Overview

URLbradsphilliesblog.blogspot.com/2019/06/2017-topps-chrome-break.html
IP 172.217.21.161 (United States)
ASN#15169 GOOGLE
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2023-03-19 07:00:59 UTC
StatusLoading report..
IDS alerts0
Blocklist alert1
urlquery alerts No alerts detected
Tags None

Domain Summary (21)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
accounts.google.com (1) 81 2012-05-23 06:57:57 UTC 2023-03-18 09:22:36 UTC 142.250.74.109
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2023-03-18 04:09:44 UTC 34.160.144.191
resources.blogblog.com (1) 13274 2017-01-30 04:47:40 UTC 2023-03-18 17:36:21 UTC 216.58.207.233
apis.google.com (2) 105 2013-05-06 20:20:21 UTC 2023-03-18 04:11:21 UTC 172.217.21.174
www.blogblog.com (2) 28878 2012-05-22 07:35:04 UTC 2023-03-18 13:24:37 UTC 216.58.207.233
4.bp.blogspot.com (2) 11215 2012-05-21 13:44:19 UTC 2023-03-18 11:58:08 UTC 142.250.74.161
www.google.com (1) 7 No data No data 142.250.74.164
play.google.com (2) 34 2013-05-30 23:24:35 UTC 2023-03-18 05:29:37 UTC 142.250.74.78
fonts.gstatic.com (2) 0 2014-04-02 10:51:04 UTC 2023-03-18 06:52:38 UTC 142.250.74.35 Domain (gstatic.com) ranked at: 540
www.blogger.com (5) 8975 2012-05-22 07:35:03 UTC 2023-03-18 17:18:51 UTC 216.58.207.233
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2023-03-18 04:10:05 UTC 35.164.56.167
lh3.googleusercontent.com (14) 66 2012-05-22 07:35:05 UTC 2023-03-18 04:10:45 UTC 142.250.74.97
firefox.settings.services.mozilla.com (2) 867 2020-05-25 20:06:39 UTC 2023-03-18 04:09:44 UTC 35.241.9.150
bradsphilliesblog.blogspot.com (4) 0 2014-02-09 17:07:33 UTC 2023-03-17 12:46:51 UTC 142.250.74.65 Unknown ranking
1.bp.blogspot.com (2) 8403 2012-05-21 13:44:19 UTC 2023-03-18 17:21:27 UTC 142.250.74.161
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2023-03-18 04:09:29 UTC 34.120.237.76
r3.o.lencr.org (9) 344 2020-12-02 08:52:13 UTC 2023-03-18 04:09:03 UTC 23.36.77.32
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2023-03-18 04:09:44 UTC 34.117.237.239
ocsp.pki.goog (21) 175 2017-06-14 07:23:31 UTC 2023-03-18 04:09:11 UTC 142.250.74.131
pagead2.googlesyndication.com (1) 101 2012-05-21 07:15:40 UTC 2023-03-18 12:19:47 UTC 142.250.74.130
www.gstatic.com (1) 0 2012-05-29 15:36:17 UTC 2023-03-18 07:59:32 UTC 142.250.74.35 Domain (gstatic.com) ranked at: 540

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2023-03-19 2 bradsphilliesblog.blogspot.com/2019/06/2017-topps-chrome-break.html Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 172.217.21.161
Date UQ / IDS / BL URL IP
2023-03-26 14:46:40 +0000 0 - 2 - 15 googleweblight.com/i?u=eggfoodafv.com/vfc/w1h (...) 172.217.21.161
2023-03-22 03:57:23 +0000 0 - 3 - 1 googleweblight.com/i?u=eggfoodafv.com/pqf/vh1 (...) 172.217.21.161
2023-03-19 07:41:28 +0000 0 - 2 - 1 mummyrokiah.blogspot.com/2011/11/awas-cia-sed (...) 172.217.21.161
2023-03-19 07:41:19 +0000 0 - 1 - 3 5dfghdf5hgdf56hgf56hgsdf56hgfdgs.blogspot.qa/?m=1 172.217.21.161
2023-03-19 07:41:04 +0000 0 - 1 - 2 5dfghdf5hgdf56hgf56hgsdf56hgfdgs.blogspot.com.cy/ 172.217.21.161


Last 5 reports on ASN: GOOGLE
Date UQ / IDS / BL URL IP
2023-03-27 16:47:17 +0000 0 - 2 - 0 list-manage.agle1.cc/open?ns=kressinc&c=57521 (...) 172.217.21.179
2023-03-27 16:47:21 +0000 0 - 2 - 0 list-manage.agle1.cc/click?u=kressinc.com/get (...) 172.217.21.179
2023-03-27 16:47:18 +0000 0 - 2 - 0 list-manage.agle1.cc/click?u=twitter.com/KRES (...) 172.217.21.179
2023-03-27 16:45:09 +0000 0 - 1 - 0 csfiles.cobblestonesystems.com/HelperApps/Css (...) 104.196.56.67
2023-03-27 16:43:08 +0000 0 - 1 - 0 1ef8lw.4ir8yy.76452.exea41.dfahyp.edu.cn.lcho (...) 35.205.61.67


Last 1 reports on domain: bradsphilliesblog.blogspot.com
Date UQ / IDS / BL URL IP
2023-03-19 07:00:59 +0000 0 - 0 - 1 bradsphilliesblog.blogspot.com/2019/06/2017-t (...) 172.217.21.161


No other reports with similar screenshot

JavaScript

Executed Scripts (50)

