_898_michel-victor_195.JPG
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 5ac771e69675b70bf32617b9543b2202
263e8a7f7e625116b87bdc61fc15380a438d8693
907eed18baa238b1fc9d514e915efd7dbac6930a785ff296e5883d6970ef6111
GET /-a1P_e1kEx0Q/UCvSfBIRSFI/AAAAAAAAJU4/SuehpGOt-7U/s72-c/bbb_898_michel-victor_195.JPG HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="bbb_898_michel-victor_195.JPG"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 3347
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 18:22:43 GMT
Expires: Wed, 05 Oct 2022 19:17:51 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 8377
ETag: "v2d36"
Content-Type: image/jpeg
2.bp.blogspot.com/-7Z8y-OqcBI8/TxrkzatcuRI/AAAAAAAAMf8/T9ZSS2T_u90/s200/Bareback_Shoot_To_Thrill_Scene6%2B022_0002.jpg
200 OK 6.6 kB URL HTTP/1.1 2.bp.blogspot.com/-7Z8y-OqcBI8/TxrkzatcuRI/AAAAAAAAMf8/T9ZSS2T_u90/s200/Bareback_Shoot_To_Thrill_Scene6%2B022_0002.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 200x150, components 3\012- data
Hash 655c13b730b434d6a7d42695928782f0
2381b8c93162d0dde6e79f6cce8a5528668f6604
0324ac03013420d3fe8c8e6b30cbc6dde96d39eebffd1f2c548d0f08177daf5e
GET /-7Z8y-OqcBI8/TxrkzatcuRI/AAAAAAAAMf8/T9ZSS2T_u90/s200/Bareback_Shoot_To_Thrill_Scene6%2B022_0002.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="Bareback_Shoot_To_Thrill_Scene6 022_0002.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 6613
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:22 GMT
Expires: Thu, 06 Oct 2022 20:41:22 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v31ff"
Content-Type: image/jpeg
Age: 58
2.bp.blogspot.com/-u2lzH_OMcgM/Txrk0OhJMdI/AAAAAAAAMgg/JYVe6W8DI04/s200/Bareback_Shoot_To_Thrill_Scene6%2B040_0001.jpg
200 OK 5.5 kB URL HTTP/1.1 2.bp.blogspot.com/-u2lzH_OMcgM/Txrk0OhJMdI/AAAAAAAAMgg/JYVe6W8DI04/s200/Bareback_Shoot_To_Thrill_Scene6%2B040_0001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 200x150, components 3\012- data
Hash ed5f053c6b4b89fbf6a54cf59e4e6ca3
f9c3c47570217c3fe455857d6489ee4399c0ad2f
c9940fe1facda42a42d19a174d2ba2663b54df63122651aa45e714afcff933af
GET /-u2lzH_OMcgM/Txrk0OhJMdI/AAAAAAAAMgg/JYVe6W8DI04/s200/Bareback_Shoot_To_Thrill_Scene6%2B040_0001.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="Bareback_Shoot_To_Thrill_Scene6 040_0001.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 5456
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:23 GMT
Expires: Thu, 06 Oct 2022 20:41:23 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v3208"
Content-Type: image/jpeg
Age: 57
www.surfactif.fr/tag/underLight.js?ref=boysgulosos
301 Moved Permanently 0 B URL HTTP/2 www.surfactif.fr/tag/underLight.js?ref=boysgulosos
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tag/underLight.js?ref=boysgulosos HTTP/1.1
Host: www.surfactif.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://safadosgulosos.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Wed, 05 Oct 2022 20:42:36 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://www.surfactif.fr
x-powered-by: PHP/7.3.33
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-redirect-by: WordPress
server: o2switch-PowerBoost-v3
X-Firefox-Spdy: h2
www.777seo.com/seo.php?username=boysgulosos&format=728x90
302 Found 0 B URL HTTP/1.1 www.777seo.com/seo.php?username=boysgulosos&format=728x90
IP
ASN #133618 Trellian Pty. Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /seo.php?username=boysgulosos&format=728x90 HTTP/1.1
Host: www.777seo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Wed, 05 Oct 2022 20:42:20 GMT
Server: Apache/2.4.38 (Debian)
Set-Cookie: __tad=1665002540.3229924; expires=Sat, 02-Oct-2032 20:42:20 GMT; Max-Age=315360000
Location: http://ww38.777seo.com/seo.php?username=boysgulosos&format=728x90&subid1=20221006-0742-20b1-bf9d-9fb854980e14
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8
2.bp.blogspot.com/-ah1dwENowSk/TxrkqIrBCmI/AAAAAAAAMfU/kq0ueLPzRM0/s200/Bareback_Shoot_To_Thrill_Scene6%2B009_0001.jpg
200 OK 7.6 kB URL HTTP/1.1 2.bp.blogspot.com/-ah1dwENowSk/TxrkqIrBCmI/AAAAAAAAMfU/kq0ueLPzRM0/s200/Bareback_Shoot_To_Thrill_Scene6%2B009_0001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 200x150, components 3\012- data
Hash e9e33cff4fcbce7ce9decdcb7dd031f2
ec77bc99406b846778dda36928e3ab9ef37a4cef
34a50e2b03070b7128fd45deb0f0c95a583cba3b4b5edaebe9a83dd81a374ad8
GET /-ah1dwENowSk/TxrkqIrBCmI/AAAAAAAAMfU/kq0ueLPzRM0/s200/Bareback_Shoot_To_Thrill_Scene6%2B009_0001.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="Bareback_Shoot_To_Thrill_Scene6 009_0001.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 7592
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:23 GMT
Expires: Thu, 06 Oct 2022 20:41:23 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v31f5"
Content-Type: image/jpeg
Age: 57
2.bp.blogspot.com/-9wyY_IBtJjw/T3-Un0mRqQI/AAAAAAAAP94/QkZdaKygOj0/s200/SX_Video_Raw_Ass_Fuckers3_Scena3%2B055_0001.jpg
200 OK 10 kB URL HTTP/1.1 2.bp.blogspot.com/-9wyY_IBtJjw/T3-Un0mRqQI/AAAAAAAAP94/QkZdaKygOj0/s200/SX_Video_Raw_Ass_Fuckers3_Scena3%2B055_0001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 200x150, components 3\012- data
Hash 35316364169147cf289f41ee8a9f2ffd
5956c4e3f39b27013850c5f1098bbd384639eaef
8a89753ad830b673c2da7d7b8da4f1b3e2b46fd77f14ea15468a0f60b6ea2fc5
GET /-9wyY_IBtJjw/T3-Un0mRqQI/AAAAAAAAP94/QkZdaKygOj0/s200/SX_Video_Raw_Ass_Fuckers3_Scena3%2B055_0001.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="SX_Video_Raw_Ass_Fuckers3_Scena3 055_0001.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 10122
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:23 GMT
Expires: Wed, 05 Oct 2022 19:18:52 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 57
ETag: "v3fde"
Content-Type: image/jpeg
ww38.777seo.com/pop.php?username=boysgulosos&max=5&subid1=20221006-0742-1973-a764-44230c7b4f09
200 OK 5.2 kB URL HTTP/1.1 ww38.777seo.com/pop.php?username=boysgulosos&max=5&subid1=20221006-0742-1973-a764-44230c7b4f09
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2849)
Hash 1d41b811c5791416964d52812682ee72
9245f6099a49b633e60bdbb090c36b3fc7fde356
5c087a42570f9b76272d5e2b000bb9d429e005464d105a8fa51f7c973c358b72
GET /pop.php?username=boysgulosos&max=5&subid1=20221006-0742-1973-a764-44230c7b4f09 HTTP/1.1
Host: ww38.777seo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://safadosgulosos.blogspot.com/
Connection: keep-alive
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 20:42:20 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Buckets: bucket078
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_rsEQy4u92ctQ8CzvMsE0TsJFqGPbVkU+3EYrZeJlmVowJLlX1fRtO4Y3DlVvHbqzEF9NTlglLuCUnP37+aS/aQ==
X-Template: tpl_Regnitz_twoclick
X-Language: norwegian
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Content-Encoding: gzip
2.bp.blogspot.com/-8N0OqOsgbpc/T4G9RtlwJII/AAAAAAAAGPs/kiZcUTASkC4/s320/dude-ranch-studs-s2%2B%2B049_0001.jpg
200 OK 15 kB URL HTTP/1.1 2.bp.blogspot.com/-8N0OqOsgbpc/T4G9RtlwJII/AAAAAAAAGPs/kiZcUTASkC4/s320/dude-ranch-studs-s2%2B%2B049_0001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 320x240, components 3\012- data
Hash d7e946fef3f48089b6c0740d589b54f4
70a152f441481bdd3170657c02efdc4d2d65ad06
70b72e62557bc558ef1dbe9fd92a55736108d40c445668ee8cbd204d29918ebc
GET /-8N0OqOsgbpc/T4G9RtlwJII/AAAAAAAAGPs/kiZcUTASkC4/s320/dude-ranch-studs-s2%2B%2B049_0001.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="dude-ranch-studs-s2 049_0001.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 14722
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:22 GMT
Expires: Thu, 06 Oct 2022 20:41:22 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1905"
Content-Type: image/jpeg
Age: 58
1.bp.blogspot.com/-qKm80-Nt9VY/Txrk0kZuYRI/AAAAAAAAMgs/7dd-a6mGyp8/s200/Bareback_Shoot_To_Thrill_Scene6%2B042_0001.jpg
