photosrandosmontagne.blogspot.com/search/label/cabane%20de%20Camplong
27 kB URL photosrandosmontagne.blogspot.com/search/label/cabane%20de%20Camplong
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9151)
Hash f0134f3c529255c40d2d709a6a321110
cffd67d671df1c5cdfde51b17a7ea53f320466ef
b56fbf36752e54d1f5907c9b013def9f9df542f501edd90073f2fc777d490b84
GET /search/label/cabane%20de%20Camplong HTTP/1.1
Host: photosrandosmontagne.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Fri, 07 Apr 2023 18:13:10 GMT
Date: Fri, 07 Apr 2023 18:13:10 GMT
Cache-Control: private, max-age=0
Last-Modified: Sun, 19 Mar 2023 14:05:12 GMT
ETag: W/"0779bddf5983bd9a26344f4e36966b7644029f64cd5f45a7c0eaf779162e0368"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 27408
Server: GSE
www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
6.6 kB URL www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
IP
File type ASCII text, with very long lines (30596)
Hash 6f46e6f68353c7911fe34f31faa1518f
ea4dbfa2f87c18e9c51c59a32dfa9afb9c2c3472
0be7e26374fcff6f423b88e5f2a05d1cfdcb56abb4a78fa125e391989782ae0f
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://photosrandosmontagne.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 02 Apr 2023 10:34:40 GMT
expires: Mon, 01 Apr 2024 10:34:40 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 01 Apr 2023 23:50:00 GMT
content-type: text/css
vary: Accept-Encoding
age: 459510
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
resources.blogblog.com/img/icon18_edit_allbkg.gif
162 B URL resources.blogblog.com/img/icon18_edit_allbkg.gif
IP
File type GIF image data, version 89a, 18 x 18\012- data
Hash c991641178ff05adf0d004298b5eafa9
d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
GET /img/icon18_edit_allbkg.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://photosrandosmontagne.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 162
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 06 Apr 2023 11:09:15 GMT
expires: Thu, 13 Apr 2023 11:09:15 GMT
cache-control: public, max-age=604800
last-modified: Wed, 05 Apr 2023 20:54:32 GMT
content-type: image/gif
age: 111835
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
img1.blogblog.com/img/icon18_email.gif
164 B URL img1.blogblog.com/img/icon18_email.gif
IP
File type GIF image data, version 89a, 18 x 13\012- data
Hash 36b9f993db1b953f3b9b08040aaf9af4
18248661b307586dc291fd2dff4bb59cf7579475
1258cbe1e2900ec3df11a83a6bb6008d7a833f783a6df80b0d5d45a052ac1466
GET /img/icon18_email.gif HTTP/1.1
Host: img1.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photosrandosmontagne.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 164
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 01 Apr 2023 20:18:58 GMT
Expires: Sat, 08 Apr 2023 20:18:58 GMT
Cache-Control: public, max-age=604800
Last-Modified: Sat, 01 Apr 2023 13:51:15 GMT
Content-Type: image/gif
Age: 510852
apis.google.com/js/platform.js
21 kB URL apis.google.com/js/platform.js
IP
File type ASCII text, with very long lines (1429)
Hash 3161bcab6d00af494c239ab853923a64
3a9c842aa0b2fc894aea7a308a56cc09fce0def3
2b5444c3782c761e5ddb30bd733e9f746f49b3442c5d787b0a7b0c10434fe81f
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://photosrandosmontagne.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 21022
date: Fri, 07 Apr 2023 18:13:10 GMT
expires: Fri, 07 Apr 2023 18:13:10 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "a817d6f6a95ec85f"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/3271249078-widgets.js
57 kB URL www.blogger.com/static/v1/widgets/3271249078-widgets.js
IP
File type ASCII text, with very long lines (2221)
Hash 587a33909539109d58e0188e26ed2afb
9e2f273a4d47115f9d6b303a8b2f9b278ee7d6b0
d399105ccc924f2cc7c9bf88cc12b753f77fabcf9d32ee132760226c1e9b9614
GET /static/v1/widgets/3271249078-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: www.blogger.com
Connection: keep-alive
Referer: http://photosrandosmontagne.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56943
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 07 Apr 2023 01:51:44 GMT
expires: Sat, 06 Apr 2024 01:51:44 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 06 Apr 2023 18:57:31 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 58886
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
photosrandosmontagne.blogspot.com/js/cookienotice.js
2.0 kB URL photosrandosmontagne.blogspot.com/js/cookienotice.js
IP
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
GET /js/cookienotice.js HTTP/1.1
Host: photosrandosmontagne.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photosrandosmontagne.blogspot.com/search/label/cabane%20de%20Camplong
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
Date: Fri, 07 Apr 2023 18:13:10 GMT
Expires: Fri, 14 Apr 2023 18:13:10 GMT
Cache-Control: public, max-age=604800
Last-Modified: Fri, 07 Apr 2023 16:52:02 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.zUi2Oiqh0cQ.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-VnflFHGTzk3OsaVpWbqz0Ysb2Jw/cb=gapi.loaded_0?le=scs
61 kB URL apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.zUi2Oiqh0cQ.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-VnflFHGTzk3OsaVpWbqz0Ysb2Jw/cb=gapi.loaded_0?le=scs
IP
File type ASCII text, with very long lines (1530)
Hash 36a46584cf5844d36f358524bdb8f81c
bdffe8f2e18bbb8209fdfa54149728a8d5244e41
1ae488515a1c92a1c028bad7172b69b96f0a03dd921ea3c2baafac1345cfdef3
GET /_/scs/abc-static/_/js/k=gapi.lb.en.zUi2Oiqh0cQ.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-VnflFHGTzk3OsaVpWbqz0Ysb2Jw/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: apis.google.com
Connection: keep-alive
Referer: http://photosrandosmontagne.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 61154
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Apr 2023 17:31:15 GMT
expires: Thu, 04 Apr 2024 17:31:15 GMT
cache-control: public, max-age=31536000
age: 175315
last-modified: Thu, 09 Mar 2023 16:31:32 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
tcr.tynt.com/javascripts/Tracer.js?user=cgJ2tI4DSr3Ovwab7jrHcU&s=110&cc=1&lang=fr
16 kB URL tcr.tynt.com/javascripts/Tracer.js?user=cgJ2tI4DSr3Ovwab7jrHcU&s=110&cc=1&lang=fr
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1382)
Hash ffac4bd1d1492ed886657e17a52f44cb
a27699bf530cb614c4e9b975beb6aa2e73825c24
0a065572eb46dc48803acb610cdd9b3d02c7c5b95bb3a351f8a44468e29712d7
GET /javascripts/Tracer.js?user=cgJ2tI4DSr3Ovwab7jrHcU&s=110&cc=1&lang=fr HTTP/1.1
Host: tcr.tynt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photosrandosmontagne.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 07 Apr 2023 18:13:10 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Tue, 14 Mar 2023 15:48:11 GMT
vary: Accept-Encoding
etag: W/"6410973b-b6b0"
content-encoding: gzip
CF-Cache-Status: HIT
Age: 180
Expires: Mon, 10 Apr 2023 18:13:10 GMT
Cache-Control: public, max-age=259200
Server: cloudflare
CF-RAY: 7b443e36defeb505-OSL
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
67 B URL pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP
Hash 9bbc3ca32ec951a484589ce0e6b4db73
753d6f6183b33b2dee5dde2208fca91c17f5bb13
b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photosrandosmontagne.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 0
Date: Fri, 07 Apr 2023 14:04:04 GMT
Expires: Fri, 21 Apr 2023 14:04:04 GMT
Cache-Control: public, max-age=1209600
Age: 14946
ETag: 13036835877489095579
Content-Type: text/javascript; charset=UTF-8
Vary: Accept-Encoding
static.addtoany.com/buttons/share_save_171_16.gif
1.9 kB URL static.addtoany.com/buttons/share_save_171_16.gif
IP
File type GIF image data, version 89a, 171 x 16\012- data
Hash aae030848a1c01844b8cd95a9478e8e9
a23732c053ed8190b966a0c4d6a5a9f833d5f138
2a0e4f61aa767a2a7d3381ec80e71d1c8289fd8c2e9621d9a942c042e8358e08
GET /buttons/share_save_171_16.gif HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://photosrandosmontagne.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 07 Apr 2023 18:13:10 GMT
content-type: image/gif
content-length: 1910
cache-control: max-age=315360000, immutable
cf-bgj: imgq:100,h2pri
cf-polished: status=not_needed
age: 14533715
etag: "776-4ddea91db5980"
last-modified: Thu, 30 May 2013 07:37:26 GMT
via: e4s
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7b443e36eac82d7d-ARN
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.addtoany.com/buttons/subscribe_171_16.gif
2.0 kB URL static.addtoany.com/buttons/subscribe_171_16.gif
IP
File type GIF image data, version 89a, 171 x 16\012- data