Executed Evals (5)
#1 JavaScript::Eval (size: 22) - SHA256: 15f9eaa0da090c05589797c3a55d7ee16cf1400cba5c613f92bbaf20b21e8fc3
0,
function(t) {
    nB(t, 1)
}
#2 JavaScript::Eval (size: 15606) - SHA256: bd5b0142ba97c2a7779ab45c3e066dd82958b7dd7e14681a31dbbf86bd6e61ed
/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */
(function() {
    var y = function(C) {
            return C
        },
        n = function(C, t) {
            if (C = (t = M.trustedTypes, null), !t || !t.createPolicy) return C;
            try {
                C = t.createPolicy("bg", {
                    createHTML: y,
                    createScript: y,
                    createScriptURL: y
                })
            } catch (F) {
                M.console && M.console.error(F.message)
            }
            return C
        },
        M = this || self;
    (0, eval)(function(C, t) {
        return (t = n()) && 1 === C.eval(t.createScript("1")) ? function(F) {
            return t.createScript(F)
        } : function(F) {
            return "" + F
        }
    }(M)(Array(7824 * Math.random() | 0).join("\n") + '(function(){var CB=function(C,F,y){if(3==C.length){for(y=0;3>y;y++)F[y]+=C[y];for(y=(C=[13,8,13,12,16,5,3,10,15],0);9>y;y++)F[3](F,y%3,C[y])}},FV=function(C,F,y,M){function m(){}return{invoke:(M=t8(C,(y=void 0,function(t){m&&(F&&X(F),y=t,m(),m=void 0)}),!!F)[0],function(t,n,H,Y){function O(){y(function(Q){X(function(){t(Q)})},H)}if(!n)return n=M(H),t&&t(n),n;y?O():(Y=m,m=function(){Y(),X(O)})})}},yz=function(C,F,y,M,m){for(y=(m=y[2]|0,y[3]|0),M=0;16>M;M++)F=F>>>8|F<<24,F+=C|0,F^=m+755,C=C<<3|C>>>29,C^=F,y=y>>>8|y<<24,y+=m|0,m=m<<3|m>>>29,y^=M+755,m^=y;return[C>>>24&255,C>>>16&255,C>>>8&255,C>>>0&255,F>>>24&255,F>>>16&255,F>>>8&255,F>>>0&255]},e=function(C){return C.X?MB(C.s,C):J(8,C,true)},f=this||self,nB=function(C,F,y,M){for(M=(y=T(C),0);0<F;F--)M=M<<8|e(C);k(y,C,M)},g=function(C,F,y,M,m,t){if(F.G==F)for(t=G(C,F),405==C?(C=function(n,H,Y,O,Q){if(t.u_!=(Y=(H=t.length,(H|0)-4>>3),Y)){O=(Q=(Y<<3)-4,[0,0,m[1],(t.u_=Y,m[2])]);try{t.XF=yz(Hd(t,Q),Hd(t,(Q|0)+4),O)}catch(u){throw u;}}t.push(t.XF[H&7]^n)},m=G(411,F)):C=function(n){t.push(n)},M&&C(M&255),F=y.length,M=0;M<F;M++)C(y[M])},me=function(C,F){return(F=e(C),F&128)&&(F=F&127|e(C)<<7),F},P=function(C,F,y){y[k(F,C,y),YY]=2796},J8=function(C,F,y,M,m){if(y=F[0],y==b)C.I=25,C.K(F);else if(y==V){m=F[1];try{M=C.A||C.K(F)}catch(t){E(t,C),M=C.A}m(M)}else if(y==Oj)C.K(F);else if(y==U)C.K(F);else if(y==XV){try{for(M=0;M<C.C.length;M++)try{m=C.C[M],m[0][m[1]](m[2])}catch(t){}}catch(t){}(0,F[1])(function(t,n){C.V(t,true,n)},(C.C=[],function(t){(l(C,(t=!C.l.length,[ir])),t)&&w(true,false,C)}))}else{if(y==D)return M=F[2],k(272,C,F[6]),k(14,C,M),C.K(F);y==ir?(C.g=null,C.O=[],C.L=[]):y==YY&&"loading"===f.document.readyState&&(C.h=function(t,n){function H(){n||(n=true,t())}(f.document.addEventListener("DOMContentLoaded",H,(n=false,I)),f).addEventListener("load",H,I)})}},t8=function(C,F,y,M){return(M=R[C.substring(0,3)+"_"])?M(C.substring(3),F,y):Qz(F,C)},ur=function(C,F,y,M){(y=(M=T(F),T(F)),g)(y,F,z(G(M,F),C))},fB=function(C,F){if(F=null,C=f.trustedTypes,!C||!C.createPolicy)return F;try{F=C.createPolicy("bg",{createHTML:sj,createScript:sj,createScriptURL:sj})}catch(y){f.console&&f.console.error(y.message)}return F},sj=function(C){return C},vd=function(C,F,y){return C.V(function(M){y=M},false,F),y},Hd=function(C,F){return C[F]<<24|C[(F|0)+1]<<16|C[(F|0)+2]<<8|C[(F|0)+3]},c=function(C,F,y,M,m,t,n,H,Y){if(((t=(n=(m=(Y=(F||M.j++,0<M.S&&M.o&&M.yF&&1>=M.Y&&!M.X)&&!M.h&&(!F||1<M.H-y)&&0==document.hidden,H=4==M.j)||Y?M.F():M.v,m)-M.v,n)>>14,M.P)&&(M.P^=t*(n<<2)),M.U+=t,M).G=t||M.G,H||Y)M.j=0,M.v=m;if(!Y||m-M.D<M.S-(C?255:F?5:2))return false;return M.h=(k(267,(C=(M.H=y,G(F?459:267,M)),M),M.Z),M.l.push([Oj,C,F?y+1:y]),X),true},pB=function(C,F,y){if((F=typeof C,"object")==F)if(C){if(C instanceof Array)return"array";if(C instanceof Object)return F;if(y=Object.prototype.toString.call(C),"[object Window]"==y)return"object";if("[object Array]"==y||"number"==typeof C.length&&"undefined"!=typeof C.splice&&"undefined"!=typeof C.propertyIsEnumerable&&!C.propertyIsEnumerable("splice"))return"array";if("[object Function]"==y||"undefined"!=typeof C.call&&"undefined"!=typeof C.propertyIsEnumerable&&!C.propertyIsEnumerable("call"))return"function"}else return"null";else if("function"==F&&"undefined"==typeof C.call)return"object";return F},r=function(C,F,y,M,m,t){if(!y.N){if(3<(F=G((C=(0==(m=void 0,F&&F[0]===d&&(m=F[2],C=F[1],F=void 0),M=G(320,y),M.length)&&(t=G(459,y)>>3,M.push(C,t>>8&255,t&255),void 0!=m&&M.push(m&255)),""),F&&(F.message&&(C+=F.message),F.stack&&(C+=":"+F.stack)),344),y),F)){(m=(C=(F-=(C=C.slice(0,(F|0)-3),C.length|0)+3,Tw(C)),y.G),y).G=y;try{g(405,y,z(C.length,2).concat(C),9)}finally{y.G=m}}k(344,y,F)}},xY=function(C,F){(F.nz.push(F.g.slice()),F).g[267]=void 0,k(267,F,C)},l=function(C,F){C.l.splice(0,0,F)},I={passive:true,capture:true},Tw=function(C,F,y,M,m){for(M=y=(C=C.replace(/\\r\\n/g,"\\n"),m=[],0);M<C.length;M++)F=C.charCodeAt(M),128>F?m[y++]=F:(2048>F?m[y++]=F>>6|192:(55296==(F&64512)&&M+1<C.length&&56320==(C.charCodeAt(M+1)&64512)?(F=65536+((F&1023)<<10)+(C.charCodeAt(++M)&1023),m[y++]=F>>18|240,m[y++]=F>>12&63|128):m[y++]=F>>12|224,m[y++]=F>>6&63|128),m[y++]=F&63|128);return m},k=function(C,F,y){if(267==C||459==C)F.g[C]?F.g[C].concat(y):F.g[C]=KB(F,y);else{if(F.N&&221!=C)return;494==C||405==C||184==C||320==C||411==C?F.g[C]||(F.g[C]=kY(C,86,y,F)):F.g[C]=kY(C,137,y,F)}221==C&&(F.P=J(32,F,false),F.i=void 0)},kY=function(C,F,y,M,m,t,n,H){return(m=h[y=[91,77,-53,-4,(H=F&7,-67),89,y,(t=Gw,51),82,-10],M.u](M.Gt),m[M.u]=function(Y){H+=6+(n=Y,7*F),H&=7},m).concat=function(Y){return(Y=(n=(Y=(Y=C%16+1,-Y*n+62*n*n+y[H+35&7]*C*Y+(t()|0)*Y-4774*C*n+1*C*C*Y- -3286*n+H-62*C*C*n),void 0),y[Y]),y)[(H+13&7)+(F&2)]=Y,y[H+(F&2)]=77,Y},m},R,ZM=function(C,F,y,M){return G(14,(k(267,(gb(F,(M=G(267,F),F.O&&M<F.Z?(k(267,F,F.Z),xY(C,F)):k(267,F,C),y)),F),M),F))},z=function(C,F,y,M){for(y=(M=(F|0)-1,[]);0<=M;M--)y[(F|0)-1-(M|0)]=C>>8*M&255;return y},Qz=function(C,F){return[(C(function(y){y(F)}),function(){return F})]},Pd=function(C,F,y,M,m,t){function n(){if(C.G==C){if(C.g){var H=[D,y,M,void 0,m,t,arguments];if(2==F)var Y=w(false,false,(l(C,H),C));else if(1==F){var O=!C.l.length;(l(C,H),O)&&w(false,false,C)}else Y=J8(C,H);return Y}m&&t&&m.removeEventListener(t,n,I)}}return n},br=function(C,F,y,M){try{M=C[((F|0)+2)%3],C[F]=(C[F]|0)-(C[((F|0)+1)%3]|0)-(M|0)^(1==F?M<<y:M>>>y)}catch(m){throw m;}},Vz=function(C,F){return h[F](h.prototype,{prototype:C,replace:C,floor:C,length:C,pop:C,splice:C,parent:C,document:C,call:C,propertyIsEnumerable:C,stack:C,console:C})},SB=function(C,F,y,M,m){for(m=(C.pz=(C.i_=(C.ao=$Y,C)[V],Bd),C.Gt=Vz({get:function(){return this.concat()}},C.u),C.Z$=h[C.u](C.Gt,{value:{value:{}}}),M=0,[]);322>M;M++)m[M]=String.fromCharCode(M);(l(C,((P(C,(P(C,176,(k(208,(P((P(C,(P(C,(k(376,(P(C,((P(C,(P(C,440,(P(C,(P(C,(P(C,(C.vk=(k(211,(k(5,(P(C,292,(k(405,C,(k(494,C,[160,(P((P(C,169,(k(411,C,[0,0,(k(188,C,(P(C,(P(C,(P(C,178,(((P(C,(P(C,356,(P(C,(P(C,217,(P(C,378,(k(344,C,(C.D$=(P(C,92,(k(320,C,(k(14,C,(k(184,(P(C,427,(k(459,(k(267,C,(C.FF=(C.b_=0,C.X=(C.v=0,C.g=[],C.h=null,M=window.performance||{},C.H=8001,C.W=0,C.yF=false,((C.i=void 0,C).P=void 0,C.l_=(C.Z=0,function(t){this.G=t}),C.J=void 0,(C.L=[],C).A=void 0,C.Y=(C.o=false,C.G=C,C.nz=[],C.s=void 0,0),C.U=(C.O=(C.I=25,C.j=void 0,[]),1),C).C=(C.D=0,[]),void 0),(C.l=[],C.N=false,C).S=0,M.timeOrigin)||(M.timing||{}).navigationStart||0,0)),C),0),function(t,n,H){k((n=(H=T(t),T)(t),n),t,""+G(H,t))})),C),[]),{})),[])),function(t,n){n=T(t),t=G(n,t.G),t[0].removeEventListener(t[1],t[2],I)})),0),2048)),function(t,n,H,Y){k((n=(Y=T(t),H=T(t),T)(t),n),t,G(Y,t)||G(H,t))})),function(t){nB(t,4)})),C.Kz=0,240),function(t,n,H,Y){(n=G((Y=(H=T((Y=T(t),t)),G)(Y,t),H),t),k)(H,t,n+Y)}),function(t,n,H,Y,O,Q,u,K,p,S,x,v){function L(Z,B){for(;n<Z;)H|=e(t)<<n,n+=8;return H>>=(B=H&(1<<Z)-(n-=Z,1),Z),B}for(v=(x=p=(S=((H=n=(O=T(t),0),L(3))|0)+1,u=L(5),0),[]);p<u;p++)Y=L(1),v.push(Y),x+=Y?0:1;for(K=(x=(p=((x|0)-1).toString(2).length,0),[]);x<u;x++)v[x]||(K[x]=L(p));for(p=0;p<u;p++)v[p]&&(K[p]=T(t));for(Q=[];S--;)Q.push(G(T(t),t));P(t,O,function(Z,B,eB,a,N){for(N=(eB=[],[]),B=0;B<u;B++){if(a=K[B],!v[B]){for(;a>=N.length;)N.push(T(Z));a=N[a]}eB.push(a)}Z.s=KB(Z,(Z.X=KB(Z,Q.slice()),eB))})})),142),function(t,n,H,Y,O){(O=T((H=(n=T(t),T(t)),t)),t.G==t)&&(H=G(H,t),Y=G(n,t),O=G(O,t),Y[H]=O,221==n&&(t.i=void 0,2==H&&(t.P=J(32,t,false),t.i=void 0)))}),P)(C,407,function(t,n,H,Y){!c(false,true,n,t)&&(n=Uj(t),H=n.rF,Y=n.R,t.G==t||Y==t.l_&&H==t)&&(k(n.gF,t,Y.apply(H,n.T)),t.v=t.F())}),P)(C,342,function(t,n,H,Y,O){(Y=(n=(n=(H=(O=T(t),T(t)),T)(t),Y=T(t),G)(n,t),H=G(H,t),G)(Y,t),k)(O,t,Pd(t,Y,H,n))}),function(t,n,H,Y,O,Q){if(!c(true,true,n,t)){if("object"==(t=(O=G((Q=G((n=(O=(n=(Q=T(t),T(t)),H=T(t),T(t)),G(n,t)),Q),t),O),t),G)(H,t),pB)(Q)){for(Y in H=[],Q)H.push(Y);Q=H}for(H=(Y=(t=0<t?t:1,0),Q).length;Y<H;Y+=t)n(Q.slice(Y,(Y|0)+(t|0)),O)}})),386),function(t,n,H,Y){k((n=(H=e((Y=T(t),t)),T(t)),n),t,G(Y,t)>>>H)}),314),function(t){ur(1,t)}),P(C,238,function(t){ur(4,t)}),0)),0)]),function(t,n,H,Y){k((H=(n=G((Y=T((n=(H=T(t),T(t)),t)),n),t),G(H,t)),Y),t,H[n])})),C),332,function(t){lr(t,3)}),0),0]),q(4))),function(t,n,H,Y){n=G((H=(n=T(t),H=T(t),Y=T(t),G(H,t)),n),t),k(Y,t,n in H|0)})),C),C),C),f),0),437),function(t,n,H){0!=G((n=T(t),H=T(t),H=G(H,t),n),t)&&k(267,t,H)}),337),function(t){lr(t,4)}),157),function(t,n,H,Y,O,Q,u){for(Q=(H=(Y=(O=T(t),me)(t),u="",G(113,t)),H.length),n=0;Y--;)n=((n|0)+(me(t)|0))%Q,u+=m[H[n]];k(O,t,u)}),function(){})),147),function(t,n,H,Y){if(n=t.nz.pop()){for(H=e(t);0<H;H--)Y=T(t),n[Y]=t.g[Y];t.g=(n[n[320]=t.g[320],344]=t.g[344],n)}else k(267,t,t.Z)}),P)(C,339,function(t,n,H,Y,O){for(H=(n=(O=(Y=T(t),me(t)),0),[]);n<O;n++)H.push(e(t));k(Y,t,H)}),357),function(t,n,H){c(false,true,n,t)||(n=T(t),H=T(t),k(H,t,function(Y){return eval(Y)}(Ej(G(n,t.G)))))}),C),643),454),function(t,n){(n=G(T(t),t),xY)(n,t.G)}),408),function(t,n,H){k((n=(n=G((H=(n=T(t),T(t)),n),t),pB(n)),H),t,n)}),C),224,function(t,n,H,Y){Y=(n=(H=T((n=(Y=T(t),T(t)),t)),G(n,t)),G)(Y,t)==n,k(H,t,+Y)}),C),0),function(t,n,H,Y,O,Q){c(false,true,n,t)||(Q=Uj(t.G),n=Q.rF,O=Q.T,Y=Q.R,Q=Q.gF,H=O.length,n=0==H?new n[Y]:1==H?new n[Y](O[0]):2==H?new n[Y](O[0],O[1]):3==H?new n[Y](O[0],O[1],O[2]):4==H?new n[Y](O[0],O[1],O[2],O[3]):2(),k(Q,t,n))})),287),function(t,n,H,Y,O){0!==(H=(Y=(O=(n=(H=(Y=T(t),T(t)),T)(t),T(t)),G(Y,t.G)),O=G(O,t),G(H,t)),n=G(n,t),Y)&&(n=Pd(t,1,n,O,Y,H),Y.addEventListener(H,n,I),k(208,t,[Y,H,n]))}),l(C,[YY]),l)(C,[U,F]),[XV,y])),w)(true,true,C)},W,lr=function(C,F,y,M,m){((m=(y=(m=T((M=F&3,F&=4,C)),T)(C),G(m,C)),F)&&(m=Tw(""+m)),M&&g(y,C,z(m.length,2)),g)(y,C,m)},Uj=function(C,F,y,M,m,t){for(t=(M=((F=T((m=C[LB]||{},C)),m.gF=T(C),m).T=[],C.G==C?(e(C)|0)-1:1),y=T(C),0);t<M;t++)m.T.push(T(C));for(m.rF=G(y,C),m.R=G(F,C);M--;)m.T[M]=G(m.T[M],C);return m},G=function(C,F){if(F=F.g[C],void 0===F)throw[d,30,C];if(F.value)return F.create();return F.create(1*C*C+77*C+-53),F.prototype},T=function(C,F){if(C.X)return MB(C.s,C);return(F=J(8,C,true),F&128)&&(F^=128,C=J(2,C,true),F=(F<<2)+(C|0)),F},E=function(C,F){F.A=((F.A?F.A+"~":"E:")+C.message+":"+C.stack).slice(0,2048)},A=function(C,F,y){y=this;try{SB(this,F,C)}catch(M){E(M,this),C(function(m){m(y.A)})}},J=function(C,F,y,M,m,t,n,H,Y,O,Q,u,K,p){if((Y=G(267,F),Y)>=F.Z)throw[d,31];for(H=(Q=(n=(u=0,C),F.i_.length),Y);0<n;)t=H>>3,K=F.O[t],m=H%8,O=8-(m|0),O=O<n?O:n,y&&(M=F,M.i!=H>>6&&(M.i=H>>6,p=G(221,M),M.J=yz(M.P,M.i,[0,0,p[1],p[2]])),K^=F.J[t&Q]),H+=O,u|=(K>>8-(m|0)-(O|0)&(1<<O)-1)<<(n|0)-(O|0),n-=O;return k(267,F,(Y|(y=u,0))+(C|0)),y},MB=function(C,F){return(C=C.create().shift(),F.X).create().length||F.s.create().length||(F.X=void 0,F.s=void 0),C},X=f.requestIdleCallback?function(C){requestIdleCallback(function(){C()},{timeout:4})}:f.setImmediate?function(C){setImmediate(C)}:function(C){setTimeout(C,0)},w=function(C,F,y,M,m,t){if(y.l.length){y.yF=(y.o=(y.o&&0(),true),C);try{t=y.F(),y.v=t,y.j=0,y.D=t,m=wb(C,y),M=y.F()-y.D,y.W+=M,M<(F?0:10)||0>=y.I--||(M=Math.floor(M),y.L.push(254>=M?M:254))}finally{y.o=false}return m}},DM=function(C,F){F.push(C[0]<<24|C[1]<<16|C[2]<<8|C[3]),F.push(C[4]<<24|C[5]<<16|C[6]<<8|C[7]),F.push(C[8]<<24|C[9]<<16|C[10]<<8|C[11])},gb=function(C,F,y,M,m,t){if(!C.A){C.Y++;try{for(t=(y=0,void 0),M=C.Z;--F;)try{if((m=void 0,C).X)t=MB(C.X,C);else{if(y=G(267,C),y>=M)break;t=(m=(k(459,C,y),T)(C),G(m,C))}c(false,false,(t&&t[ir]&2048?t(C,F):r(0,[d,21,m],C),F),C)}catch(n){G(376,C)?r(22,n,C):k(376,C,n)}if(!F){if(C.EG){gb(C,(C.Y--,148005666396));return}r(0,[d,33],C)}}catch(n){try{r(22,n,C)}catch(H){E(H,C)}}C.Y--}},q=function(C,F){for(F=[];C--;)F.push(255*Math.random()|0);return F},wb=function(C,F,y,M){for(;F.l.length;){M=(F.h=null,F.l.pop());try{y=J8(F,M)}catch(m){E(m,F)}if(C&&F.h){C=F.h,C(function(){w(true,true,F)});break}}return y},KB=function(C,F,y){return(y=h[C.u](C.Z$),y)[C.u]=function(){return F},y.concat=function(M){F=M},y},LB=String.fromCharCode(105,110,116,101,103,67,104,101,99,107,66,121,112,97,115,115),b=[],D=[],XV=((A.prototype.B=(A.prototype.oo=void 0,"toString"),A).prototype.YT=void 0,[]),V=[],Oj=(A.prototype.EG=false,[]),YY=[],ir=[],d={},U=[],h=((((DM,function(){})(q),function(){})(br),function(){})(CB),d).constructor,Gw=((((((W=A.prototype,A.prototype.u="create",W.V=function(C,F,y,M,m){if((y="array"===pB(y)?y:[y],this).A)C(this.A);else try{M=!this.l.length,m=[],l(this,[b,m,y]),l(this,[V,C,m]),F&&!M||w(F,true,this)}catch(t){E(t,this),C(this.A)}},W).sG=function(C,F,y,M,m){for(m=M=0;M<C.length;M++)m+=C.charCodeAt(M),m+=m<<10,m^=m>>6;return M=(C=(m+=m<<3,m^=m>>11,m+(m<<15))>>>0,new Number(C&(1<<F)-1)),M[0]=(C>>>F)%y,M},W).dF=0,W).F=(window.performance||{}).now?function(){return this.FF+window.performance.now()}:function(){return+new Date},W).Tt=function(){return Math.floor(this.W+(this.F()-this.D))},W).OG=function(C,F,y,M,m,t){for(t=(M=y=0,[]);M<C.length;M++)for(y+=F,m=m<<F|C[M];7<y;)y-=8,t.push(m>>y&255);return t},void 0);((W.mk=function(C,F,y){return C^((F=(F^=F<<13,F^=F>>17,(F^F<<5)&y))||(F=1),F)},W.AD=function(){return Math.floor(this.F())},A).prototype.K=function(C,F){return F=(Gw=function(){return C==F?-53:10},C={},{}),function(y,M,m,t,n,H,Y,O,Q,u,K,p,S,x,v){p=C,C=F;try{if(x=y[0],x==U){n=y[1];try{for(u=atob((M=H=0,n)),v=[];M<u.length;M++)K=u.charCodeAt(M),255<K&&(v[H++]=K&255,K>>=8),v[H++]=K;k(221,this,(this.Z=(this.O=v,this).O.length<<3,[0,0,0]))}catch(L){r(17,L,this);return}gb(this,8001)}else if(x==b)y[1].push(G(184,this).length,G(494,this).length,G(405,this).length,G(344,this)),k(14,this,y[2]),this.g[232]&&ZM(G(232,this),this,8001);else{if(x==V){Y=(S=z((H=y[2],G(494,this).length|0)+2,2),this.G),this.G=this;try{m=G(320,this),0<m.length&&g(494,this,z(m.length,2).concat(m),10),g(494,this,z(this.U,1),109),g(494,this,z(this[V].length,1)),u=0,u+=G(188,this)&2047,u-=(G(494,this).length|0)+5,O=G(405,this),4<O.length&&(u-=(O.length|0)+3),0<u&&g(494,this,z(u,2).concat(q(u)),15),4<O.length&&g(494,this,z(O.length,2).concat(O),156)}finally{this.G=Y}if(Q=(v=q(2).concat(G(494,this)),v[1]=v[0]^6,v[3]=v[1]^S[0],v[4]=v[1]^S[1],this.QF(v)))Q="!"+Q;else for(Q="",u=0;u<v.length;u++)t=v[u][this.B](16),1==t.length&&(t="0"+t),Q+=t;return k(344,this,(G(405,(G(((M=Q,G(184,this)).length=H.shift(),494),this).length=H.shift(),this)).length=H.shift(),H.shift())),M}if(x==Oj)ZM(y[1],this,y[2]);else if(x==D)return ZM(y[1],this,8001)}}finally{C=p}}}(),A).prototype.Pk=0;var Bd,$Y=((A.prototype.QF=function(C,F,y,M){if(F=window.btoa){for(y=(M="",0);y<C.length;y+=8192)M+=String.fromCharCode.apply(null,C.slice(y,y+8192));C=F(M).replace(/\\+/g,"-").replace(/\\//g,"_").replace(/=/g,"")}else C=void 0;return C},A.prototype[XV]=[0,0,1,1,0,1,1],A).prototype.tD=0,/./),Is=U.pop.bind(A.prototype[b]),Ej=function(C,F){return(F=fB())&&1===C.eval(F.createScript("1"))?function(y){return F.createScript(y)}:function(y){return""+y}}((($Y[A.prototype.B]=Is,Bd=Vz({get:Is},A.prototype.u),A.prototype).hD=void 0,f));(R=f.botguard||(f.botguard={}),40<R.m||(R.m=41,R.bg=FV,R.a=t8),R).Vxh_=function(C,F,y){return[(y=new A(F,C),function(M){return vd(y,M)})]};}).call(this);'));
