r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5ceaca9fd4ad000cb435820812fc69c8
8168397aaf7b572c89a9c83f46c0b65e4ac509f2
9c4e52e7e17158307d752db0bc3d1fbedae4f305cc301fd73b260f73ab796492
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C4E52E7E17158307D752DB0BC3D1FBEDAE4F305CC301FD73B260F73AB796492"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11631
Expires: Wed, 07 Dec 2022 07:44:24 GMT
Date: Wed, 07 Dec 2022 04:30:33 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash f83c5e33ba42e312ee398848bbb711f5
caa1fd23b1fbbe883292ded04404c1cfd861eb09
106d08fba45f1e13f85b4b5abc456594878494238933e54b6a06e21ed8a52bc9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4710
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 04:30:33 GMT
Last-Modified: Wed, 07 Dec 2022 03:12:03 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
amarzogot.blogspot.com/2022/12/Why-You-Should-Think-Twice-Before-Wearing-These-Gemstones.html
301 Moved Permanently 232 B URL HTTP/1.1 amarzogot.blogspot.com/2022/12/Why-You-Should-Think-Twice-Before-Wearing-These-Gemstones.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 118d5103912e9161aab071c5694be588
e31e02adf3726421af9e1a2c021e2d0603e8a444
bf9c33cf79943e77ed199a54233b8ada09e0d3aeb2ef8c29403f630ab657c993
GET /2022/12/Why-You-Should-Think-Twice-Before-Wearing-These-Gemstones.html HTTP/1.1
Host: amarzogot.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Location: https://amarzogot.blogspot.com/2022/12/Why-You-Should-Think-Twice-Before-Wearing-These-Gemstones.html
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Wed, 07 Dec 2022 04:30:33 GMT
Expires: Wed, 07 Dec 2022 04:30:33 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 232
Server: GSE
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 07 Dec 2022 04:18:44 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 709
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0abf10fb7e96c1c98dacf2f013a68b4
acdd839bce85eadc78a8e821e32e00a958d5c0c8
b85d98f8df05431777d96c767ce4c152302ec3f653cdf6e61c8c3fa9574f3255
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B85D98F8DF05431777D96C767CE4C152302EC3F653CDF6E61C8C3FA9574F3255"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11661
Expires: Wed, 07 Dec 2022 07:44:54 GMT
Date: Wed, 07 Dec 2022 04:30:33 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ikJNWCZZAoRYXbcBby/fyIGcWNjQjaMkwn190ewWCt99MuGmFdjcxqv0B/VuEp3ZlIxX1r1HXsQ=
x-amz-request-id: 34DHQ66C1K1E4MAY
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 07 Dec 2022 03:47:21 GMT
age: 2592
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cbcd8c53639a6546d9152b265b407f1f
f166ecb2a63e819c03ba476d2640a0b27838d7d4
3e69252575b020da03c0cf3b5734084cf9d73f44ecfa743b00e2976c53013b66
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 04:30:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 04:30:33 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 07 Dec 2022 04:11:20 GMT
cache-control: public,max-age=3600
age: 1153
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 0f7dcaa590e32cfd1c075255188d5f06
d4bb4954fefdb3b59560b54adf500e806e252e39
195795c2511b31519134f5eb4442d8708918ecaff72f8e821a5473ad7c97c448
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4689
Cache-Control: max-age=107666
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 04:30:33 GMT
Etag: "638f062a-1d7"
Expires: Thu, 08 Dec 2022 10:24:59 GMT
Last-Modified: Tue, 06 Dec 2022 09:06:50 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cbcd8c53639a6546d9152b265b407f1f
f166ecb2a63e819c03ba476d2640a0b27838d7d4
3e69252575b020da03c0cf3b5734084cf9d73f44ecfa743b00e2976c53013b66
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 04:30:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 278 B IP
Hash a4acd48df178d17fa1c0d0b5efdbf934
4a26acacfa9dba379aca98007fbe6cc2baf0aba3
e1d1488a8815657e7c828976d26cc5d9727630cb966be27999e801213eb29e76
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4472
Cache-Control: max-age=99916
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 04:30:34 GMT
Etag: "638ee8bf-116"
Expires: Thu, 08 Dec 2022 08:15:50 GMT
Last-Modified: Tue, 06 Dec 2022 07:01:19 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 278
cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
200 OK 28 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
IP
File type ASCII text, with very long lines (65451)
Hash 4b5f47439b640180cc3450f7de05d0d8
5a0dc9bcab80ddc409dd35fcb00a88fe6846fee2
1f85e8b327f42c17c025d69849914068536d9aa95412fe473ae90ffb2f4ebd82
GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 04:30:34 GMT
content-type: application/javascript; charset=utf-8
content-length: 27958
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb09ed3-15d84"
last-modified: Mon, 04 May 2020 23:01:39 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 15831138
expires: Mon, 27 Nov 2023 04:30:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I6i7TZzyFIjrMaKqCV2Kq6O1JHN2T%2BM3SAMug5NWkBtgbB00nMB9mFvS1aApYLCGpaZcwpsD93E7EpGGEuvqbRzv42Wl3WvbDUQ0ELNGAfh%2FwmItCdsKXSFRKXeGxlxEHCwk7oO%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 775a86d6be48b4fa-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c10bc583c46449dc192a809398b4e814
ff0f7ad905d32d7f3d01e4054552d0ad551503a5
defd2b2559e55c9c6c0f8be9b23c53c4e781a736feae3dd73b4d203b69cfcc57
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 04:30:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: e6bMuCoRAv9wJD3vPxS8lA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: zbeV08g6HPI8ORVMiMMX8VNGOw0=
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 30aec170d58f580f2ed4da4b92d72cc7
3b11a98ba9563f7f266e7a935e3b78bd0c0712aa
7b25e66e4383cdb29228d0451a4810eeab7d194ca81045e066c00c9467f29312
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 04:30:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
amarzogot.blogspot.com/2022/12/Why-You-Should-Think-Twice-Before-Wearing-These-Gemstones.html
200 OK 53 kB URL HTTP/2 amarzogot.blogspot.com/2022/12/Why-You-Should-Think-Twice-Before-Wearing-These-Gemstones.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6967)
Hash 18ff74fad8a09b3ccfc93d97c2a86c13
4c94f4a66f4053aa52f14cf7e0b48b0fe04fb1be
cd8091db81f9143cc31b82cc5773956dd5fa5c3203cb3f1a7f22dc861915faa7
GET /2022/12/Why-You-Should-Think-Twice-Before-Wearing-These-Gemstones.html HTTP/1.1
Host: amarzogot.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Wed, 07 Dec 2022 04:30:33 GMT
date: Wed, 07 Dec 2022 04:30:33 GMT
cache-control: private, max-age=0
last-modified: Tue, 06 Dec 2022 10:56:06 GMT
etag: W/"41c8dcf77da69432bdd828faabfc87fcacff00d1261cdd52447b3d2a25c80c4b"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 53095
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 27ee1b9a2fa5107d0ec98b1d9e51a3ea
29141ac3b8d67b20ba2710ee4c4a59c725537ba9
08bf792562fb495a9d91fd34eb16640274744763d7788b4e09600ee82a23c34b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 04:30:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 27ee1b9a2fa5107d0ec98b1d9e51a3ea
29141ac3b8d67b20ba2710ee4c4a59c725537ba9
08bf792562fb495a9d91fd34eb16640274744763d7788b4e09600ee82a23c34b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 04:30:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 27ee1b9a2fa5107d0ec98b1d9e51a3ea
29141ac3b8d67b20ba2710ee4c4a59c725537ba9
08bf792562fb495a9d91fd34eb16640274744763d7788b4e09600ee82a23c34b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 04:30:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 27ee1b9a2fa5107d0ec98b1d9e51a3ea
29141ac3b8d67b20ba2710ee4c4a59c725537ba9
08bf792562fb495a9d91fd34eb16640274744763d7788b4e09600ee82a23c34b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 04:30:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 27ee1b9a2fa5107d0ec98b1d9e51a3ea
29141ac3b8d67b20ba2710ee4c4a59c725537ba9
08bf792562fb495a9d91fd34eb16640274744763d7788b4e09600ee82a23c34b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 04:30:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=G-GWWJ5EYGBF
200 OK 79 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-GWWJ5EYGBF
IP
File type ASCII text, with very long lines (26337)
Hash f228a0e1bf99a65a2b8f7832bee2b3b1
91d80f6f81b43fe5b2761afac16f5ab59c1a225c
deb26e7a075a70c3814e9a8941b38defbbc5bc6d6ff7278af37b5312cb214b16
GET /gtag/js?id=G-GWWJ5EYGBF HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 07 Dec 2022 04:30:34 GMT
expires: Wed, 07 Dec 2022 04:30:34 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 79017
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash a4acd48df178d17fa1c0d0b5efdbf934
4a26acacfa9dba379aca98007fbe6cc2baf0aba3
e1d1488a8815657e7c828976d26cc5d9727630cb966be27999e801213eb29e76
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4472
Cache-Control: max-age=99916
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 04:30:34 GMT
Etag: "638ee8bf-116"
Expires: Thu, 08 Dec 2022 08:15:50 GMT
Last-Modified: Tue, 06 Dec 2022 07:01:19 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 278
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bb1e9989d8b84caf9deb2787b93c5b8f
c7e1ee0f110ec05534c96739d938554ed38635c5
8754dec16a0563ac7d78422ccc53976adba9506615982f1a70aba79256750a4c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 04:30:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3074a66f6d9b2e2af9b41ec0e2f4e2db
942e2c49b3848f11da966937f5914c62aed24bce
7c3b21b91aab06aff58cc56ce4b7273a7d320df8b0b4ad685c660e03ba0b72aa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 04:30:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
IP
File type ASCII text, with very long lines (32077)
Hash fd2b58574f9637ba7ef639267349d848
6eda5ea93f549ceb5693f6f1c038893fa56a510d
75627d4b97e5e6294a8f88f5eeaf9b616696dc8600db9701c47ef05f067880ec
GET /ajax/libs/jquery/1.12.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33951
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 18:51:00 GMT
expires: Thu, 30 Nov 2023 18:51:00 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 553174
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.blogger.com/static/v1/jsbin/3469866930-comment_from_post_iframe.js
200 OK 6.6 kB URL HTTP/2 www.blogger.com/static/v1/jsbin/3469866930-comment_from_post_iframe.js
IP
File type ASCII text, with very long lines (1441)
Hash f60e5037324bf7fd2256c16929886f09
aae4b1aea3737e0268e3578dd1d0e7cfe6c6d66b
71846da8d45274b77549b110389ab3dbcb8ce042051b5c39547909c1c343dfde
GET /static/v1/jsbin/3469866930-comment_from_post_iframe.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6573
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Dec 2022 13:44:05 GMT
expires: Wed, 06 Dec 2023 13:44:05 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 06 Dec 2022 04:51:45 GMT
content-type: text/javascript
age: 53189
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 30aec170d58f580f2ed4da4b92d72cc7
3b11a98ba9563f7f266e7a935e3b78bd0c0712aa
7b25e66e4383cdb29228d0451a4810eeab7d194ca81045e066c00c9467f29312
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 04:30:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/3222695235-widgets.js
200 OK 57 kB URL HTTP/2 www.blogger.com/static/v1/widgets/3222695235-widgets.js
IP
File type ASCII text, with very long lines (2221)
Hash 9f2f688aec73940034a0266a2a6266da
af9875c8064027204827b311250191c87e55366e
a78a0cfbae13cfc525657e31c2033d5c0281c5fbec2cf3e493ff75a7e097a02a
GET /static/v1/widgets/3222695235-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56718
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 02:14:06 GMT
expires: Thu, 07 Dec 2023 02:14:06 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 07 Dec 2022 00:52:16 GMT
content-type: text/javascript
age: 8188
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e24f2da4ed2e3cd07b0999a67550d634
6e2277e734fd0015849c3554dd2cf2ae289c2cf2
74dc14d7d9ba8bba4a162680e59801af1d7c2995639df51f32ff2f3d4d0b0051
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 04:30:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bb1e9989d8b84caf9deb2787b93c5b8f
c7e1ee0f110ec05534c96739d938554ed38635c5
8754dec16a0563ac7d78422ccc53976adba9506615982f1a70aba79256750a4c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 04:30:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ec6ece82a7cb8faa3ba171efae3a9eda
7ee75fba9a9d1078960f7834d71961c38f514b82
301d0c4d73b444369e488ee4f78b3a994a9168ec6c6d46cd7f3448722a841a2e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 04:30:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ec6ece82a7cb8faa3ba171efae3a9eda
7ee75fba9a9d1078960f7834d71961c38f514b82
301d0c4d73b444369e488ee4f78b3a994a9168ec6c6d46cd7f3448722a841a2e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 04:30:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
200 OK 48 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 47952, version 1.0\012- data
Hash 17b406b7b8caa297435fa358e194f5a1
e2132f0e97781af56fa966c0fabb49132f2af203
84161c46238fff2c6920ebc28f02cddd7b710cf3d1107853f540b084320f6afd
GET /s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://amarzogot.blogspot.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 47952
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Dec 2022 18:56:13 GMT
expires: Tue, 05 Dec 2023 18:56:13 GMT
cache-control: public, max-age=31536000
age: 120861
last-modified: Mon, 15 Aug 2022 18:22:41 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://amarzogot.blogspot.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Dec 2022 18:52:41 GMT
expires: Tue, 05 Dec 2023 18:52:41 GMT
cache-control: public, max-age=31536000
age: 121073
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
200 OK 17 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16740, version 1.0\012- data
Hash e43b535855a4ae53bd5b07a6eeb3bf67
6507312d9491156036316484bf8dc41e8b52ddd9
b34551ae25916c460423b82beb8e0675b27f76a9a2908f18286260fbd6de6681
GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://amarzogot.blogspot.com
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Dec 2022 18:52:55 GMT
expires: Tue, 05 Dec 2023 18:52:55 GMT
cache-control: public, max-age=31536000
age: 121059
last-modified: Mon, 15 Aug 2022 18:14:44 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ec6ece82a7cb8faa3ba171efae3a9eda
7ee75fba9a9d1078960f7834d71961c38f514b82
301d0c4d73b444369e488ee4f78b3a994a9168ec6c6d46cd7f3448722a841a2e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 04:30:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjCRZ7R4kvCptaNd8sCHc_7mgOer4Vi0CeCuFkipn_kuspL-fcvGygrIfjBNNOYQjckjLo5mcVu9USr7kaJ88sufc77noyr0-kcSJO8PGN01ar-U-s-t4j30QOxXaCq7ejlro67bYi9F_9ptHuEMQsYzSePq3-K4Gf4uiyUms5xUJKJH9fcvS6aTgEoXA/w72-h72-p-k-no-nu/white%20hair.jpg
200 OK 3.5 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjCRZ7R4kvCptaNd8sCHc_7mgOer4Vi0CeCuFkipn_kuspL-fcvGygrIfjBNNOYQjckjLo5mcVu9USr7kaJ88sufc77noyr0-kcSJO8PGN01ar-U-s-t4j30QOxXaCq7ejlro67bYi9F_9ptHuEMQsYzSePq3-K4Gf4uiyUms5xUJKJH9fcvS6aTgEoXA/w72-h72-p-k-no-nu/white%20hair.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 467a0082313d3a6f9e67c351073da4d6
be6deff30e535a55020c6535632ddbbaf34e2627
baeee848bbd681995d791d0367518e032dfba03843d87c583ef029dda25e5005
GET /img/b/R29vZ2xl/AVvXsEjCRZ7R4kvCptaNd8sCHc_7mgOer4Vi0CeCuFkipn_kuspL-fcvGygrIfjBNNOYQjckjLo5mcVu9USr7kaJ88sufc77noyr0-kcSJO8PGN01ar-U-s-t4j30QOxXaCq7ejlro67bYi9F_9ptHuEMQsYzSePq3-K4Gf4uiyUms5xUJKJH9fcvS6aTgEoXA/w72-h72-p-k-no-nu/white%20hair.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v4c32"
expires: Thu, 08 Dec 2022 04:30:34 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="white hair.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 04:30:34 GMT
server: fife
content-length: 3477
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/FQEr5kwTHGw
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/FQEr5kwTHGw
IP
Hash 6c5fa5d3b1c9f1f4c2af0567b2947f09
486409287e7b2dfabd96a03330be734cfcea75a5
c9207e7792110aca1eda8c23c177f91b8463a818ae1401a7bdcf97527657a469
POST /s/gts1p5/FQEr5kwTHGw HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 04:30:34 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 27ee1b9a2fa5107d0ec98b1d9e51a3ea
29141ac3b8d67b20ba2710ee4c4a59c725537ba9