Hash 380ec24c3f2fd32db15ed8830dab670f
ea505b3bacdb5a04568666ee9a9f530973e59ae7
7c039716da787ff830c81c9007abb640c9a001eb281b601e7a717796e0b1d3ed
GET /buttons/subscribe_171_16.gif HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://photosrandosmontagne.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 07 Apr 2023 18:13:10 GMT
content-type: image/gif
content-length: 1991
cache-control: max-age=315360000, immutable
cf-bgj: imgq:100,h2pri
cf-polished: status=not_needed
etag: "7c7-4ddea91ea9bc0"
last-modified: Thu, 30 May 2013 07:37:27 GMT
via: e4s
cf-cache-status: HIT
age: 17666859
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7b443e370b122d7d-ARN
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.abcompteur.com/cpt/?code=6/13/6091/6/1&ID=39893
0 B URL www.abcompteur.com/cpt/?code=6/13/6091/6/1&ID=39893
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cpt/?code=6/13/6091/6/1&ID=39893 HTTP/1.1
Host: www.abcompteur.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photosrandosmontagne.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 07 Apr 2023 18:13:10 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Redirect-By: WordPress
X-Content-Type-Options: nosniff
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: http://abcompteur.com/cpt/?code=6/13/6091/6/1&ID=39893
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-DNS-Prefetch-Control: on
Content-Length: 0
Keep-Alive: timeout=5, max=100
Content-Type: text/html; charset=UTF-8
script.footprintlive.com/?site=photosrandosmontagne.blogspot.com
3.2 kB URL script.footprintlive.com/?site=photosrandosmontagne.blogspot.com
IP
File type ASCII text, with CRLF, LF line terminators
Hash b4d9aedb2b050f9dc292cfd7b72d6541
0c44db256bcbce6358273a9b3cdd9256647f2b57
74c9e765c84a0a349db2964a01d82f4473fc080aab9f22178da614327239626b
GET /?site=photosrandosmontagne.blogspot.com HTTP/1.1
Host: script.footprintlive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photosrandosmontagne.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
vary: Origin,Accept-Encoding
Cache-Control: no-cache
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Content-Encoding: gzip
Date: Fri, 07 Apr 2023 18:13:10 GMT
www.shapecollage.com/online/embed.php?cid=7fk8hwii
214 B URL www.shapecollage.com/online/embed.php?cid=7fk8hwii
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 919804a33990e5c21a767f3c7d30801d
9db8978398f0fc8916ab15abc49232d2efa013b5
48f0bd9eac58e854663dd0ac2a5aefc0d03592a4557a20de553bd499b023bac3
GET /online/embed.php?cid=7fk8hwii HTTP/1.1
Host: www.shapecollage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photosrandosmontagne.blogspot.com/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 07 Apr 2023 18:13:11 GMT
Server: Apache
Location: http://www.shapecollage.com/online/embed/7fk8hwii
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 214
Keep-Alive: timeout=15
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
www.facebook.com/plugins/like.php?href=http%3A%2F%2Fphotosrandosmontagne.blogspot.com%2F&layout=standard&show_faces=true&width=450&action=like&font=verdana&colorscheme=dark
0 B URL www.facebook.com/plugins/like.php?href=http%3A%2F%2Fphotosrandosmontagne.blogspot.com%2F&layout=standard&show_faces=true&width=450&action=like&font=verdana&colorscheme=dark
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /plugins/like.php?href=http%3A%2F%2Fphotosrandosmontagne.blogspot.com%2F&layout=standard&show_faces=true&width=450&action=like&font=verdana&colorscheme=dark HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://photosrandosmontagne.blogspot.com/
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html;charset=utf-8
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com *.fbcdn.net 'unsafe-eval';script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net 'unsafe-eval';style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-xss-protection: 0
x-fb-debug: UyguyqiHON7X9qUQkh8ZEd6k65Pd/UZBgON+BYv2cA7LG68laxamGYdZ3RBnF1r9yb7GNGBs7t9re4qIZ0Voqw==
content-length: 0
date: Fri, 07 Apr 2023 18:13:11 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
photos1.blogger.com/blogger/3614/2401/320/IMG_3774.jpg
19 kB URL photos1.blogger.com/blogger/3614/2401/320/IMG_3774.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 240x320, components 3\012- data
Hash 59327ff80e80503b5d3d19a73812cd92
1530368dcb384ee9c26afbd165175be268ad523e
f65ad3e59746aeb65b729cb7b1ecc5bafd8479e958aad2400ba7812e6226057f
GET /blogger/3614/2401/320/IMG_3774.jpg HTTP/1.1
Host: photos1.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photosrandosmontagne.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: image/jpeg
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/photos
Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="photos"
Report-To: {"group":"photos","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/photos"}]}
Content-Length: 18830
Date: Fri, 07 Apr 2023 18:13:11 GMT
Expires: Sat, 06 Apr 2024 18:13:11 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Sat, 18 Feb 2012 14:52:59 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
widgetserver.com/syndication/subscriber/InsertWidget.js?appId=9d5e1ab7-d437-4f91-9fc0-5f4b2babb9a8
157 B URL widgetserver.com/syndication/subscriber/InsertWidget.js?appId=9d5e1ab7-d437-4f91-9fc0-5f4b2babb9a8
IP
Hash 67e216a27dda24bdcb086c2385b0cb99
17141c80f5d32bec3691c5ab24741d8b7dd5f0c6
9dc433b2142d3ba0803fcffa53f19d34da26996d20c829df6d694bc887325dd7
Analyzer Verdict Alert fortinet Malware
GET /syndication/subscriber/InsertWidget.js?appId=9d5e1ab7-d437-4f91-9fc0-5f4b2babb9a8 HTTP/1.1
Host: widgetserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photosrandosmontagne.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Fri, 07 Apr 2023 18:13:11 GMT
content-type: application/javascript
content-length: 157
last-modified: Mon, 09 Jan 2023 20:56:33 GMT
etag: "63bc7f81-9d"
accept-ranges: bytes
connection: close
2.bp.blogspot.com/_HZCcO0h0c64/S22eMpzcWlI/AAAAAAAAEkc/VX3mGzQBBfQ/S220-s80/IMG_0991.JPG
2.8 kB URL 2.bp.blogspot.com/_HZCcO0h0c64/S22eMpzcWlI/AAAAAAAAEkc/VX3mGzQBBfQ/S220-s80/IMG_0991.JPG
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 80x60, components 3\012- data
Hash c858fbfb3a67e30e57e0e83f302ddeae
cb42d91bfd0d7132d0c91b17f9e6a1c01fc7e97d
5688d18e8c5ec6ae4db8501ec2145b4076b1ed07ca272caf65d6b87dcd224c41
GET /_HZCcO0h0c64/S22eMpzcWlI/AAAAAAAAEkc/VX3mGzQBBfQ/S220-s80/IMG_0991.JPG HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photosrandosmontagne.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "v1247"
Expires: Sat, 08 Apr 2023 18:13:11 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="IMG_0991.JPG"
X-Content-Type-Options: nosniff
Date: Fri, 07 Apr 2023 18:13:11 GMT
Server: fife
Content-Length: 2841
X-XSS-Protection: 0
widgetserver.com/
20 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (50392)
Hash 962944365fbc0ebcc2f550fc788d7912
92e874003a83e574171efbe2d3e7c866b4c2a0ab
7c01d3274dcbe90c5d655148db3fe311c05b2bac6290619d2c697f07a521ef3c
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: widgetserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photosrandosmontagne.blogspot.com/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Fri, 07 Apr 2023 18:13:11 GMT
content-type: text/html
transfer-encoding: chunked
content-encoding: gzip
connection: close
widgetserver.com/?gp=1&js=1&uuid=1680891191.0023048781&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9waG90b3NyYW5kb3Ntb250YWduZS5ibG9nc3BvdC5jb20vIiwgImFjY2VwdCI6ICJ0ZXh0L2h0bWwsYXBwbGljYXRpb24veGh0bWwreG1sLGFwcGxpY2F0aW9uL3htbDtxPTAuOSxpbWFnZS9hdmlmLGltYWdlL3dlYnAsKi8qO3E9MC44In0=
0 B URL widgetserver.com/?gp=1&js=1&uuid=1680891191.0023048781&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9waG90b3NyYW5kb3Ntb250YWduZS5ibG9nc3BvdC5jb20vIiwgImFjY2VwdCI6ICJ0ZXh0L2h0bWwsYXBwbGljYXRpb24veGh0bWwreG1sLGFwcGxpY2F0aW9uL3htbDtxPTAuOSxpbWFnZS9hdmlmLGltYWdlL3dlYnAsKi8qO3E9MC44In0=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?gp=1&js=1&uuid=1680891191.0023048781&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9waG90b3NyYW5kb3Ntb250YWduZS5ibG9nc3BvdC5jb20vIiwgImFjY2VwdCI6ICJ0ZXh0L2h0bWwsYXBwbGljYXRpb24veGh0bWwreG1sLGFwcGxpY2F0aW9uL3htbDtxPTAuOSxpbWFnZS9hdmlmLGltYWdlL3dlYnAsKi8qO3E9MC44In0= HTTP/1.1
Host: widgetserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://widgetserver.com/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
server: openresty/1.13.6.1