}).call(this);
#3 JavaScript::Eval (size: 18014) - SHA256: 8ea8f2fb3c3a6799196ef8ffda3b17a6ed0cfe2ff34b52554de9f76408104827
(function() {
    var CB = function(C, F, y) {
            if (3 == C.length) {
                for (y = 0; 3 > y; y++) F[y] += C[y];
                for (y = (C = [13, 8, 13, 12, 16, 5, 3, 10, 15], 0); 9 > y; y++) F[3](F, y % 3, C[y])
            }
        },
        FV = function(C, F, y, M) {
            function m() {}
            return {
                invoke: (M = t8(C, (y = void 0, function(t) {
                    m && (F && X(F), y = t, m(), m = void 0)
                }), !!F)[0], function(t, n, H, Y) {
                    function O() {
                        y(function(Q) {
                            X(function() {
                                t(Q)
                            })
                        }, H)
                    }
                    if (!n) return n = M(H), t && t(n), n;
                    y ? O() : (Y = m, m = function() {
                        Y(), X(O)
                    })
                })
            }
        },
        yz = function(C, F, y, M, m) {
            for (y = (m = y[2] | 0, y[3] | 0), M = 0; 16 > M; M++) F = F >>> 8 | F << 24, F += C | 0, F ^= m + 755, C = C << 3 | C >>> 29, C ^= F, y = y >>> 8 | y << 24, y += m | 0, m = m << 3 | m >>> 29, y ^= M + 755, m ^= y;
            return [C >>> 24 & 255, C >>> 16 & 255, C >>> 8 & 255, C >>> 0 & 255, F >>> 24 & 255, F >>> 16 & 255, F >>> 8 & 255, F >>> 0 & 255]
        },
        e = function(C) {
            return C.X ? MB(C.s, C) : J(8, C, true)
        },
        f = this || self,
        nB = function(C, F, y, M) {
            for (M = (y = T(C), 0); 0 < F; F--) M = M << 8 | e(C);
            k(y, C, M)
        },
        g = function(C, F, y, M, m, t) {
            if (F.G == F)
                for (t = G(C, F), 405 == C ? (C = function(n, H, Y, O, Q) {
                        if (t.u_ != (Y = (H = t.length, (H | 0) - 4 >> 3), Y)) {
                            O = (Q = (Y << 3) - 4, [0, 0, m[1], (t.u_ = Y, m[2])]);
                            try {
                                t.XF = yz(Hd(t, Q), Hd(t, (Q | 0) + 4), O)
                            } catch (u) {
                                throw u;
                            }
                        }
                        t.push(t.XF[H & 7] ^ n)
                    }, m = G(411, F)) : C = function(n) {
                        t.push(n)
                    }, M && C(M & 255), F = y.length, M = 0; M < F; M++) C(y[M])
        },
        me = function(C, F) {
            return (F = e(C), F & 128) && (F = F & 127 | e(C) << 7), F
        },
        P = function(C, F, y) {
            y[k(F, C, y), YY] = 2796
        },
        J8 = function(C, F, y, M, m) {
            if (y = F[0], y == b) C.I = 25, C.K(F);
            else if (y == V) {
                m = F[1];
                try {
                    M = C.A || C.K(F)
                } catch (t) {
                    E(t, C), M = C.A
                }
                m(M)
            } else if (y == Oj) C.K(F);
            else if (y == U) C.K(F);
            else if (y == XV) {
                try {
                    for (M = 0; M < C.C.length; M++) try {
                        m = C.C[M], m[0][m[1]](m[2])
                    } catch (t) {}
                } catch (t) {}(0, F[1])(function(t, n) {
                    C.V(t, true, n)
                }, (C.C = [], function(t) {
                    (l(C, (t = !C.l.length, [ir])), t) && w(true, false, C)
                }))
            } else {
                if (y == D) return M = F[2], k(272, C, F[6]), k(14, C, M), C.K(F);
                y == ir ? (C.g = null, C.O = [], C.L = []) : y == YY && "loading" === f.document.readyState && (C.h = function(t, n) {
                    function H() {
                        n || (n = true, t())
                    }(f.document.addEventListener("DOMContentLoaded", H, (n = false, I)), f).addEventListener("load", H, I)
                })
            }
        },
        t8 = function(C, F, y, M) {
            return (M = R[C.substring(0, 3) + "_"]) ? M(C.substring(3), F, y) : Qz(F, C)
        },
        ur = function(C, F, y, M) {
            (y = (M = T(F), T(F)), g)(y, F, z(G(M, F), C))
        },
        fB = function(C, F) {
            if (F = null, C = f.trustedTypes, !C || !C.createPolicy) return F;
            try {
                F = C.createPolicy("bg", {
                    createHTML: sj,
                    createScript: sj,
                    createScriptURL: sj
                })
            } catch (y) {
                f.console && f.console.error(y.message)
            }
            return F
        },
        sj = function(C) {
            return C
        },
        vd = function(C, F, y) {
            return C.V(function(M) {
                y = M
            }, false, F), y
        },
        Hd = function(C, F) {
            return C[F] << 24 | C[(F | 0) + 1] << 16 | C[(F | 0) + 2] << 8 | C[(F | 0) + 3]
        },
        c = function(C, F, y, M, m, t, n, H, Y) {
            if (((t = (n = (m = (Y = (F || M.j++, 0 < M.S && M.o && M.yF && 1 >= M.Y && !M.X) && !M.h && (!F || 1 < M.H - y) && 0 == document.hidden, H = 4 == M.j) || Y ? M.F() : M.v, m) - M.v, n) >> 14, M.P) && (M.P ^= t * (n << 2)), M.U += t, M).G = t || M.G, H || Y) M.j = 0, M.v = m;
            if (!Y || m - M.D < M.S - (C ? 255 : F ? 5 : 2)) return false;
            return M.h = (k(267, (C = (M.H = y, G(F ? 459 : 267, M)), M), M.Z), M.l.push([Oj, C, F ? y + 1 : y]), X), true
        },
        pB = function(C, F, y) {
            if ((F = typeof C, "object") == F)
                if (C) {
                    if (C instanceof Array) return "array";
                    if (C instanceof Object) return F;
                    if (y = Object.prototype.toString.call(C), "[object Window]" == y) return "object";
                    if ("[object Array]" == y || "number" == typeof C.length && "undefined" != typeof C.splice && "undefined" != typeof C.propertyIsEnumerable && !C.propertyIsEnumerable("splice")) return "array";
                    if ("[object Function]" == y || "undefined" != typeof C.call && "undefined" != typeof C.propertyIsEnumerable && !C.propertyIsEnumerable("call")) return "function"
                } else return "null";
            else if ("function" == F && "undefined" == typeof C.call) return "object";
            return F
        },
        r = function(C, F, y, M, m, t) {
            if (!y.N) {
                if (3 < (F = G((C = (0 == (m = void 0, F && F[0] === d && (m = F[2], C = F[1], F = void 0), M = G(320, y), M.length) && (t = G(459, y) >> 3, M.push(C, t >> 8 & 255, t & 255), void 0 != m && M.push(m & 255)), ""), F && (F.message && (C += F.message), F.stack && (C += ":" + F.stack)), 344), y), F)) {
                    (m = (C = (F -= (C = C.slice(0, (F | 0) - 3), C.length | 0) + 3, Tw(C)), y.G), y).G = y;
                    try {
                        g(405, y, z(C.length, 2).concat(C), 9)
                    } finally {
                        y.G = m
                    }
                }
                k(344, y, F)
            }
        },
        xY = function(C, F) {
            (F.nz.push(F.g.slice()), F).g[267] = void 0, k(267, F, C)
        },
        l = function(C, F) {
            C.l.splice(0, 0, F)
        },
        I = {
            passive: true,
            capture: true
        },
        Tw = function(C, F, y, M, m) {
            for (M = y = (C = C.replace(/\r\n/g, "\n"), m = [], 0); M < C.length; M++) F = C.charCodeAt(M), 128 > F ? m[y++] = F : (2048 > F ? m[y++] = F >> 6 | 192 : (55296 == (F & 64512) && M + 1 < C.length && 56320 == (C.charCodeAt(M + 1) & 64512) ? (F = 65536 + ((F & 1023) << 10) + (C.charCodeAt(++M) & 1023), m[y++] = F >> 18 | 240, m[y++] = F >> 12 & 63 | 128) : m[y++] = F >> 12 | 224, m[y++] = F >> 6 & 63 | 128), m[y++] = F & 63 | 128);
            return m
        },
        k = function(C, F, y) {
            if (267 == C || 459 == C) F.g[C] ? F.g[C].concat(y) : F.g[C] = KB(F, y);
            else {
                if (F.N && 221 != C) return;
                494 == C || 405 == C || 184 == C || 320 == C || 411 == C ? F.g[C] || (F.g[C] = kY(C, 86, y, F)) : F.g[C] = kY(C, 137, y, F)
            }
            221 == C && (F.P = J(32, F, false), F.i = void 0)
        },
        kY = function(C, F, y, M, m, t, n, H) {
            return (m = h[y = [91, 77, -53, -4, (H = F & 7, -67), 89, y, (t = Gw, 51), 82, -10], M.u](M.Gt), m[M.u] = function(Y) {
                H += 6 + (n = Y, 7 * F), H &= 7
            }, m).concat = function(Y) {
                return (Y = (n = (Y = (Y = C % 16 + 1, -Y * n + 62 * n * n + y[H + 35 & 7] * C * Y + (t() | 0) * Y - 4774 * C * n + 1 * C * C * Y - -3286 * n + H - 62 * C * C * n), void 0), y[Y]), y)[(H + 13 & 7) + (F & 2)] = Y, y[H + (F & 2)] = 77, Y
            }, m
        },
        R, ZM = function(C, F, y, M) {
            return G(14, (k(267, (gb(F, (M = G(267, F), F.O && M < F.Z ? (k(267, F, F.Z), xY(C, F)) : k(267, F, C), y)), F), M), F))
        },
        z = function(C, F, y, M) {
            for (y = (M = (F | 0) - 1, []); 0 <= M; M--) y[(F | 0) - 1 - (M | 0)] = C >> 8 * M & 255;
            return y
        },
        Qz = function(C, F) {
            return [(C(function(y) {
                y(F)
            }), function() {
                return F
            })]
        },
        Pd = function(C, F, y, M, m, t) {
            function n() {
                if (C.G == C) {
                    if (C.g) {
                        var H = [D, y, M, void 0, m, t, arguments];
                        if (2 == F) var Y = w(false, false, (l(C, H), C));
                        else if (1 == F) {
                            var O = !C.l.length;
                            (l(C, H), O) && w(false, false, C)
                        } else Y = J8(C, H);
                        return Y
                    }
                    m && t && m.removeEventListener(t, n, I)
                }
            }
            return n
        },
        br = function(C, F, y, M) {
            try {
                M = C[((F | 0) + 2) % 3], C[F] = (C[F] | 0) - (C[((F | 0) + 1) % 3] | 0) - (M | 0) ^ (1 == F ? M << y : M >>> y)
            } catch (m) {
                throw m;
            }
        },
        Vz = function(C, F) {
            return h[F](h.prototype, {
                prototype: C,
                replace: C,
                floor: C,
                length: C,
                pop: C,
                splice: C,
                parent: C,
                document: C,
                call: C,
                propertyIsEnumerable: C,
                stack: C,
                console: C
            })
        },
        SB = function(C, F, y, M, m) {
            for (m = (C.pz = (C.i_ = (C.ao = $Y, C)[V], Bd), C.Gt = Vz({get: function() {
                        return this.concat()
                    }
                }, C.u), C.Z$ = h[C.u](C.Gt, {
                    value: {
                        value: {}
                    }
                }), M = 0, []); 322 > M; M++) m[M] = String.fromCharCode(M);
            (l(C, ((P(C, (P(C, 176, (k(208, (P((P(C, (P(C, (k(376, (P(C, ((P(C, (P(C, 440, (P(C, (P(C, (P(C, (C.vk = (k(211, (k(5, (P(C, 292, (k(405, C, (k(494, C, [160, (P((P(C, 169, (k(411, C, [0, 0, (k(188, C, (P(C, (P(C, (P(C, 178, (((P(C, (P(C, 356, (P(C, (P(C, 217, (P(C, 378, (k(344, C, (C.D$ = (P(C, 92, (k(320, C, (k(14, C, (k(184, (P(C, 427, (k(459, (k(267, C, (C.FF = (C.b_ = 0, C.X = (C.v = 0, C.g = [], C.h = null, M = window.performance || {}, C.H = 8001, C.W = 0, C.yF = false, ((C.i = void 0, C).P = void 0, C.l_ = (C.Z = 0, function(t) {
                this.G = t
            }), C.J = void 0, (C.L = [], C).A = void 0, C.Y = (C.o = false, C.G = C, C.nz = [], C.s = void 0, 0), C.U = (C.O = (C.I = 25, C.j = void 0, []), 1), C).C = (C.D = 0, []), void 0), (C.l = [], C.N = false, C).S = 0, M.timeOrigin) || (M.timing || {}).navigationStart || 0, 0)), C), 0), function(t, n, H) {
                k((n = (H = T(t), T)(t), n), t, "" + G(H, t))
            })), C), []), {})), [])), function(t, n) {
                n = T(t), t = G(n, t.G), t[0].removeEventListener(t[1], t[2], I)
            })), 0), 2048)), function(t, n, H, Y) {
                k((n = (Y = T(t), H = T(t), T)(t), n), t, G(Y, t) || G(H, t))
            })), function(t) {
                nB(t, 4)
            })), C.Kz = 0, 240), function(t, n, H, Y) {
                (n = G((Y = (H = T((Y = T(t), t)), G)(Y, t), H), t), k)(H, t, n + Y)
            }), function(t, n, H, Y, O, Q, u, K, p, S, x, v) {
                function L(Z, B) {
                    for (; n < Z;) H |= e(t) << n, n += 8;
                    return H >>= (B = H & (1 << Z) - (n -= Z, 1), Z), B
                }
                for (v = (x = p = (S = ((H = n = (O = T(t), 0), L(3)) | 0) + 1, u = L(5), 0), []); p < u; p++) Y = L(1), v.push(Y), x += Y ? 0 : 1;
                for (K = (x = (p = ((x | 0) - 1).toString(2).length, 0), []); x < u; x++) v[x] || (K[x] = L(p));
                for (p = 0; p < u; p++) v[p] && (K[p] = T(t));
                for (Q = []; S--;) Q.push(G(T(t), t));
                P(t, O, function(Z, B, eB, a, N) {
                    for (N = (eB = [], []), B = 0; B < u; B++) {