08bf792562fb495a9d91fd34eb16640274744763d7788b4e09600ee82a23c34b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 04:30:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.google-analytics.com/g/collect?v=2&tid=G-GWWJ5EYGBF>m=2oebu0&_p=605152816&cid=84818041.1670387434&ul=en-us&sr=1280x1024&_s=1&sid=1670387434&sct=1&seg=0&dl=https%3A%2F%2Famarzogot.blogspot.com%2F2022%2F12%2FWhy-You-Should-Think-Twice-Before-Wearing-These-Gemstones.html&dt=%E0%A6%95%E0%A7%87%E0%A6%A8%20%E0%A6%8F%E0%A6%87%20%E0%A6%B0%E0%A6%A4%E0%A7%8D%E0%A6%A8%20%E0%A6%AA%E0%A6%BE%E0%A6%A5%E0%A6%B0%20%E0%A6%AC%E0%A7%8D%E0%A6%AF%E0%A6%AC%E0%A6%B9%E0%A6%BE%E0%A6%B0%20%E0%A6%95%E0%A6%B0%E0%A6%BE%E0%A6%B0%20%E0%A6%86%E0%A6%97%E0%A7%87%20%E0%A6%86%E0%A6%AA%E0%A6%A8%E0%A6%BE%E0%A6%B0%20%E0%A7%A8%E0%A6%AC%E0%A6%BE%E0%A6%B0%20%E0%A6%AD%E0%A6%BE%E0%A6%AC%E0%A6%BE%20%E0%A6%89%E0%A6%9A%E0%A6%BF%E0%A6%A4%E0%A5%A4%20Why%20You%20Should%20Think%20Twice%20Before%20Wearing%20These%20Gemstones&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-GWWJ5EYGBF>m=2oebu0&_p=605152816&cid=84818041.1670387434&ul=en-us&sr=1280x1024&_s=1&sid=1670387434&sct=1&seg=0&dl=https%3A%2F%2Famarzogot.blogspot.com%2F2022%2F12%2FWhy-You-Should-Think-Twice-Before-Wearing-These-Gemstones.html&dt=%E0%A6%95%E0%A7%87%E0%A6%A8%20%E0%A6%8F%E0%A6%87%20%E0%A6%B0%E0%A6%A4%E0%A7%8D%E0%A6%A8%20%E0%A6%AA%E0%A6%BE%E0%A6%A5%E0%A6%B0%20%E0%A6%AC%E0%A7%8D%E0%A6%AF%E0%A6%AC%E0%A6%B9%E0%A6%BE%E0%A6%B0%20%E0%A6%95%E0%A6%B0%E0%A6%BE%E0%A6%B0%20%E0%A6%86%E0%A6%97%E0%A7%87%20%E0%A6%86%E0%A6%AA%E0%A6%A8%E0%A6%BE%E0%A6%B0%20%E0%A7%A8%E0%A6%AC%E0%A6%BE%E0%A6%B0%20%E0%A6%AD%E0%A6%BE%E0%A6%AC%E0%A6%BE%20%E0%A6%89%E0%A6%9A%E0%A6%BF%E0%A6%A4%E0%A5%A4%20Why%20You%20Should%20Think%20Twice%20Before%20Wearing%20These%20Gemstones&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-GWWJ5EYGBF>m=2oebu0&_p=605152816&cid=84818041.1670387434&ul=en-us&sr=1280x1024&_s=1&sid=1670387434&sct=1&seg=0&dl=https%3A%2F%2Famarzogot.blogspot.com%2F2022%2F12%2FWhy-You-Should-Think-Twice-Before-Wearing-These-Gemstones.html&dt=%E0%A6%95%E0%A7%87%E0%A6%A8%20%E0%A6%8F%E0%A6%87%20%E0%A6%B0%E0%A6%A4%E0%A7%8D%E0%A6%A8%20%E0%A6%AA%E0%A6%BE%E0%A6%A5%E0%A6%B0%20%E0%A6%AC%E0%A7%8D%E0%A6%AF%E0%A6%AC%E0%A6%B9%E0%A6%BE%E0%A6%B0%20%E0%A6%95%E0%A6%B0%E0%A6%BE%E0%A6%B0%20%E0%A6%86%E0%A6%97%E0%A7%87%20%E0%A6%86%E0%A6%AA%E0%A6%A8%E0%A6%BE%E0%A6%B0%20%E0%A7%A8%E0%A6%AC%E0%A6%BE%E0%A6%B0%20%E0%A6%AD%E0%A6%BE%E0%A6%AC%E0%A6%BE%20%E0%A6%89%E0%A6%9A%E0%A6%BF%E0%A6%A4%E0%A5%A4%20Why%20You%20Should%20Think%20Twice%20Before%20Wearing%20These%20Gemstones&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://amarzogot.blogspot.com
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://amarzogot.blogspot.com
date: Wed, 07 Dec 2022 04:30:34 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 45a25e44ed72e89f8a4ad9117e992a19
45f8963020886a77dbdc4dd1ebb802ff116d8486
417b9a1cac53073dc212790552b27df90b7a58351c72188506e5ac5fa2d79d5d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "417B9A1CAC53073DC212790552B27DF90B7A58351C72188506E5AC5FA2D79D5D"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17495
Expires: Wed, 07 Dec 2022 09:22:09 GMT
Date: Wed, 07 Dec 2022 04:30:34 GMT
Connection: keep-alive
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEigNHvKMEhZE8E2anduIjNNtpCiyzzMMnIHtkKVNNok5NxBR1SiOKSrn7ryoicw0AgnEEFpGR7tbeBCgad_StOngT9dX-fgDQ7WkzFbMONZIUd6uIxW4VV_h92nMG9fcsVvmqMJ8vuvviCnjj3A0RWG2nxQ0PBICosCmZrk57yWfvcVBIncxTihAylgHA/w72-h72-p-k-no-nu/youtube.jpg
200 OK 3.8 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEigNHvKMEhZE8E2anduIjNNtpCiyzzMMnIHtkKVNNok5NxBR1SiOKSrn7ryoicw0AgnEEFpGR7tbeBCgad_StOngT9dX-fgDQ7WkzFbMONZIUd6uIxW4VV_h92nMG9fcsVvmqMJ8vuvviCnjj3A0RWG2nxQ0PBICosCmZrk57yWfvcVBIncxTihAylgHA/w72-h72-p-k-no-nu/youtube.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash d3962335bd4723bce4c52f3e2429a9b5
26d0f8009204efd6f1c53728cd42db746eb025ab
977ddc2bda96abb3bc680c116648584bd797a7ed31512d0bea32ae3c58358eda
GET /img/b/R29vZ2xl/AVvXsEigNHvKMEhZE8E2anduIjNNtpCiyzzMMnIHtkKVNNok5NxBR1SiOKSrn7ryoicw0AgnEEFpGR7tbeBCgad_StOngT9dX-fgDQ7WkzFbMONZIUd6uIxW4VV_h92nMG9fcsVvmqMJ8vuvviCnjj3A0RWG2nxQ0PBICosCmZrk57yWfvcVBIncxTihAylgHA/w72-h72-p-k-no-nu/youtube.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v4c1e"
expires: Thu, 08 Dec 2022 04:30:34 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="youtube.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 04:30:34 GMT
server: fife
content-length: 3781
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 45a25e44ed72e89f8a4ad9117e992a19
45f8963020886a77dbdc4dd1ebb802ff116d8486
417b9a1cac53073dc212790552b27df90b7a58351c72188506e5ac5fa2d79d5d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "417B9A1CAC53073DC212790552B27DF90B7A58351C72188506E5AC5FA2D79D5D"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6234
Expires: Wed, 07 Dec 2022 06:14:28 GMT
Date: Wed, 07 Dec 2022 04:30:34 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 45a25e44ed72e89f8a4ad9117e992a19
45f8963020886a77dbdc4dd1ebb802ff116d8486
417b9a1cac53073dc212790552b27df90b7a58351c72188506e5ac5fa2d79d5d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "417B9A1CAC53073DC212790552B27DF90B7A58351C72188506E5AC5FA2D79D5D"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15098
Expires: Wed, 07 Dec 2022 08:42:12 GMT
Date: Wed, 07 Dec 2022 04:30:34 GMT
Connection: keep-alive
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgw0QC8VfOzzLXRTokhpKeGT2-RBp_XL7lQFKlSxJtgmWTYhnSpQpU5vcMOygw1guuWR1Fy4CbXHADdzT4PH5NjrkUxM1vf6SXJm5kbGMmkHGnW6lrnmJdhAfsBABsYUoFjxSjTU_QW3Z02NQlRZBKjWVcvf52Ec04H2CXEaECHLsfhL-S8bA2v8qi6qg/w72-h72-p-k-no-nu/Edible%20Oil.jpg
200 OK 5.6 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgw0QC8VfOzzLXRTokhpKeGT2-RBp_XL7lQFKlSxJtgmWTYhnSpQpU5vcMOygw1guuWR1Fy4CbXHADdzT4PH5NjrkUxM1vf6SXJm5kbGMmkHGnW6lrnmJdhAfsBABsYUoFjxSjTU_QW3Z02NQlRZBKjWVcvf52Ec04H2CXEaECHLsfhL-S8bA2v8qi6qg/w72-h72-p-k-no-nu/Edible%20Oil.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 7119bbb6820ef6a41ee6d50ddc613aa8
3b4fbbc17c16a6fbaea083ee5bfa92b5fa4cd3a4
b54c6c5039bf689b345b16441ee72d3e1d778ce948c7383976133d984f692054
GET /img/b/R29vZ2xl/AVvXsEgw0QC8VfOzzLXRTokhpKeGT2-RBp_XL7lQFKlSxJtgmWTYhnSpQpU5vcMOygw1guuWR1Fy4CbXHADdzT4PH5NjrkUxM1vf6SXJm5kbGMmkHGnW6lrnmJdhAfsBABsYUoFjxSjTU_QW3Z02NQlRZBKjWVcvf52Ec04H2CXEaECHLsfhL-S8bA2v8qi6qg/w72-h72-p-k-no-nu/Edible%20Oil.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v4c25"
expires: Thu, 08 Dec 2022 04:30:34 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Edible Oil.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 04:30:34 GMT
server: fife
content-length: 5591
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjd22aDYcHngBqDqksc6-53eiOFn9-1bwHrx6yHmqST4x5qFw5akJiQo1pfgXZefMREneE6WGGW2TqRLDirz_zAmY8kjkCSPKgabgDyLGWp0roJrd9evVrZM1r_e5oX3nDkaseOR5bupBpQTWK12cNbNAtKfL22alUGyK6UbCn8Kdqd9NG_C-xSI-KMTQ/w72-h72-p-k-no-nu/%E0%A6%93%E0%A7%9F%E0%A6%BE%E0%A6%87%E0%A6%AB%E0%A6%BE%E0%A6%87%20%E0%A6%B0%E0%A6%BE%E0%A6%89%E0%A6%9F%E0%A6%BE%E0%A6%B0%E0%A7%87%E0%A6%B0%20%E0%A6%97%E0%A6%A4%E0%A6%BF%20%E0%A6%AC%E0%A7%83%E0%A6%A6%E0%A7%8D%E0%A6%A7%E0%A6%BF%20%E0%A6%95%E0%A6%B0%E0%A6%BE%E0%A6%B0%20%E0%A6%85%E0%A6%A8%E0%A7%8D%E0%A6%AF%E0%A6%A4%E0%A6%AE%20%E0%A6%89%E0%A6%AA%E0%A6%BE%E0%A7%9F%20%E0%A5%A4%20One%20of%20the%20ways%20to%20increase%20the%20speed%20of%20a%20Wi-Fi%20router.jpg
200 OK 4.0 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjd22aDYcHngBqDqksc6-53eiOFn9-1bwHrx6yHmqST4x5qFw5akJiQo1pfgXZefMREneE6WGGW2TqRLDirz_zAmY8kjkCSPKgabgDyLGWp0roJrd9evVrZM1r_e5oX3nDkaseOR5bupBpQTWK12cNbNAtKfL22alUGyK6UbCn8Kdqd9NG_C-xSI-KMTQ/w72-h72-p-k-no-nu/%E0%A6%93%E0%A7%9F%E0%A6%BE%E0%A6%87%E0%A6%AB%E0%A6%BE%E0%A6%87%20%E0%A6%B0%E0%A6%BE%E0%A6%89%E0%A6%9F%E0%A6%BE%E0%A6%B0%E0%A7%87%E0%A6%B0%20%E0%A6%97%E0%A6%A4%E0%A6%BF%20%E0%A6%AC%E0%A7%83%E0%A6%A6%E0%A7%8D%E0%A6%A7%E0%A6%BF%20%E0%A6%95%E0%A6%B0%E0%A6%BE%E0%A6%B0%20%E0%A6%85%E0%A6%A8%E0%A7%8D%E0%A6%AF%E0%A6%A4%E0%A6%AE%20%E0%A6%89%E0%A6%AA%E0%A6%BE%E0%A7%9F%20%E0%A5%A4%20One%20of%20the%20ways%20to%20increase%20the%20speed%20of%20a%20Wi-Fi%20router.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, description=\340\246\223\340\247\237\340\246\276\340\246\207\340\246\253\340\246\276\340\246\207 \340\246\260\340\246\276\340\246\211\340\246\237\340\246\276\340\246\260\340\247\207\340\246\260 \340\246\227\340\246\244\340\246\277 \340\246\254\340\247\203\340\246\246\340\247\215\340\246\247\340\246\277 \340\246\225\340\246\260\340\246\276\340\246\260 \340\246\205\340\246\250\340\247\215\340\246\257\340\246\244\340\246\256 \340\246\211\340\246\252\340\246\276\340\247\237 \340\245\244 On, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash eac77367da24af3f554d1b9432db0b61
10c8c5a747f549526ca89c06634b980ca311847d
3da0282ed2a01514702ef93819bbaef714dab9acc18ee28ad869dc20dc419983
GET /img/b/R29vZ2xl/AVvXsEjd22aDYcHngBqDqksc6-53eiOFn9-1bwHrx6yHmqST4x5qFw5akJiQo1pfgXZefMREneE6WGGW2TqRLDirz_zAmY8kjkCSPKgabgDyLGWp0roJrd9evVrZM1r_e5oX3nDkaseOR5bupBpQTWK12cNbNAtKfL22alUGyK6UbCn8Kdqd9NG_C-xSI-KMTQ/w72-h72-p-k-no-nu/%E0%A6%93%E0%A7%9F%E0%A6%BE%E0%A6%87%E0%A6%AB%E0%A6%BE%E0%A6%87%20%E0%A6%B0%E0%A6%BE%E0%A6%89%E0%A6%9F%E0%A6%BE%E0%A6%B0%E0%A7%87%E0%A6%B0%20%E0%A6%97%E0%A6%A4%E0%A6%BF%20%E0%A6%AC%E0%A7%83%E0%A6%A6%E0%A7%8D%E0%A6%A7%E0%A6%BF%20%E0%A6%95%E0%A6%B0%E0%A6%BE%E0%A6%B0%20%E0%A6%85%E0%A6%A8%E0%A7%8D%E0%A6%AF%E0%A6%A4%E0%A6%AE%20%E0%A6%89%E0%A6%AA%E0%A6%BE%E0%A7%9F%20%E0%A5%A4%20One%20of%20the%20ways%20to%20increase%20the%20speed%20of%20a%20Wi-Fi%20router.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v4ba9"
expires: Thu, 08 Dec 2022 04:30:34 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="_______ ________ ___ ______ ____ ______ ____ _ One of the ways to increase the speed of a Wi-Fi router.jpg";filename*=UTF-8''%E0%A6%93%E0%A7%9F%E0%A6%BE%E0%A6%87%E0%A6%AB%E0%A6%BE%E0%A6%87%20%E0%A6%B0%E0%A6%BE%E0%A6%89%E0%A6%9F%E0%A6%BE%E0%A6%B0%E0%A7%87%E0%A6%B0%20%E0%A6%97%E0%A6%A4%E0%A6%BF%20%E0%A6%AC%E0%A7%83%E0%A6%A6%E0%A7%8D%E0%A6%A7%E0%A6%BF%20%E0%A6%95%E0%A6%B0%E0%A6%BE%E0%A6%B0%20%E0%A6%85%E0%A6%A8%E0%A7%8D%E0%A6%AF%E0%A6%A4%E0%A6%AE%20%E0%A6%89%E0%A6%AA%E0%A6%BE%E0%A7%9F%20%E0%A5%A4%20One%20of%20the%20ways%20to%20increase%20the%20speed%20of%20a%20Wi-Fi%20router.jpg
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 04:30:34 GMT
server: fife
content-length: 4011
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhi0ginalWO97bnoi0kcpWPCJPfHckOTODw3E_tOLygwT3p9HhAkIeuUAs8RLqytwULoQFpSzruxfbDnxaSlZP1iYmYgouX0z5sxAuuQrNq7S4a_lVaKi35s0_7BpxGoU0DUlj6Ifhf9k96CuKQkFr5RcPyF4_eT6TvO_YoZWbWMTaJYzKYvfSh0ZZAUw/w72-h72-p-k-no-nu/%E0%A6%AA%E0%A7%8D%E0%A6%B0%E0%A6%AF%E0%A7%81%E0%A6%95%E0%A7%8D%E0%A6%A4%E0%A6%BF%E0%A6%97%E0%A6%A4%20%E0%A6%AC%E0%A6%BF%E0%A6%B6%E0%A7%8D%E0%A6%AC%E0%A7%87%E0%A6%B0%20%E0%A6%B6%E0%A7%80%E0%A6%B0%E0%A7%8D%E0%A6%B7%20%E0%A7%AD%20%E0%A6%AC%E0%A6%BF%E0%A6%B8%E0%A7%8D%E0%A6%AE%E0%A6%AF%E0%A6%BC%20%E0%A6%B8%E0%A6%AE%E0%A7%8D%E0%A6%AA%E0%A6%B0%E0%A7%8D%E0%A6%95%E0%A7%87%20%E0%A6%AF%E0%A6%BE%E0%A6%A8%E0%A6%BE%20%E0%A6%AF%E0%A6%BE%E0%A6%95.jpg
200 OK 3.2 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhi0ginalWO97bnoi0kcpWPCJPfHckOTODw3E_tOLygwT3p9HhAkIeuUAs8RLqytwULoQFpSzruxfbDnxaSlZP1iYmYgouX0z5sxAuuQrNq7S4a_lVaKi35s0_7BpxGoU0DUlj6Ifhf9k96CuKQkFr5RcPyF4_eT6TvO_YoZWbWMTaJYzKYvfSh0ZZAUw/w72-h72-p-k-no-nu/%E0%A6%AA%E0%A7%8D%E0%A6%B0%E0%A6%AF%E0%A7%81%E0%A6%95%E0%A7%8D%E0%A6%A4%E0%A6%BF%E0%A6%97%E0%A6%A4%20%E0%A6%AC%E0%A6%BF%E0%A6%B6%E0%A7%8D%E0%A6%AC%E0%A7%87%E0%A6%B0%20%E0%A6%B6%E0%A7%80%E0%A6%B0%E0%A7%8D%E0%A6%B7%20%E0%A7%AD%20%E0%A6%AC%E0%A6%BF%E0%A6%B8%E0%A7%8D%E0%A6%AE%E0%A6%AF%E0%A6%BC%20%E0%A6%B8%E0%A6%AE%E0%A7%8D%E0%A6%AA%E0%A6%B0%E0%A7%8D%E0%A6%95%E0%A7%87%20%E0%A6%AF%E0%A6%BE%E0%A6%A8%E0%A6%BE%20%E0%A6%AF%E0%A6%BE%E0%A6%95.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 777ed478e8b2f58ebac70acf6ab2e8c0
1e1ba48d17c339f38fd3e019fbb981b924253f32
41f51fe8e1534eda4046c8f03b291b8a7c8084f02e291532466311a9c7333a67
GET /img/b/R29vZ2xl/AVvXsEhi0ginalWO97bnoi0kcpWPCJPfHckOTODw3E_tOLygwT3p9HhAkIeuUAs8RLqytwULoQFpSzruxfbDnxaSlZP1iYmYgouX0z5sxAuuQrNq7S4a_lVaKi35s0_7BpxGoU0DUlj6Ifhf9k96CuKQkFr5RcPyF4_eT6TvO_YoZWbWMTaJYzKYvfSh0ZZAUw/w72-h72-p-k-no-nu/%E0%A6%AA%E0%A7%8D%E0%A6%B0%E0%A6%AF%E0%A7%81%E0%A6%95%E0%A7%8D%E0%A6%A4%E0%A6%BF%E0%A6%97%E0%A6%A4%20%E0%A6%AC%E0%A6%BF%E0%A6%B6%E0%A7%8D%E0%A6%AC%E0%A7%87%E0%A6%B0%20%E0%A6%B6%E0%A7%80%E0%A6%B0%E0%A7%8D%E0%A6%B7%20%E0%A7%AD%20%E0%A6%AC%E0%A6%BF%E0%A6%B8%E0%A7%8D%E0%A6%AE%E0%A6%AF%E0%A6%BC%20%E0%A6%B8%E0%A6%AE%E0%A7%8D%E0%A6%AA%E0%A6%B0%E0%A7%8D%E0%A6%95%E0%A7%87%20%E0%A6%AF%E0%A6%BE%E0%A6%A8%E0%A6%BE%20%E0%A6%AF%E0%A6%BE%E0%A6%95.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v4c77"
expires: Thu, 08 Dec 2022 04:30:34 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="___________ _______ _____ _ _______ ________ ____ ___.jpg";filename*=UTF-8''%E0%A6%AA%E0%A7%8D%E0%A6%B0%E0%A6%AF%E0%A7%81%E0%A6%95%E0%A7%8D%E0%A6%A4%E0%A6%BF%E0%A6%97%E0%A6%A4%20%E0%A6%AC%E0%A6%BF%E0%A6%B6%E0%A7%8D%E0%A6%AC%E0%A7%87%E0%A6%B0%20%E0%A6%B6%E0%A7%80%E0%A6%B0%E0%A7%8D%E0%A6%B7%20%E0%A7%AD%20%E0%A6%AC%E0%A6%BF%E0%A6%B8%E0%A7%8D%E0%A6%AE%E0%A6%AF%E0%A6%BC%20%E0%A6%B8%E0%A6%AE%E0%A7%8D%E0%A6%AA%E0%A6%B0%E0%A7%8D%E0%A6%95%E0%A7%87%20%E0%A6%AF%E0%A6%BE%E0%A6%A8%E0%A6%BE%20%E0%A6%AF%E0%A6%BE%E0%A6%95.jpg
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 04:30:34 GMT
server: fife
content-length: 3183
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pl17923725.highperformancecpmgate.com/fd5f60391f6394f5b1dbae0d8c4d570f/invoke.js
200 OK 9.3 kB URL HTTP/1.1 pl17923725.highperformancecpmgate.com/fd5f60391f6394f5b1dbae0d8c4d570f/invoke.js
IP
File type Unicode text, UTF-8 text, with very long lines (25098), with no line terminators
Hash f6305b95b66faee6d38f0fbce929c3f7
16eca2897c75329abfae419eca2fcf770ad8411a
1ab5d0d5e10aa5c567c6c1b0984cf7536687db11a865dd6d6c63c06db9b03002
Analyzer Verdict Alert quad9 Sinkholed
GET /fd5f60391f6394f5b1dbae0d8c4d570f/invoke.js HTTP/1.1
Host: pl17923725.highperformancecpmgate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 07 Dec 2022 04:30:34 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a8ce53f5bc184bf43ba40a7833516614
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjxQ3JW2qxpOtDnj8tQMvKW7pZlJoFtCXlXytWbf_WjJueVZ1ZrQOwQKfvz3YidTtEDwZIgnD_n6eo8JPQeBNwL27nQe_NROSGZb0-NumWk4wl03KD9HGflPlCPxWla6F9CXnPBXcwLmqfVavgSdXDGJLSqFzMWuX2ApZweWohh7aJVBb-SstKhlpQ7sA/w72-h72-p-k-no-nu/%E0%A6%86%E0%A6%AA%E0%A6%A8%E0%A6%BE%E0%A6%B0%20%E0%A6%AA%E0%A7%8D%E0%A6%B0%E0%A6%BF%E0%A6%AF%E0%A6%BC%E0%A6%A4%E0%A6%AE%E0%A6%BE%E0%A6%B0%20%E0%A6%AE%E0%A6%A8%E0%A7%87%E0%A6%B0%20%E0%A6%AE%E0%A6%A7%E0%A7%8D%E0%A6%AF%E0%A7%87%20%E0%A6%95%E0%A7%80%20%E0%A6%B0%E0%A6%B9%E0%A6%B8%E0%A7%8D%E0%A6%AF%20%E0%A6%86%E0%A6%9B%E0%A7%87%20%E0%A6%A4%E0%A6%BE%20%E0%A6%9C%E0%A6%BE%E0%A6%A8%E0%A7%81%E0%A6%A8%20%E0%A6%A4%E0%A6%BE%E0%A6%B0%20%E0%A6%A0%E0%A7%8B%E0%A6%9F%20%E0%A6%A6%E0%A7%87%E0%A6%96%E0%A7%87%E0%A5%A4%20Find%20out%20what%20secrets%20are%20in%20your%20lover's%20mind%20by%20looking%20at%20her%20lips.jpg
200 OK 1.8 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjxQ3JW2qxpOtDnj8tQMvKW7pZlJoFtCXlXytWbf_WjJueVZ1ZrQOwQKfvz3YidTtEDwZIgnD_n6eo8JPQeBNwL27nQe_NROSGZb0-NumWk4wl03KD9HGflPlCPxWla6F9CXnPBXcwLmqfVavgSdXDGJLSqFzMWuX2ApZweWohh7aJVBb-SstKhlpQ7sA/w72-h72-p-k-no-nu/%E0%A6%86%E0%A6%AA%E0%A6%A8%E0%A6%BE%E0%A6%B0%20%E0%A6%AA%E0%A7%8D%E0%A6%B0%E0%A6%BF%E0%A6%AF%E0%A6%BC%E0%A6%A4%E0%A6%AE%E0%A6%BE%E0%A6%B0%20%E0%A6%AE%E0%A6%A8%E0%A7%87%E0%A6%B0%20%E0%A6%AE%E0%A6%A7%E0%A7%8D%E0%A6%AF%E0%A7%87%20%E0%A6%95%E0%A7%80%20%E0%A6%B0%E0%A6%B9%E0%A6%B8%E0%A7%8D%E0%A6%AF%20%E0%A6%86%E0%A6%9B%E0%A7%87%20%E0%A6%A4%E0%A6%BE%20%E0%A6%9C%E0%A6%BE%E0%A6%A8%E0%A7%81%E0%A6%A8%20%E0%A6%A4%E0%A6%BE%E0%A6%B0%20%E0%A6%A0%E0%A7%8B%E0%A6%9F%20%E0%A6%A6%E0%A7%87%E0%A6%96%E0%A7%87%E0%A5%A4%20Find%20out%20what%20secrets%20are%20in%20your%20lover's%20mind%20by%20looking%20at%20her%20lips.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 6e0961698076e0aed2df24dc34b28d45
03dbd4657f1190dc3c1895065013a0a1e5f90337
81332fa39f87ab13e53aaf57b24d410f9b85c120c634370dc03c16172ee816ab
GET /img/b/R29vZ2xl/AVvXsEjxQ3JW2qxpOtDnj8tQMvKW7pZlJoFtCXlXytWbf_WjJueVZ1ZrQOwQKfvz3YidTtEDwZIgnD_n6eo8JPQeBNwL27nQe_NROSGZb0-NumWk4wl03KD9HGflPlCPxWla6F9CXnPBXcwLmqfVavgSdXDGJLSqFzMWuX2ApZweWohh7aJVBb-SstKhlpQ7sA/w72-h72-p-k-no-nu/%E0%A6%86%E0%A6%AA%E0%A6%A8%E0%A6%BE%E0%A6%B0%20%E0%A6%AA%E0%A7%8D%E0%A6%B0%E0%A6%BF%E0%A6%AF%E0%A6%BC%E0%A6%A4%E0%A6%AE%E0%A6%BE%E0%A6%B0%20%E0%A6%AE%E0%A6%A8%E0%A7%87%E0%A6%B0%20%E0%A6%AE%E0%A6%A7%E0%A7%8D%E0%A6%AF%E0%A7%87%20%E0%A6%95%E0%A7%80%20%E0%A6%B0%E0%A6%B9%E0%A6%B8%E0%A7%8D%E0%A6%AF%20%E0%A6%86%E0%A6%9B%E0%A7%87%20%E0%A6%A4%E0%A6%BE%20%E0%A6%9C%E0%A6%BE%E0%A6%A8%E0%A7%81%E0%A6%A8%20%E0%A6%A4%E0%A6%BE%E0%A6%B0%20%E0%A6%A0%E0%A7%8B%E0%A6%9F%20%E0%A6%A6%E0%A7%87%E0%A6%96%E0%A7%87%E0%A5%A4%20Find%20out%20what%20secrets%20are%20in%20your%20lover's%20mind%20by%20looking%20at%20her%20lips.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v4bd5"