200 OK 5.7 kB URL HTTP/1.1 1.bp.blogspot.com/-qKm80-Nt9VY/Txrk0kZuYRI/AAAAAAAAMgs/7dd-a6mGyp8/s200/Bareback_Shoot_To_Thrill_Scene6%2B042_0001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 200x150, components 3\012- data
Hash 7f20c9abf62e3d2cee5e3b34ff05aec4
2317ab4956e6155a7738637efa875aedd3a98f0f
d5994d350a5a7b611ef1925a50a05aa6d6c15096fccd95e1d9703f777840e5df
GET /-qKm80-Nt9VY/Txrk0kZuYRI/AAAAAAAAMgs/7dd-a6mGyp8/s200/Bareback_Shoot_To_Thrill_Scene6%2B042_0001.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="Bareback_Shoot_To_Thrill_Scene6 042_0001.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 5673
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:22 GMT
Expires: Thu, 06 Oct 2022 20:41:22 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v320b"
Content-Type: image/jpeg
Age: 58
2.bp.blogspot.com/-h_l9JBivYqU/T4G8-FXyvUI/AAAAAAAAGOw/1Yri6nGtn0c/s320/dude-ranch-studs-s2%2B%2B014_0001.jpg
200 OK 16 kB URL HTTP/1.1 2.bp.blogspot.com/-h_l9JBivYqU/T4G8-FXyvUI/AAAAAAAAGOw/1Yri6nGtn0c/s320/dude-ranch-studs-s2%2B%2B014_0001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 320x240, components 3\012- data
Hash ae67f1b14e8679bea27cc4c1feba22fe
4b4ca3e21ea82680eb3efca0ae55ca589854d6be
6fdf94837e4fee21eae730e332e20bf5d85f715dcacb4502fe49f263344c52e9
GET /-h_l9JBivYqU/T4G8-FXyvUI/AAAAAAAAGOw/1Yri6nGtn0c/s320/dude-ranch-studs-s2%2B%2B014_0001.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="dude-ranch-studs-s2 014_0001.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 16156
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:23 GMT
Expires: Thu, 06 Oct 2022 20:41:23 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v18ec"
Content-Type: image/jpeg
Age: 57
1.bp.blogspot.com/-mXjBQFGM4LA/T4G8_TyYB1I/AAAAAAAAGPU/kL2vgBRfFiw/s320/dude-ranch-studs-s2%2B%2B038_0001.jpg
200 OK 16 kB URL HTTP/1.1 1.bp.blogspot.com/-mXjBQFGM4LA/T4G8_TyYB1I/AAAAAAAAGPU/kL2vgBRfFiw/s320/dude-ranch-studs-s2%2B%2B038_0001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 320x240, components 3\012- data
Hash cfb0a4af8de4fb5abd5157b3d75f5bf0
6a62164c18a731e67c28d4beea1a6a970f16bf56
beffd981ed0bcaec28cf8a07319437a49afbff26998cac3d2a19d1892ffef47c
GET /-mXjBQFGM4LA/T4G8_TyYB1I/AAAAAAAAGPU/kL2vgBRfFiw/s320/dude-ranch-studs-s2%2B%2B038_0001.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="dude-ranch-studs-s2 038_0001.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 16245
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:23 GMT
Expires: Thu, 06 Oct 2022 20:41:23 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1904"
Content-Type: image/jpeg
Age: 57
img231.imageshack.us/img231/4317/50710317.gif
404 Not Found 168 B URL HTTP/1.1 img231.imageshack.us/img231/4317/50710317.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 341d15013ba4391483b2d5e34cbc5c5c
986399b390a9aaa9a33e459099aaf9f1dbc227ab
376f5045e4dd8bf68ac9e374518a01c18b2fdf76344f2cc08cac143acc4f3cb8
GET /img231/4317/50710317.gif HTTP/1.1
Host: img231.imageshack.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 404 Not Found
Server: nginx/1.2.8
Date: Wed, 05 Oct 2022 20:42:20 GMT
Content-Type: text/html
Content-Length: 168
Connection: keep-alive
1.bp.blogspot.com/-KrlBZvVNkDs/TxrkpgTygeI/AAAAAAAAMfM/Y_UKnjomGDs/s200/Bareback_Shoot_To_Thrill_Scene6%2B006_0001.jpg
200 OK 5.8 kB URL HTTP/1.1 1.bp.blogspot.com/-KrlBZvVNkDs/TxrkpgTygeI/AAAAAAAAMfM/Y_UKnjomGDs/s200/Bareback_Shoot_To_Thrill_Scene6%2B006_0001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 200x150, components 3\012- data
Hash a34e8b18636b69e88195a133d39b1687
c20b73baee5d39f09316025ac49ba7d8dfa008dc
81ec27cc83c2dbb04c59682d62c65b06a798194262e609a0361dea8d8c547a0a
GET /-KrlBZvVNkDs/TxrkpgTygeI/AAAAAAAAMfM/Y_UKnjomGDs/s200/Bareback_Shoot_To_Thrill_Scene6%2B006_0001.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="Bareback_Shoot_To_Thrill_Scene6 006_0001.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 5840
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:23 GMT
Expires: Thu, 06 Oct 2022 20:41:23 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v31f3"
Content-Type: image/jpeg
Age: 57
1.bp.blogspot.com/-mhCzR5-Jfno/T3-VxuklzQI/AAAAAAAAP_Y/qaPFMhArC5E/s200/SX_Video_Raw_Ass_Fuckers3_Scena3%2B136_0001.jpg
200 OK 8.3 kB URL HTTP/1.1 1.bp.blogspot.com/-mhCzR5-Jfno/T3-VxuklzQI/AAAAAAAAP_Y/qaPFMhArC5E/s200/SX_Video_Raw_Ass_Fuckers3_Scena3%2B136_0001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 200x150, components 3\012- data
Hash 81b591d59b18cdd9fb4764a74c5f0f51
4ad7cc3836ed1be89f69652fdda77722fd92d1a8
643121ed3c4e01e1add95525f5142f3574896a4955bd3fbc843d0b17dc4189ef
GET /-mhCzR5-Jfno/T3-VxuklzQI/AAAAAAAAP_Y/qaPFMhArC5E/s200/SX_Video_Raw_Ass_Fuckers3_Scena3%2B136_0001.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="SX_Video_Raw_Ass_Fuckers3_Scena3 136_0001.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 8343
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:22 GMT
Expires: Wed, 05 Oct 2022 19:18:52 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 58
ETag: "v3ff6"
Content-Type: image/jpeg
www.formulariopro.pog.com.br/logo2.gif
200 OK 3.7 kB URL HTTP/1.1 www.formulariopro.pog.com.br/logo2.gif
IP
File type GIF image data, version 89a, 140 x 30\012- data
Hash dde4ebda68e255e394b835df0d16359b
76d30497e29335ba9632c58a08f72fb00c6fba6c
aad02c4496a6c31c3f8cdd88107470950323d93de2608e2a19871cb228ab4810
GET /logo2.gif HTTP/1.1
Host: www.formulariopro.pog.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 20:42:20 GMT
content-type: image/gif
last-modified: Mon, 14 Mar 2016 18:24:15 GMT
accept-ranges: bytes
content-length: 3661
date: Wed, 05 Oct 2022 20:42:20 GMT
server: LiteSpeed
vary: User-Agent
3.bp.blogspot.com/-34FDbmEl4BE/T6P0yJABwhI/AAAAAAAAG28/3CqAikIwJJs/s320/bbb_1287_davi-mauro_028.JPG
200 OK 30 kB URL HTTP/1.1 3.bp.blogspot.com/-34FDbmEl4BE/T6P0yJABwhI/AAAAAAAAG28/3CqAikIwJJs/s320/bbb_1287_davi-mauro_028.JPG
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 213x320, components 3\012- data
Hash 1e22f6b32fc1144103bdc304d8ab5206
6e20ee2d992a5c54c094ce7faf70e29313a44da4
924efdfa56cadbbc31380bc37a34eb59f51f483e43701ba055bdf5adaeb8173a
GET /-34FDbmEl4BE/T6P0yJABwhI/AAAAAAAAG28/3CqAikIwJJs/s320/bbb_1287_davi-mauro_028.JPG HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="bbb_1287_davi-mauro_028.JPG"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 30186
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:22 GMT
Expires: Thu, 06 Oct 2022 20:41:22 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1b6f"
Content-Type: image/jpeg
Age: 58
4.bp.blogspot.com/-Nc7Q77_bZ9c/T3-UnjmsqtI/AAAAAAAAP9s/2gVpjOW2xQw/s200/SX_Video_Raw_Ass_Fuckers3_Scena3%2B050_0001.jpg
200 OK 8.6 kB URL HTTP/1.1 4.bp.blogspot.com/-Nc7Q77_bZ9c/T3-UnjmsqtI/AAAAAAAAP9s/2gVpjOW2xQw/s200/SX_Video_Raw_Ass_Fuckers3_Scena3%2B050_0001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 200x150, components 3\012- data
Hash 771f3a79b611601e8da2ff72ced51e30
d14165d052333597331a25cab2ae1fff83d328eb
0da006b9b0a5b24865591f00a7e133fb5bca92dc53f04de02c9d40458d3cfd07
GET /-Nc7Q77_bZ9c/T3-UnjmsqtI/AAAAAAAAP9s/2gVpjOW2xQw/s200/SX_Video_Raw_Ass_Fuckers3_Scena3%2B050_0001.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="SX_Video_Raw_Ass_Fuckers3_Scena3 050_0001.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 8572
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:23 GMT
Expires: Wed, 05 Oct 2022 19:18:52 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 57
ETag: "v3fdb"
Content-Type: image/jpeg
4.bp.blogspot.com/-eGcXvRDopFQ/T6P0xpvMNDI/AAAAAAAAG2s/0RFBi-I3sso/s320/bbb_1287_davi-mauro_022.JPG
200 OK 22 kB URL HTTP/1.1 4.bp.blogspot.com/-eGcXvRDopFQ/T6P0xpvMNDI/AAAAAAAAG2s/0RFBi-I3sso/s320/bbb_1287_davi-mauro_022.JPG