date: Fri, 07 Apr 2023 18:13:12 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: http://www1.widgetserver.com/?tm=1&subid4=1680891191.0208240000&KW1=Europe%20Dedicated%20Servers&KW2=Norway%20Dedicated%20Servers&KW3=Oslo%20County%20Dedicated%20Servers&KW4=Oslo%20Dedicated%20Servers&KW5=Custom%20Dedicated%20Servers&searchbox=0&backfill=0
referrer-policy: no-referrer
x-mtm-path: 4
x-mtm-prov: 1:5.63;70:0.00
x-mtm-rd: 0.38
vary: Accept-Language
content-language: en
set-cookie: mtm_delivered=WyJ3aWRnZXRzZXJ2ZXIuY29tIiwiaHR0cDovL3d3dzEud2lkZ2V0c2VydmVyLmNvbS8_dG09MSZzdWJpZDQ9MTY4MDg5MTE5MS4wMjA4MjQwMDAwJktXMT1FdXJvcGUlMjBEZWRpY2F0ZWQlMjBTZXJ2ZXJzJktXMj1Ob3J3YXklMjBEZWRpY2F0ZWQlMjBTZXJ2ZXJzJktXMz1Pc2xvJTIwQ291bnR5JTIwRGVkaWNhdGVkJTIwU2VydmVycyZLVzQ9T3NsbyUyMERlZGljYXRlZCUyMFNlcnZlcnMmS1c1PUN1c3RvbSUyMERlZGljYXRlZCUyMFNlcnZlcnMmc2VhcmNoYm94PTAmYmFja2ZpbGw9MCIsMSwiMjAyMy0wNC0wNyAxODoxMzoxMiIsMSwiMTY4MDg5MTE5MS4wMjA4MjQwMDAwIiwxLG51bGwsbnVsbF0:1pkqaG:7eqsGRGIt3aZNoe4As6qfcjgZU8; expires=Fri, 07-Apr-2023 19:13:12 GMT; Max-Age=3600; Path=/
connection: close
www1.widgetserver.com/?tm=1&subid4=1680891191.0208240000&KW1=Europe%20Dedicated%20Servers&KW2=Norway%20Dedicated%20Servers&KW3=Oslo%20County%20Dedicated%20Servers&KW4=Oslo%20Dedicated%20Servers&KW5=Custom%20Dedicated%20Servers&searchbox=0&backfill=0
1.4 kB URL www1.widgetserver.com/?tm=1&subid4=1680891191.0208240000&KW1=Europe%20Dedicated%20Servers&KW2=Norway%20Dedicated%20Servers&KW3=Oslo%20County%20Dedicated%20Servers&KW4=Oslo%20Dedicated%20Servers&KW5=Custom%20Dedicated%20Servers&searchbox=0&backfill=0
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (441)
Hash a4f9abb03f00f06559ec79f606dbd33e
1bf588e1ab4aed1365287969777a5f2fd2aba433
919bac6bff067de16260f5cb4838563835debbe1543587bc11546860a23605d6
GET /?tm=1&subid4=1680891191.0208240000&KW1=Europe%20Dedicated%20Servers&KW2=Norway%20Dedicated%20Servers&KW3=Oslo%20County%20Dedicated%20Servers&KW4=Oslo%20Dedicated%20Servers&KW5=Custom%20Dedicated%20Servers&searchbox=0&backfill=0 HTTP/1.1
Host: www1.widgetserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 07 Apr 2023 18:13:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Redirect: zeropark_zeroclick
X-Buckets: bucket011
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_asnJ/hYgjTjIcQKQ+gCtXBpnP0aV6WEgNt5OCDEiL0GCacv4/y6FvSBzLJl5ihOIIJhTxRjGAlVsVn0f5BgcTw==
X-Template: tpl_CleanPeppermintBlack_twoclick
X-Language: norwegian
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Domain: widgetserver.com
X-Subdomain: www1
Content-Encoding: gzip
d38psrni17bvxu.cloudfront.net/scripts/js3.js
1.1 kB URL d38psrni17bvxu.cloudfront.net/scripts/js3.js
IP
File type ASCII text, with very long lines (468)
Hash a66b149a7ebc798955373415d683f32a
15ceaba8cfae8368600620ae97aa26ae7331d626
036c94653e84e6078c087abeb3ac8804491d27b27938839ae3df42b31e2238d9
GET /scripts/js3.js HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.widgetserver.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 1096
Connection: keep-alive
Server: nginx
Date: Fri, 07 Apr 2023 04:13:01 GMT
Last-Modified: Mon, 23 Jan 2023 11:12:07 GMT
Accept-Ranges: bytes
ETag: "63ce6b87-448"
X-Cache: Hit from cloudfront
Via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: tsXrPzVw7VgH9mgOnTxo-rUp24QqPm6uHz23XSsebYf0jT30w-u3ug==
Age: 50412
www1.widgetserver.com/track.php?domain=widgetserver.com&toggle=browserjs&uid=MTY4MDg5MTE5My4yODpjZWUyODg1MjhkMmJiN2I5Yjk0ZDhlN2IwMjNmM2IzNTE3ODI0NzdiMDczNzkyY2I3YTk3NDUzZWFjZGQ4MTFkOjY0MzA1ZDM5NDQ1YTI%3D
20 B URL www1.widgetserver.com/track.php?domain=widgetserver.com&toggle=browserjs&uid=MTY4MDg5MTE5My4yODpjZWUyODg1MjhkMmJiN2I5Yjk0ZDhlN2IwMjNmM2IzNTE3ODI0NzdiMDczNzkyY2I3YTk3NDUzZWFjZGQ4MTFkOjY0MzA1ZDM5NDQ1YTI%3D
IP
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /track.php?domain=widgetserver.com&toggle=browserjs&uid=MTY4MDg5MTE5My4yODpjZWUyODg1MjhkMmJiN2I5Yjk0ZDhlN2IwMjNmM2IzNTE3ODI0NzdiMDczNzkyY2I3YTk3NDUzZWFjZGQ4MTFkOjY0MzA1ZDM5NDQ1YTI%3D HTTP/1.1
Host: www1.widgetserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.widgetserver.com/?tm=1&subid4=1680891191.0208240000&KW1=Europe%20Dedicated%20Servers&KW2=Norway%20Dedicated%20Servers&KW3=Oslo%20County%20Dedicated%20Servers&KW4=Oslo%20Dedicated%20Servers&KW5=Custom%20Dedicated%20Servers&searchbox=0&backfill=0
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 07 Apr 2023 18:13:14 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Custom-Track: browserjs
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip
www1.widgetserver.com/ls.php?t=64305d39&token=679653481e97d3404234cba9b6343765b6b27d1c
16 B URL www1.widgetserver.com/ls.php?t=64305d39&token=679653481e97d3404234cba9b6343765b6b27d1c
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 7363e85fe9edee6f053a4b319588c086
a15e2127145548437173fc17f3e980e3f3dee2d0
c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97
GET /ls.php?t=64305d39&token=679653481e97d3404234cba9b6343765b6b27d1c HTTP/1.1
Host: www1.widgetserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.widgetserver.com/?tm=1&subid4=1680891191.0208240000&KW1=Europe%20Dedicated%20Servers&KW2=Norway%20Dedicated%20Servers&KW3=Oslo%20County%20Dedicated%20Servers&KW4=Oslo%20Dedicated%20Servers&KW5=Custom%20Dedicated%20Servers&searchbox=0&backfill=0
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 201 Created
Date: Fri, 07 Apr 2023 18:13:14 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Log-Success: 64305d3a1df42259db03dc0b
Charset: utf-8
Access-Control-Allow-Origin:
Access-Control-Allow-Methods: POST, OPTIONS
Access-Control-Max-Age: 86400
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_RpKNJ3AloV/rqxfP1mHoTsds/EnIOQ+8Z50PuGH4EU9q9KReOIsfiZBggiYhQ+eJzNqPjaR0ccpYY5SbLolxOw==
www1.widgetserver.com/track.php?click=8bc5311fea51f5d88ad90580a49f43a22d8f5165&domain=widgetserver.com&uid=MTY4MDg5MTE5My4yODpjZWUyODg1MjhkMmJiN2I5Yjk0ZDhlN2IwMjNmM2IzNTE3ODI0NzdiMDczNzkyY2I3YTk3NDUzZWFjZGQ4MTFkOjY0MzA1ZDM5NDQ1YTI%3D&ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTF8fHx8fHw2NDMwNWQzOTQ0NThkfHx8MTY4MDg5MTE5My41NTM2fDVhYzM3YzIxN2I2N2EzYjFhMTk0NjMxMGExNjkxYjA5MWUzNTFmODJ8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8ZXlKemRXSnBaRFFpT2lJeE5qZ3dPRGt4TVRreExqQXlNRGd5TkRBd01EQWlmUT09fDY3OTY1MzQ4MWU5N2QzNDA0MjM0Y2JhOWI2MzQzNzY1YjZiMjdkMWN8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHww&kw=&search=&pcat=&bucket=&clientID=&adtest=off
20 B URL www1.widgetserver.com/track.php?click=8bc5311fea51f5d88ad90580a49f43a22d8f5165&domain=widgetserver.com&uid=MTY4MDg5MTE5My4yODpjZWUyODg1MjhkMmJiN2I5Yjk0ZDhlN2IwMjNmM2IzNTE3ODI0NzdiMDczNzkyY2I3YTk3NDUzZWFjZGQ4MTFkOjY0MzA1ZDM5NDQ1YTI%3D&ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTF8fHx8fHw2NDMwNWQzOTQ0NThkfHx8MTY4MDg5MTE5My41NTM2fDVhYzM3YzIxN2I2N2EzYjFhMTk0NjMxMGExNjkxYjA5MWUzNTFmODJ8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8ZXlKemRXSnBaRFFpT2lJeE5qZ3dPRGt4TVRreExqQXlNRGd5TkRBd01EQWlmUT09fDY3OTY1MzQ4MWU5N2QzNDA0MjM0Y2JhOWI2MzQzNzY1YjZiMjdkMWN8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHww&kw=&search=&pcat=&bucket=&clientID=&adtest=off
IP
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /track.php?click=8bc5311fea51f5d88ad90580a49f43a22d8f5165&domain=widgetserver.com&uid=MTY4MDg5MTE5My4yODpjZWUyODg1MjhkMmJiN2I5Yjk0ZDhlN2IwMjNmM2IzNTE3ODI0NzdiMDczNzkyY2I3YTk3NDUzZWFjZGQ4MTFkOjY0MzA1ZDM5NDQ1YTI%3D&ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTF8fHx8fHw2NDMwNWQzOTQ0NThkfHx8MTY4MDg5MTE5My41NTM2fDVhYzM3YzIxN2I2N2EzYjFhMTk0NjMxMGExNjkxYjA5MWUzNTFmODJ8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8ZXlKemRXSnBaRFFpT2lJeE5qZ3dPRGt4TVRreExqQXlNRGd5TkRBd01EQWlmUT09fDY3OTY1MzQ4MWU5N2QzNDA0MjM0Y2JhOWI2MzQzNzY1YjZiMjdkMWN8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHww&kw=&search=&pcat=&bucket=&clientID=&adtest=off HTTP/1.1
Host: www1.widgetserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.widgetserver.com/?tm=1&subid4=1680891191.0208240000&KW1=Europe%20Dedicated%20Servers&KW2=Norway%20Dedicated%20Servers&KW3=Oslo%20County%20Dedicated%20Servers&KW4=Oslo%20Dedicated%20Servers&KW5=Custom%20Dedicated%20Servers&searchbox=0&backfill=0
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 07 Apr 2023 18:13:14 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-View-Match: true
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip
ishku-wbq.com/zcvisitor/dc6a3ef2-d56f-11ed-a17f-12609c6a1ffb/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=dc742a04-d56f-11ed-a17f-12609c6a1ffb
1.1 kB URL ishku-wbq.com/zcvisitor/dc6a3ef2-d56f-11ed-a17f-12609c6a1ffb/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=dc742a04-d56f-11ed-a17f-12609c6a1ffb