expires: Thu, 08 Dec 2022 04:30:34 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="_____ __________ ____ _____ __ _____ ___ __ _____ ___ ___ _____ Find out what secrets are in your lover's mind by looking at her lips.jpg";filename*=UTF-8''%E0%A6%86%E0%A6%AA%E0%A6%A8%E0%A6%BE%E0%A6%B0%20%E0%A6%AA%E0%A7%8D%E0%A6%B0%E0%A6%BF%E0%A6%AF%E0%A6%BC%E0%A6%A4%E0%A6%AE%E0%A6%BE%E0%A6%B0%20%E0%A6%AE%E0%A6%A8%E0%A7%87%E0%A6%B0%20%E0%A6%AE%E0%A6%A7%E0%A7%8D%E0%A6%AF%E0%A7%87%20%E0%A6%95%E0%A7%80%20%E0%A6%B0%E0%A6%B9%E0%A6%B8%E0%A7%8D%E0%A6%AF%20%E0%A6%86%E0%A6%9B%E0%A7%87%20%E0%A6%A4%E0%A6%BE%20%E0%A6%9C%E0%A6%BE%E0%A6%A8%E0%A7%81%E0%A6%A8%20%E0%A6%A4%E0%A6%BE%E0%A6%B0%20%E0%A6%A0%E0%A7%8B%E0%A6%9F%20%E0%A6%A6%E0%A7%87%E0%A6%96%E0%A7%87%E0%A5%A4%20Find%20out%20what%20secrets%20are%20in%20your%20lover's%20mind%20by%20looking%20at%20her%20lips.jpg
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 04:30:34 GMT
server: fife
content-length: 1813
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjt_8wyc9GD02MgIjdzbjTIHQMCmGGsIt2VKOuLMeQKybNilE2Bn8HMRGvc_rO6NUJpVlO4FETmO_sZxZCpd9QtekTRN6qfurGW_2BGpAlDDi3E9Y_h7L_0BvOUkJ7s7iVvvAjZ69akxakWIrzkELjrufw81vLs4e3uv2ZI9HjZImzhBKq-EIwp6-O3ow/w72-h72-p-k-no-nu/human%20improve%20memory.jpg
200 OK 4.3 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjt_8wyc9GD02MgIjdzbjTIHQMCmGGsIt2VKOuLMeQKybNilE2Bn8HMRGvc_rO6NUJpVlO4FETmO_sZxZCpd9QtekTRN6qfurGW_2BGpAlDDi3E9Y_h7L_0BvOUkJ7s7iVvvAjZ69akxakWIrzkELjrufw81vLs4e3uv2ZI9HjZImzhBKq-EIwp6-O3ow/w72-h72-p-k-no-nu/human%20improve%20memory.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 742d675c2b6cddfcfc1d7709fef42279
c5b934ddf3f2a31743e161db0a59402e98115999
9cb6bcf96c04018880e4abfec44f37dae8d64071b99f4fbb5de25cc48c72a171
GET /img/b/R29vZ2xl/AVvXsEjt_8wyc9GD02MgIjdzbjTIHQMCmGGsIt2VKOuLMeQKybNilE2Bn8HMRGvc_rO6NUJpVlO4FETmO_sZxZCpd9QtekTRN6qfurGW_2BGpAlDDi3E9Y_h7L_0BvOUkJ7s7iVvvAjZ69akxakWIrzkELjrufw81vLs4e3uv2ZI9HjZImzhBKq-EIwp6-O3ow/w72-h72-p-k-no-nu/human%20improve%20memory.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v4c36"
expires: Thu, 08 Dec 2022 04:30:34 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="human improve memory.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 04:30:34 GMT
server: fife
content-length: 4258
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgOdHCS33mT4yQAw4-RNVgxhFhmxwvuFoKz0yPKocjglzLjyndb-VOhF8SkkQ3ji8vpNQ1L0Rs-9nv8R_G4zHi7d4nVyJSgnC--8WDRB3enY03YSch-ZLlw7gHdRBfrofcDfMQbVo0qfL4C2ELebjnF22vBQBZBbt25vqfBSh_iW8KC7-q_BsSywuct4Q/w72-h72-p-k-no-nu/%E0%A6%87%E0%A6%A4%E0%A6%BF%E0%A6%B9%E0%A6%BE%E0%A6%B8%E0%A7%87%E0%A6%B0%2010%E0%A6%9F%E0%A6%BF%20%E0%A6%AC%E0%A6%BF%E0%A6%B0%E0%A6%B2%20%E0%A6%AC%E0%A6%87%20%E0%A6%86%E0%A6%AA%E0%A6%A8%E0%A6%BF%20%E0%A6%95%E0%A6%96%E0%A6%A8%E0%A6%87%20%E0%A6%AA%E0%A6%A1%E0%A6%BC%E0%A6%A4%E0%A7%87%20%E0%A6%AA%E0%A6%BE%E0%A6%B0%E0%A6%AC%E0%A7%87%E0%A6%A8%20%E0%A6%A8%E0%A6%BE%20%E0%A5%A4%20The%2010%20Rarest%20Books%20in%20History%20You'll%20Never%20Be%20Able%20to%20Read.jpg
200 OK 5.0 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgOdHCS33mT4yQAw4-RNVgxhFhmxwvuFoKz0yPKocjglzLjyndb-VOhF8SkkQ3ji8vpNQ1L0Rs-9nv8R_G4zHi7d4nVyJSgnC--8WDRB3enY03YSch-ZLlw7gHdRBfrofcDfMQbVo0qfL4C2ELebjnF22vBQBZBbt25vqfBSh_iW8KC7-q_BsSywuct4Q/w72-h72-p-k-no-nu/%E0%A6%87%E0%A6%A4%E0%A6%BF%E0%A6%B9%E0%A6%BE%E0%A6%B8%E0%A7%87%E0%A6%B0%2010%E0%A6%9F%E0%A6%BF%20%E0%A6%AC%E0%A6%BF%E0%A6%B0%E0%A6%B2%20%E0%A6%AC%E0%A6%87%20%E0%A6%86%E0%A6%AA%E0%A6%A8%E0%A6%BF%20%E0%A6%95%E0%A6%96%E0%A6%A8%E0%A6%87%20%E0%A6%AA%E0%A6%A1%E0%A6%BC%E0%A6%A4%E0%A7%87%20%E0%A6%AA%E0%A6%BE%E0%A6%B0%E0%A6%AC%E0%A7%87%E0%A6%A8%20%E0%A6%A8%E0%A6%BE%20%E0%A5%A4%20The%2010%20Rarest%20Books%20in%20History%20You'll%20Never%20Be%20Able%20to%20Read.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash ec4292909c9ddcc31549ae7700374006
38c8657edf74cf0c6f2f24edcefc2306eb051afc
3db59aacfcd06bd664168f813c14164a628383395b55c34890dbc1d13f7ed068
GET /img/b/R29vZ2xl/AVvXsEgOdHCS33mT4yQAw4-RNVgxhFhmxwvuFoKz0yPKocjglzLjyndb-VOhF8SkkQ3ji8vpNQ1L0Rs-9nv8R_G4zHi7d4nVyJSgnC--8WDRB3enY03YSch-ZLlw7gHdRBfrofcDfMQbVo0qfL4C2ELebjnF22vBQBZBbt25vqfBSh_iW8KC7-q_BsSywuct4Q/w72-h72-p-k-no-nu/%E0%A6%87%E0%A6%A4%E0%A6%BF%E0%A6%B9%E0%A6%BE%E0%A6%B8%E0%A7%87%E0%A6%B0%2010%E0%A6%9F%E0%A6%BF%20%E0%A6%AC%E0%A6%BF%E0%A6%B0%E0%A6%B2%20%E0%A6%AC%E0%A6%87%20%E0%A6%86%E0%A6%AA%E0%A6%A8%E0%A6%BF%20%E0%A6%95%E0%A6%96%E0%A6%A8%E0%A6%87%20%E0%A6%AA%E0%A6%A1%E0%A6%BC%E0%A6%A4%E0%A7%87%20%E0%A6%AA%E0%A6%BE%E0%A6%B0%E0%A6%AC%E0%A7%87%E0%A6%A8%20%E0%A6%A8%E0%A6%BE%20%E0%A5%A4%20The%2010%20Rarest%20Books%20in%20History%20You'll%20Never%20Be%20Able%20to%20Read.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v4c8f"
expires: Thu, 08 Dec 2022 04:30:34 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="________ 10__ ____ __ ____ ____ _____ ______ __ _ The 10 Rarest Books in History You'll Never Be Able to Read.jpg";filename*=UTF-8''%E0%A6%87%E0%A6%A4%E0%A6%BF%E0%A6%B9%E0%A6%BE%E0%A6%B8%E0%A7%87%E0%A6%B0%2010%E0%A6%9F%E0%A6%BF%20%E0%A6%AC%E0%A6%BF%E0%A6%B0%E0%A6%B2%20%E0%A6%AC%E0%A6%87%20%E0%A6%86%E0%A6%AA%E0%A6%A8%E0%A6%BF%20%E0%A6%95%E0%A6%96%E0%A6%A8%E0%A6%87%20%E0%A6%AA%E0%A6%A1%E0%A6%BC%E0%A6%A4%E0%A7%87%20%E0%A6%AA%E0%A6%BE%E0%A6%B0%E0%A6%AC%E0%A7%87%E0%A6%A8%20%E0%A6%A8%E0%A6%BE%20%E0%A5%A4%20The%2010%20Rarest%20Books%20in%20History%20You'll%20Never%20Be%20Able%20to%20Read.jpg
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 04:30:34 GMT
server: fife
content-length: 5034
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg2NRBLAeb6rX51HzPRo1yqZZ7bE_DYGqdyG1UeLf-WJ0_oDTEqS7thEtGNkDztcqLbI3x_IuvXPMfSbxIT4Neh9EuVLzpjonXf_uflDYnk_cL3F5ArlEplUsVtfAM074pWKF0KI7XKvjkPh1g-JVYS9SAGPNyvp_otl-xdgR1UER0WLmV3-ktg2VfOqQ/w72-h72-p-k-no-nu/Lionel%20Messi.jpg
200 OK 4.8 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg2NRBLAeb6rX51HzPRo1yqZZ7bE_DYGqdyG1UeLf-WJ0_oDTEqS7thEtGNkDztcqLbI3x_IuvXPMfSbxIT4Neh9EuVLzpjonXf_uflDYnk_cL3F5ArlEplUsVtfAM074pWKF0KI7XKvjkPh1g-JVYS9SAGPNyvp_otl-xdgR1UER0WLmV3-ktg2VfOqQ/w72-h72-p-k-no-nu/Lionel%20Messi.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, description=Bangladesh News in Bangla, \340\246\254\340\246\276\340\246\202\340\246\262\340\246\276\340\246\246\340\247\207\340\246\266\340\247\207\340\246\260 \340\246\226\340\246\254\340\246\260, \340\246\254\340\246\276\340\246\202\340\246\262\340\246\276\340\247\237 \340\246\226\340\246\254\340\246\260,latest News, Breaking News, B, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 260d1ceead0c220c9fa058fd5d6d9a58
ddc9a58f163b3c8b2984708edb16b07f6aa3d171
69bb58eb12613888cf6834c2312645fd8e425cc836c48faff3ee51eadf7b9fe0
GET /img/b/R29vZ2xl/AVvXsEg2NRBLAeb6rX51HzPRo1yqZZ7bE_DYGqdyG1UeLf-WJ0_oDTEqS7thEtGNkDztcqLbI3x_IuvXPMfSbxIT4Neh9EuVLzpjonXf_uflDYnk_cL3F5ArlEplUsVtfAM074pWKF0KI7XKvjkPh1g-JVYS9SAGPNyvp_otl-xdgR1UER0WLmV3-ktg2VfOqQ/w72-h72-p-k-no-nu/Lionel%20Messi.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v4be6"
expires: Thu, 08 Dec 2022 04:30:34 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Lionel Messi.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 04:30:34 GMT
server: fife
content-length: 4771
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZfvuKdaaXAO42bID-xzR93sG3rk3d6w5hgyDUN8pRsjseFpcrXEBmmtVbE66xRg8pOjauy_ujMQfZdb8qvZgAtSxVXsChscvs4J5AlD3jOcH_gMqkoeO9hT1Z_W7PWflvJ741qucFeJHp4TtQ5H0X0VrmKSn0MusN1ZFAx3B-lwEs6ba1f4EeUFGyIw/w72-h72-p-k-no-nu/Weight%20loss%20tips.jpg
200 OK 2.7 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZfvuKdaaXAO42bID-xzR93sG3rk3d6w5hgyDUN8pRsjseFpcrXEBmmtVbE66xRg8pOjauy_ujMQfZdb8qvZgAtSxVXsChscvs4J5AlD3jOcH_gMqkoeO9hT1Z_W7PWflvJ741qucFeJHp4TtQ5H0X0VrmKSn0MusN1ZFAx3B-lwEs6ba1f4EeUFGyIw/w72-h72-p-k-no-nu/Weight%20loss%20tips.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 2915e8b44632c4bdaaf84d2da81a4786
447a6aa91ee9367e84810cf3d436dedfa0fbc5f6
c175c3f69e9dc5ff4a421f291a364aeef40da4bba57bc6b4405f02af5cc67133
GET /img/b/R29vZ2xl/AVvXsEgZfvuKdaaXAO42bID-xzR93sG3rk3d6w5hgyDUN8pRsjseFpcrXEBmmtVbE66xRg8pOjauy_ujMQfZdb8qvZgAtSxVXsChscvs4J5AlD3jOcH_gMqkoeO9hT1Z_W7PWflvJ741qucFeJHp4TtQ5H0X0VrmKSn0MusN1ZFAx3B-lwEs6ba1f4EeUFGyIw/w72-h72-p-k-no-nu/Weight%20loss%20tips.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v4c0c"
expires: Thu, 08 Dec 2022 04:30:34 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Weight loss tips.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 04:30:34 GMT
server: fife
content-length: 2689
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhwQ7A5pP_VXh_es4fYL-YZrIYC8mGfAvyPbt3rpuUyyRX6AWqOH1XvLjbTtBTmlolDcOuTp0y_DZqkKAvaLk4QiLrriSp8fFqZFtJwG4b3oNbSg3lgZ63G3P445BwoYAqHLjIhk1KHe6Vuql2m1Jmd18IG8--f1eqzhV2q4PFNYx4sIUJiqPt7rqmrqg/w72-h72-p-k-no-nu/neymar.PNG
200 OK 12 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhwQ7A5pP_VXh_es4fYL-YZrIYC8mGfAvyPbt3rpuUyyRX6AWqOH1XvLjbTtBTmlolDcOuTp0y_DZqkKAvaLk4QiLrriSp8fFqZFtJwG4b3oNbSg3lgZ63G3P445BwoYAqHLjIhk1KHe6Vuql2m1Jmd18IG8--f1eqzhV2q4PFNYx4sIUJiqPt7rqmrqg/w72-h72-p-k-no-nu/neymar.PNG
IP
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash 09c054aba1835c611f0b80eec0b7ad2d
a820984a0ad7ff143732fd85f3c3ff09bc114379
42bf7ded67f3270bd5b8eebc1171ccd26365dbe2f8c5f38e676b01e7206740a0
GET /img/b/R29vZ2xl/AVvXsEhwQ7A5pP_VXh_es4fYL-YZrIYC8mGfAvyPbt3rpuUyyRX6AWqOH1XvLjbTtBTmlolDcOuTp0y_DZqkKAvaLk4QiLrriSp8fFqZFtJwG4b3oNbSg3lgZ63G3P445BwoYAqHLjIhk1KHe6Vuql2m1Jmd18IG8--f1eqzhV2q4PFNYx4sIUJiqPt7rqmrqg/w72-h72-p-k-no-nu/neymar.PNG HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v4be9"
expires: Thu, 08 Dec 2022 04:30:34 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="neymar.PNG"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 04:30:34 GMT
server: fife
content-length: 12186
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/a/AVvXsEhhEWzxJxGxIYLQYN_YRJbsGcXnRjVELc4rjLUZxYz4M0LxddeXI1-khT0osbi_BH-bN-AHep9_dTJ9MchQhC3HckLZxYYQ17w9JSaCwqf1gLSHvirJqDhwDDEhuGTQE1rUHJDQFkd1v66Rk7a2wEd_cMXe7FwY9DMM7AwH5FoncOmxVJJwvOYfHGuUwg=s150
200 OK 4.0 kB URL HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEhhEWzxJxGxIYLQYN_YRJbsGcXnRjVELc4rjLUZxYz4M0LxddeXI1-khT0osbi_BH-bN-AHep9_dTJ9MchQhC3HckLZxYYQ17w9JSaCwqf1gLSHvirJqDhwDDEhuGTQE1rUHJDQFkd1v66Rk7a2wEd_cMXe7FwY9DMM7AwH5FoncOmxVJJwvOYfHGuUwg=s150
IP
File type PNG image data, 150 x 33, 8-bit/color RGB, non-interlaced\012- data
Hash 14f67f799822b67f53bf9648c8f56402
f6621b5d1ad54e4254ee24ab3a942f1a0c41de20
f51ee1883f502e1aff4a93be6083158c3f32760bb2abe3fe0d51adcf4e8df95a
GET /img/a/AVvXsEhhEWzxJxGxIYLQYN_YRJbsGcXnRjVELc4rjLUZxYz4M0LxddeXI1-khT0osbi_BH-bN-AHep9_dTJ9MchQhC3HckLZxYYQ17w9JSaCwqf1gLSHvirJqDhwDDEhuGTQE1rUHJDQFkd1v66Rk7a2wEd_cMXe7FwY9DMM7AwH5FoncOmxVJJwvOYfHGuUwg=s150 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v4b84"
expires: Thu, 08 Dec 2022 04:30:34 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Capture.PNG"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 04:30:34 GMT
server: fife
content-length: 4034
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pl17923725.highperformancecpmgate.com/fd5f60391f6394f5b1dbae0d8c4d570f/invoke.js
200 OK 9.3 kB URL HTTP/1.1 pl17923725.highperformancecpmgate.com/fd5f60391f6394f5b1dbae0d8c4d570f/invoke.js
IP
File type Unicode text, UTF-8 text, with very long lines (25118), with no line terminators
Hash e854e4e80a7bfb49d3a5917b3756f3e4
f24fdc54251d6d0c55526eb2d6e6aed8f20ae380
5d4d2ddd4b494360ab64610a2cdca0ce2a23f8d8c4c8f8a92e5b0021de610483
Analyzer Verdict Alert quad9 Sinkholed
GET /fd5f60391f6394f5b1dbae0d8c4d570f/invoke.js HTTP/1.1
Host: pl17923725.highperformancecpmgate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 07 Dec 2022 04:30:34 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d6789e2d2097ce6b39c43e4b2b6eef01
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
pl17923725.highperformancecpmgate.com/fd5f60391f6394f5b1dbae0d8c4d570f/invoke.js
200 OK 9.3 kB URL HTTP/1.1 pl17923725.highperformancecpmgate.com/fd5f60391f6394f5b1dbae0d8c4d570f/invoke.js
IP
File type Unicode text, UTF-8 text, with very long lines (25146), with no line terminators
Hash 09d81a6051b3545a468797e7e6fbf6e9
cb46785fac16cdb99495043ac871376d116bcb72
6c69ae628edb63e272fbe314250615a46d1b84c6e1a696966c1e36b7f3f73eb3
Analyzer Verdict Alert quad9 Sinkholed
GET /fd5f60391f6394f5b1dbae0d8c4d570f/invoke.js HTTP/1.1
Host: pl17923725.highperformancecpmgate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 07 Dec 2022 04:30:34 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d46b1a9a2f8d6f25cfdd1a2d4c129e4c
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 975d829b6c1182baa9059ef46ba71c89
4cad25f5dc5997779e9bde153551bf7fa3481938
5a23467d164713da6a0ba9cff3d114780c255f12696ad50c3efc214c8895ee64
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=122285
Date: Wed, 07 Dec 2022 04:30:34 GMT
Etag: "638f4418-1d7"
Expires: Thu, 08 Dec 2022 14:28:39 GMT
Last-Modified: Tue, 06 Dec 2022 13:31:04 GMT
Server: ECS (nyb/1D27)
X-Cache: Miss from cloudfront
Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Fcjh1DnuuyAZEPfpfrGtMfTVPq0hh4xbdlgSkNEk_awGSa_K2LcHyw==
Age: 3455
ocsp.pki.goog/s/gts1p5/FQEr5kwTHGw
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/FQEr5kwTHGw
IP
Hash 6c5fa5d3b1c9f1f4c2af0567b2947f09
486409287e7b2dfabd96a03330be734cfcea75a5
c9207e7792110aca1eda8c23c177f91b8463a818ae1401a7bdcf97527657a469
POST /s/gts1p5/FQEr5kwTHGw HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 04:30:34 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
draft.blogger.com/dyn-css/authorization.css?targetBlogID=4113102616675367661&zx=1c2d0ba6-3da5-42a3-b850-9f75da654285
200 OK 21 B URL HTTP/2 draft.blogger.com/dyn-css/authorization.css?targetBlogID=4113102616675367661&zx=1c2d0ba6-3da5-42a3-b850-9f75da654285
IP
File type very short file (no magic)
Hash a62e4d501434033d5d177e67d3aafdd0
34f7300c9ed47334cf10826d57af785321e3138b
b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522
GET /dyn-css/authorization.css?targetBlogID=4113102616675367661&zx=1c2d0ba6-3da5-42a3-b850-9f75da654285 HTTP/1.1
Host: draft.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 07 Dec 2022 04:30:34 GMT
last-modified: Wed, 07 Dec 2022 04:30:34 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash fe0ccdadf161ae91540e8345d2135cfc
d963a589f90bfbd159b2221c5cab9b1b571891ed
d4cf344562a7816a655b66381b1f3e82d9bdec777ed3bcec8025326bf1722619
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://amarzogot.blogspot.com
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 04:30:34 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://amarzogot.blogspot.com
access-control-allow-credentials: true
set-cookie: uid_id2=4a9ebf55-82c4-4321-98a2-912179024f19:1:1; expires=Sat, 04 Dec 2032 04:30:34 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 975d829b6c1182baa9059ef46ba71c89
4cad25f5dc5997779e9bde153551bf7fa3481938
5a23467d164713da6a0ba9cff3d114780c255f12696ad50c3efc214c8895ee64
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=122385
Date: Wed, 07 Dec 2022 04:30:34 GMT
Etag: "638f4418-1d7"
Expires: Thu, 08 Dec 2022 14:30:19 GMT
Last-Modified: Tue, 06 Dec 2022 13:31:04 GMT
Server: ECS (nyb/1D10)
X-Cache: Miss from cloudfront
Via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: PemYdKI657jIuOyL28rQxGdSXyRWra8jOhmVcyEh_F_MtYxnZIm_Lg==
Age: 3555
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 20b9bb83f2e0e30267b0eebc6b459208
ed15be488ba44f2cc9d8b940b44946f734f8cb43
a39b9d813f96636a9083020fdaa0916a80b4bda1613f7df27a7a612a3189142c
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://amarzogot.blogspot.com
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 04:30:34 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://amarzogot.blogspot.com
access-control-allow-credentials: true
set-cookie: uid_id2=92fbb616-7ff0-42c9-b0b8-aaa5480daec6:3:1; expires=Sat, 04 Dec 2032 04:30:34 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5006b8e985c5838b7fd2f2b558a65bc4
183ff15e0faedf346305fd6fe1c70c9c7a1eef4a
fcbfec9f5fd0e10d44778c1df64d8612281cd39881cdfd0aa8ca30d13655655a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 04:30:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash fe0ccdadf161ae91540e8345d2135cfc
d963a589f90bfbd159b2221c5cab9b1b571891ed
d4cf344562a7816a655b66381b1f3e82d9bdec777ed3bcec8025326bf1722619
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://amarzogot.blogspot.com
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Cookie: uid_id2=4a9ebf55-82c4-4321-98a2-912179024f19:1:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 04:30:34 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://amarzogot.blogspot.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
200 OK 665 B URL HTTP/2 www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
IP
File type ASCII text, with very long lines (1034), with no line terminators
Hash 34e37af4d526255a20a2056cd5f4addf
bcac186d6a49539e69a3f67aa08d0188966f5623
51a2c479b272414cb9d7e1ec62edffbad01217068b73d516d33cb8f26a4fc634
GET /recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://draft.blogger.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Wed, 07 Dec 2022 04:30:34 GMT