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 213x320, components 3\012- data
Hash cabfe2a4f27fe1ead5f99cf144cb0be4
c9d0f12b3167c1da82a89249c9c5eace4125044a
b9feec6a29a1c340edd6166a34067f0faafe1783c42eba663ec4aff9b23caae9
GET /-eGcXvRDopFQ/T6P0xpvMNDI/AAAAAAAAG2s/0RFBi-I3sso/s320/bbb_1287_davi-mauro_022.JPG HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="bbb_1287_davi-mauro_022.JPG"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 21481
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:22 GMT
Expires: Thu, 06 Oct 2022 20:41:22 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1b6b"
Content-Type: image/jpeg
Age: 58
4.bp.blogspot.com/-JEJbVVXYW9s/T4G8-xwR2HI/AAAAAAAAGPI/uXVqA_zaryk/s320/dude-ranch-studs-s2%2B%2B030_0001.jpg
200 OK 13 kB URL HTTP/1.1 4.bp.blogspot.com/-JEJbVVXYW9s/T4G8-xwR2HI/AAAAAAAAGPI/uXVqA_zaryk/s320/dude-ranch-studs-s2%2B%2B030_0001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 320x240, components 3\012- data
Hash c32b89b9efd0608f031bc132abb9d295
fa43eeb86cd5d36264a1daf472d8f4443c972ce2
ca1c02d50f40e19b4da6bfba0db5a405b574f9cec1bd2c28404e6fc91341fd54
GET /-JEJbVVXYW9s/T4G8-xwR2HI/AAAAAAAAGPI/uXVqA_zaryk/s320/dude-ranch-studs-s2%2B%2B030_0001.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="dude-ranch-studs-s2 030_0001.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 12566
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:23 GMT
Expires: Thu, 06 Oct 2022 20:41:23 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v18f2"
Content-Type: image/jpeg
Age: 57
4.bp.blogspot.com/-ZfZtOIa4mg4/T4G8_yMBGQI/AAAAAAAAGPc/K8avtyV2rcY/s320/dude-ranch-studs-s2%2B%2B044_0001.jpg
200 OK 16 kB URL HTTP/1.1 4.bp.blogspot.com/-ZfZtOIa4mg4/T4G8_yMBGQI/AAAAAAAAGPc/K8avtyV2rcY/s320/dude-ranch-studs-s2%2B%2B044_0001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 320x240, components 3\012- data
Hash 6334983daa2c998d6584fde890d73aa3
1ce00ab45d7742afff12d1d8c35dd354d34838ed
1173e46e6bafa6ec45b9050062f4246cb4175d2146fc941ab40691c4c02d0e9a
GET /-ZfZtOIa4mg4/T4G8_yMBGQI/AAAAAAAAGPc/K8avtyV2rcY/s320/dude-ranch-studs-s2%2B%2B044_0001.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="dude-ranch-studs-s2 044_0001.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 15611
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:23 GMT
Expires: Thu, 06 Oct 2022 20:41:23 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1903"
Content-Type: image/jpeg
Age: 57
www.linkwithin.com/widget.js
404 Not Found 162 B URL HTTP/1.1 www.linkwithin.com/widget.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 1b7c22a214949975556626d7217e9a39
d01c97e2944166ed23e47e4a62ff471ab8fa031f
340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87
GET /widget.js HTTP/1.1
Host: www.linkwithin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 05 Oct 2022 20:42:20 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
4.bp.blogspot.com/-_ncslklqufg/T3-VAvBog-I/AAAAAAAAP-0/RbTG2Sm3qLM/s200/SX_Video_Raw_Ass_Fuckers3_Scena3%2B104_0001.jpg
200 OK 7.6 kB URL HTTP/1.1 4.bp.blogspot.com/-_ncslklqufg/T3-VAvBog-I/AAAAAAAAP-0/RbTG2Sm3qLM/s200/SX_Video_Raw_Ass_Fuckers3_Scena3%2B104_0001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 200x150, components 3\012- data
Hash 7a87bdf1e8bca8f8c32272dfe3f91349
476e8cb592eb4134b509459cbaf06da853208e50
ec4ceff2b56ba0351fd890b27bac9dbec1ff674321891abbf423f7d023c96730
GET /-_ncslklqufg/T3-VAvBog-I/AAAAAAAAP-0/RbTG2Sm3qLM/s200/SX_Video_Raw_Ass_Fuckers3_Scena3%2B104_0001.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="SX_Video_Raw_Ass_Fuckers3_Scena3 104_0001.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 7640
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:23 GMT
Expires: Wed, 05 Oct 2022 19:18:52 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 57
ETag: "v3fed"
Content-Type: image/jpeg
4.bp.blogspot.com/-mwRe4OEjvEA/T3-U_oUcglI/AAAAAAAAP-U/QXUEUmIw3B4/s200/SX_Video_Raw_Ass_Fuckers3_Scena3%2B083_0001.jpg
200 OK 10 kB URL HTTP/1.1 4.bp.blogspot.com/-mwRe4OEjvEA/T3-U_oUcglI/AAAAAAAAP-U/QXUEUmIw3B4/s200/SX_Video_Raw_Ass_Fuckers3_Scena3%2B083_0001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 200x150, components 3\012- data
Hash f2f0c4a642045147fa72abed51b7ae0b
346d27fa957abfb12ebda47b3c6b20281c1a4011
c83417528eca14cc4a93bef570a2b021d5192f2f1e062b7ac7e12771fabf470d
GET /-mwRe4OEjvEA/T3-U_oUcglI/AAAAAAAAP-U/QXUEUmIw3B4/s200/SX_Video_Raw_Ass_Fuckers3_Scena3%2B083_0001.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="SX_Video_Raw_Ass_Fuckers3_Scena3 083_0001.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 10202
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:23 GMT
Expires: Wed, 05 Oct 2022 19:18:52 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 57
ETag: "v3fe5"
Content-Type: image/jpeg
4.bp.blogspot.com/-nc189dDcLM4/TxrkqM8bLKI/AAAAAAAAMfk/u7dlqSUyUCQ/s200/Bareback_Shoot_To_Thrill_Scene6%2B014_0001.jpg
200 OK 4.1 kB URL HTTP/1.1 4.bp.blogspot.com/-nc189dDcLM4/TxrkqM8bLKI/AAAAAAAAMfk/u7dlqSUyUCQ/s200/Bareback_Shoot_To_Thrill_Scene6%2B014_0001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 200x150, components 3\012- data
Hash 6f424ff5fdb438b6bff8fd77506cf4ef
9ec621b1a357b147e90e33a27d4adb783cef7d18
98d271f253fb29aae7346ce21f447977ad39ebfbfbd63dde65a58f7597ae3dd6
GET /-nc189dDcLM4/TxrkqM8bLKI/AAAAAAAAMfk/u7dlqSUyUCQ/s200/Bareback_Shoot_To_Thrill_Scene6%2B014_0001.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="Bareback_Shoot_To_Thrill_Scene6 014_0001.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 4125
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:22 GMT
Expires: Thu, 06 Oct 2022 20:41:22 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v31f9"
Content-Type: image/jpeg
Age: 58
www.blogger.com/blogin.g?blogspotURL=http://safadosgulosos.blogspot.com/&type=blog
302 Found 284 B URL HTTP/2 www.blogger.com/blogin.g?blogspotURL=http://safadosgulosos.blogspot.com/&type=blog
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (350)
Hash da287420538a7b09859257b3cfa29ea6
3d157fbdfa69472639058ea54076d907ebc9c449
f9c68493338acfffd0a7d1bdbc29d8ad03420e6e51253cf163bbce72a8bf6df8
GET /blogin.g?blogspotURL=http://safadosgulosos.blogspot.com/&type=blog HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
location: https://accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/blogin.g?blogspotURL%3Dhttp://safadosgulosos.blogspot.com/%26type%3Dblog%26bpli%3D1&followup=https://www.blogger.com/blogin.g?blogspotURL%3Dhttp://safadosgulosos.blogspot.com/%26type%3Dblog%26bpli%3D1&go=true
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Wed, 05 Oct 2022 20:42:20 GMT
expires: Wed, 05 Oct 2022 20:42:20 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 284
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
4.bp.blogspot.com/-uvpIf2JyiD4/T6P0xJfKhMI/AAAAAAAAG2g/DjGNDSnxcDQ/s320/bbb_1287_davi-mauro_011.JPG
200 OK 22 kB URL HTTP/1.1 4.bp.blogspot.com/-uvpIf2JyiD4/T6P0xJfKhMI/AAAAAAAAG2g/DjGNDSnxcDQ/s320/bbb_1287_davi-mauro_011.JPG
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 213x320, components 3\012- data
Hash e203c8c125a086efaa56c87c2e8710f2
d1a8498892a5a9da2df1e67b49821b6757ed71d9
a417c30dd48461f81b3a287a25ffbdbbbd5613bd8520040c524c741a63cc87b8
GET /-uvpIf2JyiD4/T6P0xJfKhMI/AAAAAAAAG2g/DjGNDSnxcDQ/s320/bbb_1287_davi-mauro_011.JPG HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="bbb_1287_davi-mauro_011.JPG"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 21533
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:23 GMT
Expires: Thu, 06 Oct 2022 20:41:23 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1b68"
Content-Type: image/jpeg
Age: 57
4.bp.blogspot.com/-pLVlrs1Um_o/TmI8zUgmQWI/AAAAAAAABkc/0dfDy4EcTxY/s200/VH_StiffSecurity%2B016_0001.jpg