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 11e10b486d4025b941619a4be6267b8d
1d648b3791c11bc4a593519e42654c78c11401ed
3f9bf38b35ceb6525961fedbe4f6d060303067e7d5981c5800f199c6f4e161e9
GET /zcvisitor/dc6a3ef2-d56f-11ed-a17f-12609c6a1ffb/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=dc742a04-d56f-11ed-a17f-12609c6a1ffb HTTP/1.1
Host: ishku-wbq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.widgetserver.com/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Fri, 07 Apr 2023 18:13:14 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Server: stLBAIwl
ishku-wbq.com/zcredirect?visitid=dc6a3ef2-d56f-11ed-a17f-12609c6a1ffb&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false&webdriverDetected=false
300 B URL ishku-wbq.com/zcredirect?visitid=dc6a3ef2-d56f-11ed-a17f-12609c6a1ffb&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false&webdriverDetected=false
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash d634d7828e144b5f3611c80a9a292b91
808d9c1c01cb6bfbdeab82ffafa379ee65e96117
e1345053650be5ef2d54f9f7f3e55a0bb94e20ac4144d9bb0e4da8a14df92653
GET /zcredirect?visitid=dc6a3ef2-d56f-11ed-a17f-12609c6a1ffb&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false&webdriverDetected=false HTTP/1.1
Host: ishku-wbq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ishku-wbq.com/zcvisitor/dc6a3ef2-d56f-11ed-a17f-12609c6a1ffb/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=dc742a04-d56f-11ed-a17f-12609c6a1ffb
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Fri, 07 Apr 2023 18:13:15 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
redirected: JS
Server: Qvhbwnqf
ishku-wbq.com/favicon.ico
653 B URL ishku-wbq.com/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (649), with no line terminators
Hash ba2732b1b2fa2626ffaa15f62f9e7d66
203d4e7fbb1d80449d6e4e1f3ae7a9bf8625debe
879861cb72fe9fbb476dab246021c4c83b4066327de2529e05ec54d3afb0a1c8
GET /favicon.ico HTTP/1.1
Host: ishku-wbq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ishku-wbq.com/zcredirect?visitid=dc6a3ef2-d56f-11ed-a17f-12609c6a1ffb&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false&webdriverDetected=false
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404
Date: Fri, 07 Apr 2023 18:13:15 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 653
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Content-Language: en
Server: rgWQuMaK
xml-v4.frdjs-2.co/click?seat=2491100&i=-1XpQxdMDiw_0
0 B URL xml-v4.frdjs-2.co/click?seat=2491100&i=-1XpQxdMDiw_0
IP
ASN #27257 WEBAIR-INTERNET
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?seat=2491100&i=-1XpQxdMDiw_0 HTTP/1.1
Host: xml-v4.frdjs-2.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ishku-wbq.com/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Cache-Control: no-store
Content-Length: 0
Age: 0
Connection: keep-alive
Location: https://main.proffering.xyz/15GU5A?zoneid=12293994169&pubfeed=397303/397303.12293994169&campaign=1026514&cost=0.00013&external_id=397303
Pragma: no-cache
main.proffering.xyz/15GU5A?zoneid=12293994169&pubfeed=397303/397303.12293994169&campaign=1026514&cost=0.00013&external_id=397303
294 B URL main.proffering.xyz/15GU5A?zoneid=12293994169&pubfeed=397303/397303.12293994169&campaign=1026514&cost=0.00013&external_id=397303
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document, ASCII text, with no line terminators
Hash dd309f69fb590cdc4992d6bdba2cba0c
6788f786242a7a9911db5bd564ca9545e0b49062
8f266b4b629e38e41abda375f8c5611bc3f45d5a78c2cc7a22c36bbb9130e99f
GET /15GU5A?zoneid=12293994169&pubfeed=397303/397303.12293994169&campaign=1026514&cost=0.00013&external_id=397303 HTTP/1.1
Host: main.proffering.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ishku-wbq.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.23.0
Date: Fri, 07 Apr 2023 18:13:15 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 294
Connection: keep-alive
X-Powered-By: Express
Set-Cookie: 15GU5Ao=20230407211680891628664; domain=.main.proffering.xyz; path=/;expires=Sat, 08 Apr 2023 18:13:15 GMT; httpOnly=true;SameSite=None; Secure;
_pc_lc_id=15GU5A; domain=.main.proffering.xyz; path=/;expires=Sat, 08 Apr 2023 18:13:15 GMT; httpOnly=true;SameSite=None; Secure;
peerclickcid=e485bfd541cf8090ea6ea5694f05f01e-11246-0407; domain=.main.proffering.xyz; path=/;expires=Sat, 08 Apr 2023 18:13:15 GMT; httpOnly=true;SameSite=None; Secure;
_norg=1; domain=.main.proffering.xyz; path=/;expires=Sat, 08 Apr 2023 18:13:15 GMT; httpOnly=true;SameSite=None; Secure;
Location: https://qwfuu.chainbelt.top/?pl=W7-lkuObDEWXzHM4LgqUhA&sub_id=ar&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407
Vary: Accept
qwfuu.chainbelt.top/?pl=W7-lkuObDEWXzHM4LgqUhA&sub_id=ar&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407
0 B URL qwfuu.chainbelt.top/?pl=W7-lkuObDEWXzHM4LgqUhA&sub_id=ar&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?pl=W7-lkuObDEWXzHM4LgqUhA&sub_id=ar&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407 HTTP/1.1
Host: qwfuu.chainbelt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ishku-wbq.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Fri, 07 Apr 2023 18:13:16 GMT
content-length: 0
location: https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496
set-cookie: W7-lkuObDEWXzHM4LgqUhA=19; max-age=345600; path=/; samesite=lax
__pl=5e0a0e4d-ea06-442c-9e52-c86a2fcdb7d5; expires=Mon, 07 Apr 2025 18:13:16 GMT; path=/; samesite=lax
__cap=1; max-age=3600; path=/; samesite=lax
cache-control: max-age=0, no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
play.copperblade.top/ph-new/assets/thumb-big.jpg
200 OK 83 kB URL GET HTTP/2 play.copperblade.top/ph-new/assets/thumb-big.jpg
IP
ASN #24940 Hetzner Online GmbH
Requested by https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496#
Certificate IssuerLet's Encrypt
Subjectcopperblade.top
FingerprintB4:06:EB:71:4E:B8:D5:FB:11:2B:3E:39:B8:7D:99:AB:A9:F9:50:08
ValidityTue, 28 Feb 2023 09:22:46 GMT - Mon, 29 May 2023 09:22:45 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1237x691, components 3\012- data
Hash cb5cedbae6d67e62dc9fde274b7f7dbe
f31d7811c4b6e50ae053f315152366501a8b6002
deaddba93625d2c7610076927fcd37afadad9324ca3210a2bb12784d313dd788
GET /ph-new/assets/thumb-big.jpg HTTP/1.1
Host: play.copperblade.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 18:13:16 GMT
content-type: image/jpeg
content-length: 82623
last-modified: Fri, 06 Jan 2023 12:05:20 GMT
etag: "63b80e80-142bf"
strict-transport-security: max-age=63072000
accept-ranges: bytes
X-Firefox-Spdy: h2
play.copperblade.top/favicon.ico
204 No Content 0 B URL GET HTTP/2 play.copperblade.top/favicon.ico
IP
ASN #24940 Hetzner Online GmbH
Requested by https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496#
Certificate IssuerLet's Encrypt
Subjectcopperblade.top
FingerprintB4:06:EB:71:4E:B8:D5:FB:11:2B:3E:39:B8:7D:99:AB:A9:F9:50:08
ValidityTue, 28 Feb 2023 09:22:46 GMT - Mon, 29 May 2023 09:22:45 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: play.copperblade.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 07 Apr 2023 18:13:17 GMT
strict-transport-security: max-age=63072000
X-Firefox-Spdy: h2
play.copperblade.top/ph-new/assets/rec-1.jpg
200 OK 14 kB URL GET HTTP/2 play.copperblade.top/ph-new/assets/rec-1.jpg
IP
ASN #24940 Hetzner Online GmbH
Requested by https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496#
Certificate IssuerLet's Encrypt
Subjectcopperblade.top
FingerprintB4:06:EB:71:4E:B8:D5:FB:11:2B:3E:39:B8:7D:99:AB:A9:F9:50:08
ValidityTue, 28 Feb 2023 09:22:46 GMT - Mon, 29 May 2023 09:22:45 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x180, components 3\012- data
Hash b2abcc52b7bf315893f6751d5fc7875e
5997c599c5e6c408b9019159f4608026a78223cf
098b2a4c2b05fc238c6eae8654ea2a3bc9d5fac7c59cb420242d405fcc83ed47
GET /ph-new/assets/rec-1.jpg HTTP/1.1
Host: play.copperblade.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 18:13:17 GMT
content-type: image/jpeg
content-length: 14404
last-modified: Fri, 06 Jan 2023 12:05:20 GMT
etag: "63b80e80-3844"
strict-transport-security: max-age=63072000
accept-ranges: bytes
X-Firefox-Spdy: h2
play.copperblade.top/ph-new/assets/rec-2.jpg
200 OK 11 kB URL GET HTTP/2 play.copperblade.top/ph-new/assets/rec-2.jpg
IP
ASN #24940 Hetzner Online GmbH
Requested by https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496#
Certificate IssuerLet's Encrypt
Subjectcopperblade.top
FingerprintB4:06:EB:71:4E:B8:D5:FB:11:2B:3E:39:B8:7D:99:AB:A9:F9:50:08