date: Wed, 07 Dec 2022 04:30:34 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 665
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 20b9bb83f2e0e30267b0eebc6b459208
ed15be488ba44f2cc9d8b940b44946f734f8cb43
a39b9d813f96636a9083020fdaa0916a80b4bda1613f7df27a7a612a3189142c
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://amarzogot.blogspot.com
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Cookie: uid_id2=92fbb616-7ff0-42c9-b0b8-aaa5480daec6:3:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 04:30:34 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://amarzogot.blogspot.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cd6dabd083ee1c237c8ea3ba38cc48d5
bbe4420bf1c0fe0d5621336865563418d2f16f39
c9314cdac13bc2ea94505f473538ab4d5c0a940dfbc2f5447e6f22a5af580572
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 04:30:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh9JtfOLHDsNYT4STsw4Q7ZWFFaUfWmy5MLXcJIh3EuhfTuArpWxFyX7Es9NQclkkPpRkv6GdcOD0jvh9VfQjyuhflazXPF2EL4cU9go1QFbGOJSvDBIFGt4Cj8lbS4LyzaY013JJJLxq-8EwSRhlF3EtS64BLsuLBbC2BodhxeuXpo2JwtipBMf4ZkyQ/w640-h426/The%20Moonstone.jpg
200 OK 44 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh9JtfOLHDsNYT4STsw4Q7ZWFFaUfWmy5MLXcJIh3EuhfTuArpWxFyX7Es9NQclkkPpRkv6GdcOD0jvh9VfQjyuhflazXPF2EL4cU9go1QFbGOJSvDBIFGt4Cj8lbS4LyzaY013JJJLxq-8EwSRhlF3EtS64BLsuLBbC2BodhxeuXpo2JwtipBMf4ZkyQ/w640-h426/The%20Moonstone.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 640x426, components 3\012- data
Hash 5950cebb2553435de010b36b9127c5ac
7c2a9359aac187633dd9132908715c7199d391ae
14563479a0b3e699dd16ce93a0a3165d57c76d8673ae04ccf0fd5c79fdf09f9c
GET /img/b/R29vZ2xl/AVvXsEh9JtfOLHDsNYT4STsw4Q7ZWFFaUfWmy5MLXcJIh3EuhfTuArpWxFyX7Es9NQclkkPpRkv6GdcOD0jvh9VfQjyuhflazXPF2EL4cU9go1QFbGOJSvDBIFGt4Cj8lbS4LyzaY013JJJLxq-8EwSRhlF3EtS64BLsuLBbC2BodhxeuXpo2JwtipBMf4ZkyQ/w640-h426/The%20Moonstone.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v4c8a"
expires: Thu, 08 Dec 2022 04:30:35 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="The Moonstone.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 04:30:35 GMT
server: fife
content-length: 44439
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjcv00e_mWL70WFLzvSYbeanhAP4cnWWtSJo7TewxKECO5ZrC2oJ4I13ZH3ks4BQKPvT4gmNByS-6mfd1Un1zI-YHf4oZkvWqBf2esU83uK0pXSTs2p2W8uOAexJk4HPZzkmgmzZaGAbEEPDRI1XDHWJGAmMqgCWbnMkGDemrM0xbMicrEjuFl8AlChlQ/w640-h426/10%20of%20the%20World%E2%80%99s%20Most%20Cursed%20Gemstones.jpg
200 OK 75 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjcv00e_mWL70WFLzvSYbeanhAP4cnWWtSJo7TewxKECO5ZrC2oJ4I13ZH3ks4BQKPvT4gmNByS-6mfd1Un1zI-YHf4oZkvWqBf2esU83uK0pXSTs2p2W8uOAexJk4HPZzkmgmzZaGAbEEPDRI1XDHWJGAmMqgCWbnMkGDemrM0xbMicrEjuFl8AlChlQ/w640-h426/10%20of%20the%20World%E2%80%99s%20Most%20Cursed%20Gemstones.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 639x426, components 3\012- data
Hash 530e8420f9bd0d165f51e19b961a3df3
ebf8b5eaa194f1119abc8f6bc5dd25f10e84cfd0
0e79d9742e6098131d943ea9229eaa11ca35c45259dab691484650bae6902487
GET /img/b/R29vZ2xl/AVvXsEjcv00e_mWL70WFLzvSYbeanhAP4cnWWtSJo7TewxKECO5ZrC2oJ4I13ZH3ks4BQKPvT4gmNByS-6mfd1Un1zI-YHf4oZkvWqBf2esU83uK0pXSTs2p2W8uOAexJk4HPZzkmgmzZaGAbEEPDRI1XDHWJGAmMqgCWbnMkGDemrM0xbMicrEjuFl8AlChlQ/w640-h426/10%20of%20the%20World%E2%80%99s%20Most%20Cursed%20Gemstones.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v4c85"
expires: Thu, 08 Dec 2022 04:30:35 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="10 of the World_s Most Cursed Gemstones.jpg";filename*=UTF-8''10%20of%20the%20World%E2%80%99s%20Most%20Cursed%20Gemstones.jpg
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 04:30:35 GMT
server: fife
content-length: 74663
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.profitabledisplayformat.com/42e41b8ac2b8480e6dd91bfce837e029/invoke.js
200 OK 9.2 kB URL HTTP/2 www.profitabledisplayformat.com/42e41b8ac2b8480e6dd91bfce837e029/invoke.js
IP
File type exported SGML document, ASCII text, with very long lines (26955), with no line terminators
Hash 01f4f56fbaa41759927736af2deb491f
c7b0fab365818bc6e4feeae94cbe35e463107ff0
6b263228c54cf9d683d0b25909a965e1ca2765bd08a24ebadcc7024d413139da
Analyzer Verdict Alert quad9 Sinkholed
GET /42e41b8ac2b8480e6dd91bfce837e029/invoke.js HTTP/1.1
Host: www.profitabledisplayformat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 04:30:34 GMT
content-type: application/javascript
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 678c77e67f5ab94a44f6e95fc73a3a0a
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: MISS
last-modified: Wed, 07 Dec 2022 04:30:34 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2PfPmNN7ZHwz0S4U5PYfsgXOcUtuJeCUkGPWoLTGNq3Crc6ibxmrnaj%2BbYAVsgtj27yNZ2QTJuI1h%2BNs8htnd0X9rtlchQwEWUkePCDc8MGmwmI8W05EV5XiWJMqZdswx3Li5yOdeVTxn%2FeOCj901uPp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775a86d95ea00b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhjdfAUgPQ6YWhMTnTo4YkAsPyIzTfPdca8P3rbI2Xujq-nEMgaZ4qwl1FI2Xd3Lq_pvbfGxUpZ0wvFidfScrmxZlCnykH2YpKZAdnFcQvuAZWODt20ZrPz_rGcyuuYxz-kiPHEtSjDCQC2UrecA6jNHoK01TJYrIFBxYJnhmrvvji728TTNuAB9OtcWw/w640-h438/Hope%20Diamond.jpg
200 OK 73 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhjdfAUgPQ6YWhMTnTo4YkAsPyIzTfPdca8P3rbI2Xujq-nEMgaZ4qwl1FI2Xd3Lq_pvbfGxUpZ0wvFidfScrmxZlCnykH2YpKZAdnFcQvuAZWODt20ZrPz_rGcyuuYxz-kiPHEtSjDCQC2UrecA6jNHoK01TJYrIFBxYJnhmrvvji728TTNuAB9OtcWw/w640-h438/Hope%20Diamond.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 640x437, components 3\012- data
Hash 1b183320e07811d48565665b8a542f6f
cd6b0023ba7c1fe01ba7b435348c07796b779ebd
4b3018928727e6154134a38699ab3ace2544b4576d6d4ad95a52b16931bab8a0
GET /img/b/R29vZ2xl/AVvXsEhjdfAUgPQ6YWhMTnTo4YkAsPyIzTfPdca8P3rbI2Xujq-nEMgaZ4qwl1FI2Xd3Lq_pvbfGxUpZ0wvFidfScrmxZlCnykH2YpKZAdnFcQvuAZWODt20ZrPz_rGcyuuYxz-kiPHEtSjDCQC2UrecA6jNHoK01TJYrIFBxYJnhmrvvji728TTNuAB9OtcWw/w640-h438/Hope%20Diamond.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v4c80"
expires: Thu, 08 Dec 2022 04:30:35 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Hope Diamond.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 04:30:35 GMT
server: fife
content-length: 72610
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyAf3YBWDwub6nRKLgu-sp--0jezmwMUzkC8JhLSjMDYjxCcrvrTxpvm3hkbZIkleyvrx6ZkrEI8mvt7I2S90QuHYcL_5N1kBu60PEFvcvIMEhorLByxDUtK4Rbrcsi_7Pcue1YbDrliYR7uKWjv-_oYDHtWta83LiKeC_oZda3B6Gm2NHhUOQKrU-6A/w640-h498/The%20Star%20of%20India.jpg
200 OK 26 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyAf3YBWDwub6nRKLgu-sp--0jezmwMUzkC8JhLSjMDYjxCcrvrTxpvm3hkbZIkleyvrx6ZkrEI8mvt7I2S90QuHYcL_5N1kBu60PEFvcvIMEhorLByxDUtK4Rbrcsi_7Pcue1YbDrliYR7uKWjv-_oYDHtWta83LiKeC_oZda3B6Gm2NHhUOQKrU-6A/w640-h498/The%20Star%20of%20India.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 639x498, components 3\012- data
Hash bd9f339e31918ae47a2061df1c02111b
41ff47e6975fa98f148c32a9e4d2bea11707bb15
7d69552e1cdb9da53119d3c725e8333fbacae646e517ab3c77e8684310070ab1
GET /img/b/R29vZ2xl/AVvXsEiyAf3YBWDwub6nRKLgu-sp--0jezmwMUzkC8JhLSjMDYjxCcrvrTxpvm3hkbZIkleyvrx6ZkrEI8mvt7I2S90QuHYcL_5N1kBu60PEFvcvIMEhorLByxDUtK4Rbrcsi_7Pcue1YbDrliYR7uKWjv-_oYDHtWta83LiKeC_oZda3B6Gm2NHhUOQKrU-6A/w640-h498/The%20Star%20of%20India.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v4c8b"
expires: Thu, 08 Dec 2022 04:30:35 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="The Star of India.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 04:30:35 GMT
server: fife
content-length: 26330
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjqdvJQnlBD0YSyTvSrIXvP6-OksegX0X_N1_6VLyGsT-DgGL68CLMifM0XwcHchLs7GLi3UMteoWGf428shHx8PAcCDvHUlw-Lr-0dVWYfokDEKdcF6QrvwcBww_ycmpySd2ozIhPBBl45lsXLnZeeiysiCD-DnikKIvGM84OR8996laBqmvXvgMkzCg/w640-h436/Black%20Orlov.jpg
200 OK 47 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjqdvJQnlBD0YSyTvSrIXvP6-OksegX0X_N1_6VLyGsT-DgGL68CLMifM0XwcHchLs7GLi3UMteoWGf428shHx8PAcCDvHUlw-Lr-0dVWYfokDEKdcF6QrvwcBww_ycmpySd2ozIhPBBl45lsXLnZeeiysiCD-DnikKIvGM84OR8996laBqmvXvgMkzCg/w640-h436/Black%20Orlov.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 640x436, components 3\012- data
Hash ee27b4f44128a8f9b2c5f273665776ad
a25bad8247df23ae706b7c194674a6ce65754e5d
cdec6cd0feefe6eb24cdd04f960c591a4a1780ac33e41c3c56970f99c7ce3a20
GET /img/b/R29vZ2xl/AVvXsEjqdvJQnlBD0YSyTvSrIXvP6-OksegX0X_N1_6VLyGsT-DgGL68CLMifM0XwcHchLs7GLi3UMteoWGf428shHx8PAcCDvHUlw-Lr-0dVWYfokDEKdcF6QrvwcBww_ycmpySd2ozIhPBBl45lsXLnZeeiysiCD-DnikKIvGM84OR8996laBqmvXvgMkzCg/w640-h436/Black%20Orlov.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v4c85"
expires: Thu, 08 Dec 2022 04:30:35 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Black Orlov.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 04:30:35 GMT
server: fife
content-length: 47195
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEingS-T4U5OqKumr5Pl8bqWYBQSoXlwOAWa3tNfFRbdElsmGcD4DQ4h3nrZTxN45DrPPxzsmycBfBEcwhppflEaZWqZqPrKOo-nwmp-C8HHABZbyiZZpz1S4vb1Bo7n0N-ej_p-hkrY9W4t_td5sTf16CVgGVh5PTOXplBYsfX_HySjQKHTprODlxQTdg/w640-h422/Sancy%20Bloodstone.jpg
200 OK 118 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEingS-T4U5OqKumr5Pl8bqWYBQSoXlwOAWa3tNfFRbdElsmGcD4DQ4h3nrZTxN45DrPPxzsmycBfBEcwhppflEaZWqZqPrKOo-nwmp-C8HHABZbyiZZpz1S4vb1Bo7n0N-ej_p-hkrY9W4t_td5sTf16CVgGVh5PTOXplBYsfX_HySjQKHTprODlxQTdg/w640-h422/Sancy%20Bloodstone.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 640x422, components 3\012- data
Size 118 kB (117600 bytes)
Hash 0d1bf2853c419ca25bbddb831fb09cd2
5b6a75e5ec841ef1cd8ccd321fef673c25e0b7fa
61727a3a309e2e99cf8bb36acafdca00601dff89011b73c56041e264a9ea6ca3
GET /img/b/R29vZ2xl/AVvXsEingS-T4U5OqKumr5Pl8bqWYBQSoXlwOAWa3tNfFRbdElsmGcD4DQ4h3nrZTxN45DrPPxzsmycBfBEcwhppflEaZWqZqPrKOo-nwmp-C8HHABZbyiZZpz1S4vb1Bo7n0N-ej_p-hkrY9W4t_td5sTf16CVgGVh5PTOXplBYsfX_HySjQKHTprODlxQTdg/w640-h422/Sancy%20Bloodstone.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v4c85"
expires: Thu, 08 Dec 2022 04:30:35 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Sancy Bloodstone.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 04:30:35 GMT
server: fife
content-length: 117600
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiwQ6z-oistc3XWKeOEC_JXncZrRtGhffsOFAJgF3yswnDQ9dFoXYjgD3AzBWebtpLOPvueKlQ8tgEEl4KykxOBwYYrw8gSVDN6J0vroXCy66GTMO9o5TAHgKz_RHeJh5vovHD2XQGOeM0oioHWENyCPgf1aiiZPih0X6b-mz_-jzo0FfwydPQewA-15w/w640-h428/Lesedi%20La%20Rona.jpg
200 OK 100 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiwQ6z-oistc3XWKeOEC_JXncZrRtGhffsOFAJgF3yswnDQ9dFoXYjgD3AzBWebtpLOPvueKlQ8tgEEl4KykxOBwYYrw8gSVDN6J0vroXCy66GTMO9o5TAHgKz_RHeJh5vovHD2XQGOeM0oioHWENyCPgf1aiiZPih0X6b-mz_-jzo0FfwydPQewA-15w/w640-h428/Lesedi%20La%20Rona.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 640x427, components 3\012- data
Hash 0c4ecd66599d17f7b360285f36085f22
89f946a8f47a96be735e86d0ba67ab91f7b92460
ad05e69dc9dc22ea96eba4d1bc5b6487f3666ae1cb40dd8f4843b2cbcd105839
GET /img/b/R29vZ2xl/AVvXsEiwQ6z-oistc3XWKeOEC_JXncZrRtGhffsOFAJgF3yswnDQ9dFoXYjgD3AzBWebtpLOPvueKlQ8tgEEl4KykxOBwYYrw8gSVDN6J0vroXCy66GTMO9o5TAHgKz_RHeJh5vovHD2XQGOeM0oioHWENyCPgf1aiiZPih0X6b-mz_-jzo0FfwydPQewA-15w/w640-h428/Lesedi%20La%20Rona.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v4c8b"
expires: Thu, 08 Dec 2022 04:30:35 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Lesedi La Rona.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 04:30:35 GMT
server: fife
content-length: 99915
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjk0zaVMcCMCEN6X2b8y4h4aHtDe7XyDtf5vhe5xiCjp4bdmbWTAuT7lY8uPOWViEtLPGAjtoBCD1t2HFRYqNMkZt90DjijV_5NrNP-zuG5W_6G5ppaRRYFqkdC7_k9cbfJMKnU55R8qWFB2PLLFnYipvfaw8J__m0hu6OtsWiENKNV2c6Iw5D47gjH4g/w640-h426/Idol's%20Eye.jpg
200 OK 40 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjk0zaVMcCMCEN6X2b8y4h4aHtDe7XyDtf5vhe5xiCjp4bdmbWTAuT7lY8uPOWViEtLPGAjtoBCD1t2HFRYqNMkZt90DjijV_5NrNP-zuG5W_6G5ppaRRYFqkdC7_k9cbfJMKnU55R8qWFB2PLLFnYipvfaw8J__m0hu6OtsWiENKNV2c6Iw5D47gjH4g/w640-h426/Idol's%20Eye.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 639x426, components 3\012- data
Hash 0deea5b13f6f84543fec85d308c254b1
5c5592c7d4116d1cafbd1c39e838d6a52181b73d
c7d19f937527dc6f0f97a169e10f9953d139a113087d6f55dbb4074e5aec9843
GET /img/b/R29vZ2xl/AVvXsEjk0zaVMcCMCEN6X2b8y4h4aHtDe7XyDtf5vhe5xiCjp4bdmbWTAuT7lY8uPOWViEtLPGAjtoBCD1t2HFRYqNMkZt90DjijV_5NrNP-zuG5W_6G5ppaRRYFqkdC7_k9cbfJMKnU55R8qWFB2PLLFnYipvfaw8J__m0hu6OtsWiENKNV2c6Iw5D47gjH4g/w640-h426/Idol's%20Eye.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v4c83"
expires: Thu, 08 Dec 2022 04:30:35 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Idol's Eye.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 04:30:35 GMT
server: fife
content-length: 40232
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiPYATrY6aYqAOFPKgSVzlGpmvTs2k_PUNcKoWjcJfGNxWM8XD-Bt_MkxdEdcB_RJZL-ApxLDw82Mw8o0PeaoovNSqXcwrd7LmD2tj5NmivtrNX_QLDbCf9xZix2zVwmdE93N33g-Jcnm7XTxMo-vL9KH_U4N1pdZQUSq3Dkgs1P_v5xUl2S5li2sd1ew/w444-h640/Dresden%20Green.jpg
200 OK 91 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiPYATrY6aYqAOFPKgSVzlGpmvTs2k_PUNcKoWjcJfGNxWM8XD-Bt_MkxdEdcB_RJZL-ApxLDw82Mw8o0PeaoovNSqXcwrd7LmD2tj5NmivtrNX_QLDbCf9xZix2zVwmdE93N33g-Jcnm7XTxMo-vL9KH_U4N1pdZQUSq3Dkgs1P_v5xUl2S5li2sd1ew/w444-h640/Dresden%20Green.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 444x640, components 3\012- data
Hash 1cc7f676d01a9980d2c6f64f3f3ae29f
26d728326d22e5d26582f3723ed81b04711fd39a
c7c58628ff058611f51806566a9a61ff8e6162aaa8f9370fb34ce647b80a0788
GET /img/b/R29vZ2xl/AVvXsEiPYATrY6aYqAOFPKgSVzlGpmvTs2k_PUNcKoWjcJfGNxWM8XD-Bt_MkxdEdcB_RJZL-ApxLDw82Mw8o0PeaoovNSqXcwrd7LmD2tj5NmivtrNX_QLDbCf9xZix2zVwmdE93N33g-Jcnm7XTxMo-vL9KH_U4N1pdZQUSq3Dkgs1P_v5xUl2S5li2sd1ew/w444-h640/Dresden%20Green.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v4c85"
expires: Thu, 08 Dec 2022 04:30:35 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Dresden Green.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 04:30:35 GMT
server: fife
content-length: 90989
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhv6tpU8YASIcD3fdKW_IA7OvnVtBnLZ2JaUFH5rZb_zyMQQ5ddtLkhX_Gn0TWhd7GXPqmFUYpDbaDOGslrgyoDHgnV66m2kVyrxHCFD5mIrQxf85IKnNvTho6HGAiWqAWchhXYo2xyE7-_VAHafIrmAy7Kjkq52s_ZaC-W1fMEaYYMtrMtpAfIjj2rXQ/w640-h426/Pearls%20of%20Allah.jpg
200 OK 37 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhv6tpU8YASIcD3fdKW_IA7OvnVtBnLZ2JaUFH5rZb_zyMQQ5ddtLkhX_Gn0TWhd7GXPqmFUYpDbaDOGslrgyoDHgnV66m2kVyrxHCFD5mIrQxf85IKnNvTho6HGAiWqAWchhXYo2xyE7-_VAHafIrmAy7Kjkq52s_ZaC-W1fMEaYYMtrMtpAfIjj2rXQ/w640-h426/Pearls%20of%20Allah.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 640x426, components 3\012- data
Hash fbebdcc7dd894f4b49e943de4db5854c
43ac5c9770fc1ca78c8cf518323b1b14aade1eea
31cc31f89276f8c4ff5c0d95ab93620610473aff0a1d26525e67f6c8ca77716c
GET /img/b/R29vZ2xl/AVvXsEhv6tpU8YASIcD3fdKW_IA7OvnVtBnLZ2JaUFH5rZb_zyMQQ5ddtLkhX_Gn0TWhd7GXPqmFUYpDbaDOGslrgyoDHgnV66m2kVyrxHCFD5mIrQxf85IKnNvTho6HGAiWqAWchhXYo2xyE7-_VAHafIrmAy7Kjkq52s_ZaC-W1fMEaYYMtrMtpAfIjj2rXQ/w640-h426/Pearls%20of%20Allah.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v4c8a"
expires: Thu, 08 Dec 2022 04:30:35 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Pearls of Allah.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 04:30:35 GMT
server: fife
content-length: 37068
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjc0N4ymqJysnt_L4ISR0Hpr8s8GJvWolYTCvEB__ipPeImQmiu7zmngDc52EaUz0_xrBh-dSWQ1LNkUK47YMp30soeqgvjGR0U1x-SoWS_xFdaP43ep6U4mtY3HwC9Yz5WE1BHvmLXA3nBdE7QbdMqJqSsySdthp6v3kXepgXQlEcQIviaUQk9Pi-vFg/w640-h428/Timur%20Ruby.jpg
200 OK 29 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjc0N4ymqJysnt_L4ISR0Hpr8s8GJvWolYTCvEB__ipPeImQmiu7zmngDc52EaUz0_xrBh-dSWQ1LNkUK47YMp30soeqgvjGR0U1x-SoWS_xFdaP43ep6U4mtY3HwC9Yz5WE1BHvmLXA3nBdE7QbdMqJqSsySdthp6v3kXepgXQlEcQIviaUQk9Pi-vFg/w640-h428/Timur%20Ruby.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 640x427, components 3\012- data
Hash 4e6b38ef0b40c9cfe8ba87dd8f25098e
f7cf619248c1789c82fc9c90fc7cad512be7bd9b
fc4ba0e55e43826c2c910018b3bab8f0b5c134e204aed52cb84e7841cf94d086
GET /img/b/R29vZ2xl/AVvXsEjc0N4ymqJysnt_L4ISR0Hpr8s8GJvWolYTCvEB__ipPeImQmiu7zmngDc52EaUz0_xrBh-dSWQ1LNkUK47YMp30soeqgvjGR0U1x-SoWS_xFdaP43ep6U4mtY3HwC9Yz5WE1BHvmLXA3nBdE7QbdMqJqSsySdthp6v3kXepgXQlEcQIviaUQk9Pi-vFg/w640-h428/Timur%20Ruby.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v4c87"
expires: Thu, 08 Dec 2022 04:30:35 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Timur Ruby.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 04:30:35 GMT
server: fife
content-length: 29178
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2735
Expires: Wed, 07 Dec 2022 05:16:10 GMT
Date: Wed, 07 Dec 2022 04:30:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 18 kB IP
ASN #20940 Akamai International B.V.