200 OK 4.9 kB URL HTTP/1.1 4.bp.blogspot.com/-pLVlrs1Um_o/TmI8zUgmQWI/AAAAAAAABkc/0dfDy4EcTxY/s200/VH_StiffSecurity%2B016_0001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 200x150, components 3\012- data
Hash ec6eba4844515ba72251308d535c7e49
b7ef30587feb10125b417ddd9ff4e8324ce07d54
2aafa42832dd689747760b387686c74f561ed7b45ec9e3f8a30708f1c3e8d3f7
GET /-pLVlrs1Um_o/TmI8zUgmQWI/AAAAAAAABkc/0dfDy4EcTxY/s200/VH_StiffSecurity%2B016_0001.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="VH_StiffSecurity 016_0001.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 4863
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 20:41:22 GMT
Expires: Thu, 06 Oct 2022 20:41:22 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v647"
Content-Type: image/jpeg
Age: 58
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 29305d430d4a98929d99f493c8fa0e09
37e64cc35bce4869f3573c565fdd177dc4e128c0
0557db8eed6f9f794247c44d8b7a8cd99caf6716cc48932ce3b3c1d907493869
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 20:42:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogblog.com/1kt/awesomeinc/tabs_gradient_groovy.png
200 OK 96 B URL HTTP/1.1 www.blogblog.com/1kt/awesomeinc/tabs_gradient_groovy.png
IP
File type PNG image data, 16 x 16, 1-bit colormap, non-interlaced\012- data
Hash 5acc9e20ffc94ad31109260984e25725
b210f07cef48bb498ed435886eae68bf508b0fab
69a4d12626957810d5b55c5d6891b35100635418e12999ff38bfaddd869f2b2b
GET /1kt/awesomeinc/tabs_gradient_groovy.png HTTP/1.1
Host: www.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 96
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 11:47:26 GMT
Expires: Wed, 12 Oct 2022 11:47:26 GMT
Cache-Control: public, max-age=604800
Last-Modified: Tue, 04 Oct 2022 16:56:41 GMT
Content-Type: image/png
Age: 32094
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f9371f81e2eeeead7fe351a49f3b1c40
ae23d6c6c57dd7cf568c3a74594c377b7bb7df43
03c4ba0faa3199d061d1bb37df5d48ba6d81f77a83e243922075efc4d4acf456
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 20:42:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ww38.777seo.com/seo.php?username=boysgulosos&format=728x90&subid1=20221006-0742-20b1-bf9d-9fb854980e14
200 OK 5.2 kB URL HTTP/1.1 ww38.777seo.com/seo.php?username=boysgulosos&format=728x90&subid1=20221006-0742-20b1-bf9d-9fb854980e14
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2849)
Hash 39490c5f9b68ee4df8634a5ebf30823d
bb806f21d93ffadd0348a1e28ca7e29597ab1b81
5185b70634a67083afd2112330aa8d8929bf6811568782e0de146eef73331b93
GET /seo.php?username=boysgulosos&format=728x90&subid1=20221006-0742-20b1-bf9d-9fb854980e14 HTTP/1.1
Host: ww38.777seo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://safadosgulosos.blogspot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 20:42:20 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Buckets: bucket078
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_p1iSq/JY2Cyn4g/Jdem5NORnRRqEogAQz1tXJpQlhjXHX29BS6sp/VTdRY8jgmBO0wZuj6yJ8tdCmfWVn0E2fA==
X-Template: tpl_Regnitz_twoclick
X-Language: norwegian
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f9371f81e2eeeead7fe351a49f3b1c40
ae23d6c6c57dd7cf568c3a74594c377b7bb7df43
03c4ba0faa3199d061d1bb37df5d48ba6d81f77a83e243922075efc4d4acf456
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 20:42:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
turbobit.net/ref/pt/turbobit_1_468x60.gif
404 Not Found 1.7 kB URL HTTP/1.1 turbobit.net/ref/pt/turbobit_1_468x60.gif
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash dee20d4fde8af0479936260fc50383b9
687a5e7335e82816e73a4d72ec322cd60c4e8e9e
c3f3a66a4518757f9b5892d52d9132880dbb93314d80a05de0b589c0981a1299
GET /ref/pt/turbobit_1_468x60.gif HTTP/1.1
Host: turbobit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
HTTP/1.1 404 Not Found
Date: Wed, 05 Oct 2022 20:42:20 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
ETag: W/"5d19c403-10e5"
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 58ac1b886710ef98c8b70a37dcc2b855
ed76f180385d65285525c3426857e1880e2817c8
7fd9a97b66875a6c87413705781a8800ab15e8faaeb821364914ca2d0dd9c890
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 20:42:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 075c0849a5739bda75763e3740fd5079
c59fbd5865bacc3857fcdfae28c7eaaa7ca1972b
24b54121bcf5221650c3127ee28ef7f92524d391f75639c1ad25d678e7a99d2a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 20:42:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tinypic.com/images/goodbye.jpg
200 OK 16 kB URL HTTP/1.1 tinypic.com/images/goodbye.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3\012- data
Hash 32af06ac4b80d728f7e4c8780eb6b6d7
dd3198f4361e94f2c3606474e04a629e42402d02
f610dc2752e938d77dab1c4e9fb1f0f7f53b25e527d130ce4e034b7de09da053
GET /images/goodbye.jpg HTTP/1.1
Host: tinypic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://safadosgulosos.blogspot.com/
Connection: keep-alive
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 15616
Connection: keep-alive
Last-Modified: Wed, 18 Sep 2019 21:23:53 GMT
Server: AmazonS3
Date: Wed, 05 Oct 2022 01:25:56 GMT
ETag: "32af06ac4b80d728f7e4c8780eb6b6d7"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: LadLn1WLYiYJSSC1H7WYlXLQq9GFU8gbjw-i5nrar2cPhuW6mFSHGQ==
Age: 69385
d38psrni17bvxu.cloudfront.net/scripts/js3caf.js
200 OK 7.0 kB URL HTTP/1.1 d38psrni17bvxu.cloudfront.net/scripts/js3caf.js
IP
File type ASCII text, with very long lines (316)
Hash cce7f943ec8e7b4ba13be4aba6b463d9
220f3e8ca723daa91fd040cf518991a65f2bf110
ba5b7354353b0eec1637564dae072fee662a5b9862f6bf7ed5e60a5a76f2ef44
GET /scripts/js3caf.js HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww38.777seo.com/
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 7000
Connection: keep-alive
Server: nginx
Date: Wed, 05 Oct 2022 02:32:43 GMT
Last-Modified: Thu, 14 Jan 2021 10:54:01 GMT
ETag: "600022c9-1b58"
X-Cache: Hit from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: TEa3lQy6pJKvv6FSimv6WKD_e0XoskcIQAv8ZMAcARVIXMZxH8NPag==
Age: 65377
d38psrni17bvxu.cloudfront.net/themes/regnitz_0f823431/style.css
200 OK 539 B URL HTTP/1.1 d38psrni17bvxu.cloudfront.net/themes/regnitz_0f823431/style.css
IP
Hash 3138e35c7232f3c11463560722a0ac79
b3e50fa997933e788c1a8800b347ba592b2ff913
b53565fe44fb5034ed78e704aee57c620c37819a13286af740aab63b41550d46
GET /themes/regnitz_0f823431/style.css HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww38.777seo.com/
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Date: Wed, 05 Oct 2022 01:47:07 GMT
Last-Modified: Fri, 25 Feb 2022 11:24:01 GMT
Content-Encoding: gzip
ETag: W/"6218bc51-4ec"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: RNVWM7vOM6zKQ20w8m8HP_WjIoRBpbbnJVQhpAapGYLiARVccOJtJQ==
Age: 68113
translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
200 OK 27 kB URL HTTP/2 translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
IP
Hash 1c4d5147cc96a1ba087260e7bd84d186
26cd7f0ba3ca021aba46202d915e376009972ef4
51b62966b69363e153e94a66aaacccff4881875a4d4006990f6c8d2b93f24a87
GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://safadosgulosos.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 05 Oct 2022 20:42:20 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+201; expires=Fri, 04-Oct-2024 20:42:20 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
d38psrni17bvxu.cloudfront.net/themes/assets/style.css
200 OK 343 B URL HTTP/1.1 d38psrni17bvxu.cloudfront.net/themes/assets/style.css
IP
Hash 03a4a8c322fc0c99b0ee7cbbcc9eabcd
6fc193276de2a3458cd853c474cb9269b900e00d
a535d2296792cb37a2bbad1d9d0546e3383a8a5bfac0d9edda15795c226bddf7
GET /themes/assets/style.css HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww38.777seo.com/
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Date: Wed, 05 Oct 2022 07:34:23 GMT
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