                        if (a = K[B], !v[B]) {
                            for (; a >= N.length;) N.push(T(Z));
                            a = N[a]
                        }
                        eB.push(a)
                    }
                    Z.s = KB(Z, (Z.X = KB(Z, Q.slice()), eB))
                })
            })), 142), function(t, n, H, Y, O) {
                (O = T((H = (n = T(t), T(t)), t)), t.G == t) && (H = G(H, t), Y = G(n, t), O = G(O, t), Y[H] = O, 221 == n && (t.i = void 0, 2 == H && (t.P = J(32, t, false), t.i = void 0)))
            }), P)(C, 407, function(t, n, H, Y) {
                !c(false, true, n, t) && (n = Uj(t), H = n.rF, Y = n.R, t.G == t || Y == t.l_ && H == t) && (k(n.gF, t, Y.apply(H, n.T)), t.v = t.F())
            }), P)(C, 342, function(t, n, H, Y, O) {
                (Y = (n = (n = (H = (O = T(t), T(t)), T)(t), Y = T(t), G)(n, t), H = G(H, t), G)(Y, t), k)(O, t, Pd(t, Y, H, n))
            }), function(t, n, H, Y, O, Q) {
                if (!c(true, true, n, t)) {
                    if ("object" == (t = (O = G((Q = G((n = (O = (n = (Q = T(t), T(t)), H = T(t), T(t)), G(n, t)), Q), t), O), t), G)(H, t), pB)(Q)) {
                        for (Y in H = [], Q) H.push(Y);
                        Q = H
                    }
                    for (H = (Y = (t = 0 < t ? t : 1, 0), Q).length; Y < H; Y += t) n(Q.slice(Y, (Y | 0) + (t | 0)), O)
                }
            })), 386), function(t, n, H, Y) {
                k((n = (H = e((Y = T(t), t)), T(t)), n), t, G(Y, t) >>> H)
            }), 314), function(t) {
                ur(1, t)
            }), P(C, 238, function(t) {
                ur(4, t)
            }), 0)), 0)]), function(t, n, H, Y) {
                k((H = (n = G((Y = T((n = (H = T(t), T(t)), t)), n), t), G(H, t)), Y), t, H[n])
            })), C), 332, function(t) {
                lr(t, 3)
            }), 0), 0]), q(4))), function(t, n, H, Y) {
                n = G((H = (n = T(t), H = T(t), Y = T(t), G(H, t)), n), t), k(Y, t, n in H | 0)
            })), C), C), C), f), 0), 437), function(t, n, H) {
                0 != G((n = T(t), H = T(t), H = G(H, t), n), t) && k(267, t, H)
            }), 337), function(t) {
                lr(t, 4)
            }), 157), function(t, n, H, Y, O, Q, u) {
                for (Q = (H = (Y = (O = T(t), me)(t), u = "", G(113, t)), H.length), n = 0; Y--;) n = ((n | 0) + (me(t) | 0)) % Q, u += m[H[n]];
                k(O, t, u)
            }), function() {})), 147), function(t, n, H, Y) {
                if (n = t.nz.pop()) {
                    for (H = e(t); 0 < H; H--) Y = T(t), n[Y] = t.g[Y];
                    t.g = (n[n[320] = t.g[320], 344] = t.g[344], n)
                } else k(267, t, t.Z)
            }), P)(C, 339, function(t, n, H, Y, O) {
                for (H = (n = (O = (Y = T(t), me(t)), 0), []); n < O; n++) H.push(e(t));
                k(Y, t, H)
            }), 357), function(t, n, H) {
                c(false, true, n, t) || (n = T(t), H = T(t), k(H, t, function(Y) {
                    return eval(Y)
                }(Ej(G(n, t.G)))))
            }), C), 643), 454), function(t, n) {
                (n = G(T(t), t), xY)(n, t.G)
            }), 408), function(t, n, H) {
                k((n = (n = G((H = (n = T(t), T(t)), n), t), pB(n)), H), t, n)
            }), C), 224, function(t, n, H, Y) {
                Y = (n = (H = T((n = (Y = T(t), T(t)), t)), G(n, t)), G)(Y, t) == n, k(H, t, +Y)
            }), C), 0), function(t, n, H, Y, O, Q) {
                c(false, true, n, t) || (Q = Uj(t.G), n = Q.rF, O = Q.T, Y = Q.R, Q = Q.gF, H = O.length, n = 0 == H ? new n[Y] : 1 == H ? new n[Y](O[0]) : 2 == H ? new n[Y](O[0], O[1]) : 3 == H ? new n[Y](O[0], O[1], O[2]) : 4 == H ? new n[Y](O[0], O[1], O[2], O[3]) : 2(), k(Q, t, n))
            })), 287), function(t, n, H, Y, O) {
                0 !== (H = (Y = (O = (n = (H = (Y = T(t), T(t)), T)(t), T(t)), G(Y, t.G)), O = G(O, t), G(H, t)), n = G(n, t), Y) && (n = Pd(t, 1, n, O, Y, H), Y.addEventListener(H, n, I), k(208, t, [Y, H, n]))
            }), l(C, [YY]), l)(C, [U, F]), [XV, y])), w)(true, true, C)
        },
        W, lr = function(C, F, y, M, m) {
            ((m = (y = (m = T((M = F & 3, F &= 4, C)), T)(C), G(m, C)), F) && (m = Tw("" + m)), M && g(y, C, z(m.length, 2)), g)(y, C, m)
        },
        Uj = function(C, F, y, M, m, t) {
            for (t = (M = ((F = T((m = C[LB] || {}, C)), m.gF = T(C), m).T = [], C.G == C ? (e(C) | 0) - 1 : 1), y = T(C), 0); t < M; t++) m.T.push(T(C));
            for (m.rF = G(y, C), m.R = G(F, C); M--;) m.T[M] = G(m.T[M], C);
            return m
        },
        G = function(C, F) {
            if (F = F.g[C], void 0 === F) throw [d, 30, C];
            if (F.value) return F.create();
            return F.create(1 * C * C + 77 * C + -53), F.prototype
        },
        T = function(C, F) {
            if (C.X) return MB(C.s, C);
            return (F = J(8, C, true), F & 128) && (F ^= 128, C = J(2, C, true), F = (F << 2) + (C | 0)), F
        },
        E = function(C, F) {
            F.A = ((F.A ? F.A + "~" : "E:") + C.message + ":" + C.stack).slice(0, 2048)
        },
        A = function(C, F, y) {
            y = this;
            try {
                SB(this, F, C)
            } catch (M) {
                E(M, this), C(function(m) {
                    m(y.A)
                })
            }
        },
        J = function(C, F, y, M, m, t, n, H, Y, O, Q, u, K, p) {
            if ((Y = G(267, F), Y) >= F.Z) throw [d, 31];
            for (H = (Q = (n = (u = 0, C), F.i_.length), Y); 0 < n;) t = H >> 3, K = F.O[t], m = H % 8, O = 8 - (m | 0), O = O < n ? O : n, y && (M = F, M.i != H >> 6 && (M.i = H >> 6, p = G(221, M), M.J = yz(M.P, M.i, [0, 0, p[1], p[2]])), K ^= F.J[t & Q]), H += O, u |= (K >> 8 - (m | 0) - (O | 0) & (1 << O) - 1) << (n | 0) - (O | 0), n -= O;
            return k(267, F, (Y | (y = u, 0)) + (C | 0)), y
        },
        MB = function(C, F) {
            return (C = C.create().shift(), F.X).create().length || F.s.create().length || (F.X = void 0, F.s = void 0), C
        },
        X = f.requestIdleCallback ? function(C) {
            requestIdleCallback(function() {
                C()
            }, {
                timeout: 4
            })
        } : f.setImmediate ? function(C) {
            setImmediate(C)
        } : function(C) {
            setTimeout(C, 0)
        },
        w = function(C, F, y, M, m, t) {
            if (y.l.length) {
                y.yF = (y.o = (y.o && 0(), true), C);
                try {
                    t = y.F(), y.v = t, y.j = 0, y.D = t, m = wb(C, y), M = y.F() - y.D, y.W += M, M < (F ? 0 : 10) || 0 >= y.I-- || (M = Math.floor(M), y.L.push(254 >= M ? M : 254))
                } finally {
                    y.o = false
                }
                return m
            }
        },
        DM = function(C, F) {
            F.push(C[0] << 24 | C[1] << 16 | C[2] << 8 | C[3]), F.push(C[4] << 24 | C[5] << 16 | C[6] << 8 | C[7]), F.push(C[8] << 24 | C[9] << 16 | C[10] << 8 | C[11])
        },
        gb = function(C, F, y, M, m, t) {
            if (!C.A) {
                C.Y++;
                try {
                    for (t = (y = 0, void 0), M = C.Z; --F;) try {
                        if ((m = void 0, C).X) t = MB(C.X, C);
                        else {
                            if (y = G(267, C), y >= M) break;
                            t = (m = (k(459, C, y), T)(C), G(m, C))
                        }
                        c(false, false, (t && t[ir] & 2048 ? t(C, F) : r(0, [d, 21, m], C), F), C)
                    } catch (n) {
                        G(376, C) ? r(22, n, C) : k(376, C, n)
                    }
                    if (!F) {
                        if (C.EG) {
                            gb(C, (C.Y--, 148005666396));
                            return
                        }
                        r(0, [d, 33], C)
                    }
                } catch (n) {
                    try {
                        r(22, n, C)
                    } catch (H) {
                        E(H, C)
                    }
                }
                C.Y--
            }
        },
        q = function(C, F) {
            for (F = []; C--;) F.push(255 * Math.random() | 0);
            return F
        },
        wb = function(C, F, y, M) {
            for (; F.l.length;) {
                M = (F.h = null, F.l.pop());
                try {
                    y = J8(F, M)
                } catch (m) {
                    E(m, F)
                }
                if (C && F.h) {
                    C = F.h, C(function() {
                        w(true, true, F)
                    });
                    break
                }
            }
            return y
        },
        KB = function(C, F, y) {
            return (y = h[C.u](C.Z$), y)[C.u] = function() {
                return F
            }, y.concat = function(M) {
                F = M
            }, y
        },
        LB = String.fromCharCode(105, 110, 116, 101, 103, 67, 104, 101, 99, 107, 66, 121, 112, 97, 115, 115),
        b = [],
        D = [],
        XV = ((A.prototype.B = (A.prototype.oo = void 0, "toString"), A).prototype.YT = void 0, []),
        V = [],
        Oj = (A.prototype.EG = false, []),
        YY = [],
        ir = [],
        d = {},
        U = [],
        h = ((((DM, function() {})(q), function() {})(br), function() {})(CB), d).constructor,
        Gw = ((((((W = A.prototype, A.prototype.u = "create", W.V = function(C, F, y, M, m) {
            if ((y = "array" === pB(y) ? y : [y], this).A) C(this.A);
            else try {
                M = !this.l.length, m = [], l(this, [b, m, y]), l(this, [V, C, m]), F && !M || w(F, true, this)
            } catch (t) {
                E(t, this), C(this.A)
            }
        }, W).sG = function(C, F, y, M, m) {
            for (m = M = 0; M < C.length; M++) m += C.charCodeAt(M), m += m << 10, m ^= m >> 6;
            return M = (C = (m += m << 3, m ^= m >> 11, m + (m << 15)) >>> 0, new Number(C & (1 << F) - 1)), M[0] = (C >>> F) % y, M
        }, W).dF = 0, W).F = (window.performance || {}).now ? function() {
            return this.FF + window.performance.now()
        } : function() {
            return +new Date
        }, W).Tt = function() {
            return Math.floor(this.W + (this.F() - this.D))
        }, W).OG = function(C, F, y, M, m, t) {
            for (t = (M = y = 0, []); M < C.length; M++)
                for (y += F, m = m << F | C[M]; 7 < y;) y -= 8, t.push(m >> y & 255);
            return t
        }, void 0);
    ((W.mk = function(C, F, y) {
        return C ^ ((F = (F ^= F << 13, F ^= F >> 17, (F ^ F << 5) & y)) || (F = 1), F)
    }, W.AD = function() {
        return Math.floor(this.F())
    }, A).prototype.K = function(C, F) {
        return F = (Gw = function() {
                return C == F ? -53 : 10
            }, C = {}, {}),
            function(y, M, m, t, n, H, Y, O, Q, u, K, p, S, x, v) {
                p = C, C = F;
                try {
                    if (x = y[0], x == U) {
                        n = y[1];
                        try {
                            for (u = atob((M = H = 0, n)), v = []; M < u.length; M++) K = u.charCodeAt(M), 255 < K && (v[H++] = K & 255, K >>= 8), v[H++] = K;
                            k(221, this, (this.Z = (this.O = v, this).O.length << 3, [0, 0, 0]))
                        } catch (L) {
                            r(17, L, this);
                            return
                        }
                        gb(this, 8001)
                    } else if (x == b) y[1].push(G(184, this).length, G(494, this).length, G(405, this).length, G(344, this)), k(14, this, y[2]), this.g[232] && ZM(G(232, this), this, 8001);
                    else {
                        if (x == V) {
                            Y = (S = z((H = y[2], G(494, this).length | 0) + 2, 2), this.G), this.G = this;
                            try {
                                m = G(320, this), 0 < m.length && g(494, this, z(m.length, 2).concat(m), 10), g(494, this, z(this.U, 1), 109), g(494, this, z(this[V].length, 1)), u = 0, u += G(188, this) & 2047, u -= (G(494, this).length | 0) + 5, O = G(405, this), 4 < O.length && (u -= (O.length | 0) + 3), 0 < u && g(494, this, z(u, 2).concat(q(u)), 15), 4 < O.length && g(494, this, z(O.length, 2).concat(O), 156)
                            } finally {
                                this.G = Y
                            }
                            if (Q = (v = q(2).concat(G(494, this)), v[1] = v[0] ^ 6, v[3] = v[1] ^ S[0], v[4] = v[1] ^ S[1], this.QF(v))) Q = "!" + Q;
                            else
                                for (Q = "", u = 0; u < v.length; u++) t = v[u][this.B](16), 1 == t.length && (t = "0" + t), Q += t;
                            return k(344, this, (G(405, (G(((M = Q, G(184, this)).length = H.shift(), 494), this).length = H.shift(), this)).length = H.shift(), H.shift())), M
                        }
                        if (x == Oj) ZM(y[1], this, y[2]);
                        else if (x == D) return ZM(y[1], this, 8001)
                    }
                } finally {
                    C = p
                }
            }
    }(), A).prototype.Pk = 0;
    var Bd, $Y = ((A.prototype.QF = function(C, F, y, M) {
            if (F = window.btoa) {
                for (y = (M = "", 0); y < C.length; y += 8192) M += String.fromCharCode.apply(null, C.slice(y, y + 8192));
                C = F(M).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "")
            } else C = void 0;
            return C
        }, A.prototype[XV] = [0, 0, 1, 1, 0, 1, 1], A).prototype.tD = 0, /./),
        Is = U.pop.bind(A.prototype[b]),
        Ej = function(C, F) {
            return (F = fB()) && 1 === C.eval(F.createScript("1")) ? function(y) {
                return F.createScript(y)
            } : function(y) {
                return "" + y
            }
        }((($Y[A.prototype.B] = Is, Bd = Vz({get: Is
        }, A.prototype.u), A.prototype).hD = void 0, f));
    (R = f.botguard || (f.botguard = {}), 40 < R.m || (R.m = 41, R.bg = FV, R.a = t8), R).Vxh_ = function(C, F, y) {
        return [(y = new A(F, C), function(M) {
            return vd(y, M)
        })]
    };
}).call(this);
#4 JavaScript::Eval (size: 64) - SHA256: 20bbfab8b04ecc0249170c051af91e2b73891744e44b047c3cc897b3f65a4583
0,
function(t, n, H) {
    k((H = (n = (H = T(t), T)(t), t.g[H] && G(H, t)), n), t, H)
}
#5 JavaScript::Eval (size: 22) - SHA256: 4d1e473187593d1469eb5822790838606668e2bc8684547ac3a4f6abfa489b01
0,
function(t) {
    nB(t, 2)
}