Hash fe5678642e5eaccf923f9d8f13d374c0
0e7cad833f530d3f7640282c07d5c88594611a8c
a8205ff5590b1ec717ae1ed55fb4ff56ba4330ff5425ff834ef672a7c85d0241
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2735
Expires: Wed, 07 Dec 2022 05:16:10 GMT
Date: Wed, 07 Dec 2022 04:30:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 19 kB IP
ASN #20940 Akamai International B.V.
Hash bedce9177f4e6b1e094cc9c85bec3499
c331372b34ef467dc415883276b24e081e58fac4
7868a841f7acd33c10bb7689c3a945a1896b1051ff55b5416dccbf5a1d6c53fc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "245460EEEE691ACE4BE05BBA6BFE109AC3FA3E73AE943164BE0D9980A8EFFA72"
Last-Modified: Sun, 04 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3087
Expires: Wed, 07 Dec 2022 05:22:02 GMT
Date: Wed, 07 Dec 2022 04:30:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cbafb09beaf1323f3a16fb34d980283b
265c32bedb3af41e4b20c47293c944e65b888f74
eaf70488f5069439582b9f5e22f166e8aa67a71941cd95cea23da44b9b4e36e1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EAF70488F5069439582B9F5E22F166E8AA67A71941CD95CEA23DA44B9B4E36E1"
Last-Modified: Sun, 04 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11937
Expires: Wed, 07 Dec 2022 07:49:32 GMT
Date: Wed, 07 Dec 2022 04:30:35 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51c41646-4c8f-4a18-bf60-2b67be5db8d0.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51c41646-4c8f-4a18-bf60-2b67be5db8d0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 604a4132da78a0c013b5818644adb121
ddf982c6ff7a0d8e5376c119b6642fe7e0ba8566
eecab519c33596c67f2d2021dfd1af24e7fd8f2ed403f99b4ba0c265c08a259f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51c41646-4c8f-4a18-bf60-2b67be5db8d0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8701
x-amzn-requestid: 653284c3-ee7f-45f1-9513-3a6c81e1d6e3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cm3-2HRWIAMFjfg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c39f8-6f8969a26787a9463ba6c2ec;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 06:11:04 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: cmRvAOLmk_xZC4RKdin-lozUNeK9-icqkzsQmSjP9scXnnCLxkvJ5A==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 22:01:53 GMT
age: 23322
etag: "ddf982c6ff7a0d8e5376c119b6642fe7e0ba8566"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2735
Expires: Wed, 07 Dec 2022 05:16:10 GMT
Date: Wed, 07 Dec 2022 04:30:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8bd25951b5faeaf2d89fc991f1e630a
398af1807f25e7e1e7a44fd31ad60a5c195eb4a8
30ded5ae0720ae4504f12c4f953192c3dcbe88043b087248d4bf05505af9b35e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "30DED5AE0720AE4504F12C4F953192C3DCBE88043B087248D4BF05505AF9B35E"
Last-Modified: Mon, 05 Dec 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1201
Expires: Wed, 07 Dec 2022 04:50:36 GMT
Date: Wed, 07 Dec 2022 04:30:35 GMT
Connection: keep-alive
fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVc.ttf
200 OK 21 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVc.ttf
IP
File type TrueType Font data, 18 tables, 1st "GDEF", 14 names, Microsoft, language 0x409, Copyright 2020 The Open Sans Project Authors (https://github.com/googlefonts/opensans)Open SansR\012- data
Hash 63f124cc58fb3f1e5e04b2961edc0f7b
a7e225ab157af0246fbc151ffe513c0b555032c5
484be1fa4b0ddf5a535046b293963ce7cfe6f2659f50309d7bdb6399a732637d
GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVc.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://draft.blogger.com/
Origin: https://draft.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21006
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Dec 2022 09:56:45 GMT
expires: Wed, 06 Dec 2023 09:56:45 GMT
cache-control: public, max-age=31536000
age: 66830
last-modified: Mon, 15 Aug 2022 18:14:44 GMT
content-type: font/ttf
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22142ca2-85b4-47d4-8eaa-fcf2823b2c28.jpeg
200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22142ca2-85b4-47d4-8eaa-fcf2823b2c28.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e95ebce9d79ba46cb96af9a45af1762f
985c6761675e6bcc0186f64d55f94cf09352f05c
5837d6bf31e57f955ba2577f112281cc33a5502b358c83192f4e396b57042ac0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22142ca2-85b4-47d4-8eaa-fcf2823b2c28.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8438
x-amzn-requestid: 0f5d1b0e-1193-4006-8a54-555681d9f62e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cvlqVGMjoAMFS6w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638fb641-6366ea6464122d857407cdff;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 21:38:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: nm0qQpo75zvDYWxv8V3GvOSBFenh8ocfjV9d02Mc2l-ABieIb3h2uA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 21:53:40 GMT
age: 23815
etag: "985c6761675e6bcc0186f64d55f94cf09352f05c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8bd25951b5faeaf2d89fc991f1e630a
398af1807f25e7e1e7a44fd31ad60a5c195eb4a8
30ded5ae0720ae4504f12c4f953192c3dcbe88043b087248d4bf05505af9b35e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "30DED5AE0720AE4504F12C4F953192C3DCBE88043B087248D4BF05505AF9B35E"
Last-Modified: Mon, 05 Dec 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1201
Expires: Wed, 07 Dec 2022 04:50:36 GMT
Date: Wed, 07 Dec 2022 04:30:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8bd25951b5faeaf2d89fc991f1e630a
398af1807f25e7e1e7a44fd31ad60a5c195eb4a8
30ded5ae0720ae4504f12c4f953192c3dcbe88043b087248d4bf05505af9b35e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "30DED5AE0720AE4504F12C4F953192C3DCBE88043B087248D4BF05505AF9B35E"
Last-Modified: Mon, 05 Dec 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1201
Expires: Wed, 07 Dec 2022 04:50:36 GMT
Date: Wed, 07 Dec 2022 04:30:35 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F167b7461-ee08-4205-a299-12e7c883b958.jpeg
200 OK 15 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F167b7461-ee08-4205-a299-12e7c883b958.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4884ce2731d3033b12e4792c1bbf453e
63b6efc98cb04228d82ac28fceb97bb1cf8d82fb
8c37704d0e1fd16239e28cbdb88c5ac6a2e9cfb70f8457bfab127202f89d3788
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F167b7461-ee08-4205-a299-12e7c883b958.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14896
x-amzn-requestid: 58d94b15-dce0-44c0-96b1-917f1206a39e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cnA4RFkeoAMFfGQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c4834-7c1667b53795d5c11a3bfdda;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 07:11:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: tM0WOO_Ypgj2QxJSz9GHZZTsKjzsvyD6tjpp4G0ZpuGAIGmnEe4oqQ==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 08:11:23 GMT
age: 73152
etag: "63b6efc98cb04228d82ac28fceb97bb1cf8d82fb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3a455f5-9c19-4e6f-ab7a-1fe9c399118f.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3a455f5-9c19-4e6f-ab7a-1fe9c399118f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a0f0782df385287698881f1c19e79b96
5a25f245b594f6cbf2fdaeed2463ac5fbc08068a
4f795cd2286e194cd96751e6a4e3bd0da09c6db5344182e51986b65149e75cd7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3a455f5-9c19-4e6f-ab7a-1fe9c399118f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8579
x-amzn-requestid: 0efa303a-364e-488d-beac-24836c7c1e4f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cvlirE2KoAMFX9g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638fb610-5564a0c0264ed36f0497e17e;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 21:37:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: xpzGji_JAWkUjhXLouXWlin6rV-44shz6Z_STqo7uK7ZUV2PWs7Zpg==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 21:57:19 GMT
etag: "5a25f245b594f6cbf2fdaeed2463ac5fbc08068a"
content-type: image/jpeg
age: 23596
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5025a35-c128-4d8f-a429-7148aaebb3b1.jpeg
200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5025a35-c128-4d8f-a429-7148aaebb3b1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f38ce0fb35ef0fc66b61cafd2b09eeb6
aded2fe97a129dc820ba9d6d7605aeadfe17c15c
39bcb5e0c3a9cd39c0fcefbffd9e6f949bb9d85f0bee2b0b7c5cb999b508b1c1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5025a35-c128-4d8f-a429-7148aaebb3b1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9781
x-amzn-requestid: 24355473-a83a-42b6-bdf3-ae2c39f7f3eb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ccq48GfKoAMFjmA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63882505-2f58dd012665cb131ceff8f2;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 03:52:37 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: VySWUb7U2HlkyL8T1PCOzSDXNSDJDRIIF1PAnwaK2DHiGJFGGzRCOQ==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 22:30:30 GMT
age: 21605
etag: "aded2fe97a129dc820ba9d6d7605aeadfe17c15c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feeb81330-af0b-4cc3-bd0e-591ba064667a.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feeb81330-af0b-4cc3-bd0e-591ba064667a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c9257f2e3b9bd1b3aa262b0f4bf57968
4bcdd6ecd63834aa1010faf19457a97f37ae99fa
9afd592279c51b533b3bf72a860cf4a8f2bc6cf01b07d1ab6f11f0ff302e0ef6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feeb81330-af0b-4cc3-bd0e-591ba064667a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7392
x-amzn-requestid: f4b6890a-7a8f-48f8-b2af-365cb5f681e4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cpwREFiXoAMFSMw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d60d3-009e524f30c72d0629c877bb;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 03:09:07 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: C0-H0LUbxaxMEXoDf6PXEFAvVTj2D9K2M7eshRo39QzAAWSk2ubepA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 03:15:41 GMT
age: 4494
etag: "4bcdd6ecd63834aa1010faf19457a97f37ae99fa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
disabledincomprehensiblecitizens.com/pixel/nvwbdp?key=fd5f60391f6394f5b1dbae0d8c4d570f
200 OK 0 B URL HTTP/1.1 disabledincomprehensiblecitizens.com/pixel/nvwbdp?key=fd5f60391f6394f5b1dbae0d8c4d570f
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/nvwbdp?key=fd5f60391f6394f5b1dbae0d8c4d570f HTTP/1.1
Host: disabledincomprehensiblecitizens.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 07 Dec 2022 04:30:35 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
eveningproclamationarched.com/pixel/nvwbdp?key=fd5f60391f6394f5b1dbae0d8c4d570f
200 OK 0 B URL HTTP/1.1 eveningproclamationarched.com/pixel/nvwbdp?key=fd5f60391f6394f5b1dbae0d8c4d570f
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/nvwbdp?key=fd5f60391f6394f5b1dbae0d8c4d570f HTTP/1.1
Host: eveningproclamationarched.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 07 Dec 2022 04:30:35 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
snappedanticipation.com/watch.906867615536.js?key=42e41b8ac2b8480e6dd91bfce837e029&kw=%5B%22%E0%A6%95%E0%A7%87%E0%A6%A8%22%2C%22%E0%A6%8F%E0%A6%87%22%2C%22%E0%A6%B0%E0%A6%A4%E0%A7%8D%E0%A6%A8%22%2C%22%E0%A6%AA%E0%A6%BE%E0%A6%A5%E0%A6%B0%22%2C%22%E0%A6%AC%E0%A7%8D%E0%A6%AF%E0%A6%AC%E0%A6%B9%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%95%E0%A6%B0%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%86%E0%A6%97%E0%A7%87%22%2C%22%E0%A6%86%E0%A6%AA%E0%A6%A8%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A7%A8%E0%A6%AC%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%AD%E0%A6%BE%E0%A6%AC%E0%A6%BE%22%2C%22%E0%A6%89%E0%A6%9A%E0%A6%BF%E0%A6%A4%E0%A5%A4%22%2C%22why%22%2C%22you%22%2C%22should%22%2C%22think%22%2C%22twice%22%2C%22before%22%2C%22wearing%22%2C%22these%22%2C%22gemstones%22%5D&refer=https%3A%2F%2Famarzogot.blogspot.com%2F2022%2F12%2FWhy-You-Should-Think-Twice-Before-Wearing-These-Gemstones.html&tz=0&dev=e&res=12.1055&uuid=92fbb616-7ff0-42c9-b0b8-aaa5480daec6%3A3%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 snappedanticipation.com/watch.906867615536.js?key=42e41b8ac2b8480e6dd91bfce837e029&kw=%5B%22%E0%A6%95%E0%A7%87%E0%A6%A8%22%2C%22%E0%A6%8F%E0%A6%87%22%2C%22%E0%A6%B0%E0%A6%A4%E0%A7%8D%E0%A6%A8%22%2C%22%E0%A6%AA%E0%A6%BE%E0%A6%A5%E0%A6%B0%22%2C%22%E0%A6%AC%E0%A7%8D%E0%A6%AF%E0%A6%AC%E0%A6%B9%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%95%E0%A6%B0%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%86%E0%A6%97%E0%A7%87%22%2C%22%E0%A6%86%E0%A6%AA%E0%A6%A8%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A7%A8%E0%A6%AC%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%AD%E0%A6%BE%E0%A6%AC%E0%A6%BE%22%2C%22%E0%A6%89%E0%A6%9A%E0%A6%BF%E0%A6%A4%E0%A5%A4%22%2C%22why%22%2C%22you%22%2C%22should%22%2C%22think%22%2C%22twice%22%2C%22before%22%2C%22wearing%22%2C%22these%22%2C%22gemstones%22%5D&refer=https%3A%2F%2Famarzogot.blogspot.com%2F2022%2F12%2FWhy-You-Should-Think-Twice-Before-Wearing-These-Gemstones.html&tz=0&dev=e&res=12.1055&uuid=92fbb616-7ff0-42c9-b0b8-aaa5480daec6%3A3%3A1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.906867615536.js?key=42e41b8ac2b8480e6dd91bfce837e029&kw=%5B%22%E0%A6%95%E0%A7%87%E0%A6%A8%22%2C%22%E0%A6%8F%E0%A6%87%22%2C%22%E0%A6%B0%E0%A6%A4%E0%A7%8D%E0%A6%A8%22%2C%22%E0%A6%AA%E0%A6%BE%E0%A6%A5%E0%A6%B0%22%2C%22%E0%A6%AC%E0%A7%8D%E0%A6%AF%E0%A6%AC%E0%A6%B9%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%95%E0%A6%B0%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%86%E0%A6%97%E0%A7%87%22%2C%22%E0%A6%86%E0%A6%AA%E0%A6%A8%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A7%A8%E0%A6%AC%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%AD%E0%A6%BE%E0%A6%AC%E0%A6%BE%22%2C%22%E0%A6%89%E0%A6%9A%E0%A6%BF%E0%A6%A4%E0%A5%A4%22%2C%22why%22%2C%22you%22%2C%22should%22%2C%22think%22%2C%22twice%22%2C%22before%22%2C%22wearing%22%2C%22these%22%2C%22gemstones%22%5D&refer=https%3A%2F%2Famarzogot.blogspot.com%2F2022%2F12%2FWhy-You-Should-Think-Twice-Before-Wearing-These-Gemstones.html&tz=0&dev=e&res=12.1055&uuid=92fbb616-7ff0-42c9-b0b8-aaa5480daec6%3A3%3A1 HTTP/1.1
Host: snappedanticipation.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://amarzogot.blogspot.com
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Wed, 07 Dec 2022 04:30:35 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://amarzogot.blogspot.com
Access-Control-Allow-Origin: https://amarzogot.blogspot.com
Access-Control-Allow-Credentials: true
Location: https://snappedanticipation.com/watch.906867615536.js?key=42e41b8ac2b8480e6dd91bfce837e029&kw=%5B%22%E0%A6%95%E0%A7%87%E0%A6%A8%22%2C%22%E0%A6%8F%E0%A6%87%22%2C%22%E0%A6%B0%E0%A6%A4%E0%A7%8D%E0%A6%A8%22%2C%22%E0%A6%AA%E0%A6%BE%E0%A6%A5%E0%A6%B0%22%2C%22%E0%A6%AC%E0%A7%8D%E0%A6%AF%E0%A6%AC%E0%A6%B9%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%95%E0%A6%B0%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%86%E0%A6%97%E0%A7%87%22%2C%22%E0%A6%86%E0%A6%AA%E0%A6%A8%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A7%A8%E0%A6%AC%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%AD%E0%A6%BE%E0%A6%AC%E0%A6%BE%22%2C%22%E0%A6%89%E0%A6%9A%E0%A6%BF%E0%A6%A4%E0%A5%A4%22%2C%22why%22%2C%22you%22%2C%22should%22%2C%22think%22%2C%22twice%22%2C%22before%22%2C%22wearing%22%2C%22these%22%2C%22gemstones%22%5D&refer=https%3A%2F%2Famarzogot.blogspot.com%2F2022%2F12%2FWhy-You-Should-Think-Twice-Before-Wearing-These-Gemstones.html&tz=0&dev=e&res=12.1055&uuid=92fbb616-7ff0-42c9-b0b8-aaa5480daec6%3A3%3A1&shu=4b4b146bf4301526e7e0929387bb766fa2780805bc6e2ff7bf7091cb7d8fc3be2bd4b5c0df2e7db5c973cc2772e74183fd713a37cbdd9940cf38af2901ca857370d169290d39d398834c295721312d5699578388a50ecf681108e1b8fe15d5&pst=1670387495&rmtc=t
Set-Cookie: u_pl=17941483; expires=Thu, 08 Dec 2022 04:30:35 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNzk0MTQ4MywiayI6IjQyZTQxYjhhYzJiODQ4MGU2ZGQ5MWJmY2U4MzdlMDI5Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoyMDMwNzE2LCJwaWQiOjU4MTc2NywiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjozLCJhaWQiOjI3LCJwdCI6NCwicGsiOiJzOHI5enh5ZyIsInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjo5MDc1MzQ1NywiaWRzIjoiIiwiaWMiOmZhbHNlLCJuIjoiRGVza3RvcCxFbXVsYXRvciIsInYiOiJVbmtub3duIiwibSI6IlVua25vd24iLCJmIjoxLCJmbiI6IkRlc2t0b3AiLCJvaWQiOjM4OTE0LCJvbiI6IldpbmRvd3MiLCJvdiI6IjEwLjAiLCJiaWQiOjEyMDYyNSwiYm4iOiJGaXJlZm94IiwiYnYiOiIxMDUuMCIsInd2IjpmYWxzZSwiZSI6dHJ1ZSwiYWIiOmZhbHNlfSwiYyI6eyJpZCI6MTYyLCJjIjoiTk8iLCJuIjoiTm9yd2F5In0sImEiOmZhbHNlLCJjciI6eyJuIjoiQmxpeCBTb2x1dGlvbnMifSwieGYiOiIiLCJpeGYiOmZhbHNlLCJpZ3hmIjpmYWxzZSwidXAiOnRydWUsInIiOiJodHRwczovL2FtYXJ6b2dvdC5ibG9nc3BvdC5jb20vMjAyMi8xMi9XaHktWW91LVNob3VsZC1UaGluay1Ud2ljZS1CZWZvcmUtV2VhcmluZy1UaGVzZS1HZW1zdG9uZXMuaHRtbCJ9fQ.-qE4E70PCfS6SXdkvlvMvZJpH_NZoalw9SsFQi2KJGw; expires=Wed, 07 Dec 2022 04:31:35 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5634d99312147525769f967ca5250d90
Strict-Transport-Security: max-age=0; includeSubdomains
comprehendbighearted.com/ntv.json?key=fd5f60391f6394f5b1dbae0d8c4d570f&vstc=4
200 OK 17 kB URL HTTP/1.1 comprehendbighearted.com/ntv.json?key=fd5f60391f6394f5b1dbae0d8c4d570f&vstc=4
IP
ASN #39572 DataWeb Global Group B.V.