Content-Encoding: gzip
ETag: W/"5ebab1f0-33d"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: F6NE6vAfzuQ1zxYVOKhhWEMxC1WFHnrFNt_1umsUlfwnmEWWcV5t0A==
Age: 47277
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8857940-5ca2-44ba-8a66-f396a605d5b4.jpeg
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8857940-5ca2-44ba-8a66-f396a605d5b4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 229c99cfb655a8c9f1a22de69fdff73c
6b5db8fbfb56f083d54b13e7660d0e4bc866aa00
f4099e9153c3dc481add95b0f24dbb8f6d65cc74ad5631d9cb6c6f2a0351843d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8857940-5ca2-44ba-8a66-f396a605d5b4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7021
x-amzn-requestid: 2e30bdac-360e-4d0a-8bb7-c3144e074abe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zf8ucHb1oAMFjYw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633ca7f5-18ba6bc50cb32b1e14c882bd;Sampled=0
x-amzn-remapped-date: Tue, 04 Oct 2022 21:39:01 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: UPEhTwAYEIRy-Cnb0ITefEotLyg3rFe_NaGy92xwWe_7hrdo6UQLwQ==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Oct 2022 21:56:53 GMT
age: 81927
etag: "6b5db8fbfb56f083d54b13e7660d0e4bc866aa00"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/blogin.g?blogspotURL%3Dhttp://safadosgulosos.blogspot.com/%26type%3Dblog%26bpli%3D1&followup=https://www.blogger.com/blogin.g?blogspotURL%3Dhttp://safadosgulosos.blogspot.com/%26type%3Dblog%26bpli%3D1&go=true
302 Found 232 B URL HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/blogin.g?blogspotURL%3Dhttp://safadosgulosos.blogspot.com/%26type%3Dblog%26bpli%3D1&followup=https://www.blogger.com/blogin.g?blogspotURL%3Dhttp://safadosgulosos.blogspot.com/%26type%3Dblog%26bpli%3D1&go=true
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 37f65b6658cb1d4b7a08a1c2bab243b8
f48a6ab79ce4022d0daa89604c01b0cf3b4e1968
714c5d83bf3d8a15461ef7c1d5ecbd61af21a117b4716d7dd9f53974d8b7bf14
GET /ServiceLogin?passive=true&continue=https://www.blogger.com/blogin.g?blogspotURL%3Dhttp://safadosgulosos.blogspot.com/%26type%3Dblog%26bpli%3D1&followup=https://www.blogger.com/blogin.g?blogspotURL%3Dhttp://safadosgulosos.blogspot.com/%26type%3Dblog%26bpli%3D1&go=true HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://safadosgulosos.blogspot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 05 Oct 2022 20:42:20 GMT
location: https://www.blogger.com/blogin.g?blogspotURL=http%3A%2F%2Fsafadosgulosos.blogspot.com%2F&type=blog&bpli=1
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-61dLzgXqoGm6TesDrq50tw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 232
server: GSE
set-cookie: __Host-GAPS=1:gX5wdOdmu82c-QcN84oEBOSIZVECRA:rigMsJpz8Pm4wGZY;Path=/;Expires=Fri, 04-Oct-2024 20:42:20 GMT;Secure;HttpOnly;Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23595c4d-609a-48f3-a52f-e88e478d7653.jpeg
200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23595c4d-609a-48f3-a52f-e88e478d7653.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3257b782efae9b64e6e18a547866ec50
4daf0c001e86af8477fb097e8ca932edb8e5f981
899f9692e86405aa288d88dd285a6fe26bedab1a2ca4693212476063890b01a5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23595c4d-609a-48f3-a52f-e88e478d7653.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 5832
x-amzn-requestid: c4427edd-3d71-47d0-a2d3-b3bfed089535
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zf8s1FuUoAMFhBA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633ca7eb-46ddff150da4141d23fc0d8a;Sampled=0
x-amzn-remapped-date: Tue, 04 Oct 2022 21:38:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: iR82CJ6A06dpqy_nm6JrmjeUJT-uhI5rr0dr6ZnhrQQo9Jqxh10qRQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Oct 2022 21:43:43 GMT
age: 82717
etag: "4daf0c001e86af8477fb097e8ca932edb8e5f981"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5704624d-eb81-4a5b-bcb7-08db5681c677.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5704624d-eb81-4a5b-bcb7-08db5681c677.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1de7c17a0ba9295135e7f8b490b6a8d3
70e8d1589f3daf71378965dd197934e220fb6aa4
ee559ce3166479e2b930be7d18525f5c2d164aed8ca005302ddaf3bfe37eec24
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5704624d-eb81-4a5b-bcb7-08db5681c677.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8926
x-amzn-requestid: 27fc8976-af8d-40a3-b701-0642fa135ec4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zf8s1GSbIAMFTiw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633ca7eb-4d4c7837576e0fdb5828fe3b;Sampled=0
x-amzn-remapped-date: Tue, 04 Oct 2022 21:38:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YzVofPSJC-YVU1Q1V9AnjNeQTa1BQEh6ZiH2HjSeeX5RygysFP7oAA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Oct 2022 21:43:25 GMT
age: 82735
etag: "70e8d1589f3daf71378965dd197934e220fb6aa4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 55331c1dc7e7ebbf456220986278469d
d69a62ee47b03fde68db666512417dda2ae5ad13
a09c835aa140c7b4220194e940f54de09ca3b7ea470feb7c4c5be574643086d5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12663
Expires: Thu, 06 Oct 2022 00:13:23 GMT
Date: Wed, 05 Oct 2022 20:42:20 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb178720-854c-4c9e-85c1-58cb5419ca69.jpeg
200 OK 3.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb178720-854c-4c9e-85c1-58cb5419ca69.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5d7d7df8d4c440f9db445c3d99e818d6
612b6dbd4ba895c167964ff7e6d9263013b52b0a
bf527a814c78f9e010cce4ba593c9146d54a2137d1f147f7a6250fbad81956ac
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb178720-854c-4c9e-85c1-58cb5419ca69.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 3585
x-amzn-requestid: 43c510d4-d87c-4665-a132-d798b836d415
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZaJbLHEOoAMFfxQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a55e0-614faff31425ff183b7ca4dd;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 03:24:16 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: d1LCc44Gj_0Je8adu7Iv3I9MwkaDPgWqlNHI96UAtZub22l210J65A==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 04:53:07 GMT
age: 56953
etag: "612b6dbd4ba895c167964ff7e6d9263013b52b0a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78bf691d-76e8-4176-884d-dbc06604dded.jpeg
200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78bf691d-76e8-4176-884d-dbc06604dded.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 100559d746bedd7c3802661c875c35ee
5261a6c2ee6d6cc87e91ee82e32d8be234db393e
ff06f31267ddcc9a0d84ddc68932872bfed29d072783c3a1dd3790d41c280aec
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78bf691d-76e8-4176-884d-dbc06604dded.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8816
x-amzn-requestid: b9f3ec8a-f478-4405-b275-e21f2d7d89d4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZKK7gFPJIAMF-7Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6333f1e3-250348e6140f3c74762263ea;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 07:04:03 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 8f83Wv7OrO7NOd1y1LXjfphRmJjdwrkcAxrxUN4A4qSgsEzIQMq81g==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Oct 2022 22:38:40 GMT
age: 79420
etag: "5261a6c2ee6d6cc87e91ee82e32d8be234db393e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.google.com/adsense/domains/caf.js
200 OK 54 kB URL HTTP/1.1 www.google.com/adsense/domains/caf.js
IP
File type ASCII text, with very long lines (1885)
Hash b3bcbd02d2c100958e573fd65a0aab05
22146a3a2483456d4eec06f40c9555fea7a500c0
b0331251c9d68a9090dd454828a421cddcc05ee29934166787d0228f87f7825e
GET /adsense/domains/caf.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww38.777seo.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Type: text/javascript; charset=UTF-8