Executed Writes (1)
#1 JavaScript::Write (size: 24) - SHA256: a3ba8250ebf2c8e28e99b0cbcb48488777fa3f512e83a7a56930803eb5d35e05
< xmp style = display: none >


HTTP Transactions (81)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E533D6BD6A8080FACDFF772BCBF359373DAB2D5A6FE5EABE64F95E68A8CD23AA"
Last-Modified: Fri, 17 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4629
Expires: Sun, 19 Mar 2023 08:17:57 GMT
Date: Sun, 19 Mar 2023 07:00:48 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "BD8ABB8F420D1E31462FCA1D6A7CAADF1E2BBA6FC7DB05684B5811E00E84107F"
Last-Modified: Fri, 17 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7332
Expires: Sun, 19 Mar 2023 09:03:00 GMT
Date: Sun, 19 Mar 2023 07:00:48 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Backoff, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 19 Mar 2023 06:27:02 GMT
age: 2026
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    bc86ef2a0cee04915bc360f5821adc8f
Sha1:   3658f9028cce204d38f7f48fcfaa2a8e4f54383a
Sha256: aeecd718d03811322457de4f20828bdba86b277e7e0e328cae9c0a8075638454
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "BD775C38C2E11F1BAEDDE5D92AB17CEAF4C2067F8EA996595A66801758A71813"
Last-Modified: Fri, 17 Mar 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8578
Expires: Sun, 19 Mar 2023 09:23:46 GMT
Date: Sun, 19 Mar 2023 07:00:48 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: lbzbhtaxFbuoQ51Flw6CWTD1k7U1iLNaazwR9tX4eBjSXgqH7L1v8MsMA/TuZk15fMlXvn4Wzho=
x-amz-request-id: FZQB30JYABJR2T59
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 19 Mar 2023 06:52:16 GMT
age: 512
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    e7bace7c1e04d44012e37ddffe36e5d5
Sha1:   3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
Sha256: 6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sun, 19 Mar 2023 07:00:48 GMT
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /2019/06/2017-topps-chrome-break.html HTTP/1.1 
Host: bradsphilliesblog.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         142.250.74.65
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Expires: Sun, 19 Mar 2023 07:00:48 GMT
Date: Sun, 19 Mar 2023 07:00:48 GMT
Cache-Control: private, max-age=0
Last-Modified: Sat, 18 Mar 2023 09:58:21 GMT
ETag: W/"ce245ac7af319d4c47b79c1a59ce48b1792cbfc643fe862a2710013f261af076"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 28305
Server: GSE