File type JSON data\012- , ASCII text, with very long lines (17272), with no line terminators
Hash d91a9c6969357e2f3c651cfa5d9f129c
c4e4a5c3bc329fbc77815fb02105743f264b8697
01235bc71f92bc0cd7e64fcc7bc2beae05d0548c16f281c19d53bb7cfeacda09
Analyzer Verdict Alert quad9 Sinkholed
GET /ntv.json?key=fd5f60391f6394f5b1dbae0d8c4d570f&vstc=4 HTTP/1.1
Host: comprehendbighearted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://amarzogot.blogspot.com
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Wed, 07 Dec 2022 04:30:35 GMT
Content-Type: application/json
Content-Length: 17272
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://amarzogot.blogspot.com
Access-Control-Allow-Origin: https://amarzogot.blogspot.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=17823226; expires=Thu, 08 Dec 2022 04:30:35 GMT; secure; SameSite=None
pdhtkv=true; expires=Thu, 08 Dec 2022 04:30:35 GMT; secure; SameSite=None
uncs=1; expires=Thu, 08 Dec 2022 04:30:35 GMT; secure; SameSite=None
pdhtkv49=true; expires=Thu, 08 Dec 2022 04:30:35 GMT; secure; SameSite=None
uncs49=1; expires=Thu, 08 Dec 2022 04:30:35 GMT; secure; SameSite=None
nlecfd5f60391f6394f5b1dbae0d8c4d570f=[2229337,2229333,2019380,2229329]; expires=Wed, 07 Dec 2022 04:30:40 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6ba6414decad1224732d942bf591d20c
Strict-Transport-Security: max-age=0; includeSubdomains
snappedanticipation.com/watch.1247550077246.js?key=42e41b8ac2b8480e6dd91bfce837e029&kw=%5B%22%E0%A6%95%E0%A7%87%E0%A6%A8%22%2C%22%E0%A6%8F%E0%A6%87%22%2C%22%E0%A6%B0%E0%A6%A4%E0%A7%8D%E0%A6%A8%22%2C%22%E0%A6%AA%E0%A6%BE%E0%A6%A5%E0%A6%B0%22%2C%22%E0%A6%AC%E0%A7%8D%E0%A6%AF%E0%A6%AC%E0%A6%B9%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%95%E0%A6%B0%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%86%E0%A6%97%E0%A7%87%22%2C%22%E0%A6%86%E0%A6%AA%E0%A6%A8%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A7%A8%E0%A6%AC%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%AD%E0%A6%BE%E0%A6%AC%E0%A6%BE%22%2C%22%E0%A6%89%E0%A6%9A%E0%A6%BF%E0%A6%A4%E0%A5%A4%22%2C%22why%22%2C%22you%22%2C%22should%22%2C%22think%22%2C%22twice%22%2C%22before%22%2C%22wearing%22%2C%22these%22%2C%22gemstones%22%5D&refer=https%3A%2F%2Famarzogot.blogspot.com%2F2022%2F12%2FWhy-You-Should-Think-Twice-Before-Wearing-These-Gemstones.html&tz=0&dev=e&res=12.1055&uuid=92fbb616-7ff0-42c9-b0b8-aaa5480daec6%3A3%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 snappedanticipation.com/watch.1247550077246.js?key=42e41b8ac2b8480e6dd91bfce837e029&kw=%5B%22%E0%A6%95%E0%A7%87%E0%A6%A8%22%2C%22%E0%A6%8F%E0%A6%87%22%2C%22%E0%A6%B0%E0%A6%A4%E0%A7%8D%E0%A6%A8%22%2C%22%E0%A6%AA%E0%A6%BE%E0%A6%A5%E0%A6%B0%22%2C%22%E0%A6%AC%E0%A7%8D%E0%A6%AF%E0%A6%AC%E0%A6%B9%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%95%E0%A6%B0%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%86%E0%A6%97%E0%A7%87%22%2C%22%E0%A6%86%E0%A6%AA%E0%A6%A8%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A7%A8%E0%A6%AC%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%AD%E0%A6%BE%E0%A6%AC%E0%A6%BE%22%2C%22%E0%A6%89%E0%A6%9A%E0%A6%BF%E0%A6%A4%E0%A5%A4%22%2C%22why%22%2C%22you%22%2C%22should%22%2C%22think%22%2C%22twice%22%2C%22before%22%2C%22wearing%22%2C%22these%22%2C%22gemstones%22%5D&refer=https%3A%2F%2Famarzogot.blogspot.com%2F2022%2F12%2FWhy-You-Should-Think-Twice-Before-Wearing-These-Gemstones.html&tz=0&dev=e&res=12.1055&uuid=92fbb616-7ff0-42c9-b0b8-aaa5480daec6%3A3%3A1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1247550077246.js?key=42e41b8ac2b8480e6dd91bfce837e029&kw=%5B%22%E0%A6%95%E0%A7%87%E0%A6%A8%22%2C%22%E0%A6%8F%E0%A6%87%22%2C%22%E0%A6%B0%E0%A6%A4%E0%A7%8D%E0%A6%A8%22%2C%22%E0%A6%AA%E0%A6%BE%E0%A6%A5%E0%A6%B0%22%2C%22%E0%A6%AC%E0%A7%8D%E0%A6%AF%E0%A6%AC%E0%A6%B9%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%95%E0%A6%B0%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%86%E0%A6%97%E0%A7%87%22%2C%22%E0%A6%86%E0%A6%AA%E0%A6%A8%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A7%A8%E0%A6%AC%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%AD%E0%A6%BE%E0%A6%AC%E0%A6%BE%22%2C%22%E0%A6%89%E0%A6%9A%E0%A6%BF%E0%A6%A4%E0%A5%A4%22%2C%22why%22%2C%22you%22%2C%22should%22%2C%22think%22%2C%22twice%22%2C%22before%22%2C%22wearing%22%2C%22these%22%2C%22gemstones%22%5D&refer=https%3A%2F%2Famarzogot.blogspot.com%2F2022%2F12%2FWhy-You-Should-Think-Twice-Before-Wearing-These-Gemstones.html&tz=0&dev=e&res=12.1055&uuid=92fbb616-7ff0-42c9-b0b8-aaa5480daec6%3A3%3A1 HTTP/1.1
Host: snappedanticipation.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://amarzogot.blogspot.com
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Wed, 07 Dec 2022 04:30:35 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://amarzogot.blogspot.com
Access-Control-Allow-Origin: https://amarzogot.blogspot.com
Access-Control-Allow-Credentials: true
Location: https://snappedanticipation.com/watch.1247550077246.js?key=42e41b8ac2b8480e6dd91bfce837e029&kw=%5B%22%E0%A6%95%E0%A7%87%E0%A6%A8%22%2C%22%E0%A6%8F%E0%A6%87%22%2C%22%E0%A6%B0%E0%A6%A4%E0%A7%8D%E0%A6%A8%22%2C%22%E0%A6%AA%E0%A6%BE%E0%A6%A5%E0%A6%B0%22%2C%22%E0%A6%AC%E0%A7%8D%E0%A6%AF%E0%A6%AC%E0%A6%B9%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%95%E0%A6%B0%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%86%E0%A6%97%E0%A7%87%22%2C%22%E0%A6%86%E0%A6%AA%E0%A6%A8%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A7%A8%E0%A6%AC%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%AD%E0%A6%BE%E0%A6%AC%E0%A6%BE%22%2C%22%E0%A6%89%E0%A6%9A%E0%A6%BF%E0%A6%A4%E0%A5%A4%22%2C%22why%22%2C%22you%22%2C%22should%22%2C%22think%22%2C%22twice%22%2C%22before%22%2C%22wearing%22%2C%22these%22%2C%22gemstones%22%5D&refer=https%3A%2F%2Famarzogot.blogspot.com%2F2022%2F12%2FWhy-You-Should-Think-Twice-Before-Wearing-These-Gemstones.html&tz=0&dev=e&res=12.1055&uuid=92fbb616-7ff0-42c9-b0b8-aaa5480daec6%3A3%3A1&shu=44fd600341c02b9fa98a239f070d6c027c0c9a7a463a7df0e60ecfe157269563ca4cf87c2dd512cf1d97109aba0a503361be86e8dd3bcad67e2e20232010345b27dcc36f85281888ae6465b8709ffce170b193567a832d987d677e3613caa2b3e11e&pst=1670387495&rmtc=t
Set-Cookie: u_pl=17941483; expires=Thu, 08 Dec 2022 04:30:35 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.-qE4E70PCfS6SXdkvlvMvZJpH_NZoalw9SsFQi2KJGw; expires=Wed, 07 Dec 2022 04:31:35 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 25dd51d4cf3829cfd1cb51fad867aec8
Strict-Transport-Security: max-age=0; includeSubdomains
snappedanticipation.com/watch.1273060301075.js?key=42e41b8ac2b8480e6dd91bfce837e029&kw=%5B%22%E0%A6%95%E0%A7%87%E0%A6%A8%22%2C%22%E0%A6%8F%E0%A6%87%22%2C%22%E0%A6%B0%E0%A6%A4%E0%A7%8D%E0%A6%A8%22%2C%22%E0%A6%AA%E0%A6%BE%E0%A6%A5%E0%A6%B0%22%2C%22%E0%A6%AC%E0%A7%8D%E0%A6%AF%E0%A6%AC%E0%A6%B9%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%95%E0%A6%B0%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%86%E0%A6%97%E0%A7%87%22%2C%22%E0%A6%86%E0%A6%AA%E0%A6%A8%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A7%A8%E0%A6%AC%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%AD%E0%A6%BE%E0%A6%AC%E0%A6%BE%22%2C%22%E0%A6%89%E0%A6%9A%E0%A6%BF%E0%A6%A4%E0%A5%A4%22%2C%22why%22%2C%22you%22%2C%22should%22%2C%22think%22%2C%22twice%22%2C%22before%22%2C%22wearing%22%2C%22these%22%2C%22gemstones%22%5D&refer=https%3A%2F%2Famarzogot.blogspot.com%2F2022%2F12%2FWhy-You-Should-Think-Twice-Before-Wearing-These-Gemstones.html&tz=0&dev=e&res=12.1055&uuid=4a9ebf55-82c4-4321-98a2-912179024f19%3A1%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 snappedanticipation.com/watch.1273060301075.js?key=42e41b8ac2b8480e6dd91bfce837e029&kw=%5B%22%E0%A6%95%E0%A7%87%E0%A6%A8%22%2C%22%E0%A6%8F%E0%A6%87%22%2C%22%E0%A6%B0%E0%A6%A4%E0%A7%8D%E0%A6%A8%22%2C%22%E0%A6%AA%E0%A6%BE%E0%A6%A5%E0%A6%B0%22%2C%22%E0%A6%AC%E0%A7%8D%E0%A6%AF%E0%A6%AC%E0%A6%B9%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%95%E0%A6%B0%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%86%E0%A6%97%E0%A7%87%22%2C%22%E0%A6%86%E0%A6%AA%E0%A6%A8%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A7%A8%E0%A6%AC%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%AD%E0%A6%BE%E0%A6%AC%E0%A6%BE%22%2C%22%E0%A6%89%E0%A6%9A%E0%A6%BF%E0%A6%A4%E0%A5%A4%22%2C%22why%22%2C%22you%22%2C%22should%22%2C%22think%22%2C%22twice%22%2C%22before%22%2C%22wearing%22%2C%22these%22%2C%22gemstones%22%5D&refer=https%3A%2F%2Famarzogot.blogspot.com%2F2022%2F12%2FWhy-You-Should-Think-Twice-Before-Wearing-These-Gemstones.html&tz=0&dev=e&res=12.1055&uuid=4a9ebf55-82c4-4321-98a2-912179024f19%3A1%3A1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1273060301075.js?key=42e41b8ac2b8480e6dd91bfce837e029&kw=%5B%22%E0%A6%95%E0%A7%87%E0%A6%A8%22%2C%22%E0%A6%8F%E0%A6%87%22%2C%22%E0%A6%B0%E0%A6%A4%E0%A7%8D%E0%A6%A8%22%2C%22%E0%A6%AA%E0%A6%BE%E0%A6%A5%E0%A6%B0%22%2C%22%E0%A6%AC%E0%A7%8D%E0%A6%AF%E0%A6%AC%E0%A6%B9%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%95%E0%A6%B0%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%86%E0%A6%97%E0%A7%87%22%2C%22%E0%A6%86%E0%A6%AA%E0%A6%A8%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A7%A8%E0%A6%AC%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%AD%E0%A6%BE%E0%A6%AC%E0%A6%BE%22%2C%22%E0%A6%89%E0%A6%9A%E0%A6%BF%E0%A6%A4%E0%A5%A4%22%2C%22why%22%2C%22you%22%2C%22should%22%2C%22think%22%2C%22twice%22%2C%22before%22%2C%22wearing%22%2C%22these%22%2C%22gemstones%22%5D&refer=https%3A%2F%2Famarzogot.blogspot.com%2F2022%2F12%2FWhy-You-Should-Think-Twice-Before-Wearing-These-Gemstones.html&tz=0&dev=e&res=12.1055&uuid=4a9ebf55-82c4-4321-98a2-912179024f19%3A1%3A1 HTTP/1.1
Host: snappedanticipation.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://amarzogot.blogspot.com
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Wed, 07 Dec 2022 04:30:35 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://amarzogot.blogspot.com
Access-Control-Allow-Origin: https://amarzogot.blogspot.com
Access-Control-Allow-Credentials: true
Location: https://snappedanticipation.com/watch.1273060301075.js?key=42e41b8ac2b8480e6dd91bfce837e029&kw=%5B%22%E0%A6%95%E0%A7%87%E0%A6%A8%22%2C%22%E0%A6%8F%E0%A6%87%22%2C%22%E0%A6%B0%E0%A6%A4%E0%A7%8D%E0%A6%A8%22%2C%22%E0%A6%AA%E0%A6%BE%E0%A6%A5%E0%A6%B0%22%2C%22%E0%A6%AC%E0%A7%8D%E0%A6%AF%E0%A6%AC%E0%A6%B9%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%95%E0%A6%B0%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%86%E0%A6%97%E0%A7%87%22%2C%22%E0%A6%86%E0%A6%AA%E0%A6%A8%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A7%A8%E0%A6%AC%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%AD%E0%A6%BE%E0%A6%AC%E0%A6%BE%22%2C%22%E0%A6%89%E0%A6%9A%E0%A6%BF%E0%A6%A4%E0%A5%A4%22%2C%22why%22%2C%22you%22%2C%22should%22%2C%22think%22%2C%22twice%22%2C%22before%22%2C%22wearing%22%2C%22these%22%2C%22gemstones%22%5D&refer=https%3A%2F%2Famarzogot.blogspot.com%2F2022%2F12%2FWhy-You-Should-Think-Twice-Before-Wearing-These-Gemstones.html&tz=0&dev=e&res=12.1055&uuid=4a9ebf55-82c4-4321-98a2-912179024f19%3A1%3A1&shu=c3fc6f789929640fb6465eff425c5a126f70bebbbb817985350f012b1c85443bef90b70c25c8e73f52f7ce9fa402eb8d34656f737d1a0800635ae34ff76517f1739e826a69305e1cdaed484edc87228dc00d8ebb769ea66415c72bf6965e9c40&pst=1670387495&rmtc=t
Set-Cookie: u_pl=17941483; expires=Thu, 08 Dec 2022 04:30:35 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.-qE4E70PCfS6SXdkvlvMvZJpH_NZoalw9SsFQi2KJGw; expires=Wed, 07 Dec 2022 04:31:35 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d97f90068d99e882fb2e1db280b9231f
Strict-Transport-Security: max-age=0; includeSubdomains
www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
200 OK 163 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
IP
File type ASCII text, with very long lines (730)
Size 163 kB (162976 bytes)
Hash 79d18cf4265108d7cecca1bf4ada6109
e51d0285a545381d4c39e9e0292a650ffeeecbb9
59ce7253f371df0833c3f72d4748ef812002b90a49413c56d0ca7c40bb5a0ab6
GET /recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://draft.blogger.com/
Origin: https://draft.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Dec 2022 11:03:19 GMT
expires: Wed, 06 Dec 2023 11:03:19 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 03:01:59 GMT
content-type: text/javascript
age: 62836
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
snappedanticipation.com/watch.1247550077246.js?key=42e41b8ac2b8480e6dd91bfce837e029&kw=%5B%22%E0%A6%95%E0%A7%87%E0%A6%A8%22%2C%22%E0%A6%8F%E0%A6%87%22%2C%22%E0%A6%B0%E0%A6%A4%E0%A7%8D%E0%A6%A8%22%2C%22%E0%A6%AA%E0%A6%BE%E0%A6%A5%E0%A6%B0%22%2C%22%E0%A6%AC%E0%A7%8D%E0%A6%AF%E0%A6%AC%E0%A6%B9%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%95%E0%A6%B0%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%86%E0%A6%97%E0%A7%87%22%2C%22%E0%A6%86%E0%A6%AA%E0%A6%A8%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A7%A8%E0%A6%AC%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%AD%E0%A6%BE%E0%A6%AC%E0%A6%BE%22%2C%22%E0%A6%89%E0%A6%9A%E0%A6%BF%E0%A6%A4%E0%A5%A4%22%2C%22why%22%2C%22you%22%2C%22should%22%2C%22think%22%2C%22twice%22%2C%22before%22%2C%22wearing%22%2C%22these%22%2C%22gemstones%22%5D&refer=https%3A%2F%2Famarzogot.blogspot.com%2F2022%2F12%2FWhy-You-Should-Think-Twice-Before-Wearing-These-Gemstones.html&tz=0&dev=e&res=12.1055&uuid=92fbb616-7ff0-42c9-b0b8-aaa5480daec6%3A3%3A1&shu=44fd600341c02b9fa98a239f070d6c027c0c9a7a463a7df0e60ecfe157269563ca4cf87c2dd512cf1d97109aba0a503361be86e8dd3bcad67e2e20232010345b27dcc36f85281888ae6465b8709ffce170b193567a832d987d677e3613caa2b3e11e&pst=1670387495&rmtc=t
200 OK 2.1 kB URL HTTP/1.1 snappedanticipation.com/watch.1247550077246.js?key=42e41b8ac2b8480e6dd91bfce837e029&kw=%5B%22%E0%A6%95%E0%A7%87%E0%A6%A8%22%2C%22%E0%A6%8F%E0%A6%87%22%2C%22%E0%A6%B0%E0%A6%A4%E0%A7%8D%E0%A6%A8%22%2C%22%E0%A6%AA%E0%A6%BE%E0%A6%A5%E0%A6%B0%22%2C%22%E0%A6%AC%E0%A7%8D%E0%A6%AF%E0%A6%AC%E0%A6%B9%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%95%E0%A6%B0%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%86%E0%A6%97%E0%A7%87%22%2C%22%E0%A6%86%E0%A6%AA%E0%A6%A8%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A7%A8%E0%A6%AC%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%AD%E0%A6%BE%E0%A6%AC%E0%A6%BE%22%2C%22%E0%A6%89%E0%A6%9A%E0%A6%BF%E0%A6%A4%E0%A5%A4%22%2C%22why%22%2C%22you%22%2C%22should%22%2C%22think%22%2C%22twice%22%2C%22before%22%2C%22wearing%22%2C%22these%22%2C%22gemstones%22%5D&refer=https%3A%2F%2Famarzogot.blogspot.com%2F2022%2F12%2FWhy-You-Should-Think-Twice-Before-Wearing-These-Gemstones.html&tz=0&dev=e&res=12.1055&uuid=92fbb616-7ff0-42c9-b0b8-aaa5480daec6%3A3%3A1&shu=44fd600341c02b9fa98a239f070d6c027c0c9a7a463a7df0e60ecfe157269563ca4cf87c2dd512cf1d97109aba0a503361be86e8dd3bcad67e2e20232010345b27dcc36f85281888ae6465b8709ffce170b193567a832d987d677e3613caa2b3e11e&pst=1670387495&rmtc=t
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (2669)
Hash 898c2ad0a498a189732df4b04357f639
d69228475bcf82d221504f958c2e29974cf8efdf
cb4e0c8bdd9a8bb0a19a78312724e1a99885999d54d607cbbb89ef3d551d767a