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui"
Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
Date: Wed, 05 Oct 2022 20:42:20 GMT
Expires: Wed, 05 Oct 2022 20:42:20 GMT
Cache-Control: private, max-age=3600
ETag: "16997878633056744235"
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: sffe
X-XSS-Protection: 0
www.frameptp.com/promote-boysgulosos.html
200 OK 2.6 kB URL HTTP/1.1 www.frameptp.com/promote-boysgulosos.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2551), with no line terminators
Hash 41f66bb0ac50f2d851236170e7c71341
59bcec216302151922219b51be8ad8ab6d0b8384
ec99cca58b612ce268e6ada818dfcec0acc22dd1bbe372487be9abbdd07ce073
GET /promote-boysgulosos.html HTTP/1.1
Host: www.frameptp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 05 Oct 2022 20:42:20 GMT
Content-Type: text/html
Content-Length: 2551
Last-Modified: Fri, 16 Sep 2022 16:46:37 GMT
ETag: "6324a86d-9f7"
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_AsvjF3fuOW/EUMo7J6dfHNGfYZXFzPC6QIYYlda1xwnKGgZhIy4tHXI+nXDhJzr9Lj7cakj4ZS/nu+dCB+HpIw
Cache-Control: no-cache
X-Content-Type-Options: nosniff
Set-Cookie: caf_ipaddr=34.102.155.139;Path=/;Max-Age=86400;
country=US;Path=/;Max-Age=86400;
city="";Path=/;Max-Age=86400;
expiry_partner=uniregistry.NON_AUCTION.D02224B5-9711-4EF6-B12E-89EFDD6D5696;Path=/;Max-Age=86400;
Accept-Ranges: bytes
Via: 1.1 google
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 55331c1dc7e7ebbf456220986278469d
d69a62ee47b03fde68db666512417dda2ae5ad13
a09c835aa140c7b4220194e940f54de09ca3b7ea470feb7c4c5be574643086d5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12663
Expires: Thu, 06 Oct 2022 00:13:23 GMT
Date: Wed, 05 Oct 2022 20:42:20 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 55331c1dc7e7ebbf456220986278469d
d69a62ee47b03fde68db666512417dda2ae5ad13
a09c835aa140c7b4220194e940f54de09ca3b7ea470feb7c4c5be574643086d5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12663
Expires: Thu, 06 Oct 2022 00:13:23 GMT
Date: Wed, 05 Oct 2022 20:42:20 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 55331c1dc7e7ebbf456220986278469d
d69a62ee47b03fde68db666512417dda2ae5ad13
a09c835aa140c7b4220194e940f54de09ca3b7ea470feb7c4c5be574643086d5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12663
Expires: Thu, 06 Oct 2022 00:13:23 GMT
Date: Wed, 05 Oct 2022 20:42:20 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ca20164-9b52-49c5-9e63-1fc0ae719f45.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ca20164-9b52-49c5-9e63-1fc0ae719f45.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4fc2ddd86450d64d3fb659ab4e78be58
bbe71936b78a8c34d03ab87948dc840b35c6948f
84a760397a5912bd05f61bc8a953c13a88a677e2d17fbbf74bdf7d7ff4d3942f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ca20164-9b52-49c5-9e63-1fc0ae719f45.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10158
x-amzn-requestid: def1fc7e-8008-466f-9271-20fa1ab0fa5a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZaqZCH7doAMFcPQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a8aa0-7fd2fb1249366f2277d719d6;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 07:09:20 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: aeOU8fGkf5uHuYZ79k17EzxiFnwm0_z7SeZJElgwECzRyhR2N_SYJA==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 04:06:09 GMT
age: 59771
etag: "bbe71936b78a8c34d03ab87948dc840b35c6948f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.777seo.com/seo.php?username=boysgulosos&format=468x60
302 Found 0 B URL HTTP/1.1 www.777seo.com/seo.php?username=boysgulosos&format=468x60
IP
ASN #133618 Trellian Pty. Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /seo.php?username=boysgulosos&format=468x60 HTTP/1.1
Host: www.777seo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Wed, 05 Oct 2022 20:42:20 GMT
Server: Apache/2.4.38 (Debian)
Set-Cookie: __tad=1665002540.1182743; expires=Sat, 02-Oct-2032 20:42:20 GMT; Max-Age=315360000
Location: http://ww38.777seo.com/seo.php?username=boysgulosos&format=468x60&subid1=20221006-0742-20f6-8605-b5784ce89970
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8
themes.googleusercontent.com/image?id=1H4RPagP3NxwlkCrVuQKUYUd5snXvaKTagGtkdgXEgve0VpSn-G5s8eBYdMsiQzVSvRpe&options=w1200
200 OK 225 kB URL HTTP/2 themes.googleusercontent.com/image?id=1H4RPagP3NxwlkCrVuQKUYUd5snXvaKTagGtkdgXEgve0VpSn-G5s8eBYdMsiQzVSvRpe&options=w1200
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, software=Picasa], baseline, precision 8, 1200x800, components 3\012- data
Size 225 kB (225325 bytes)
Hash cf4f1370cd8fc7b3711ce9ae0b5931cb
9103d47218eb68ccf07e4ea788eb112236031b17
159d867c847e650d86f1c02d3495c8f89fdf9ae90d4a1ed9565dcacd4954f3fe
GET /image?id=1H4RPagP3NxwlkCrVuQKUYUd5snXvaKTagGtkdgXEgve0VpSn-G5s8eBYdMsiQzVSvRpe&options=w1200 HTTP/1.1
Host: themes.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://safadosgulosos.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 06 Oct 2022 20:42:20 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Wed, 05 Oct 2022 20:42:20 GMT
server: fife
content-length: 225325
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
c.parkingcrew.net/scripts/sale_form.js
200 OK 761 B URL HTTP/1.1 c.parkingcrew.net/scripts/sale_form.js
IP
Hash 64f809e06446647e192fce8d1ec34e09
5b7ced07da42e205067afa88615317a277a4a82c
f52cbd664986ad7ed6e71c448e2d31d1a16463e4d9b7bca0c6be278649ccc4f3
GET /scripts/sale_form.js HTTP/1.1
Host: c.parkingcrew.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww38.777seo.com/
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 20:42:20 GMT
Content-Type: application/javascript
Content-Length: 761
Connection: keep-alive
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
ETag: "5ebab1f0-2f9"
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b0e8a79f3e381ab34a44278947ac7c7e
70d01e6fdc8565c661b6ae8c5a043ddf2da16530
885a8c234fca85e6f6bb3e8fcab6672b9a9742b5d3f74681b17a330fa295d549
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 20:42:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b0e8a79f3e381ab34a44278947ac7c7e
70d01e6fdc8565c661b6ae8c5a043ddf2da16530
885a8c234fca85e6f6bb3e8fcab6672b9a9742b5d3f74681b17a330fa295d549
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 20:42:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
translate.googleapis.com/translate_static/css/translateelement.css
200 OK 3.6 kB URL HTTP/2 translate.googleapis.com/translate_static/css/translateelement.css
IP
File type ASCII text, with very long lines (18670)
Hash 897ba9a21d9625286674da769dacc2e2
84b4923ab7dee562395160824d53496314499b77
696cbf5c2f3f1efae555562b72abbbb22bed02eff03d62074555cab241190ae0
GET /translate_static/css/translateelement.css HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 3619
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 20:30:09 GMT
expires: Wed, 05 Oct 2022 21:30:09 GMT
cache-control: public, max-age=3600
age: 731
last-modified: Wed, 17 Aug 2022 23:38:00 GMT
content-type: text/css
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 58ac1b886710ef98c8b70a37dcc2b855
ed76f180385d65285525c3426857e1880e2817c8
7fd9a97b66875a6c87413705781a8800ab15e8faaeb821364914ca2d0dd9c890
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 20:42:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.Jk8Rw2ARrzk.O/d=1/exm=el_conf/ed=1/rs=AN8SPfqQz4burpbpemK5ufKFGYFp5LB-Ng/m=el_main
200 OK 95 kB URL HTTP/2 translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.Jk8Rw2ARrzk.O/d=1/exm=el_conf/ed=1/rs=AN8SPfqQz4burpbpemK5ufKFGYFp5LB-Ng/m=el_main
IP
File type ASCII text, with very long lines (1613)
Hash 294b8db26d9e50ea6e86d5054cc111a6
89c6d6d9d469d8dac35bab7902594b6d4a9990b2
2cead219e4a92c791620bda1eb7ddae2908ccc4a9e690e9963ccbce8700cf950