ValidityTue, 28 Feb 2023 09:22:46 GMT - Mon, 29 May 2023 09:22:45 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x180, components 3\012- data
Hash dbe1dba764a2ef20cf6760ad30539988
e14dca406d4f5932a9a4683635bbdf87def79eba
b0fe8ace388ec8556bcdd46cd30a03ddaadcf80d124e9052f2a19a27061829f7
GET /ph-new/assets/rec-2.jpg HTTP/1.1
Host: play.copperblade.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 18:13:17 GMT
content-type: image/jpeg
content-length: 10890
last-modified: Fri, 06 Jan 2023 12:05:20 GMT
etag: "63b80e80-2a8a"
strict-transport-security: max-age=63072000
accept-ranges: bytes
X-Firefox-Spdy: h2
play.copperblade.top/ph-new/assets/rec-3.jpg
200 OK 15 kB URL GET HTTP/2 play.copperblade.top/ph-new/assets/rec-3.jpg
IP
ASN #24940 Hetzner Online GmbH
Requested by https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496#
Certificate IssuerLet's Encrypt
Subjectcopperblade.top
FingerprintB4:06:EB:71:4E:B8:D5:FB:11:2B:3E:39:B8:7D:99:AB:A9:F9:50:08
ValidityTue, 28 Feb 2023 09:22:46 GMT - Mon, 29 May 2023 09:22:45 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x180, components 3\012- data
Hash 4d58cecaa4f40c979917c8e4d907033f
f0c6d616bcc3f4bd5a1dadbca8254d9f34f2921c
9ee7f1aecdeb64f4ce54c5d0b7ea3d92b2e9d06a7f9cb7b793e39262cda05996
GET /ph-new/assets/rec-3.jpg HTTP/1.1
Host: play.copperblade.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 18:13:17 GMT
content-type: image/jpeg
content-length: 15217
last-modified: Fri, 06 Jan 2023 12:05:20 GMT
etag: "63b80e80-3b71"
strict-transport-security: max-age=63072000
accept-ranges: bytes
X-Firefox-Spdy: h2
play.copperblade.top/ph-new/assets/rec-4.jpg
200 OK 8.9 kB URL GET HTTP/2 play.copperblade.top/ph-new/assets/rec-4.jpg
IP
ASN #24940 Hetzner Online GmbH
Requested by https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496#
Certificate IssuerLet's Encrypt
Subjectcopperblade.top
FingerprintB4:06:EB:71:4E:B8:D5:FB:11:2B:3E:39:B8:7D:99:AB:A9:F9:50:08
ValidityTue, 28 Feb 2023 09:22:46 GMT - Mon, 29 May 2023 09:22:45 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x180, components 3\012- data
Hash 8375f2a1249ce00f118c5b616ab71492
4e2d3bc095c01632578b0b39afbfc03f43e3fa42
f71320d61eb339fdb7b5d20249d4f6aa6e37e22e618dc83e8459da1db3f79483
GET /ph-new/assets/rec-4.jpg HTTP/1.1
Host: play.copperblade.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 18:13:17 GMT
content-type: image/jpeg
content-length: 8900
last-modified: Fri, 06 Jan 2023 12:05:20 GMT
etag: "63b80e80-22c4"
strict-transport-security: max-age=63072000
accept-ranges: bytes
X-Firefox-Spdy: h2
play.copperblade.top/ph-new/assets/rec-5.jpg
200 OK 13 kB URL GET HTTP/2 play.copperblade.top/ph-new/assets/rec-5.jpg
IP
ASN #24940 Hetzner Online GmbH
Requested by https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496#
Certificate IssuerLet's Encrypt
Subjectcopperblade.top
FingerprintB4:06:EB:71:4E:B8:D5:FB:11:2B:3E:39:B8:7D:99:AB:A9:F9:50:08
ValidityTue, 28 Feb 2023 09:22:46 GMT - Mon, 29 May 2023 09:22:45 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x180, components 3\012- data
Hash f9ec603fbe19b12e8a8c1874eea3e5f2
0e24410f618ffa17dc6a9380a5b9a4c06dfba4a9
a77b6918c2799981aa1a09fc5f787ff109883093f2efd28beaf79031f5a8ac02
GET /ph-new/assets/rec-5.jpg HTTP/1.1
Host: play.copperblade.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 18:13:17 GMT
content-type: image/jpeg
content-length: 13149
last-modified: Fri, 06 Jan 2023 12:05:20 GMT
etag: "63b80e80-335d"
strict-transport-security: max-age=63072000
accept-ranges: bytes
X-Firefox-Spdy: h2
play.copperblade.top/ph-new/assets/rec-6.jpg
200 OK 16 kB URL GET HTTP/2 play.copperblade.top/ph-new/assets/rec-6.jpg
IP
ASN #24940 Hetzner Online GmbH
Requested by https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496#
Certificate IssuerLet's Encrypt
Subjectcopperblade.top
FingerprintB4:06:EB:71:4E:B8:D5:FB:11:2B:3E:39:B8:7D:99:AB:A9:F9:50:08
ValidityTue, 28 Feb 2023 09:22:46 GMT - Mon, 29 May 2023 09:22:45 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x180, components 3\012- data
Hash 4887925f773d2ba9caea39686f764c7f
98c9abb09854fee425dbd78ad623af053cec6721
6e1e474a8fc326cd06593e0c1a55d0e73126ada3bf169713b847e82d28646773
GET /ph-new/assets/rec-6.jpg HTTP/1.1
Host: play.copperblade.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 18:13:17 GMT
content-type: image/jpeg
content-length: 15988
last-modified: Fri, 06 Jan 2023 12:05:20 GMT
etag: "63b80e80-3e74"
strict-transport-security: max-age=63072000
accept-ranges: bytes
X-Firefox-Spdy: h2
play.copperblade.top/ph-new/assets/rec-7.jpg
200 OK 14 kB URL GET HTTP/2 play.copperblade.top/ph-new/assets/rec-7.jpg
IP
ASN #24940 Hetzner Online GmbH
Requested by https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496#
Certificate IssuerLet's Encrypt
Subjectcopperblade.top
FingerprintB4:06:EB:71:4E:B8:D5:FB:11:2B:3E:39:B8:7D:99:AB:A9:F9:50:08
ValidityTue, 28 Feb 2023 09:22:46 GMT - Mon, 29 May 2023 09:22:45 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x180, components 3\012- data
Hash f8af6bb4bdbbf2788da61a614e2f214e
d4a22a315356fcbc5f4a6af2d8a15e96721abddc
edb8c2bdc0f5612a5bf789af233ccaa63dd3751fbfaffb01be48e6e43e78b0bc
GET /ph-new/assets/rec-7.jpg HTTP/1.1
Host: play.copperblade.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 18:13:17 GMT
content-type: image/jpeg
content-length: 13963
last-modified: Fri, 06 Jan 2023 12:05:20 GMT
etag: "63b80e80-368b"
strict-transport-security: max-age=63072000
accept-ranges: bytes
X-Firefox-Spdy: h2
play.copperblade.top/ph-new/assets/rec-8.jpg
200 OK 13 kB URL GET HTTP/2 play.copperblade.top/ph-new/assets/rec-8.jpg
IP
ASN #24940 Hetzner Online GmbH
Requested by https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496#
Certificate IssuerLet's Encrypt
Subjectcopperblade.top
FingerprintB4:06:EB:71:4E:B8:D5:FB:11:2B:3E:39:B8:7D:99:AB:A9:F9:50:08
ValidityTue, 28 Feb 2023 09:22:46 GMT - Mon, 29 May 2023 09:22:45 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x180, components 3\012- data
Hash eb826882457e1589d8a7d3b3499c4556
91284882dec199a9cc02ffa3ef3c86505159ce12
4fad6c5d1cd5bdb7eea1b216774e831a6e59a11ddcc8b0881747a4d278d86940
GET /ph-new/assets/rec-8.jpg HTTP/1.1
Host: play.copperblade.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 18:13:17 GMT
content-type: image/jpeg
content-length: 12992
last-modified: Fri, 06 Jan 2023 12:05:20 GMT
etag: "63b80e80-32c0"
strict-transport-security: max-age=63072000
accept-ranges: bytes
X-Firefox-Spdy: h2
play.copperblade.top/ph-new/assets/1.jpg
200 OK 14 kB URL GET HTTP/2 play.copperblade.top/ph-new/assets/1.jpg
IP
ASN #24940 Hetzner Online GmbH
Requested by https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496#
Certificate IssuerLet's Encrypt
Subjectcopperblade.top
FingerprintB4:06:EB:71:4E:B8:D5:FB:11:2B:3E:39:B8:7D:99:AB:A9:F9:50:08
ValidityTue, 28 Feb 2023 09:22:46 GMT - Mon, 29 May 2023 09:22:45 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x180, components 3\012- data
Hash b2abcc52b7bf315893f6751d5fc7875e
5997c599c5e6c408b9019159f4608026a78223cf
098b2a4c2b05fc238c6eae8654ea2a3bc9d5fac7c59cb420242d405fcc83ed47
GET /ph-new/assets/1.jpg HTTP/1.1
Host: play.copperblade.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 18:13:17 GMT
content-type: image/jpeg
content-length: 14404
last-modified: Fri, 06 Jan 2023 12:05:20 GMT
etag: "63b80e80-3844"
strict-transport-security: max-age=63072000
accept-ranges: bytes
X-Firefox-Spdy: h2
play.copperblade.top/ph-new/assets/2.jpg
200 OK 21 kB URL GET HTTP/2 play.copperblade.top/ph-new/assets/2.jpg
IP
ASN #24940 Hetzner Online GmbH
Requested by https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496#
Certificate IssuerLet's Encrypt
Subjectcopperblade.top
FingerprintB4:06:EB:71:4E:B8:D5:FB:11:2B:3E:39:B8:7D:99:AB:A9:F9:50:08
ValidityTue, 28 Feb 2023 09:22:46 GMT - Mon, 29 May 2023 09:22:45 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x180, components 3\012- data
Hash c3f3eb5d00c73ac19828309a4cde4e96
be66f4e10a00d90a0f8fdc0a5a4dbd19c143d97d
626b570f2ffdf83add77f51246ccb195fec4c15e4289173b8183cd47e7cfd763
GET /ph-new/assets/2.jpg HTTP/1.1
Host: play.copperblade.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 18:13:17 GMT
content-type: image/jpeg
content-length: 21253
last-modified: Fri, 06 Jan 2023 12:05:20 GMT
etag: "63b80e80-5305"
strict-transport-security: max-age=63072000
accept-ranges: bytes
X-Firefox-Spdy: h2
play.copperblade.top/ph-new/assets/3.jpg
200 OK 11 kB URL GET HTTP/2 play.copperblade.top/ph-new/assets/3.jpg
IP
ASN #24940 Hetzner Online GmbH