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (2040)
Size:   28305
Md5:    ca546027d15a2752f014617d22d8fe36
Sha1:   4e392ea24ec0019282e5389509e00ee18a70fe0e
Sha256: 31289734494dd6551c7db8a92c91b1f89c7329d386d93b8158685bf6ef7b1959

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /js/cookienotice.js HTTP/1.1 
Host: bradsphilliesblog.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bradsphilliesblog.blogspot.com/2019/06/2017-topps-chrome-break.html

search
                                         142.250.74.65
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
Date: Sun, 19 Mar 2023 07:00:48 GMT
Expires: Sun, 26 Mar 2023 07:00:48 GMT
Cache-Control: public, max-age=604800
Last-Modified: Sun, 19 Mar 2023 03:48:57 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0


--- Additional Info ---
Magic:  ASCII text
Size:   2026
Md5:    c4e1ed83d89245089b8a1203be20a377
Sha1:   f3940e1215b89300ef97d57a25993f25243b8688
Sha256: afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /static/v1/widgets/2975350028-css_bundle_v2.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bradsphilliesblog.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.233
HTTP/2 200 OK
content-type: text/css
                                        
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 7776
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 15 Mar 2023 13:08:04 GMT
expires: Thu, 14 Mar 2024 13:08:04 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 14 Mar 2023 21:52:35 GMT
vary: Accept-Encoding
age: 323565
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (35959)
Size:   7776
Md5:    5aa2d3297bdc86bc81322aedecbb5e79
Sha1:   1c0a3c007e41726e167e79b70ddea76198650884
Sha256: feae1fac625d0f30b5f10fa00b62df1a5600cd2178062c427e55f289b29cc630
                                        
                                            GET /img/icon18_edit_allbkg.gif HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bradsphilliesblog.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         216.58.207.233
HTTP/2 200 OK
content-type: image/gif
                                        
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 162
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 15 Mar 2023 15:48:58 GMT
expires: Wed, 22 Mar 2023 15:48:58 GMT
cache-control: public, max-age=604800
last-modified: Wed, 15 Mar 2023 03:50:49 GMT
age: 313911
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 18 x 18\012- data
Size:   162
Md5:    c991641178ff05adf0d004298b5eafa9
Sha1:   d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
Sha256: ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
                                        
                                            GET /static/v1/jsbin/976584016-comment_from_post_iframe.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bradsphilliesblog.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.233
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6756
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 15 Mar 2023 12:51:17 GMT
expires: Thu, 14 Mar 2024 12:51:17 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 14 Mar 2023 20:00:26 GMT
vary: Accept-Encoding
age: 324572
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1720)
Size:   6756
Md5:    6257474fb561cbfe96fe59a4bf03c9db
Sha1:   5341cee7f12a49010b004ad7e2a5d6d775db57c6
Sha256: 32b2fb9167f78dfc0c2309c8928b7971468a60bc2b8cce9b2690aba73e464c19
                                        
                                            GET /js/platform.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bradsphilliesblog.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         172.217.21.174
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 21022
date: Sun, 19 Mar 2023 07:00:49 GMT
expires: Sun, 19 Mar 2023 07:00:49 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "5ebb85d0c8d0a403"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1429)
Size:   21022
Md5:    2e9e150d66328b6b6a88e285fc282762
Sha1:   22b038643bd45f842349cc7a4a7075cc0f074725
Sha256: 30d9bc41eb379b7b441031e0df6d0742df42ca92be34697f729b8eca83dc9d54
                                        
                                            GET /static/v1/widgets/3389988682-widgets.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bradsphilliesblog.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.233
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56895
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 15 Mar 2023 02:04:25 GMT
expires: Thu, 14 Mar 2024 02:04:25 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 15 Mar 2023 00:51:20 GMT
vary: Accept-Encoding
age: 363384
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2221)
Size:   56895
Md5:    9499c51b064d1e56fccd572f39f94eae
Sha1:   c8a95eea0f9d2e84aa6788a6dcb86d6b569a3da4
Sha256: 9c868d3622f0920a454c7c05008a0993a8040a87ef31326dc17ba182065e5313
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /1kt/awesomeinc/body_background_dark.png HTTP/1.1 
Host: www.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bradsphilliesblog.blogspot.com/

search
                                         216.58.207.233
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 106
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 15 Mar 2023 13:06:07 GMT
Expires: Wed, 22 Mar 2023 13:06:07 GMT
Cache-Control: public, max-age=604800
Last-Modified: Tue, 14 Mar 2023 13:51:59 GMT
Age: 323682


--- Additional Info ---
Magic:  PNG image data, 5 x 5, 1-bit colormap, non-interlaced\012- data
Size:   106
Md5:    1de2f5d595cb35714e69a0f86e5f058a
Sha1:   c1ecb1aa5b2112d67dbe4644594a984a8df8d933
Sha256: 50d8a5573603d9819f10428efb4bdb6ff418aedbeb830d19e8c848b8f1df8677
                                        
                                            GET /_/scs/abc-static/_/js/k=gapi.lb.en.Oupypiulh58.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_CVmSAWqMsGCHgMRyaSvlE8hY6sw/cb=gapi.loaded_0?le=scs HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bradsphilliesblog.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         172.217.21.174
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 61020
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 15 Mar 2023 07:35:21 GMT
expires: Thu, 14 Mar 2024 07:35:21 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 01 Feb 2023 16:56:11 GMT
vary: Accept-Encoding
age: 343528
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1445)
Size:   61020
Md5:    e8ba0e75a21e8131676aeabb448ab32b
Sha1:   a4e9c288bfe50835fd9354b40c6ef670b88a0a13
Sha256: 696d24c2350d7d8ca017aa7d070a0470afd2b9959c46c9f4e6a1d762aaf92706
                                        
                                            GET /pagead/js/google_top_exp.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bradsphilliesblog.blogspot.com/

search
                                         142.250.74.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 0
Date: Sat, 18 Mar 2023 07:52:24 GMT
Expires: Sat, 01 Apr 2023 07:52:24 GMT
Cache-Control: public, max-age=1209600
Age: 83305
ETag: 13036835877489095579
Vary: Accept-Encoding


--- Additional Info ---
Magic:  ASCII text
Size:   67
Md5:    9bbc3ca32ec951a484589ce0e6b4db73
Sha1:   753d6f6183b33b2dee5dde2208fca91c17f5bb13
Sha256: b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Pragma, Content-Type, Content-Length, Cache-Control, Expires, Backoff, Alert, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 19 Mar 2023 06:17:21 GMT
age: 2608
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /1kt/awesomeinc/body_gradient_dark.png HTTP/1.1 
Host: www.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bradsphilliesblog.blogspot.com/

search
                                         216.58.207.233
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 141
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 16 Mar 2023 05:26:19 GMT
Expires: Thu, 23 Mar 2023 05:26:19 GMT
Cache-Control: public, max-age=604800
Last-Modified: Wed, 15 Mar 2023 23:02:33 GMT
Age: 264870


--- Additional Info ---
Magic:  PNG image data, 8 x 276, 8-bit/color RGBA, non-interlaced\012- data
Size:   141
Md5:    3eae035d0731c30445e8469cefc7a185
Sha1:   0e9abf4f6203ba4e0dfae0d889b6adf3cb55a929
Sha256: 625d4151db99dc578ae3e643b34ec849ed01078bbc6c8f368d5ca0d7e90c6186
                                        
                                            GET /img/logo-16.png HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bradsphilliesblog.blogspot.com/

search
                                         216.58.207.233
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 279
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 16 Mar 2023 05:25:51 GMT
Expires: Thu, 23 Mar 2023 05:25:51 GMT
Cache-Control: public, max-age=604800
Last-Modified: Wed, 15 Mar 2023 09:52:32 GMT
Age: 264898


--- Additional Info ---
Magic:  PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Size:   279
Md5:    5ffecab6c722bb0adc3fce8d83b27993
Sha1:   0e59b05d3da526e82bb4f5d47c5d94e2a318dafb
Sha256: cca664ca16fde285160e80eae6ba4501c27b1dd1ce09aec1e84caa74b5baff53
                                        
                                            GET /-r8lum1r6fr8/WS8PnyOTwzI/AAAAAAAASu0/2PVsSRUQVWYbKst_RbzcqQPURmpfHFZbwCK4B/s35/* HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bradsphilliesblog.blogspot.com/

search
                                         142.250.74.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="*.jpg"
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 1596
X-XSS-Protection: 0
Date: Sun, 19 Mar 2023 07:00:49 GMT
Expires: Sat, 18 Mar 2023 12:46:49 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v4aee"
Vary: Origin
Age: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 35x35, components 3\012- data
Size:   1596
Md5:    6e80c11ed4659724203de2f5e722996c
Sha1:   0625e445c81a321ed893c9cf0cd4e158e7b2bd3a
Sha256: 24efd7083c2c0d1b796f0b31572b0db89c47ecf8d025f9ea6a889e02995b36f4
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "5DB17BB0A40658845E03D8237A69458A0576D955006EE224930B0310179AF9AF"
Last-Modified: Fri, 17 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7495
Expires: Sun, 19 Mar 2023 09:05:44 GMT
Date: Sun, 19 Mar 2023 07:00:49 GMT
Connection: keep-alive

                                        
                                            GET /b/stats?style=BLACK_TRANSPARENT&timeRange=ALL_TIME&token=APq4FmAYec5SdAmWMXCouP4jJYUfISOw-h2rKpFhGQRESihmaHZq1TFSkK8pB63C7kxqmQnTijz6IcjmKGY1LlCaiIK3MJYZRw HTTP/1.1 
Host: bradsphilliesblog.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bradsphilliesblog.blogspot.com/2019/06/2017-topps-chrome-break.html

search
                                         142.250.74.65
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Content-Encoding: gzip
Date: Sun, 19 Mar 2023 07:00:49 GMT
Expires: Sun, 19 Mar 2023 07:00:49 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 264
Server: GSE