GET /_/translate_http/_/js/k=translate_http.tr.no.Jk8Rw2ARrzk.O/d=1/exm=el_conf/ed=1/rs=AN8SPfqQz4burpbpemK5ufKFGYFp5LB-Ng/m=el_main HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 94914
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 04 Oct 2022 19:36:18 GMT
expires: Wed, 04 Oct 2023 19:36:18 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 03 Oct 2022 19:31:53 GMT
content-type: text/javascript; charset=UTF-8
age: 90362
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 40a4de06678d96242b71d5318f2fd4ef
546a7d1d92df81916f14155943427b5453ae3924
aed9af25ae57c181702a137d48cb00f5b30297180161451de3b628359dc9ec6f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 20:42:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
d38psrni17bvxu.cloudfront.net/themes/regnitz_0f823431/img/arrows.png
200 OK 11 kB URL HTTP/1.1 d38psrni17bvxu.cloudfront.net/themes/regnitz_0f823431/img/arrows.png
IP
File type PNG image data, 1500 x 600, 8-bit colormap, non-interlaced\012- data
Hash 0cb2e5165dc9324eb462199f04e1ffa9
9e0f89847ec8a98d98a6020bc5c4ed32b7a48bf8
67dff0aad873050f12609885f2264417ccdd0d438311000a704c89f0865f7865
GET /themes/regnitz_0f823431/img/arrows.png HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://d38psrni17bvxu.cloudfront.net/themes/regnitz_0f823431/style.css
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 11375
Connection: keep-alive
Server: nginx
Date: Wed, 05 Oct 2022 09:14:42 GMT
Last-Modified: Fri, 25 Feb 2022 11:24:01 GMT
Accept-Ranges: bytes
ETag: "6218bc51-2c6f"
X-Cache: Hit from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: mM9KCSoiKoSaMMBhBXgtyZhApdnp-atHoZ-aYnq_Q2LsumzNzO6x9w==
Age: 41258
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b0e8a79f3e381ab34a44278947ac7c7e
70d01e6fdc8565c661b6ae8c5a043ddf2da16530
885a8c234fca85e6f6bb3e8fcab6672b9a9742b5d3f74681b17a330fa295d549
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 20:42:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ff5f22aafa6751c60631736c305a4c7c
278b89e5c1a978e070be4b66bb780862894b8504
b501664d7591e6dfe95c8641e0020e04b76f16f5cb80a7fc0ee0b36af60a6382
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 20:42:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
200 OK 34 kB URL HTTP/2 www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
IP
File type ASCII text, with very long lines (2800)
Hash 2e2eb8ca65dfdc046d0b954f898024b1
6ed5c92832af02c6eb2f3921775922e25e84bacc
0b7eefc089178c4e032417958a2892d47b758136ef3b2a5c1dd36c77d1fa08ae
GET /feedback/js/help/prod/service/lazy.min.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://safadosgulosos.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/product-feedback-gathering
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="product-feedback-gathering"
report-to: {"group":"product-feedback-gathering","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/product-feedback-gathering"}]}
content-length: 33871
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 20:42:17 GMT
expires: Wed, 05 Oct 2022 21:32:17 GMT
cache-control: public, max-age=3000
last-modified: Tue, 04 Oct 2022 15:24:36 GMT
content-type: text/javascript
age: 3
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ff5f22aafa6751c60631736c305a4c7c
278b89e5c1a978e070be4b66bb780862894b8504
b501664d7591e6dfe95c8641e0020e04b76f16f5cb80a7fc0ee0b36af60a6382
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 20:42:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ww38.777seo.com/seo.php?username=boysgulosos&format=728x90&subid1=20221006-0742-20b1-bf9d-9fb854980e14&_xafvr=NjBkYmY3MWRkNWU5ZDRlYTc3NDU1NzQwYzE1NWM5YmUzMmRkODFkMiw2MzNkZWMyYzc4MDc0
200 OK 988 B URL HTTP/1.1 ww38.777seo.com/seo.php?username=boysgulosos&format=728x90&subid1=20221006-0742-20b1-bf9d-9fb854980e14&_xafvr=NjBkYmY3MWRkNWU5ZDRlYTc3NDU1NzQwYzE1NWM5YmUzMmRkODFkMiw2MzNkZWMyYzc4MDc0
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash eaab0e24754cbc336b86feba047edb85
9ca82964bc391341cdc74f0a86e11c0a48cd9d78
237d9c49f94e07ede3deb79ac29f1697c1c258233860e9b7eac64a9cb16c05e6
GET /seo.php?username=boysgulosos&format=728x90&subid1=20221006-0742-20b1-bf9d-9fb854980e14&_xafvr=NjBkYmY3MWRkNWU5ZDRlYTc3NDU1NzQwYzE1NWM5YmUzMmRkODFkMiw2MzNkZWMyYzc4MDc0 HTTP/1.1
Host: ww38.777seo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww38.777seo.com/seo.php?username=boysgulosos&format=728x90&subid1=20221006-0742-20b1-bf9d-9fb854980e14
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 20:42:20 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Redirect: zeropark_yahoo
X-Template: tpl_Regnitz_twoclick
X-Language: norwegian
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Content-Encoding: gzip
d38psrni17bvxu.cloudfront.net/themes/saledefault.css
200 OK 1.5 kB URL HTTP/1.1 d38psrni17bvxu.cloudfront.net/themes/saledefault.css
IP
Hash 9f441d51d5e6a2a0b02892d00f3303bf
8c30ed35e6253bf2cf5182c777ae8108cde9dbbd
b877378e7dbdf82582548b802a62b2acdb0f149653360575621f527ec5c471c0
GET /themes/saledefault.css HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww38.777seo.com/
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Date: Wed, 05 Oct 2022 09:14:40 GMT
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
Content-Encoding: gzip
ETag: W/"5ebab1f0-1348"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: XAVIUgnaqoir3ed_8Zks5EkCWtwxCHTywHZ99gFjRW-gbmzVVhesig==
Age: 41261
d38psrni17bvxu.cloudfront.net/themes/assets/style.css
200 OK 343 B URL HTTP/1.1 d38psrni17bvxu.cloudfront.net/themes/assets/style.css
IP
Hash 03a4a8c322fc0c99b0ee7cbbcc9eabcd
6fc193276de2a3458cd853c474cb9269b900e00d
a535d2296792cb37a2bbad1d9d0546e3383a8a5bfac0d9edda15795c226bddf7
GET /themes/assets/style.css HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww38.777seo.com/
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Date: Wed, 05 Oct 2022 07:34:23 GMT
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
Content-Encoding: gzip
ETag: W/"5ebab1f0-33d"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: gouSU610BoRZBFzUne6HtURPfY5owExcHFZzB2qcMAKGXIk4735DOA==
Age: 47278
d38psrni17bvxu.cloudfront.net/themes/assets/zeropark.css
200 OK 208 B URL HTTP/1.1 d38psrni17bvxu.cloudfront.net/themes/assets/zeropark.css
IP
Hash be223301cce69116e7a473d42a863379
928aee49e0ddcbee8c410cdbd80d94820a6cafab
d7a8d561985ea3bb5e9433926fd9c103d4e6c041c19fa4c1dcaa2c0949be74d7
GET /themes/assets/zeropark.css HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww38.777seo.com/
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Date: Wed, 05 Oct 2022 09:15:07 GMT
Last-Modified: Tue, 25 Jan 2022 08:25:52 GMT
Content-Encoding: gzip
ETag: W/"61efb410-157"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: MvjXH3gJwTtN1whTdIYwEDk8uo1N78qc-L645E_OKW0c9jB38W7hXQ==
Age: 41234
c.parkingcrew.net/scripts/sale_form.js
200 OK 761 B URL HTTP/1.1 c.parkingcrew.net/scripts/sale_form.js
IP
Hash 64f809e06446647e192fce8d1ec34e09
5b7ced07da42e205067afa88615317a277a4a82c
f52cbd664986ad7ed6e71c448e2d31d1a16463e4d9b7bca0c6be278649ccc4f3
GET /scripts/sale_form.js HTTP/1.1
Host: c.parkingcrew.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww38.777seo.com/
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 20:42:21 GMT
Content-Type: application/javascript
Content-Length: 761
Connection: keep-alive
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
ETag: "5ebab1f0-2f9"
Accept-Ranges: bytes
ww38.777seo.com/favicon.ico
200 OK 0 B URL HTTP/1.1 ww38.777seo.com/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: ww38.777seo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww38.777seo.com/seo.php?username=boysgulosos&format=728x90&subid1=20221006-0742-20b1-bf9d-9fb854980e14&_xafvr=NjBkYmY3MWRkNWU5ZDRlYTc3NDU1NzQwYzE1NWM5YmUzMmRkODFkMiw2MzNkZWMyYzc4MDc0
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 20:42:21 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