Requested by https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496#
Certificate IssuerLet's Encrypt
Subjectcopperblade.top
FingerprintB4:06:EB:71:4E:B8:D5:FB:11:2B:3E:39:B8:7D:99:AB:A9:F9:50:08
ValidityTue, 28 Feb 2023 09:22:46 GMT - Mon, 29 May 2023 09:22:45 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x180, components 3\012- data
Hash 3f9b232e4a112a89dedcae34ff319dda
5c633886ceeaf3b1185e24253df6be39378c8e85
55fddecdb3ed8e536018523555d995f39f85304bbc00f65ab96472236b57a49a
GET /ph-new/assets/3.jpg HTTP/1.1
Host: play.copperblade.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 18:13:17 GMT
content-type: image/jpeg
content-length: 11094
last-modified: Fri, 06 Jan 2023 12:05:20 GMT
etag: "63b80e80-2b56"
strict-transport-security: max-age=63072000
accept-ranges: bytes
X-Firefox-Spdy: h2
play.copperblade.top/ph-new/assets/4.jpg
200 OK 14 kB URL GET HTTP/2 play.copperblade.top/ph-new/assets/4.jpg
IP
ASN #24940 Hetzner Online GmbH
Requested by https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496#
Certificate IssuerLet's Encrypt
Subjectcopperblade.top
FingerprintB4:06:EB:71:4E:B8:D5:FB:11:2B:3E:39:B8:7D:99:AB:A9:F9:50:08
ValidityTue, 28 Feb 2023 09:22:46 GMT - Mon, 29 May 2023 09:22:45 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x180, components 3\012- data
Hash a4bef91e21afc13fed7f0bebcc6c4495
5dd2288d13e016a66fbe1f5605b2ed0fc3ad6326
44d3bf237a20f5d36a663aedd4a909a6118e6e35d6fe84971861f5638c070ecd
GET /ph-new/assets/4.jpg HTTP/1.1
Host: play.copperblade.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 18:13:17 GMT
content-type: image/jpeg
content-length: 13611
last-modified: Fri, 06 Jan 2023 12:05:20 GMT
etag: "63b80e80-352b"
strict-transport-security: max-age=63072000
accept-ranges: bytes
X-Firefox-Spdy: h2
play.copperblade.top/ph-new/assets/5.jpg
200 OK 12 kB URL GET HTTP/2 play.copperblade.top/ph-new/assets/5.jpg
IP
ASN #24940 Hetzner Online GmbH
Requested by https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496#
Certificate IssuerLet's Encrypt
Subjectcopperblade.top
FingerprintB4:06:EB:71:4E:B8:D5:FB:11:2B:3E:39:B8:7D:99:AB:A9:F9:50:08
ValidityTue, 28 Feb 2023 09:22:46 GMT - Mon, 29 May 2023 09:22:45 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x180, components 3\012- data
Hash 113d196991f086fe21f82ee35286eddc
093b74a20c8902f13be1ee735f90a93e397227f9
34a3bc9a7aee67e35d57d4bb0bdccf08c3639da85d2421c58f6c4a92f5eee5e1
GET /ph-new/assets/5.jpg HTTP/1.1
Host: play.copperblade.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 18:13:17 GMT
content-type: image/jpeg
content-length: 11713
last-modified: Fri, 06 Jan 2023 12:05:20 GMT
etag: "63b80e80-2dc1"
strict-transport-security: max-age=63072000
accept-ranges: bytes
X-Firefox-Spdy: h2
feed.cdnpsh.com/ps/config.js?id=W7-lkuObDEWXzHM4LgqUhA
200 OK 7.0 kB URL GET HTTP/2 feed.cdnpsh.com/ps/config.js?id=W7-lkuObDEWXzHM4LgqUhA
IP
ASN #24940 Hetzner Online GmbH
Requested by https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496#
Certificate IssuerLet's Encrypt
Subjectcdnpsh.com
Fingerprint70:66:F3:14:EA:86:02:81:C9:F7:5B:AF:B7:58:FE:69:7C:F4:E2:51
ValidityMon, 20 Feb 2023 09:54:43 GMT - Sun, 21 May 2023 09:54:42 GMT
File type ASCII text, with very long lines (21160), with CRLF, LF line terminators
Hash bb2feccb50b64cda36df6ce78c25438c
d9d0937dca502336083eb75be5b2e6f93244ad63
04630d406b71abf0b0a2a453715af4b8584db4ce3cfd2a867f2cfe320c3cbb05
GET /ps/config.js?id=W7-lkuObDEWXzHM4LgqUhA HTTP/1.1
Host: feed.cdnpsh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.copperblade.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 18:13:17 GMT
content-type: application/javascript
vary: Accept-Encoding
set-cookie: __psu=f79e0fcc-3019-4d2b-9099-624f15fa9dff; expires=Mon, 07 Apr 2025 18:13:17 GMT; path=/; secure; samesite=none
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
www.gstatic.com/firebasejs/8.4.1/firebase-messaging.js
200 OK 11 kB URL GET HTTP/3 www.gstatic.com/firebasejs/8.4.1/firebase-messaging.js
IP
Requested by https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496#
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint76:06:6A:AA:FB:72:F8:BA:90:67:2F:91:97:14:FB:68:D0:65:E9:22
ValidityMon, 20 Mar 2023 08:25:51 GMT - Mon, 12 Jun 2023 08:25:50 GMT
File type ASCII text, with very long lines (40976)
Hash 65fc850cb32508517dcbc63b09aa7909
b6a0811a047ac43a061b326c424e57e3b125eaee
cb0497203016e7af18b3989110eaca26fed09c7c2e1ae0fda9a159b6784f69d5
GET /firebasejs/8.4.1/firebase-messaging.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: www.gstatic.com
Connection: keep-alive
Referer: https://play.copperblade.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 10908
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 02 Apr 2023 18:36:15 GMT
expires: Mon, 01 Apr 2024 18:36:15 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 13 Apr 2021 06:56:17 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 430622
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
play.copperblade.top/ph-new/assets/thumb-big.jpg
200 OK 83 kB URL GET HTTP/2 play.copperblade.top/ph-new/assets/thumb-big.jpg
IP
ASN #24940 Hetzner Online GmbH
Requested by https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496#
Certificate IssuerLet's Encrypt
Subjectcopperblade.top
FingerprintB4:06:EB:71:4E:B8:D5:FB:11:2B:3E:39:B8:7D:99:AB:A9:F9:50:08
ValidityTue, 28 Feb 2023 09:22:46 GMT - Mon, 29 May 2023 09:22:45 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1237x691, components 3\012- data
Hash cb5cedbae6d67e62dc9fde274b7f7dbe
f31d7811c4b6e50ae053f315152366501a8b6002
deaddba93625d2c7610076927fcd37afadad9324ca3210a2bb12784d313dd788
GET /ph-new/assets/thumb-big.jpg HTTP/1.1
Host: play.copperblade.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 18:13:17 GMT
content-type: image/jpeg
content-length: 82623
last-modified: Fri, 06 Jan 2023 12:05:20 GMT
etag: "63b80e80-142bf"
strict-transport-security: max-age=63072000
accept-ranges: bytes
X-Firefox-Spdy: h2
play.copperblade.top/ph-new/assets/style.css
200 OK 3.7 kB URL GET HTTP/2 play.copperblade.top/ph-new/assets/style.css
IP
ASN #24940 Hetzner Online GmbH
Requested by https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496#
Certificate IssuerLet's Encrypt
Subjectcopperblade.top
FingerprintB4:06:EB:71:4E:B8:D5:FB:11:2B:3E:39:B8:7D:99:AB:A9:F9:50:08
ValidityTue, 28 Feb 2023 09:22:46 GMT - Mon, 29 May 2023 09:22:45 GMT
File type ASCII text, with CRLF line terminators
Hash 89906dccb722d8b0dd23f01cb56f56b0
a93a33924fa8c99b14be6bff4f5bcc047bbb18e3
8491209f619ef4023032415510418f09991e67d6cdf65cb08e04ae06e9ba0912
GET /ph-new/assets/style.css HTTP/1.1
Host: play.copperblade.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 18:13:17 GMT
content-type: text/css
last-modified: Fri, 06 Jan 2023 12:05:20 GMT
vary: Accept-Encoding
etag: W/"63b80e80-5f33"
strict-transport-security: max-age=63072000
content-encoding: gzip
X-Firefox-Spdy: h2
www.gstatic.com/firebasejs/8.4.1/firebase-app.js
200 OK 6.8 kB URL GET HTTP/3 www.gstatic.com/firebasejs/8.4.1/firebase-app.js
IP
Requested by https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496#
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint76:06:6A:AA:FB:72:F8:BA:90:67:2F:91:97:14:FB:68:D0:65:E9:22
ValidityMon, 20 Mar 2023 08:25:51 GMT - Mon, 12 Jun 2023 08:25:50 GMT
File type ASCII text, with very long lines (21158)
Hash cc9770d1cd023f5acf160f83840856fe
3b9c4a75943e3101e25a612ff975d03e9ef6f5ab
6b37f2d363f4b788f0b1473c7f51522bd85fe319ac39e7fb1c70aceaf35fe42e
GET /firebasejs/8.4.1/firebase-app.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: www.gstatic.com
Connection: keep-alive
Referer: https://play.copperblade.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 6763
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 07 Apr 2023 18:05:17 GMT
expires: Sat, 06 Apr 2024 18:05:17 GMT
cache-control: public, max-age=31536000
age: 481
last-modified: Tue, 13 Apr 2021 06:56:11 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/firebasejs/8.4.1/firebase-messaging.js
200 OK 11 kB URL GET HTTP/3 www.gstatic.com/firebasejs/8.4.1/firebase-messaging.js
IP
Requested by https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496#
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint76:06:6A:AA:FB:72:F8:BA:90:67:2F:91:97:14:FB:68:D0:65:E9:22
ValidityMon, 20 Mar 2023 08:25:51 GMT - Mon, 12 Jun 2023 08:25:50 GMT
File type ASCII text, with very long lines (40976)
Hash 65fc850cb32508517dcbc63b09aa7909
b6a0811a047ac43a061b326c424e57e3b125eaee
cb0497203016e7af18b3989110eaca26fed09c7c2e1ae0fda9a159b6784f69d5