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1247550077246.js?key=42e41b8ac2b8480e6dd91bfce837e029&kw=%5B%22%E0%A6%95%E0%A7%87%E0%A6%A8%22%2C%22%E0%A6%8F%E0%A6%87%22%2C%22%E0%A6%B0%E0%A6%A4%E0%A7%8D%E0%A6%A8%22%2C%22%E0%A6%AA%E0%A6%BE%E0%A6%A5%E0%A6%B0%22%2C%22%E0%A6%AC%E0%A7%8D%E0%A6%AF%E0%A6%AC%E0%A6%B9%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%95%E0%A6%B0%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%86%E0%A6%97%E0%A7%87%22%2C%22%E0%A6%86%E0%A6%AA%E0%A6%A8%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A7%A8%E0%A6%AC%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%AD%E0%A6%BE%E0%A6%AC%E0%A6%BE%22%2C%22%E0%A6%89%E0%A6%9A%E0%A6%BF%E0%A6%A4%E0%A5%A4%22%2C%22why%22%2C%22you%22%2C%22should%22%2C%22think%22%2C%22twice%22%2C%22before%22%2C%22wearing%22%2C%22these%22%2C%22gemstones%22%5D&refer=https%3A%2F%2Famarzogot.blogspot.com%2F2022%2F12%2FWhy-You-Should-Think-Twice-Before-Wearing-These-Gemstones.html&tz=0&dev=e&res=12.1055&uuid=92fbb616-7ff0-42c9-b0b8-aaa5480daec6%3A3%3A1&shu=44fd600341c02b9fa98a239f070d6c027c0c9a7a463a7df0e60ecfe157269563ca4cf87c2dd512cf1d97109aba0a503361be86e8dd3bcad67e2e20232010345b27dcc36f85281888ae6465b8709ffce170b193567a832d987d677e3613caa2b3e11e&pst=1670387495&rmtc=t HTTP/1.1
Host: snappedanticipation.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://amarzogot.blogspot.com
Referer: https://amarzogot.blogspot.com/
Connection: keep-alive
Cookie: u_pl=17941483; ain=eyJhbGciOiJIUzI1NiJ9.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.-qE4E70PCfS6SXdkvlvMvZJpH_NZoalw9SsFQi2KJGw
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 07 Dec 2022 04:30:35 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://amarzogot.blogspot.com
Access-Control-Allow-Origin: https://amarzogot.blogspot.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=92fbb616-7ff0-42c9-b0b8-aaa5480daec6:3:1; expires=Wed, 14 Dec 2022 04:30:35 GMT; secure; SameSite=None
iprc2fdb02118e28f8754743d745f15423c6=3569807; expires=Wed, 07 Dec 2022 08:30:35 GMT; secure; SameSite=None
pdhtkv=true; expires=Thu, 08 Dec 2022 04:30:35 GMT; secure; SameSite=None
uncs=1; expires=Thu, 08 Dec 2022 04:30:35 GMT; secure; SameSite=None
pdhtkv27=true; expires=Thu, 08 Dec 2022 04:30:35 GMT; secure; SameSite=None
uncs27=1; expires=Thu, 08 Dec 2022 04:30:35 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c1b882a59f2d0873270dacd8635e2b46
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
snappedanticipation.com/watch.906867615536.js?key=42e41b8ac2b8480e6dd91bfce837e029&kw=%5B%22%E0%A6%95%E0%A7%87%E0%A6%A8%22%2C%22%E0%A6%8F%E0%A6%87%22%2C%22%E0%A6%B0%E0%A6%A4%E0%A7%8D%E0%A6%A8%22%2C%22%E0%A6%AA%E0%A6%BE%E0%A6%A5%E0%A6%B0%22%2C%22%E0%A6%AC%E0%A7%8D%E0%A6%AF%E0%A6%AC%E0%A6%B9%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%95%E0%A6%B0%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%86%E0%A6%97%E0%A7%87%22%2C%22%E0%A6%86%E0%A6%AA%E0%A6%A8%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A7%A8%E0%A6%AC%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%AD%E0%A6%BE%E0%A6%AC%E0%A6%BE%22%2C%22%E0%A6%89%E0%A6%9A%E0%A6%BF%E0%A6%A4%E0%A5%A4%22%2C%22why%22%2C%22you%22%2C%22should%22%2C%22think%22%2C%22twice%22%2C%22before%22%2C%22wearing%22%2C%22these%22%2C%22gemstones%22%5D&refer=https%3A%2F%2Famarzogot.blogspot.com%2F2022%2F12%2FWhy-You-Should-Think-Twice-Before-Wearing-These-Gemstones.html&tz=0&dev=e&res=12.1055&uuid=92fbb616-7ff0-42c9-b0b8-aaa5480daec6%3A3%3A1&shu=4b4b146bf4301526e7e0929387bb766fa2780805bc6e2ff7bf7091cb7d8fc3be2bd4b5c0df2e7db5c973cc2772e74183fd713a37cbdd9940cf38af2901ca857370d169290d39d398834c295721312d5699578388a50ecf681108e1b8fe15d5&pst=1670387495&rmtc=t
200 OK 2.5 kB URL HTTP/1.1 snappedanticipation.com/watch.906867615536.js?key=42e41b8ac2b8480e6dd91bfce837e029&kw=%5B%22%E0%A6%95%E0%A7%87%E0%A6%A8%22%2C%22%E0%A6%8F%E0%A6%87%22%2C%22%E0%A6%B0%E0%A6%A4%E0%A7%8D%E0%A6%A8%22%2C%22%E0%A6%AA%E0%A6%BE%E0%A6%A5%E0%A6%B0%22%2C%22%E0%A6%AC%E0%A7%8D%E0%A6%AF%E0%A6%AC%E0%A6%B9%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%95%E0%A6%B0%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%86%E0%A6%97%E0%A7%87%22%2C%22%E0%A6%86%E0%A6%AA%E0%A6%A8%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A7%A8%E0%A6%AC%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%AD%E0%A6%BE%E0%A6%AC%E0%A6%BE%22%2C%22%E0%A6%89%E0%A6%9A%E0%A6%BF%E0%A6%A4%E0%A5%A4%22%2C%22why%22%2C%22you%22%2C%22should%22%2C%22think%22%2C%22twice%22%2C%22before%22%2C%22wearing%22%2C%22these%22%2C%22gemstones%22%5D&refer=https%3A%2F%2Famarzogot.blogspot.com%2F2022%2F12%2FWhy-You-Should-Think-Twice-Before-Wearing-These-Gemstones.html&tz=0&dev=e&res=12.1055&uuid=92fbb616-7ff0-42c9-b0b8-aaa5480daec6%3A3%3A1&shu=4b4b146bf4301526e7e0929387bb766fa2780805bc6e2ff7bf7091cb7d8fc3be2bd4b5c0df2e7db5c973cc2772e74183fd713a37cbdd9940cf38af2901ca857370d169290d39d398834c295721312d5699578388a50ecf681108e1b8fe15d5&pst=1670387495&rmtc=t
IP
File type HTML document, ASCII text, with very long lines (3194)
Hash ecd5cdfc2baa152060121b39fd32b9b5
068975bb1b5b6d495d07eedd878f9fdd84b9c7d0
af19435851a9cb82758013db41d66a28c85ba0c18673bc552ad328cf09d26976
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.906867615536.js?key=42e41b8ac2b8480e6dd91bfce837e029&kw=%5B%22%E0%A6%95%E0%A7%87%E0%A6%A8%22%2C%22%E0%A6%8F%E0%A6%87%22%2C%22%E0%A6%B0%E0%A6%A4%E0%A7%8D%E0%A6%A8%22%2C%22%E0%A6%AA%E0%A6%BE%E0%A6%A5%E0%A6%B0%22%2C%22%E0%A6%AC%E0%A7%8D%E0%A6%AF%E0%A6%AC%E0%A6%B9%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%95%E0%A6%B0%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%86%E0%A6%97%E0%A7%87%22%2C%22%E0%A6%86%E0%A6%AA%E0%A6%A8%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A7%A8%E0%A6%AC%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%AD%E0%A6%BE%E0%A6%AC%E0%A6%BE%22%2C%22%E0%A6%89%E0%A6%9A%E0%A6%BF%E0%A6%A4%E0%A5%A4%22%2C%22why%22%2C%22you%22%2C%22should%22%2C%22think%22%2C%22twice%22%2C%22before%22%2C%22wearing%22%2C%22these%22%2C%22gemstones%22%5D&refer=https%3A%2F%2Famarzogot.blogspot.com%2F2022%2F12%2FWhy-You-Should-Think-Twice-Before-Wearing-These-Gemstones.html&tz=0&dev=e&res=12.1055&uuid=92fbb616-7ff0-42c9-b0b8-aaa5480daec6%3A3%3A1&shu=4b4b146bf4301526e7e0929387bb766fa2780805bc6e2ff7bf7091cb7d8fc3be2bd4b5c0df2e7db5c973cc2772e74183fd713a37cbdd9940cf38af2901ca857370d169290d39d398834c295721312d5699578388a50ecf681108e1b8fe15d5&pst=1670387495&rmtc=t HTTP/1.1
Host: snappedanticipation.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://amarzogot.blogspot.com
Referer: https://amarzogot.blogspot.com/
Connection: keep-alive
Cookie: u_pl=17941483; ain=eyJhbGciOiJIUzI1NiJ9.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.-qE4E70PCfS6SXdkvlvMvZJpH_NZoalw9SsFQi2KJGw
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 07 Dec 2022 04:30:35 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://amarzogot.blogspot.com
Access-Control-Allow-Origin: https://amarzogot.blogspot.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=92fbb616-7ff0-42c9-b0b8-aaa5480daec6:3:1; expires=Wed, 14 Dec 2022 04:30:35 GMT; secure; SameSite=None
iprcc86300ad7552143a16e7dd7fd85e9ad8=2060120; expires=Wed, 21 Dec 2022 04:30:35 GMT; secure; SameSite=None
pdhtkv=true; expires=Thu, 08 Dec 2022 04:30:35 GMT; secure; SameSite=None
uncs=1; expires=Thu, 08 Dec 2022 04:30:35 GMT; secure; SameSite=None
pdhtkv27=true; expires=Thu, 08 Dec 2022 04:30:35 GMT; secure; SameSite=None
uncs27=1; expires=Thu, 08 Dec 2022 04:30:35 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f559f434b795ce60855a75417c0dd87a
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
snappedanticipation.com/watch.1273060301075.js?key=42e41b8ac2b8480e6dd91bfce837e029&kw=%5B%22%E0%A6%95%E0%A7%87%E0%A6%A8%22%2C%22%E0%A6%8F%E0%A6%87%22%2C%22%E0%A6%B0%E0%A6%A4%E0%A7%8D%E0%A6%A8%22%2C%22%E0%A6%AA%E0%A6%BE%E0%A6%A5%E0%A6%B0%22%2C%22%E0%A6%AC%E0%A7%8D%E0%A6%AF%E0%A6%AC%E0%A6%B9%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%95%E0%A6%B0%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%86%E0%A6%97%E0%A7%87%22%2C%22%E0%A6%86%E0%A6%AA%E0%A6%A8%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A7%A8%E0%A6%AC%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%AD%E0%A6%BE%E0%A6%AC%E0%A6%BE%22%2C%22%E0%A6%89%E0%A6%9A%E0%A6%BF%E0%A6%A4%E0%A5%A4%22%2C%22why%22%2C%22you%22%2C%22should%22%2C%22think%22%2C%22twice%22%2C%22before%22%2C%22wearing%22%2C%22these%22%2C%22gemstones%22%5D&refer=https%3A%2F%2Famarzogot.blogspot.com%2F2022%2F12%2FWhy-You-Should-Think-Twice-Before-Wearing-These-Gemstones.html&tz=0&dev=e&res=12.1055&uuid=4a9ebf55-82c4-4321-98a2-912179024f19%3A1%3A1&shu=c3fc6f789929640fb6465eff425c5a126f70bebbbb817985350f012b1c85443bef90b70c25c8e73f52f7ce9fa402eb8d34656f737d1a0800635ae34ff76517f1739e826a69305e1cdaed484edc87228dc00d8ebb769ea66415c72bf6965e9c40&pst=1670387495&rmtc=t
200 OK 2.5 kB URL HTTP/1.1 snappedanticipation.com/watch.1273060301075.js?key=42e41b8ac2b8480e6dd91bfce837e029&kw=%5B%22%E0%A6%95%E0%A7%87%E0%A6%A8%22%2C%22%E0%A6%8F%E0%A6%87%22%2C%22%E0%A6%B0%E0%A6%A4%E0%A7%8D%E0%A6%A8%22%2C%22%E0%A6%AA%E0%A6%BE%E0%A6%A5%E0%A6%B0%22%2C%22%E0%A6%AC%E0%A7%8D%E0%A6%AF%E0%A6%AC%E0%A6%B9%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%95%E0%A6%B0%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%86%E0%A6%97%E0%A7%87%22%2C%22%E0%A6%86%E0%A6%AA%E0%A6%A8%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A7%A8%E0%A6%AC%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%AD%E0%A6%BE%E0%A6%AC%E0%A6%BE%22%2C%22%E0%A6%89%E0%A6%9A%E0%A6%BF%E0%A6%A4%E0%A5%A4%22%2C%22why%22%2C%22you%22%2C%22should%22%2C%22think%22%2C%22twice%22%2C%22before%22%2C%22wearing%22%2C%22these%22%2C%22gemstones%22%5D&refer=https%3A%2F%2Famarzogot.blogspot.com%2F2022%2F12%2FWhy-You-Should-Think-Twice-Before-Wearing-These-Gemstones.html&tz=0&dev=e&res=12.1055&uuid=4a9ebf55-82c4-4321-98a2-912179024f19%3A1%3A1&shu=c3fc6f789929640fb6465eff425c5a126f70bebbbb817985350f012b1c85443bef90b70c25c8e73f52f7ce9fa402eb8d34656f737d1a0800635ae34ff76517f1739e826a69305e1cdaed484edc87228dc00d8ebb769ea66415c72bf6965e9c40&pst=1670387495&rmtc=t
IP
File type HTML document, ASCII text, with very long lines (3174)
Hash c97ff7376806a361dba852aff329d6ee
5cb74ff3680977243043adbc871c5963e1dc8be4
0fb0d3cfc0a1e49cf0baafb9012b250a6c95891a6a74b0330e2dbe9cdf87342a
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1273060301075.js?key=42e41b8ac2b8480e6dd91bfce837e029&kw=%5B%22%E0%A6%95%E0%A7%87%E0%A6%A8%22%2C%22%E0%A6%8F%E0%A6%87%22%2C%22%E0%A6%B0%E0%A6%A4%E0%A7%8D%E0%A6%A8%22%2C%22%E0%A6%AA%E0%A6%BE%E0%A6%A5%E0%A6%B0%22%2C%22%E0%A6%AC%E0%A7%8D%E0%A6%AF%E0%A6%AC%E0%A6%B9%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%95%E0%A6%B0%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%86%E0%A6%97%E0%A7%87%22%2C%22%E0%A6%86%E0%A6%AA%E0%A6%A8%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A7%A8%E0%A6%AC%E0%A6%BE%E0%A6%B0%22%2C%22%E0%A6%AD%E0%A6%BE%E0%A6%AC%E0%A6%BE%22%2C%22%E0%A6%89%E0%A6%9A%E0%A6%BF%E0%A6%A4%E0%A5%A4%22%2C%22why%22%2C%22you%22%2C%22should%22%2C%22think%22%2C%22twice%22%2C%22before%22%2C%22wearing%22%2C%22these%22%2C%22gemstones%22%5D&refer=https%3A%2F%2Famarzogot.blogspot.com%2F2022%2F12%2FWhy-You-Should-Think-Twice-Before-Wearing-These-Gemstones.html&tz=0&dev=e&res=12.1055&uuid=4a9ebf55-82c4-4321-98a2-912179024f19%3A1%3A1&shu=c3fc6f789929640fb6465eff425c5a126f70bebbbb817985350f012b1c85443bef90b70c25c8e73f52f7ce9fa402eb8d34656f737d1a0800635ae34ff76517f1739e826a69305e1cdaed484edc87228dc00d8ebb769ea66415c72bf6965e9c40&pst=1670387495&rmtc=t HTTP/1.1
Host: snappedanticipation.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://amarzogot.blogspot.com
Referer: https://amarzogot.blogspot.com/
Connection: keep-alive
Cookie: u_pl=17941483; ain=eyJhbGciOiJIUzI1NiJ9.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.-qE4E70PCfS6SXdkvlvMvZJpH_NZoalw9SsFQi2KJGw
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 07 Dec 2022 04:30:35 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://amarzogot.blogspot.com
Access-Control-Allow-Origin: https://amarzogot.blogspot.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=4a9ebf55-82c4-4321-98a2-912179024f19:1:1; expires=Wed, 14 Dec 2022 04:30:35 GMT; secure; SameSite=None
iprcc86300ad7552143a16e7dd7fd85e9ad8=2060120; expires=Wed, 21 Dec 2022 04:30:35 GMT; secure; SameSite=None
pdhtkv=true; expires=Thu, 08 Dec 2022 04:30:35 GMT; secure; SameSite=None
uncs=1; expires=Thu, 08 Dec 2022 04:30:35 GMT; secure; SameSite=None
pdhtkv27=true; expires=Thu, 08 Dec 2022 04:30:35 GMT; secure; SameSite=None
uncs27=1; expires=Thu, 08 Dec 2022 04:30:35 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c473f1346c268ad915082ebaf08e2720
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
disabledincomprehensiblecitizens.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkVRd9NdMffMSFvwhuhkYQFKRT1T9J2kEG4xgJxiTzR3D5%2FqrzzKt6xXtVXZ3GRXBAZ9kLF%2BqqcjqZoA7ibNwJ0hFkCIrTmyELg3sXLsRBxIVUT0Prhbr33Dp3cc6974P97Iz4yOjp5tumr7Sm862aX31xS8XC5K66fr0a%2BDX%2FYnVLxQvNi9VemWz3lcBv1fyXqm9KvmPm637g%2B4EfVFeUlaHpzU9YqOROO6i1%2FVqzXgtaTfTsf3uXeXDUg%2BiekaegxPh%2F2%2FfuQvER4uiry9LtpCZ5%2BY0o0zQ1Fl1xdCPeiU0eI5rB0HoI46PpNIwbE%2FLxOZj4aOoApntQOgBTY%2BI9CMDio6lMsO7hI6VMQ8Zg4jHk3RGkHkHREbi5CSXuE4ALrG8gjm6vG5vT3UcsLdkxqTz8HSofk8rPzyCOvlzWqle9ZnSWKhM79MICqjeC6oyQZMdI%2Bx5Ufgyevg8lfiTzD9cQRwcbThsoUUzcKzWCCkfQcgDqPGTlpzxkoYcs8RCJ0ypttUPfXwxZ2GgsNTnnjQbnraUF0RKN5lLoI%2BOlvAHSZACuB%2BB2D4ndw44awGbfwm0XcMKDS8fEu7KHriiQS4LcEeSUIFcEeUqQd4tDoV3dFbeFdhkLprU%2BrY1iaNLOPj00aUfGZD85I0%2BWe%2FEe%2F%2BMv7MjTaiha4YLfaAfhQqPdDFssEIxKXyzxpmgt%2BiGcKqDcuYnVvhqTC3%2B%2Fh0SNyf9%2F%2BRCMHsPpY3B1HjQLQPPhYt0H3R42l3z0469pRG3fdExaY9p0XGLSGjcRhCmQpBWku96%2BPiPPTS71fOUdSH5y6fu5V5PhgzlwWyCxBd5V3xF09K3hVZOTg6smd%2BTuRpKqSPVpecVrKU3l%2Bc%2Ffkru5sWL1sht89hoviRLeuS5dukZjoeKOI18sKyGkXTGWS%2FLNqtuSbDNz28uZjbNkbfP1ldUosdI5ZeIRqLq%2F8Se4GpPKC09P3ucTP%2FwGZUewWYEoOyHTgDLH4MkeXDJT7wyB1bMZlnjIs2Jo62z2UysCLWc9ZQXcv3o2w%2FvuFjq2ApreRBwV6NoCXV2A6gFcNjdME3ty6d4nZXwKpitDpm3lgGmrP5qstkw3xuTCT80SXYFTp1XZCv1Q%2BnXJwjYLF6kv2mGzzWg7kIusRQOkbswHz%2F76DwAAAP%2F%2FAQAA%2F%2F%2BKR2CkhgQAAA%3D%3D
200 OK 7 B URL HTTP/1.1 disabledincomprehensiblecitizens.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkVRd9NdMffMSFvwhuhkYQFKRT1T9J2kEG4xgJxiTzR3D5%2FqrzzKt6xXtVXZ3GRXBAZ9kLF%2BqqcjqZoA7ibNwJ0hFkCIrTmyELg3sXLsRBxIVUT0Prhbr33Dp3cc6974P97Iz4yOjp5tumr7Sm862aX31xS8XC5K66fr0a%2BDX%2FYnVLxQvNi9VemWz3lcBv1fyXqm9KvmPm637g%2B4EfVFeUlaHpzU9YqOROO6i1%2FVqzXgtaTfTsf3uXeXDUg%2BiekaegxPh%2F2%2FfuQvER4uiry9LtpCZ5%2BY0o0zQ1Fl1xdCPeiU0eI5rB0HoI46PpNIwbE%2FLxOZj4aOoApntQOgBTY%2BI9CMDio6lMsO7hI6VMQ8Zg4jHk3RGkHkHREbi5CSXuE4ALrG8gjm6vG5vT3UcsLdkxqTz8HSofk8rPzyCOvlzWqle9ZnSWKhM79MICqjeC6oyQZMdI%2Bx5Ufgyevg8lfiTzD9cQRwcbThsoUUzcKzWCCkfQcgDqPGTlpzxkoYcs8RCJ0ypttUPfXwxZ2GgsNTnnjQbnraUF0RKN5lLoI%2BOlvAHSZACuB%2BB2D4ndw44awGbfwm0XcMKDS8fEu7KHriiQS4LcEeSUIFcEeUqQd4tDoV3dFbeFdhkLprU%2BrY1iaNLOPj00aUfGZD85I0%2BWe%2FEe%2F%2BMv7MjTaiha4YLfaAfhQqPdDFssEIxKXyzxpmgt%2BiGcKqDcuYnVvhqTC3%2B%2Fh0SNyf9%2F%2BRCMHsPpY3B1HjQLQPPhYt0H3R42l3z0469pRG3fdExaY9p0XGLSGjcRhCmQpBWku96%2BPiPPTS71fOUdSH5y6fu5V5PhgzlwWyCxBd5V3xF09K3hVZOTg6smd%2BTuRpKqSPVpecVrKU3l%2Bc%2Ffkru5sWL1sht89hoviRLeuS5dukZjoeKOI18sKyGkXTGWS%2FLNqtuSbDNz28uZjbNkbfP1ldUosdI5ZeIRqLq%2F8Se4GpPKC09P3ucTP%2FwGZUewWYEoOyHTgDLH4MkeXDJT7wyB1bMZlnjIs2Jo62z2UysCLWc9ZQXcv3o2w%2FvuFjq2ApreRBwV6NoCXV2A6gFcNjdME3ty6d4nZXwKpitDpm3lgGmrP5qstkw3xuTCT80SXYFTp1XZCv1Q%2BnXJwjYLF6kv2mGzzWg7kIusRQOkbswHz%2F76DwAAAP%2F%2FAQAA%2F%2F%2BKR2CkhgQAAA%3D%3D