Server: nginx
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
ETag: "5ebab1f0-0"
Accept-Ranges: bytes
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash bf1c080c185a27532352e7e0a971a59b
3d8c33ff045c8c987fe59acb54bdcb940ef3ba0f
42ddb83c166bab9ca66ff20eccf842ed3108a05e0a1cb42556702971a43ef1c3
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 05 Oct 2022 20:42:21 GMT
Last-Modified: Wed, 05 Oct 2022 19:31:42 GMT
Server: ECS (bsa/EB1B)
X-Cache: Miss from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: jpc6c_TyIN4EaAhvzEDu1bT-6jyvwafcLuYICRG59Yha7DnJKwaDpQ==
Age: 4239
brigi-jar.com/lander?dn=777seo.com&feedid=c29bc710-7228-11ec-932e-0a0baae9769b&tag=1
200 OK 11 kB URL HTTP/2 brigi-jar.com/lander?dn=777seo.com&feedid=c29bc710-7228-11ec-932e-0a0baae9769b&tag=1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1890)
Hash 0008e0c644394ea113f0704e258461e3
2e82216a27b5f4eb168f103bb81f279dc8a6cddf
2d079999a7abdd9aadb5766ae00505296be266631ad8cbc0992fe539e9469394
GET /lander?dn=777seo.com&feedid=c29bc710-7228-11ec-932e-0a0baae9769b&tag=1 HTTP/1.1
Host: brigi-jar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ww38.777seo.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 05 Oct 2022 20:42:21 GMT
content-type: text/html;charset=UTF-8
content-length: 10589
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b0e8a79f3e381ab34a44278947ac7c7e
70d01e6fdc8565c661b6ae8c5a043ddf2da16530
885a8c234fca85e6f6bb3e8fcab6672b9a9742b5d3f74681b17a330fa295d549
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 20:42:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
brigi-jar.com/style.css
200 OK 6.0 kB IP
Hash 2eb024ad11ef5f2e503bfb60117c25d8
235b5ca1205cc2ca3d0b8e4f98ce022512b05c0f
d8efc1d8e1100baf07f4105119fde6f8fe760a9efebf189adc5d9b3dfccc9e0a
GET /style.css HTTP/1.1
Host: brigi-jar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://brigi-jar.com/lander?dn=777seo.com&feedid=c29bc710-7228-11ec-932e-0a0baae9769b&tag=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 05 Oct 2022 20:42:22 GMT
content-type: text/css
content-length: 5981
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
last-modified: Tue, 27 Sep 2022 12:40:35 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
brigi-jar.com/main.js
200 OK 480 B IP
Hash 91558066fecbfc1f6f77842f6aa85a6c
6bb5c5f2cb4efaf30a8ab810e1b453dcb4df108e
efa0d78cbfa66831e490b26d1bb55b14f6c9f8f3a04b1d08403947abd25908ed
GET /main.js HTTP/1.1
Host: brigi-jar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://brigi-jar.com/lander?dn=777seo.com&feedid=c29bc710-7228-11ec-932e-0a0baae9769b&tag=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 05 Oct 2022 20:42:22 GMT
content-type: application/javascript
content-length: 480
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
last-modified: Tue, 27 Sep 2022 12:40:35 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ff5f22aafa6751c60631736c305a4c7c
278b89e5c1a978e070be4b66bb780862894b8504
b501664d7591e6dfe95c8641e0020e04b76f16f5cb80a7fc0ee0b36af60a6382
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 20:42:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
200 OK 7.9 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7884, version 1.0\012- data
Hash 9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://brigi-jar.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 04 Oct 2022 16:58:13 GMT
expires: Wed, 04 Oct 2023 16:58:13 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 27 Apr 2022 17:03:52 GMT
content-type: font/woff2
age: 99849
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Poppins:300
200 OK 440 B URL HTTP/2 fonts.googleapis.com/css?family=Poppins:300
IP
Hash 976dce97b1c9f1c1637628d7ac090689
592ca233f5b79d489c4af7325f81a52886baba8e
65c9de4c418da207c88c479495abb7e9bb8f9981129d69fe0b7c714724e3aef6
GET /css?family=Poppins:300 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://brigi-jar.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 05 Oct 2022 20:42:22 GMT
date: Wed, 05 Oct 2022 20:42:22 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash ee1ad2e2310d3f1c7342641149565ec2
caa20693854afe7a5a5d62a802ff323f709262b9
7c780d2bc6b57a458d9235fa0bb7f57fe86ef0976d091c618cd31e045af423fc
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 05 Oct 2022 20:42:22 GMT
Last-Modified: Wed, 05 Oct 2022 19:01:55 GMT
Server: ECS (bsa/EB16)
X-Cache: Miss from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Sbl5LqqhTcNv5UggrcwgUld7Nw07ZwOpjLscJzD2caHSZQKII0X8FQ==
Age: 6027
assetscdn.com/img/arrows.png
200 OK 25 kB URL HTTP/2 assetscdn.com/img/arrows.png
IP
File type gzip compressed data, max compression\012- data
Hash cb13d5df3713128759159b441b230119
d7ba791e1ac8de05bf3dcdf9d89c5f37df7a3d94
a4ca3bfbf08b0ef7d08f1348024d09d59178fddb5a710fb3069cdc2e6d3df4fd
GET /img/arrows.png HTTP/1.1
Host: assetscdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://brigi-jar.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 24415
date: Wed, 07 Sep 2022 12:35:56 GMT
last-modified: Thu, 04 Aug 2022 10:09:47 GMT
etag: "c97abaaf2fb3de553aa0531e97dff187"
cache-control: public, max-age=31556926
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5NsxyfRJi_I1TYMwja07u3PYfluMDZ8_1ggNVUfjYUU_BpUrEuTbMg==
age: 2448387
X-Firefox-Spdy: h2
www.e-referrer.com/link.js
301 Moved Permanently 0 B URL HTTP/2 www.e-referrer.com/link.js
IP
GET /link.js HTTP/1.1
Host: www.e-referrer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://safadosgulosos.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Wed, 05 Oct 2022 20:42:19 GMT
content-type: text/html; charset=iso-8859-1
location: https://www.e-referrer.com/
cache-control: max-age=14400
cf-cache-status: HIT
age: 56
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PUDXSVq2wt5ZWE1%2BvDIh8X5x%2B3ywd1sLQjw6JJX9wbG%2BgdmpwyBd0DgJE4wsLosJGH8hmMWDyhQphD3t05VPKzfYa8fuMqS14W14tVpGokJSFzhw%2BcASlOCjh%2BwzhpDjAZxj6w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7558fbb2c94ab51d-OSL
X-Firefox-Spdy: h2
www.e-referrer.com/
200 OK 0 B IP
GET / HTTP/1.1
Host: www.e-referrer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://safadosgulosos.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 05 Oct 2022 20:42:20 GMT
content-type: text/html; charset=UTF-8
cf-ray: 7558fbb2f9d5b51d-OSL
age: 349506
cache-control: no-cache
last-modified: Sat, 01 Oct 2022 15:30:41 GMT
link: <https://www.e-referrer.com/wp-json/>; rel="https://api.w.org/", <https://www.e-referrer.com/wp-json/wp/v2/pages/19231>; rel="alternate"; type="application/json", <https://www.e-referrer.com/>; rel=shortlink
vary: Accept-Encoding
cf-cache-status: HIT
accept-ch: Sec-CH-UA-Mobile
cf-apo-via: tcache
cf-edge-cache: cache,platform=wordpress
x-nitro-cache: MISS
x-nitro-disabled: 1
x-nitro-disabled-reason: request type not allowed
x-ua-compatible: IE=edge
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pm0jYU69Nr8A4KIQ0qymN2gzdTEDGTBX2hAkihlTHETiHBVro7tCy%2B7mcoI8%2BSNgeIrNZoZu0KROMSyZGyGF44xYgFLbowjMYyg6M9EEvcWoI%2FDdXoYQhYiWUwgmWOUNMcscKQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
www.surfactif.fr/
200 OK 0 B IP
GET / HTTP/1.1
Host: www.surfactif.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://safadosgulosos.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 05 Oct 2022 20:42:36 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.3.33
link: <https://www.surfactif.fr/wp-json/>; rel="https://api.w.org/", <https://www.surfactif.fr/wp-json/wp/v2/pages/8>; rel="alternate"; type="application/json", <https://www.surfactif.fr/>; rel=shortlink
server: o2switch-PowerBoost-v3
content-encoding: br
X-Firefox-Spdy: h2
142.250.74.161
15.235.82.193
5.45.76.184
103.224.182.251
23.36.76.226
185.53.178.30
93.184.220.29
104.18.15.218
109.234.161.31