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (403), with no line terminators
Size:   264
Md5:    82cfba44f652bfe9070470e1a215cf05
Sha1:   3bba59d095e51ce05ef1c930569cf88eb95d9d14
Sha256: c007421c40a90f8d9304359a8a9299c95c87933361a5bd0b5113380c81a089d6
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /-0Zqza-DHNlM/XRQYb3hZpuI/AAAAAAAAFsQ/TVpRiwg3o3sxw-H_VdUNZw91TCWdVMHdQCLcBGAs/s400/2017%2BTopps%2BChrome%2BBreak%2B2.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bradsphilliesblog.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v16c6"
expires: Mon, 20 Mar 2023 07:00:49 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="2017 Topps Chrome Break 2.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 19 Mar 2023 07:00:49 GMT
server: fife
content-length: 46204
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 281x400, components 3\012- data
Size:   46204
Md5:    3c9720528216154bd6eef35e19f6a26d
Sha1:   53577541b73e77446306319d052e513c7227fffa
Sha256: 69a74a8d3ea0d5a8976afbbdff22d32b64a6d08a78ceb477bfd25943456aa307
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /-RtukxN9q4XU/Wj7hd_okx1I/AAAAAAAAFAY/ubXiqpTyeVYvb2igzO2nxbVr9F03IbYAwCK4BGAYYCw/s1600/2%2BRyan%2BHoward%2BMuseum%2BCollection%2Bnameplate%2Bone%2Bof%2Bone.jpg HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bradsphilliesblog.blogspot.com/

search
                                         142.250.74.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
ETag: "v1407"
Expires: Mon, 20 Mar 2023 07:00:49 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="2 Ryan Howard Museum Collection nameplate one of one.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sun, 19 Mar 2023 07:00:49 GMT
Server: fife
Content-Length: 97146
X-XSS-Protection: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, orientation=upper-left, software=Google], baseline, precision 8, 587x348, components 3\012- data
Size:   97146
Md5:    99b7398f979fcbc41bed06f408e6642b
Sha1:   7b9080e77c20b8763c08e62449f8aee9468cd4fc
Sha256: cd341d3b8fe202d27a429d850c035b12faadbfe26fab6f26850a43c027526d4e
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /dyn-css/authorization.css?targetBlogID=6017458877118178721&zx=c4ce3283-9ffd-4167-9388-ca200f6d91e0 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bradsphilliesblog.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         216.58.207.233
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                        
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 19 Mar 2023 07:00:49 GMT
last-modified: Sun, 19 Mar 2023 07:00:49 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  very short file (no magic)
Size:   21
Md5:    a62e4d501434033d5d177e67d3aafdd0
Sha1:   34f7300c9ed47334cf10826d57af785321e3138b
Sha256: b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522
                                        
                                            GET /recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.164
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
expires: Sun, 19 Mar 2023 07:00:49 GMT
date: Sun, 19 Mar 2023 07:00:49 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 667
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1034), with no line terminators
Size:   667
Md5:    cdb4be6c897d5160a051d25052ceda61
Sha1:   05bf135ba2f92c1a86100b124ff5764d8b4c4271
Sha256: dcebc16a6a39749db62a1393abdf1b393296be2dab6ff4d6c6400a172116d790
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 
Host: play.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.78
HTTP/2 200 OK
content-type: text/plain; charset=UTF-8
                                        
access-control-allow-origin: https://www.blogger.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
date: Sun, 19 Mar 2023 07:00:49 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+898; expires=Tue, 18-Mar-2025 07:00:49 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Sun, 19 Mar 2023 07:00:49 GMT
cache-control: private
X-Firefox-Spdy: h2

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: aiEQtAF3G+gHheBsTadiOQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         35.164.56.167
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: liCiL8NmUySD/fslmXs4TqspTz8=

                                        
                                            POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 
Host: play.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 2997
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.78
HTTP/2 200 OK
content-type: text/plain; charset=UTF-8
                                        
access-control-allow-origin: https://www.blogger.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-encoding: gzip
date: Sun, 19 Mar 2023 07:00:49 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+800; expires=Tue, 18-Mar-2025 07:00:49 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Sun, 19 Mar 2023 07:00:49 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   131
Md5:    babb6f090aeebc6f421624475b4aefff
Sha1:   06079b7547949822c118224e51604f4c5ebf80c8
Sha256: b2fe8b91f31edc7284cc9690e90dd4a38d985598374df68967d917590beb55dd
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /recaptcha/releases/Trd6gj1dhC_fx0ma_AWHc1me/recaptcha__en.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.35
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 164678
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 15 Mar 2023 11:44:52 GMT
expires: Thu, 14 Mar 2024 11:44:52 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 13 Mar 2023 02:02:14 GMT
vary: Accept-Encoding
age: 328557
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (576)
Size:   164678
Md5:    f22f07ee02fbeed3958345c90b52b818
Sha1:   2aa44ea19d580589c06c2170103b4d0505e18cdb
Sha256: dc1eadf37f70bef92766d0c316d1da7af283b84e5c309a4732d8ed35d7bbfb84
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /favicon.ico HTTP/1.1 
Host: bradsphilliesblog.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bradsphilliesblog.blogspot.com/2019/06/2017-topps-chrome-break.html

search
                                         142.250.74.65
HTTP/1.1 200 OK
Content-Type: image/x-icon; charset=UTF-8
                                        
Expires: Sun, 19 Mar 2023 07:00:49 GMT
Date: Sun, 19 Mar 2023 07:00:49 GMT
Cache-Control: private, max-age=86400
Last-Modified: Sat, 18 Mar 2023 09:58:21 GMT
ETag: W/"ce245ac7af319d4c47b79c1a59ce48b1792cbfc643fe862a2710013f261af076"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 412
Server: GSE


--- Additional Info ---
Magic:  MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel\012- data
Size:   412
Md5:    501c61a70f5c41181aa050d9110909ca
Sha1:   5b985d5671a7caf686fdfb1df13488c4407f6c9f
Sha256: c4aaf001607ee331f6871b4dbbf45942b1e197726714fd106e46d70cc10ee97e
                                        
                                            GET /ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D6017458877118178721%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM4ODg4ODgqByMwMDAwMDAyByNmZmZmZmY6ByNmZmZmZmZCByM4ODg4ODhKByM2NjY2NjZSByM4ODg4ODhaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D6758562836579839130%26origin%3Dhttp://bradsphilliesblog.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.Oupypiulh58.O/d%253D1/rs%253DAHpOoo_CVmSAWqMsGCHgMRyaSvlE8hY6sw/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D6017458877118178721%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM4ODg4ODgqByMwMDAwMDAyByNmZmZmZmY6ByNmZmZmZmZCByM4ODg4ODhKByM2NjY2NjZSByM4ODg4ODhaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D6758562836579839130%26origin%3Dhttp://bradsphilliesblog.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.Oupypiulh58.O/d%253D1/rs%253DAHpOoo_CVmSAWqMsGCHgMRyaSvlE8hY6sw/m%253D__features__%26bpli%3D1&go=true HTTP/1.1 
Host: accounts.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://bradsphilliesblog.blogspot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         142.250.74.109
HTTP/2 302 Found
content-type: application/binary
                                        
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 19 Mar 2023 07:00:49 GMT
location: https://www.blogger.com/followers.g?blogID=6017458877118178721&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM4ODg4ODgqByMwMDAwMDAyByNmZmZmZmY6ByNmZmZmZmZCByM4ODg4ODhKByM2NjY2NjZSByM4ODg4ODhaC3RyYW5zcGFyZW50&pageSize=21&postID=6758562836579839130&origin=http://bradsphilliesblog.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.Oupypiulh58.O/d%3D1/rs%3DAHpOoo_CVmSAWqMsGCHgMRyaSvlE8hY6sw/m%3D__features__&bpli=1
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-M4rR1IrkZldzGc8Z8Mxoeg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /cspreport
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"AccountsSigninPassiveLoginHttp","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSigninPassiveLoginHttp/external"}]}, {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: unsafe-none; report-to="AccountsSigninPassiveLoginHttp"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
set-cookie: __Host-GAPS=1:kK75gioWRhFKChs697Hi-Ed0Qwjy-w:a0hNqe1YQzyvCBcY; Expires=Tue, 18-Mar-2025 07:00:49 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  gzip compressed data\012- data
Size:   3208
Md5:    197b32967b70ca400e3d54fe8a0658f3
Sha1:   bc0819f802a9f020544349dde34869a436f1e096
Sha256: cf8abafe70416845b40f027e80fae83e47d9b4323ea5dddf48ab7fe66cd7a77c
                                        
                                            GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.35
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Mar 2023 21:48:03 GMT
expires: Fri, 15 Mar 2024 21:48:03 GMT
cache-control: public, max-age=31536000
age: 205967
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Size:   15344
Md5:    5d4aeb4e5f5ef754e307d7ffaef688bd
Sha1:   06db651cdf354c64a7383ea9c77024ef4fb4cef8
Sha256: 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
                                        
                                            GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.35
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Mar 2023 17:56:42 GMT
expires: Fri, 15 Mar 2024 17:56:42 GMT
cache-control: public, max-age=31536000
age: 219848
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Size:   15552
Md5:    285467176f7fe6bb6a9c6873b3dad2cc
Sha1:   ea04e4ff5142ddd69307c183def721a160e0a64e
Sha256: 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /a/default-user=s45-c HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.97
HTTP/2 200 OK
content-type: image/png
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.png"
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 316
x-xss-protection: 0
date: Sun, 19 Mar 2023 05:33:35 GMT
expires: Fri, 17 Mar 2023 21:33:01 GMT
cache-control: public, max-age=86400, no-transform
age: 5235
etag: "v0"
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 45 x 45, 8-bit colormap, non-interlaced\012- data
Size:   316
Md5:    9fae1841320a0eaa434a022513f60859
Sha1:   245fac7a1ba86adda5bf5571babef7d5280672a4
Sha256: 1e2ce2743c2908d3aa1ce10a03be76d756eaa493cd41f9dcc94a3cc35cbfa1bd
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /a-/ACB-R5SVknDfxTkdNq5HT10_F1qQuxyCUCweZ2fGfZ7gFg=s45-c HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.97
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v284"
expires: Mon, 20 Mar 2023 07:00:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 19 Mar 2023 07:00:50 GMT
server: fife
content-length: 2802
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 45x45, components 3\012- data
Size:   2802
Md5:    bba8dd5d6f61a7ad6b1ab793f98bb3d6
Sha1:   84ed902e5ac7daea949005b9c6e85b2c4d05f8c5
Sha256: 5676e52d19f1cf0b94987a47724c678c37fd2d0a0e3177058e0c8e83b5f10e53
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /a-/ACB-R5TMk_g-Lud7oQZIXo-C8ZEb8ziWCaWlXOV1eH2KlKE=s45-c HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.97
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v46bc"
expires: Mon, 20 Mar 2023 07:00:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 19 Mar 2023 07:00:50 GMT
server: fife
content-length: 1560
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Size:   1560
Md5:    044d0e10aa1bb50d7cd060f145237828
Sha1:   a3928a137b286d7dad718295234313cde71117c8
Sha256: bb4a92c0bab4c67e5b23a68da5d5803787f2bc3f89aa6f9eb070ff506c34c70f
                                        
                                            GET /a-/ACB-R5TPILySXvzPWIvyIFtyBYuVyZX9IGNWDoFNO743=s45-c HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.97
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "vdd"
expires: Mon, 20 Mar 2023 07:00:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 19 Mar 2023 07:00:50 GMT
server: fife
content-length: 1895
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 45x45, components 3\012- data
Size:   1895
Md5:    32fa6b39da5b01784baa7dac373dd624
Sha1:   f2a9326661d354f3a1f34a339c5f00e92b268a8b
Sha256: 1cd4b7ac82d3bb04142cd8340314fc356f6fd5b6f873ac08d037da54beb4f9f6
                                        
                                            GET /a-/ACB-R5QrrjAjAZJE2h87ASUZYkkddy-H7hWHRvcU555VyTI=s45-c HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.97
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v56b9f"
expires: Mon, 20 Mar 2023 07:00:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 19 Mar 2023 07:00:50 GMT
server: fife
content-length: 1719
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 45x45, components 3\012- data
Size:   1719
Md5:    de677f8d172fc591d59552e18912eace
Sha1:   fb85fbb5a586013201c42441807169511511f903
Sha256: 904663a64e16e495c0be85ceed80c12dd0e1630edae56d97b5df5a263317fe35
                                        
                                            GET /a-/ACB-R5RyfC3JSxm2nzMrEd8JjjwwtUfozZU86vCaU65Umw=s45-c HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.97
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 1945
x-xss-protection: 0
date: Sun, 19 Mar 2023 07:00:50 GMT
expires: Thu, 16 Mar 2023 11:36:38 GMT
cache-control: public, max-age=86400, no-transform
etag: "va06"
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Size:   1945
Md5:    e096ab5cff58302b8fcae7944faaadd0
Sha1:   eff39e52cc41f4c7da4d3c945cebce5f9cefb2ea
Sha256: b6fb2db05c59e3ad953d303be0821eacb752ffd86868ec892eb7e4ee5d68f806
                                        