GET /firebasejs/8.4.1/firebase-messaging.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: www.gstatic.com
Connection: keep-alive
Referer: https://play.copperblade.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 10908
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 02 Apr 2023 18:36:15 GMT
expires: Mon, 01 Apr 2024 18:36:15 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 13 Apr 2021 06:56:17 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 430623
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
play.copperblade.top/ph-new/assets/rec-1.jpg
200 OK 14 kB URL GET HTTP/2 play.copperblade.top/ph-new/assets/rec-1.jpg
IP
ASN #24940 Hetzner Online GmbH
Requested by https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496#
Certificate IssuerLet's Encrypt
Subjectcopperblade.top
FingerprintB4:06:EB:71:4E:B8:D5:FB:11:2B:3E:39:B8:7D:99:AB:A9:F9:50:08
ValidityTue, 28 Feb 2023 09:22:46 GMT - Mon, 29 May 2023 09:22:45 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x180, components 3\012- data
Hash b2abcc52b7bf315893f6751d5fc7875e
5997c599c5e6c408b9019159f4608026a78223cf
098b2a4c2b05fc238c6eae8654ea2a3bc9d5fac7c59cb420242d405fcc83ed47
GET /ph-new/assets/rec-1.jpg HTTP/1.1
Host: play.copperblade.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 18:13:18 GMT
content-type: image/jpeg
content-length: 14404
last-modified: Fri, 06 Jan 2023 12:05:20 GMT
etag: "63b80e80-3844"
strict-transport-security: max-age=63072000
accept-ranges: bytes
X-Firefox-Spdy: h2
feed.cdnpsh.com/ps/config.js?id=W7-lkuObDEWXzHM4LgqUhA
200 OK 11 kB URL GET HTTP/2 feed.cdnpsh.com/ps/config.js?id=W7-lkuObDEWXzHM4LgqUhA
IP
ASN #24940 Hetzner Online GmbH
Requested by https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496#
Certificate IssuerLet's Encrypt
Subjectcdnpsh.com
Fingerprint70:66:F3:14:EA:86:02:81:C9:F7:5B:AF:B7:58:FE:69:7C:F4:E2:51
ValidityMon, 20 Feb 2023 09:54:43 GMT - Sun, 21 May 2023 09:54:42 GMT
Hash ea658d25ce05680dfef71237cf797da7
6f8f77234d4ac1e2f87f6dcdc1794d2ef81d8cda
dcd6af1e4bd0a6e7928aab97b2f6f9bca5f9a2676f81684d90eded54dd583ae7
GET /ps/config.js?id=W7-lkuObDEWXzHM4LgqUhA HTTP/1.1
Host: feed.cdnpsh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.copperblade.top/
Cookie: __psu=f79e0fcc-3019-4d2b-9099-624f15fa9dff
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 18:13:18 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
js.pushssp.top/ps/pl.js
200 OK 16 kB IP
ASN #24940 Hetzner Online GmbH
Requested by https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496#
Certificate IssuerLet's Encrypt
Subjectpushssp.top
FingerprintFC:E2:D3:C9:58:A6:E4:EA:D7:55:9A:AA:E0:6D:12:C2:E7:50:CF:4F
ValidityTue, 31 Jan 2023 11:56:20 GMT - Mon, 01 May 2023 11:56:19 GMT
Hash b5d398c1ff487016030ec0d13b203b72
acde3aa5e1eda63116265c5934c20879326610ec
80822be7efabb009b032709b135d3ea4a677bfeeb9462c7603dbe0134c37c348
GET /ps/pl.js HTTP/1.1
Host: js.pushssp.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.copperblade.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 18:13:17 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
play.copperblade.top/ph-new/assets/rec-4.jpg
200 OK 8.9 kB URL GET HTTP/2 play.copperblade.top/ph-new/assets/rec-4.jpg
IP
ASN #24940 Hetzner Online GmbH
Requested by https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496#
Certificate IssuerLet's Encrypt
Subjectcopperblade.top
FingerprintB4:06:EB:71:4E:B8:D5:FB:11:2B:3E:39:B8:7D:99:AB:A9:F9:50:08
ValidityTue, 28 Feb 2023 09:22:46 GMT - Mon, 29 May 2023 09:22:45 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x180, components 3\012- data
Hash 8375f2a1249ce00f118c5b616ab71492
4e2d3bc095c01632578b0b39afbfc03f43e3fa42
f71320d61eb339fdb7b5d20249d4f6aa6e37e22e618dc83e8459da1db3f79483
GET /ph-new/assets/rec-4.jpg HTTP/1.1
Host: play.copperblade.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 18:13:18 GMT
content-type: image/jpeg
content-length: 8900
last-modified: Fri, 06 Jan 2023 12:05:20 GMT
etag: "63b80e80-22c4"
strict-transport-security: max-age=63072000
accept-ranges: bytes
X-Firefox-Spdy: h2
play.copperblade.top/ph-new/assets/rec-5.jpg
200 OK 13 kB URL GET HTTP/2 play.copperblade.top/ph-new/assets/rec-5.jpg
IP
ASN #24940 Hetzner Online GmbH
Requested by https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496#
Certificate IssuerLet's Encrypt
Subjectcopperblade.top
FingerprintB4:06:EB:71:4E:B8:D5:FB:11:2B:3E:39:B8:7D:99:AB:A9:F9:50:08
ValidityTue, 28 Feb 2023 09:22:46 GMT - Mon, 29 May 2023 09:22:45 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x180, components 3\012- data
Hash f9ec603fbe19b12e8a8c1874eea3e5f2
0e24410f618ffa17dc6a9380a5b9a4c06dfba4a9
a77b6918c2799981aa1a09fc5f787ff109883093f2efd28beaf79031f5a8ac02
GET /ph-new/assets/rec-5.jpg HTTP/1.1
Host: play.copperblade.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 18:13:18 GMT
content-type: image/jpeg
content-length: 13149
last-modified: Fri, 06 Jan 2023 12:05:20 GMT
etag: "63b80e80-335d"
strict-transport-security: max-age=63072000
accept-ranges: bytes
X-Firefox-Spdy: h2
play.copperblade.top/ph-new/assets/rec-6.jpg
200 OK 16 kB URL GET HTTP/2 play.copperblade.top/ph-new/assets/rec-6.jpg
IP
ASN #24940 Hetzner Online GmbH
Requested by https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496#
Certificate IssuerLet's Encrypt
Subjectcopperblade.top
FingerprintB4:06:EB:71:4E:B8:D5:FB:11:2B:3E:39:B8:7D:99:AB:A9:F9:50:08
ValidityTue, 28 Feb 2023 09:22:46 GMT - Mon, 29 May 2023 09:22:45 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x180, components 3\012- data
Hash 4887925f773d2ba9caea39686f764c7f
98c9abb09854fee425dbd78ad623af053cec6721
6e1e474a8fc326cd06593e0c1a55d0e73126ada3bf169713b847e82d28646773
GET /ph-new/assets/rec-6.jpg HTTP/1.1
Host: play.copperblade.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 18:13:18 GMT
content-type: image/jpeg
content-length: 15988
last-modified: Fri, 06 Jan 2023 12:05:20 GMT
etag: "63b80e80-3e74"
strict-transport-security: max-age=63072000
accept-ranges: bytes
X-Firefox-Spdy: h2
play.copperblade.top/ph-new/assets/rec-7.jpg
200 OK 14 kB URL GET HTTP/2 play.copperblade.top/ph-new/assets/rec-7.jpg
IP
ASN #24940 Hetzner Online GmbH
Requested by https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496#
Certificate IssuerLet's Encrypt
Subjectcopperblade.top
FingerprintB4:06:EB:71:4E:B8:D5:FB:11:2B:3E:39:B8:7D:99:AB:A9:F9:50:08
ValidityTue, 28 Feb 2023 09:22:46 GMT - Mon, 29 May 2023 09:22:45 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x180, components 3\012- data
Hash f8af6bb4bdbbf2788da61a614e2f214e
d4a22a315356fcbc5f4a6af2d8a15e96721abddc
edb8c2bdc0f5612a5bf789af233ccaa63dd3751fbfaffb01be48e6e43e78b0bc
GET /ph-new/assets/rec-7.jpg HTTP/1.1
Host: play.copperblade.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 18:13:18 GMT
content-type: image/jpeg
content-length: 13963
last-modified: Fri, 06 Jan 2023 12:05:20 GMT
etag: "63b80e80-368b"
strict-transport-security: max-age=63072000
accept-ranges: bytes
X-Firefox-Spdy: h2
static.addtoany.com/menu/sm.24.html
13 kB URL static.addtoany.com/menu/sm.24.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (677), with no line terminators
Hash 4728a36d1697e246c02ce7a03036c2ac
a8fecd678ac32004d36ad57c67aa609e4a6cf815
9bbd69e92c5d81c5276982a7ed07b8e967515720f065ead0f8b8df72833fe8a1
GET /menu/sm.24.html HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: static.addtoany.com
Connection: keep-alive
Referer: http://photosrandosmontagne.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 07 Apr 2023 18:13:11 GMT
content-type: text/html; charset=utf-8
via: e3s
last-modified: Fri, 18 Nov 2022 00:47:55 GMT
etag: W/"2a5-5edb40e6d10d8"
cache-control: max-age=315360000, immutable
age: 2109826
vary: Accept-Encoding
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7b443e3859861669-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
play.copperblade.top/ph-new/assets/1.jpg
200 OK 14 kB URL GET HTTP/2 play.copperblade.top/ph-new/assets/1.jpg
IP
ASN #24940 Hetzner Online GmbH
Requested by https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496#
Certificate IssuerLet's Encrypt
Subjectcopperblade.top
FingerprintB4:06:EB:71:4E:B8:D5:FB:11:2B:3E:39:B8:7D:99:AB:A9:F9:50:08
ValidityTue, 28 Feb 2023 09:22:46 GMT - Mon, 29 May 2023 09:22:45 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x180, components 3\012- data
Hash b2abcc52b7bf315893f6751d5fc7875e
5997c599c5e6c408b9019159f4608026a78223cf
098b2a4c2b05fc238c6eae8654ea2a3bc9d5fac7c59cb420242d405fcc83ed47