                                            GET /a-/ACB-R5SEgRA3uUflDgm5CUBi-Uue6CfDt1pL7se-1WD7rQ=s45-c HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.97
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v86"
expires: Mon, 20 Mar 2023 07:00:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 19 Mar 2023 07:00:50 GMT
server: fife
content-length: 2010
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Size:   2010
Md5:    8284c9eec934b245e1bb04fd75225de1
Sha1:   cb3f598b336319330a9a1a3f612f1b66d841b910
Sha256: ead13586c05b943e32984b885b849dfbe5021a929dadb04f70c07a7688f28c10
                                        
                                            GET /a-/ACB-R5RVjgbdm7yz9Q-WpWRyopqAyd5miUbAXa_CpZdRBq8=s45-c HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.97
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v7cf8"
expires: Mon, 20 Mar 2023 07:00:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 19 Mar 2023 07:00:50 GMT
server: fife
content-length: 2343
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Size:   2343
Md5:    9b99902f81d90660c56c1e6bbc2c370f
Sha1:   2290e5d7828dc9f29908883361647b94b846ff4f
Sha256: 099f0c51fc45742b001aa723e52b4152e7be6a4a21c884d99d9bd0b182c78893
                                        
                                            GET /a-/ACB-R5SsnES79kl0dMuEVIN1s_ZeWbmNeL9fdHgFBSUWbVc=s45-c HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.97
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v4fa4"
expires: Mon, 20 Mar 2023 07:00:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 19 Mar 2023 07:00:50 GMT
server: fife
content-length: 5584
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 45x45, components 3\012- data
Size:   5584
Md5:    8df802e40ca275a990cf12d418337e86
Sha1:   1e376c413c3d3065fa18db860f8f6a37fab270e1
Sha256: ed81882b11578f72494df9f665071c032b7b2e54a9af0791264aceb0f3335000
                                        
                                            GET /a-/ACB-R5QiAayVqIbNpbBR0SeCIqr7hsg29g3Eoqf3kV_HOg=s45-c HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.97
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v434"
expires: Mon, 20 Mar 2023 07:00:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 19 Mar 2023 07:00:50 GMT
server: fife
content-length: 1792
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Size:   1792
Md5:    41ef0399eca035299248e536041c8a8c
Sha1:   ea2cd856f2a3c02ba30eec82dcba3dd85e0fdbd5
Sha256: d5d541b8fd32d28765f044e22c470209d6c31f2364718d7d535d3f9c32118e94
                                        
                                            GET /a-/ACB-R5QvBlQPmlFIYmSvyv34x8odqEaRoCfVwaipqMdp=s45-c HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.97
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v4"
expires: Mon, 20 Mar 2023 07:00:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 19 Mar 2023 07:00:50 GMT
server: fife
content-length: 1659
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Size:   1659
Md5:    672779add9bafac0fda8c7a51aafcf08
Sha1:   5172c285ff541ff44f46a5699caad9cb7dc15a68
Sha256: 114c1606ebc5e2be6ff07413a8a75459caba30732f623e2a01ebf7e0f43f10ff
                                        
                                            GET /a-/ACB-R5Qun1HZCryjCLtnbPcSLbj9TfsJMrLXY5xV30tU=s45-c HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.97
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v75"
expires: Mon, 20 Mar 2023 07:00:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 19 Mar 2023 07:00:50 GMT
server: fife
content-length: 3237
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Size:   3237
Md5:    c44aba455870685c2f5ced532b25a65f
Sha1:   a927e5464cb07cf2bbf2e68fb1b16c93271921e8
Sha256: b8e92c670b820a0ee62cc6f1c364fea3147f00858f7649dadc9c59afd105ec9d
                                        
                                            GET /a-/ACB-R5R-X3XeNbQwOA5-x32Ls31CBlM0n-iTXVhTxlsAFA=s45-c HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.97
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v3374"
expires: Mon, 20 Mar 2023 07:00:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 19 Mar 2023 07:00:50 GMT
server: fife
content-length: 1733
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 45x45, components 3\012- data
Size:   1733
Md5:    bf1c1ec2d734b90c55b99767527dfbfd
Sha1:   bbf365c873eaddd1f11f3647089a5a93c8b8e69c
Sha256: 780c97adaa702f65d17a13cb8c76f7527dff97e66cafc0c112ab5340fbbf31ca
                                        
                                            GET /a-/ACB-R5TDjducIpUM3VhPMzKghnTFgCdYB3qmMus0ydg3rtw=s45-c HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.97
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v48d2"
expires: Mon, 20 Mar 2023 07:00:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 19 Mar 2023 07:00:50 GMT
server: fife
content-length: 1541
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 45x45, components 3\012- data
Size:   1541
Md5:    617f6d3650ea271d10ac8dcec893d096
Sha1:   2417e19e186375391cd26d00352c0a6e43fd994d
Sha256: be1dc36945c600d3186f39c466508522f03da96a5ce89e9b7a3d96994db6ab04
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "920778735CFB5F0395BBFA1391CB4E90C547D455CAC77C8BB161A0C3B55A6A3F"
Last-Modified: Thu, 16 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3058
Expires: Sun, 19 Mar 2023 07:51:49 GMT
Date: Sun, 19 Mar 2023 07:00:51 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "920778735CFB5F0395BBFA1391CB4E90C547D455CAC77C8BB161A0C3B55A6A3F"
Last-Modified: Thu, 16 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3058
Expires: Sun, 19 Mar 2023 07:51:49 GMT
Date: Sun, 19 Mar 2023 07:00:51 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "920778735CFB5F0395BBFA1391CB4E90C547D455CAC77C8BB161A0C3B55A6A3F"
Last-Modified: Thu, 16 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3058
Expires: Sun, 19 Mar 2023 07:51:49 GMT
Date: Sun, 19 Mar 2023 07:00:51 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "920778735CFB5F0395BBFA1391CB4E90C547D455CAC77C8BB161A0C3B55A6A3F"
Last-Modified: Thu, 16 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3058
Expires: Sun, 19 Mar 2023 07:51:49 GMT
Date: Sun, 19 Mar 2023 07:00:51 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "920778735CFB5F0395BBFA1391CB4E90C547D455CAC77C8BB161A0C3B55A6A3F"
Last-Modified: Thu, 16 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3058
Expires: Sun, 19 Mar 2023 07:51:49 GMT
Date: Sun, 19 Mar 2023 07:00:51 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0791ca2a-218e-42a3-b584-3b1fbef1e0b1.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6530
x-amzn-requestid: feaef7fd-1486-4717-b373-06546368aa4a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B_wZCGnJoAMFWqQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64162dd3-71249f9a6287e81730459c65;Sampled=0
x-amzn-remapped-date: Sat, 18 Mar 2023 21:32:03 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: _DYEnVROIUK5IYSWguE6xBBoIfvoNJMfB0gxidrjCkL65QeISMW6ow==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 82c2ab57bc9900898383f6b70681b9e6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 18 Mar 2023 21:44:27 GMT
age: 33384
etag: "dd2634cc71555b254ffcb21621b1b4426bae619a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6530
Md5:    088ecc88f297af7324cf5c27f019daea
Sha1:   dd2634cc71555b254ffcb21621b1b4426bae619a
Sha256: f0f7467e6d6a3d89157fbea1e554ba0cb04ec97411012c048ce7374a2cd980d7
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F58bd5191-7eab-437d-a18c-a930f08c6cc6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7842
x-amzn-requestid: 6e6fff9e-c942-498d-b649-9f7f6d82fba6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B6lDbHn4oAMF5BA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64141baf-268367ad5333899e40d8353d;Sampled=0
x-amzn-remapped-date: Fri, 17 Mar 2023 07:50:07 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: k1cHkKf_bxsiXniP1nGXKi6fUo9WFRCOkvu7hewwOQZdtkWnBtoktQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 0906d4887f6625f4a4467d8d4fd268d2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 18 Mar 2023 22:13:50 GMT
age: 31621
etag: "4530492308074d7f4f7f888593149377e70ee561"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7842
Md5:    916a27eee94b9be1c268cd17c11c4824
Sha1:   4530492308074d7f4f7f888593149377e70ee561
Sha256: a7aeaf49047efb11e4cd8b72bd2e00b4afdfe461b5be50d88c343ffbf3d3ca45
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa36f2b7f-235a-43c5-9302-84b1cc7fb382.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7541
x-amzn-requestid: 00d990c9-d6de-4aea-8022-2d0df93ca184
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B_wqWGezIAMF9kA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64162e41-5a9c056956af56fd1b81973e;Sampled=0
x-amzn-remapped-date: Sat, 18 Mar 2023 21:33:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: Rx2FCojyGMn9suaqPQysZg2b7avBWk4eF99tkK7JG5cVXjsbY7GrDQ==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 5c35539543902c678280929df206948c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 18 Mar 2023 21:48:16 GMT
age: 33155
etag: "80d3672c8a1db24dedba20a8b04edbc67cff14f2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7541
Md5:    c54a5cee763815a2d2d335a0dc51bab6
Sha1:   80d3672c8a1db24dedba20a8b04edbc67cff14f2
Sha256: ce00f0d0fee5cbf89b31106b2d696d04ba12d94f4edbd512a2dc1100ab0ef5d3
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ca6f680-5e4b-497f-aef4-6cca71cb98d5.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11784
x-amzn-requestid: 29c7373c-4eb0-4374-8c4c-205285e23667
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B_whwHM7oAMF_kw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64162e0a-0c30752b04757beb7ea417a7;Sampled=0
x-amzn-remapped-date: Sat, 18 Mar 2023 21:32:58 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: pPIURVGevjYlykVadfXACVKOnHw9BNb9udBL65Kl-z7I9AUWFDoOeQ==
via: 1.1 23206a1c229d8877bdd053c4b05f9d12.cloudfront.net (CloudFront), 1.1 446e26a256db1310ae719d818e420898.cloudfront.net (CloudFront), 1.1 google
date: Sat, 18 Mar 2023 22:14:05 GMT
age: 31606
etag: "59d56060ea97e27de572e48eb907882f5767f427"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11784
Md5:    49b71c6b1d8a81d5c9e5281eec609c25
Sha1:   59d56060ea97e27de572e48eb907882f5767f427
Sha256: d8d1aa817b12b61d85115c0020fafd2c2e02a0277417e96fb995329ea3c7f01a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8afa2cdb-a5f3-4c78-a2ab-132c8b752b4b.png HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10338
x-amzn-requestid: 9f880b5b-056c-44bb-a811-36ea27c232aa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BvSgFGENoAMFuVw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640f9799-2318d444248f7610300c658f;Sampled=0
x-amzn-remapped-date: Mon, 13 Mar 2023 21:37:29 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: xfkObFQbeYQQjIJ4FWQ7xKbH5FPxBQ1vkTDCwWCM6IcAAu8H31BNhQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 ef8f66c83aecd87910ce2e1153544a20.cloudfront.net (CloudFront), 1.1 google
date: Sat, 18 Mar 2023 07:04:42 GMT
age: 86169
etag: "80519bb3726ee1f9f211344cd433cefaed3a7f2e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10338
Md5:    78453ba98b72eff3879ef163b59c86ed
Sha1:   80519bb3726ee1f9f211344cd433cefaed3a7f2e
Sha256: 61adfeff11af9583355ac7d1500e8a8d97357b2846f151f2421001994fb06655
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe42970c2-8007-4b4c-9f15-01cf4de37822.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6219
x-amzn-requestid: 61b80920-2ba3-4688-80ee-848d68031908
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BwlmnG0KoAMFd0A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64101c90-17c159767df548c4672b7365;Sampled=0
x-amzn-remapped-date: Tue, 14 Mar 2023 07:04:48 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: ACswRkub0RlODaxJHJGsGkACkMQKk85qY3VxYPscNccAMYdpkQ9evA==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 9adef5b1c5fc9ca80d6f4f8d19e103a2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 18 Mar 2023 23:47:26 GMT
age: 26005
etag: "75dd9bdbaf7f19102036d27e69a011f4c37942a9"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6219
Md5:    7e58e6553fe8e5d936a911080cec36dc
Sha1:   75dd9bdbaf7f19102036d27e69a011f4c37942a9
Sha256: 0c565b97125e28b8183baab26baf7c703e70f82fad13117c5780259e6d91a89d
                                        
                                            GET /-JBlT9OVCcJw/XRQYbx7BIiI/AAAAAAAAFsU/YxTgl0-y_sI4Jm2A03rjRmjbepd1TANsgCLcBGAs/s400/2017%2BTopps%2BChrome%2BBreak%2B1.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bradsphilliesblog.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v16c6"
expires: Mon, 20 Mar 2023 07:00:49 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="2017 Topps Chrome Break 1.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 19 Mar 2023 07:00:49 GMT
server: fife
content-length: 93646
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---