GET /ph-new/assets/1.jpg HTTP/1.1
Host: play.copperblade.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 18:13:18 GMT
content-type: image/jpeg
content-length: 14404
last-modified: Fri, 06 Jan 2023 12:05:20 GMT
etag: "63b80e80-3844"
strict-transport-security: max-age=63072000
accept-ranges: bytes
X-Firefox-Spdy: h2
play.copperblade.top/ph-new/assets/2.jpg
200 OK 21 kB URL GET HTTP/2 play.copperblade.top/ph-new/assets/2.jpg
IP
ASN #24940 Hetzner Online GmbH
Requested by https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496#
Certificate IssuerLet's Encrypt
Subjectcopperblade.top
FingerprintB4:06:EB:71:4E:B8:D5:FB:11:2B:3E:39:B8:7D:99:AB:A9:F9:50:08
ValidityTue, 28 Feb 2023 09:22:46 GMT - Mon, 29 May 2023 09:22:45 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x180, components 3\012- data
Hash c3f3eb5d00c73ac19828309a4cde4e96
be66f4e10a00d90a0f8fdc0a5a4dbd19c143d97d
626b570f2ffdf83add77f51246ccb195fec4c15e4289173b8183cd47e7cfd763
GET /ph-new/assets/2.jpg HTTP/1.1
Host: play.copperblade.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 18:13:18 GMT
content-type: image/jpeg
content-length: 21253
last-modified: Fri, 06 Jan 2023 12:05:20 GMT
etag: "63b80e80-5305"
strict-transport-security: max-age=63072000
accept-ranges: bytes
X-Firefox-Spdy: h2
play.copperblade.top/ph-new/assets/3.jpg
200 OK 11 kB URL GET HTTP/2 play.copperblade.top/ph-new/assets/3.jpg
IP
ASN #24940 Hetzner Online GmbH
Requested by https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496#
Certificate IssuerLet's Encrypt
Subjectcopperblade.top
FingerprintB4:06:EB:71:4E:B8:D5:FB:11:2B:3E:39:B8:7D:99:AB:A9:F9:50:08
ValidityTue, 28 Feb 2023 09:22:46 GMT - Mon, 29 May 2023 09:22:45 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x180, components 3\012- data
Hash 3f9b232e4a112a89dedcae34ff319dda
5c633886ceeaf3b1185e24253df6be39378c8e85
55fddecdb3ed8e536018523555d995f39f85304bbc00f65ab96472236b57a49a
GET /ph-new/assets/3.jpg HTTP/1.1
Host: play.copperblade.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 18:13:18 GMT
content-type: image/jpeg
content-length: 11094
last-modified: Fri, 06 Jan 2023 12:05:20 GMT
etag: "63b80e80-2b56"
strict-transport-security: max-age=63072000
accept-ranges: bytes
X-Firefox-Spdy: h2
play.copperblade.top/ph-new/assets/4.jpg
200 OK 14 kB URL GET HTTP/2 play.copperblade.top/ph-new/assets/4.jpg
IP
ASN #24940 Hetzner Online GmbH
Requested by https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496#
Certificate IssuerLet's Encrypt
Subjectcopperblade.top
FingerprintB4:06:EB:71:4E:B8:D5:FB:11:2B:3E:39:B8:7D:99:AB:A9:F9:50:08
ValidityTue, 28 Feb 2023 09:22:46 GMT - Mon, 29 May 2023 09:22:45 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x180, components 3\012- data
Hash a4bef91e21afc13fed7f0bebcc6c4495
5dd2288d13e016a66fbe1f5605b2ed0fc3ad6326
44d3bf237a20f5d36a663aedd4a909a6118e6e35d6fe84971861f5638c070ecd
GET /ph-new/assets/4.jpg HTTP/1.1
Host: play.copperblade.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 18:13:18 GMT
content-type: image/jpeg
content-length: 13611
last-modified: Fri, 06 Jan 2023 12:05:20 GMT
etag: "63b80e80-352b"
strict-transport-security: max-age=63072000
accept-ranges: bytes
X-Firefox-Spdy: h2
static.addtoany.com/menu/page.js
13 kB URL static.addtoany.com/menu/page.js
IP
File type ASCII text, with very long lines (3076), with no line terminators
Hash 24c999bdd84048913935dca7d38a4897
8aeb84339f682cb30e653e58c98e6df0c19e0c23
ea914160eb304cd9e28953a736a4147262d3d02de140e46639aa83164ae38e59
GET /menu/page.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://photosrandosmontagne.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 07 Apr 2023 18:13:10 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=172800
cf-bgj: minify
access-control-allow-origin: *
etag: W/"c04-5f1f2ae2e431b"
last-modified: Wed, 11 Jan 2023 01:11:30 GMT
vary: Accept-Encoding
via: e2s
x-content-type-options: nosniff
cf-cache-status: HIT
age: 70870
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7b443e36eac02d7d-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.copperblade.top/sw-4dfbd989159295654b8cda81cee87b68.js
0 B URL play.copperblade.top/sw-4dfbd989159295654b8cda81cee87b68.js
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectcopperblade.top
FingerprintB4:06:EB:71:4E:B8:D5:FB:11:2B:3E:39:B8:7D:99:AB:A9:F9:50:08
ValidityTue, 28 Feb 2023 09:22:46 GMT - Mon, 29 May 2023 09:22:45 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sw-4dfbd989159295654b8cda81cee87b68.js HTTP/1.1
Host: play.copperblade.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
If-Modified-Since: Thu, 17 Feb 2022 13:24:13 GMT
If-None-Match: W/"620e4c7d-954"
Cache-Control: max-age=0
TE: trailers
HTTP/2 304 Not Modified
server: nginx
date: Fri, 07 Apr 2023 18:13:18 GMT
last-modified: Thu, 17 Feb 2022 13:24:13 GMT
etag: "620e4c7d-954"
strict-transport-security: max-age=63072000
X-Firefox-Spdy: h2
play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496
200 OK 62 kB URL GET HTTP/2 play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496
IP
ASN #24940 Hetzner Online GmbH
Requested by https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496#
Certificate IssuerLet's Encrypt
Subjectcopperblade.top
FingerprintB4:06:EB:71:4E:B8:D5:FB:11:2B:3E:39:B8:7D:99:AB:A9:F9:50:08
ValidityTue, 28 Feb 2023 09:22:46 GMT - Mon, 29 May 2023 09:22:45 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496 HTTP/1.1
Host: play.copperblade.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 18:13:17 GMT
content-type: text/html
last-modified: Mon, 13 Mar 2023 13:25:22 GMT
vary: Accept-Encoding
etag: W/"640f2442-f3ae"
strict-transport-security: max-age=63072000
content-encoding: gzip
X-Firefox-Spdy: h2
js.cdnpsh.com/ps/ps.js?&pl=true&id=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar
200 OK 23 kB URL GET HTTP/2 js.cdnpsh.com/ps/ps.js?&pl=true&id=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar
IP
ASN #24940 Hetzner Online GmbH
Requested by https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496#
Certificate IssuerLet's Encrypt
Subjectcdnpsh.com
Fingerprint70:66:F3:14:EA:86:02:81:C9:F7:5B:AF:B7:58:FE:69:7C:F4:E2:51
ValidityMon, 20 Feb 2023 09:54:43 GMT - Sun, 21 May 2023 09:54:42 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ps/ps.js?&pl=true&id=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar HTTP/1.1
Host: js.cdnpsh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.copperblade.top/
Cookie: __psu=d5606ebc-13b1-46d2-81e7-e6998a0dac8e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 18:13:18 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496
200 OK 62 kB URL User Request GET HTTP/2 play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectcopperblade.top
FingerprintB4:06:EB:71:4E:B8:D5:FB:11:2B:3E:39:B8:7D:99:AB:A9:F9:50:08
ValidityTue, 28 Feb 2023 09:22:46 GMT - Mon, 29 May 2023 09:22:45 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496 HTTP/1.1
Host: play.copperblade.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 18:13:17 GMT
content-type: text/html
last-modified: Mon, 13 Mar 2023 13:25:22 GMT
vary: Accept-Encoding
etag: W/"640f2442-f3ae"
strict-transport-security: max-age=63072000
content-encoding: gzip
X-Firefox-Spdy: h2
play.copperblade.top/ph-new/assets/trls.js
200 OK 7.7 kB URL GET HTTP/2 play.copperblade.top/ph-new/assets/trls.js
IP
ASN #24940 Hetzner Online GmbH
Requested by https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496#
Certificate IssuerLet's Encrypt
Subjectcopperblade.top
FingerprintB4:06:EB:71:4E:B8:D5:FB:11:2B:3E:39:B8:7D:99:AB:A9:F9:50:08
ValidityTue, 28 Feb 2023 09:22:46 GMT - Mon, 29 May 2023 09:22:45 GMT
File type Unicode text, UTF-8 text, with very long lines (7721), with no line terminators
Hash 7a2a905a3bd420ff4f6ec8936830a2fb
ab1e02c75845b02fc3214994f9cc044d83157e29
1cbbf7dd560f4213eb015f342387b0108b97af683b2e5ca46d1d1af4f1d60e5c
GET /ph-new/assets/trls.js HTTP/1.1
Host: play.copperblade.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.copperblade.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=e485bfd541cf8090ea6ea5694f05f01e-11246-0407&sub_id=ar&hash=e13VwO0Q2wgC1f17RaTxwQ&exp=1680891496
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 18:13:17 GMT
content-type: application/javascript
last-modified: Mon, 13 Mar 2023 13:25:22 GMT
vary: Accept-Encoding
etag: W/"640f2442-1e3f"
strict-transport-security: max-age=63072000
content-encoding: gzip
X-Firefox-Spdy: h2
142.250.74.65
104.22.71.197
91.121.41.199
157.240.205.35
20.113.188.243
0.0.0.0