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkVRd9NdMffMSFvwhuhkYQFKRT1T9J2kEG4xgJxiTzR3D5%2FqrzzKt6xXtVXZ3GRXBAZ9kLF%2BqqcjqZoA7ibNwJ0hFkCIrTmyELg3sXLsRBxIVUT0Prhbr33Dp3cc6974P97Iz4yOjp5tumr7Sm862aX31xS8XC5K66fr0a%2BDX%2FYnVLxQvNi9VemWz3lcBv1fyXqm9KvmPm637g%2B4EfVFeUlaHpzU9YqOROO6i1%2FVqzXgtaTfTsf3uXeXDUg%2BiekaegxPh%2F2%2FfuQvER4uiry9LtpCZ5%2BY0o0zQ1Fl1xdCPeiU0eI5rB0HoI46PpNIwbE%2FLxOZj4aOoApntQOgBTY%2BI9CMDio6lMsO7hI6VMQ8Zg4jHk3RGkHkHREbi5CSXuE4ALrG8gjm6vG5vT3UcsLdkxqTz8HSofk8rPzyCOvlzWqle9ZnSWKhM79MICqjeC6oyQZMdI%2Bx5Ufgyevg8lfiTzD9cQRwcbThsoUUzcKzWCCkfQcgDqPGTlpzxkoYcs8RCJ0ypttUPfXwxZ2GgsNTnnjQbnraUF0RKN5lLoI%2BOlvAHSZACuB%2BB2D4ndw44awGbfwm0XcMKDS8fEu7KHriiQS4LcEeSUIFcEeUqQd4tDoV3dFbeFdhkLprU%2BrY1iaNLOPj00aUfGZD85I0%2BWe%2FEe%2F%2BMv7MjTaiha4YLfaAfhQqPdDFssEIxKXyzxpmgt%2BiGcKqDcuYnVvhqTC3%2B%2Fh0SNyf9%2F%2BRCMHsPpY3B1HjQLQPPhYt0H3R42l3z0469pRG3fdExaY9p0XGLSGjcRhCmQpBWku96%2BPiPPTS71fOUdSH5y6fu5V5PhgzlwWyCxBd5V3xF09K3hVZOTg6smd%2BTuRpKqSPVpecVrKU3l%2Bc%2Ffkru5sWL1sht89hoviRLeuS5dukZjoeKOI18sKyGkXTGWS%2FLNqtuSbDNz28uZjbNkbfP1ldUosdI5ZeIRqLq%2F8Se4GpPKC09P3ucTP%2FwGZUewWYEoOyHTgDLH4MkeXDJT7wyB1bMZlnjIs2Jo62z2UysCLWc9ZQXcv3o2w%2FvuFjq2ApreRBwV6NoCXV2A6gFcNjdME3ty6d4nZXwKpitDpm3lgGmrP5qstkw3xuTCT80SXYFTp1XZCv1Q%2BnXJwjYLF6kv2mGzzWg7kIusRQOkbswHz%2F76DwAAAP%2F%2FAQAA%2F%2F%2BKR2CkhgQAAA%3D%3D HTTP/1.1
Host: disabledincomprehensiblecitizens.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 07 Dec 2022 04:30:35 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7197d0589c308d73c522a6d2ac106a98
Strict-Transport-Security: max-age=0; includeSubdomains
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f371fd6cbe04abe5f0d8679af1f2a998
ac95c5a39304a338b963d591a374bd667c836143
bb563352d50a6732df1045dcf54d5242f7609753538c26735456fef24a4692e9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BB563352D50A6732DF1045DCF54D5242F7609753538C26735456FEF24A4692E9"
Last-Modified: Tue, 06 Dec 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6873
Expires: Wed, 07 Dec 2022 06:25:08 GMT
Date: Wed, 07 Dec 2022 04:30:35 GMT
Connection: keep-alive
disabledincomprehensiblecitizens.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSS2gkVRR9NdPCMC78IggyNIKiIJ2q%2FiRpBxmMYyQYk8yP4PL9qvPMq3rFe1VdncZFcEBn2QsX6qpyOpngGMTZuBOkI8gQFKc3QxYGtyKuxEHEhVTSEL1Q91PnLs459324lR0RHxk9XHnH9JXWdKpV86svrapYmNxVl65XA7%2FmX6yuqni6ebHaK5Ptvhr4rZr%2FcvUtydfNVN0PfD%2Fwg%2Bq8sjI0valjFCrZawe1tl9r1mtBq4me%2Ff%2FsMg%2BOehDdI%2FIklBg%2FsnbvLhQfIY6%2BuizdemqSV96MMk1TY9EVuzfi9djkMaLTNrQewnh3sg3jxoR8cgYm3p0ogOlulwrA1Jh4DwKweHdCE6y7c8KUacgYTDyKvDuC1CMoOgI3N6HEfQJwgaVlxNHtJWNzunGC0hIdk8rDP6DyMan8%2FDTi6Ms5rXrVa0ZnqTKxQy8soHojqM4ISbaPtO9B5fvg6QdQ4kcy9XARcbS97LSBEsWxeqVGUOEIWg5AnYes%2FJSHLPSQJR4icVilrXbo%2BzMhCxuN2SbnvNHgvDU7LVqi0ZwNfWS8pDdAmgzA9QDcbiKxm1hXA9jsW7i1Ak54cOmYeFc20RUFckmQO4KcEuSKIE8J8m6xI7Sru%2BK20C5jwaTWJ7VRDE3a2aI7Ju3ImGwlR%2BSJ0hfvsT%2F%2Fxro8rIaiFU77jXYQTjfazbDFAsGo9MUsb4rWjB%2FCqQLKnTmW2ldjcuGf95GoMTn3y0dgdB9O74Ors6BZAJoPZ%2Bo%2B6NqwOeujH39NI2r7pmPSGtOm4xKT1riJIEyBJK0g3fC29BF59vhSz1euQPKDS9%2Bffy0ZPjgPbgsktsB76juCjr41vGpysn3V5I7cXU5SFak%2BLa94LaWpPHvnbbmRGysWLrvB56%2FzEijbvevSpYs0FiruOPLFnBJC2nljuSTfLLhVyVYytzaX2ThLFlfemF%2BIEiudUyYegar7y3%2BBqzGpvPDU8ft8%2FIffoewINisQZQdkElBmHzzZhEsOLt15bu9c8OKvcIbA6tMdllSQZ8XQ1tnpT60ItDydKSvg%2FjOz037L3ULHVkDTm4ijAl1boKsLUD2Ay84P08QeXLr3aRmfgenKkGlb2Wba6o9La98t040xufBT88Rppw6rshX6ofTrkoVtFs5QX7TDZpvRdiBnWIsGSN2YD5757V8AAAD%2F%2FwEAAP%2F%2Fq%2B8DtIYEAAA%3D
200 OK 7 B URL HTTP/1.1 disabledincomprehensiblecitizens.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSS2gkVRR9NdPCMC78IggyNIKiIJ2q%2FiRpBxmMYyQYk8yP4PL9qvPMq3rFe1VdncZFcEBn2QsX6qpyOpngGMTZuBOkI8gQFKc3QxYGtyKuxEHEhVTSEL1Q91PnLs459324lR0RHxk9XHnH9JXWdKpV86svrapYmNxVl65XA7%2FmX6yuqni6ebHaK5Ptvhr4rZr%2FcvUtydfNVN0PfD%2Fwg%2Bq8sjI0valjFCrZawe1tl9r1mtBq4me%2Ff%2FsMg%2BOehDdI%2FIklBg%2FsnbvLhQfIY6%2BuizdemqSV96MMk1TY9EVuzfi9djkMaLTNrQewnh3sg3jxoR8cgYm3p0ogOlulwrA1Jh4DwKweHdCE6y7c8KUacgYTDyKvDuC1CMoOgI3N6HEfQJwgaVlxNHtJWNzunGC0hIdk8rDP6DyMan8%2FDTi6Ms5rXrVa0ZnqTKxQy8soHojqM4ISbaPtO9B5fvg6QdQ4kcy9XARcbS97LSBEsWxeqVGUOEIWg5AnYes%2FJSHLPSQJR4icVilrXbo%2BzMhCxuN2SbnvNHgvDU7LVqi0ZwNfWS8pDdAmgzA9QDcbiKxm1hXA9jsW7i1Ak54cOmYeFc20RUFckmQO4KcEuSKIE8J8m6xI7Sru%2BK20C5jwaTWJ7VRDE3a2aI7Ju3ImGwlR%2BSJ0hfvsT%2F%2Fxro8rIaiFU77jXYQTjfazbDFAsGo9MUsb4rWjB%2FCqQLKnTmW2ldjcuGf95GoMTn3y0dgdB9O74Ors6BZAJoPZ%2Bo%2B6NqwOeujH39NI2r7pmPSGtOm4xKT1riJIEyBJK0g3fC29BF59vhSz1euQPKDS9%2Bffy0ZPjgPbgsktsB76juCjr41vGpysn3V5I7cXU5SFak%2BLa94LaWpPHvnbbmRGysWLrvB56%2FzEijbvevSpYs0FiruOPLFnBJC2nljuSTfLLhVyVYytzaX2ThLFlfemF%2BIEiudUyYegar7y3%2BBqzGpvPDU8ft8%2FIffoewINisQZQdkElBmHzzZhEsOLt15bu9c8OKvcIbA6tMdllSQZ8XQ1tnpT60ItDydKSvg%2FjOz037L3ULHVkDTm4ijAl1boKsLUD2Ay84P08QeXLr3aRmfgenKkGlb2Wba6o9La98t040xufBT88Rppw6rshX6ofTrkoVtFs5QX7TDZpvRdiBnWIsGSN2YD5757V8AAAD%2F%2FwEAAP%2F%2Fq%2B8DtIYEAAA%3D
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSS2gkVRR9NdPCMC78IggyNIKiIJ2q%2FiRpBxmMYyQYk8yP4PL9qvPMq3rFe1VdncZFcEBn2QsX6qpyOpngGMTZuBOkI8gQFKc3QxYGtyKuxEHEhVTSEL1Q91PnLs459324lR0RHxk9XHnH9JXWdKpV86svrapYmNxVl65XA7%2FmX6yuqni6ebHaK5Ptvhr4rZr%2FcvUtydfNVN0PfD%2Fwg%2Bq8sjI0valjFCrZawe1tl9r1mtBq4me%2Ff%2FsMg%2BOehDdI%2FIklBg%2FsnbvLhQfIY6%2BuizdemqSV96MMk1TY9EVuzfi9djkMaLTNrQewnh3sg3jxoR8cgYm3p0ogOlulwrA1Jh4DwKweHdCE6y7c8KUacgYTDyKvDuC1CMoOgI3N6HEfQJwgaVlxNHtJWNzunGC0hIdk8rDP6DyMan8%2FDTi6Ms5rXrVa0ZnqTKxQy8soHojqM4ISbaPtO9B5fvg6QdQ4kcy9XARcbS97LSBEsWxeqVGUOEIWg5AnYes%2FJSHLPSQJR4icVilrXbo%2BzMhCxuN2SbnvNHgvDU7LVqi0ZwNfWS8pDdAmgzA9QDcbiKxm1hXA9jsW7i1Ak54cOmYeFc20RUFckmQO4KcEuSKIE8J8m6xI7Sru%2BK20C5jwaTWJ7VRDE3a2aI7Ju3ImGwlR%2BSJ0hfvsT%2F%2Fxro8rIaiFU77jXYQTjfazbDFAsGo9MUsb4rWjB%2FCqQLKnTmW2ldjcuGf95GoMTn3y0dgdB9O74Ors6BZAJoPZ%2Bo%2B6NqwOeujH39NI2r7pmPSGtOm4xKT1riJIEyBJK0g3fC29BF59vhSz1euQPKDS9%2Bffy0ZPjgPbgsktsB76juCjr41vGpysn3V5I7cXU5SFak%2BLa94LaWpPHvnbbmRGysWLrvB56%2FzEijbvevSpYs0FiruOPLFnBJC2nljuSTfLLhVyVYytzaX2ThLFlfemF%2BIEiudUyYegar7y3%2BBqzGpvPDU8ft8%2FIffoewINisQZQdkElBmHzzZhEsOLt15bu9c8OKvcIbA6tMdllSQZ8XQ1tnpT60ItDydKSvg%2FjOz037L3ULHVkDTm4ijAl1boKsLUD2Ay84P08QeXLr3aRmfgenKkGlb2Wba6o9La98t040xufBT88Rppw6rshX6ofTrkoVtFs5QX7TDZpvRdiBnWIsGSN2YD5757V8AAAD%2F%2FwEAAP%2F%2Fq%2B8DtIYEAAA%3D HTTP/1.1
Host: disabledincomprehensiblecitizens.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 07 Dec 2022 04:30:35 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: da8f0f33514f14ac91b02fbf26e0c7f8
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.cloudimagesb.com/cti/f7/13/0e/f7130e7f47db248dc886c97a1e4c3e2b/1588233482.jpg
200 OK 32 kB URL HTTP/2 cdn.cloudimagesb.com/cti/f7/13/0e/f7130e7f47db248dc886c97a1e4c3e2b/1588233482.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 321x240, components 3\012- data
Hash 3528385dd0c31dbd2e5bfc4af7a6bec5
832c580ffd7711115d6c036ab4232f5bd88480a4
bfbfeebfcb679ca578055235614cc679b0757bad272996ef89b7fd5615a2db75
GET /cti/f7/13/0e/f7130e7f47db248dc886c97a1e4c3e2b/1588233482.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 04:30:35 GMT
content-type: image/jpeg
content-length: 32471
server: nginx/1.17.6
last-modified: Thu, 30 Apr 2020 07:58:05 GMT
etag: "5eaa850d-7ed7"
expires: Fri, 09 Dec 2022 04:30:35 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/cti/5e/78/a9/5e78a94057ff65f06ec19e727c7be04f/1588233511.jpg
200 OK 24 kB URL HTTP/2 cdn.cloudimagesb.com/cti/5e/78/a9/5e78a94057ff65f06ec19e727c7be04f/1588233511.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3\012- data
Hash d71c872fb9f50bd9383abc0721d1d51e
1f69b40ef2f95798b4e0fd738d630ad4319cd739
6b4a622b9de1ffab8fe905fc8c4633994c732476664b5190ceedd62a3795ab08
GET /cti/5e/78/a9/5e78a94057ff65f06ec19e727c7be04f/1588233511.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 04:30:35 GMT
content-type: image/jpeg
content-length: 24518
server: nginx/1.17.6
last-modified: Thu, 30 Apr 2020 07:58:34 GMT
etag: "5eaa852a-5fc6"
expires: Fri, 09 Dec 2022 04:30:35 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/cti/d6/e8/37/d6e83777d7311d26f1ac5b2b62a81218/1588233535.jpg
200 OK 28 kB URL HTTP/2 cdn.cloudimagesb.com/cti/d6/e8/37/d6e83777d7311d26f1ac5b2b62a81218/1588233535.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3\012- data
Hash 1dcde64d47d24d151a1433ecf4403dd7
443d6704b5a294e000084d7a8ac823e526093928
d11bcd65a82589c2c31d6fd87cb16ec673dd5640462ad3d20ff53e014a435376
GET /cti/d6/e8/37/d6e83777d7311d26f1ac5b2b62a81218/1588233535.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 04:30:35 GMT
content-type: image/jpeg
content-length: 27832
server: nginx/1.17.6
last-modified: Thu, 30 Apr 2020 07:58:58 GMT
etag: "5eaa8542-6cb8"
expires: Fri, 09 Dec 2022 04:30:35 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/cti/d7/14/ea/d714ea0356c58a2679ce4074962c0e16/1588233398.jpeg
200 OK 23 kB URL HTTP/2 cdn.cloudimagesb.com/cti/d7/14/ea/d714ea0356c58a2679ce4074962c0e16/1588233398.jpeg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3\012- data
Hash 9a2dc4fe2ebb70df2dfb1566d22970b8
b85a5f4ef7bd68b834d03d8b9a552e2e546e8701
1983c705f5f4315c8cd002183eb9ed3c846abed8fc2a6f0a073185c249552efd
GET /cti/d7/14/ea/d714ea0356c58a2679ce4074962c0e16/1588233398.jpeg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 04:30:35 GMT
content-type: image/jpeg
content-length: 22757
server: nginx/1.17.6
last-modified: Thu, 30 Apr 2020 07:56:41 GMT
etag: "5eaa84b9-58e5"
expires: Fri, 09 Dec 2022 04:30:35 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/bi/10/22/85/1022851f8588320f84450c791299737b/1596641253.jpg
200 OK 11 kB URL HTTP/2 cdn.cloudimagesb.com/bi/10/22/85/1022851f8588320f84450c791299737b/1596641253.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 468x60, components 3\012- data
Hash 54ae9ac1dd44fbc3e88664bd01578f42
c5794fadc819a0a28f4926f8804796b6a5a96017
b830843acc45486dae1fff67881e2c60115774064fa01ebdeb73982b5e0e39b5
GET /bi/10/22/85/1022851f8588320f84450c791299737b/1596641253.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 04:30:35 GMT
content-type: image/jpeg
content-length: 10601
server: nginx/1.17.6
last-modified: Wed, 05 Aug 2020 15:27:36 GMT
etag: "5f2acfe8-2969"
expires: Fri, 09 Dec 2022 04:30:35 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/cti/56/ef/55/56ef55f6ef3bc03e69b8d66da27f0cd1/1658920055.png
200 OK 67 kB URL HTTP/2 cdn.cloudimagesb.com/cti/56/ef/55/56ef55f6ef3bc03e69b8d66da27f0cd1/1658920055.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 468 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash a98b4585db1c6db06d6857c73bb75fcb
02a896b08a79e873b2dd26200ee1f0665dc1c80a
fc08e863ffafe25aa63fe8b60c2d5135fc5f52caf0abae4da3f1a90e0f8ed96c
GET /cti/56/ef/55/56ef55f6ef3bc03e69b8d66da27f0cd1/1658920055.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 04:30:35 GMT
content-type: image/png
content-length: 67174
server: nginx/1.17.6
last-modified: Wed, 27 Jul 2022 11:07:43 GMT
etag: "62e11c7f-10666"
expires: Fri, 09 Dec 2022 04:30:35 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
disabledincomprehensiblecitizens.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRit3h1hWQ%2F%2BIgiyDIKiIJPu%2BcnMuMhiXCPBmGT%2FCB6rq6onZaq7mqru6cngIbige5yDB%2FXUeZNscA3iXrwJMhFkCYrblyUHg1cRT%2BIi4kE6GYh%2B0N9Pv%2B%2Fw3vvqw630iLhI6eHKO3oolaIzrZpbfWlVRlxntrp0veq5NfdidVVGs82L1UGZTP9Vz23V3Jerbwm2rmfqrue6nutV56URgR7MHKOQ8V7Xq3XdWrNe81pNDMz%2FZ5s6sNQB7x%2BRJyF58cjavbuQbIIo%2FOqysOuJjl95M0wVTbRBn%2B%2FeiNYjnUUIT9vAOAii3ek2tC0I%2BeQMdLQ7VQDd3y4VwJcFcR548KPdKU34%2FZ0Tpr6CiODzR5H1JxBqAkknYPomJL9PAMaxtIwovL2kTUY3TlBaogWpPPwDMitI5eenEYVfzik5qF7TKk2kjiwGQQ45mED2JojTfSRDBzLbB0s%2BgOQ%2FkpmHi4jC7WWrNCTPj9VLOYEMJlBiBGodpOUnHaSBgzR2EPLDKm11A9dtB37QaHSajLFGg7FWZ5a3eKPZCVykrKQ3QhKPwNQIzGwiNptYlyOY9FvYtRyWO7BJQZwrm%2BjzHJkgyCxBRgkySZAlBFk%2F3%2BHK1m1%2Bmyub%2Bt601qe1kY910tuiOzrpiYhsxUfkidIX57E%2F%2F8a6OKwGvBXMuo2uF8w2us2g5Xvcp8LlHdbkrbYbwMoc0p45ljqUBbnwz%2FuIZUHO%2FfIRfLoPq%2FbB5FnQ1APNxu26C7o2bnZcDKOvaUjNUPd0UvOV7tlYJzWmQ3CdI04qSDacLXVEnj2%2B1POVKxDs4NL351%2BLxw%2FOg5kcscnxnvyOoKduja%2FqjGxf1Zkld5fjRIZySMsrXktoIs7eeVtsZNrwhct29PnrrATKdu%2B6sMkijbiMepZ8MSc5F2ZeGybINwt2VfgrqV2bS02Uxosrb8wvhLER1kodTUDl%2FeW%2FwGRBKi88dfw%2BH%2F%2Fhd0gzgUlzhOkBmQak3geLN2Hjg0t3nts75734K6wmMOp0x48ryNJ8bOr%2B6U8lCZQ4namfw%2F5n9k%2F7LXsLPVMBTW4iCnP0TY6%2BykHVCDY9P05ic3Dp3qdlfAZfVca%2BMpVtXxn1cWntu2W6UZALPzVPnLbysNrymqLjd9qMc18w7rXrjU7DdeucN9td4XWR2IKNnvntXwAAAP%2F%2FAQAA%2F%2F%2B%2F541ShgQAAA%3D%3D
200 OK 7 B URL HTTP/1.1 disabledincomprehensiblecitizens.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRit3h1hWQ%2F%2BIgiyDIKiIJPu%2BcnMuMhiXCPBmGT%2FCB6rq6onZaq7mqru6cngIbige5yDB%2FXUeZNscA3iXrwJMhFkCYrblyUHg1cRT%2BIi4kE6GYh%2B0N9Pv%2B%2Fw3vvqw630iLhI6eHKO3oolaIzrZpbfWlVRlxntrp0veq5NfdidVVGs82L1UGZTP9Vz23V3Jerbwm2rmfqrue6nutV56URgR7MHKOQ8V7Xq3XdWrNe81pNDMz%2FZ5s6sNQB7x%2BRJyF58cjavbuQbIIo%2FOqysOuJjl95M0wVTbRBn%2B%2FeiNYjnUUIT9vAOAii3ek2tC0I%2BeQMdLQ7VQDd3y4VwJcFcR548KPdKU34%2FZ0Tpr6CiODzR5H1JxBqAkknYPomJL9PAMaxtIwovL2kTUY3TlBaogWpPPwDMitI5eenEYVfzik5qF7TKk2kjiwGQQ45mED2JojTfSRDBzLbB0s%2BgOQ%2FkpmHi4jC7WWrNCTPj9VLOYEMJlBiBGodpOUnHaSBgzR2EPLDKm11A9dtB37QaHSajLFGg7FWZ5a3eKPZCVykrKQ3QhKPwNQIzGwiNptYlyOY9FvYtRyWO7BJQZwrm%2BjzHJkgyCxBRgkySZAlBFk%2F3%2BHK1m1%2Bmyub%2Bt601qe1kY910tuiOzrpiYhsxUfkidIX57E%2F%2F8a6OKwGvBXMuo2uF8w2us2g5Xvcp8LlHdbkrbYbwMoc0p45ljqUBbnwz%2FuIZUHO%2FfIRfLoPq%2FbB5FnQ1APNxu26C7o2bnZcDKOvaUjNUPd0UvOV7tlYJzWmQ3CdI04qSDacLXVEnj2%2B1POVKxDs4NL351%2BLxw%2FOg5kcscnxnvyOoKduja%2FqjGxf1Zkld5fjRIZySMsrXktoIs7eeVtsZNrwhct29PnrrATKdu%2B6sMkijbiMepZ8MSc5F2ZeGybINwt2VfgrqV2bS02Uxosrb8wvhLER1kodTUDl%2FeW%2FwGRBKi88dfw%2BH%2F%2Fhd0gzgUlzhOkBmQak3geLN2Hjg0t3nts75734K6wmMOp0x48ryNJ8bOr%2B6U8lCZQ4namfw%2F5n9k%2F7LXsLPVMBTW4iCnP0TY6%2BykHVCDY9P05ic3Dp3qdlfAZfVca%2BMpVtXxn1cWntu2W6UZALPzVPnLbysNrymqLjd9qMc18w7rXrjU7DdeucN9td4XWR2IKNnvntXwAAAP%2F%2FAQAA%2F%2F%2B%2F541ShgQAAA%3D%3D
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRit3h1hWQ%2F%2BIgiyDIKiIJPu%2BcnMuMhiXCPBmGT%2FCB6rq6onZaq7mqru6cngIbige5yDB%2FXUeZNscA3iXrwJMhFkCYrblyUHg1cRT%2BIi4kE6GYh%2B0N9Pv%2B%2Fw3vvqw630iLhI6eHKO3oolaIzrZpbfWlVRlxntrp0veq5NfdidVVGs82L1UGZTP9Vz23V3Jerbwm2rmfqrue6nutV56URgR7MHKOQ8V7Xq3XdWrNe81pNDMz%2FZ5s6sNQB7x%2BRJyF58cjavbuQbIIo%2FOqysOuJjl95M0wVTbRBn%2B%2FeiNYjnUUIT9vAOAii3ek2tC0I%2BeQMdLQ7VQDd3y4VwJcFcR548KPdKU34%2FZ0Tpr6CiODzR5H1JxBqAkknYPomJL9PAMaxtIwovL2kTUY3TlBaogWpPPwDMitI5eenEYVfzik5qF7TKk2kjiwGQQ45mED2JojTfSRDBzLbB0s%2BgOQ%2FkpmHi4jC7WWrNCTPj9VLOYEMJlBiBGodpOUnHaSBgzR2EPLDKm11A9dtB37QaHSajLFGg7FWZ5a3eKPZCVykrKQ3QhKPwNQIzGwiNptYlyOY9FvYtRyWO7BJQZwrm%2BjzHJkgyCxBRgkySZAlBFk%2F3%2BHK1m1%2Bmyub%2Bt601qe1kY910tuiOzrpiYhsxUfkidIX57E%2F%2F8a6OKwGvBXMuo2uF8w2us2g5Xvcp8LlHdbkrbYbwMoc0p45ljqUBbnwz%2FuIZUHO%2FfIRfLoPq%2FbB5FnQ1APNxu26C7o2bnZcDKOvaUjNUPd0UvOV7tlYJzWmQ3CdI04qSDacLXVEnj2%2B1POVKxDs4NL351%2BLxw%2FOg5kcscnxnvyOoKduja%2FqjGxf1Zkld5fjRIZySMsrXktoIs7eeVtsZNrwhct29PnrrATKdu%2B6sMkijbiMepZ8MSc5F2ZeGybINwt2VfgrqV2bS02Uxosrb8wvhLER1kodTUDl%2FeW%2FwGRBKi88dfw%2BH%2F%2Fhd0gzgUlzhOkBmQak3geLN2Hjg0t3nts75734K6wmMOp0x48ryNJ8bOr%2B6U8lCZQ4namfw%2F5n9k%2F7LXsLPVMBTW4iCnP0TY6%2BykHVCDY9P05ic3Dp3qdlfAZfVca%2BMpVtXxn1cWntu2W6UZALPzVPnLbysNrymqLjd9qMc18w7rXrjU7DdeucN9td4XWR2IKNnvntXwAAAP%2F%2FAQAA%2F%2F%2B%2F541ShgQAAA%3D%3D HTTP/1.1
Host: disabledincomprehensiblecitizens.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 07 Dec 2022 04:30:35 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a5ff4906f20326b202f7e61122a95fa3
Strict-Transport-Security: max-age=0; includeSubdomains
disabledincomprehensiblecitizens.com/ren.gif?sid=H4sIAAAAAAAC%2F1RST2gkxReu3p0f%2FIgH%2FyJ4WQZBUJBJ9%2FxJMi6yGNdIMCbZfwSP9a8nZaq7mqru6cngIbige5yDB%2FXU%2BSbZoC7iXrwJMhFkCYo7lyUHg3fBi7iIeJCeHRh9UPW%2BV987fN979cF%2BdkZ8ZPR0823TV1rT%2BVbNr764pWJhclddv14N%2FJp%2Fsbql4oXmxWqvvGz3lcBv1fyXqm9KvmPm637g%2B4EfVFeUlaHpzU9YqOROO6i1%2FVqzXgtaTfTsf2uXeXDUg%2BiekaegxPh%2F2%2FfuQvER4uiry9LtpCZ5%2BY0o0zQ1Fl1xdCPeiU0eI5rB0HoI46NpN4wbE%2FLxOZj4aOoApntQOgBTY%2BI9CMDio6lMsO7hI6VMQ8Zg4jHk3RGkHkHREbi5CSXuE4ALrG8gjm6vG5vT3UcsLdkxqTz8HSofk8rPzyCOvlzWqle9ZnSWKhM79MICqjeC6oyQZMdI%2Bx5Ufgyevg8lfiTzD9cQRwcbThsoUUzcKzWCCkfQcgDqPGTlUR6y0EOWeIjEaZW22qHvL4YsbDSWmpzzRoPz1tKCaIlGcyn0kfFS3gBpMgDXA3C7h8TuYUcNYLNv4bYLOOHBpWPiXdlDVxTIJUHuCHJKkCuCPCXIu8Wh0K7uittCu4wF01yf5kYxNGlnnx6atCNjsp%2BckSfLuXiP%2F%2FEXduRpNRStcMFvtINwodFuhi0WCEalL5Z4U7QW%2FRBOFVDu3MRqX43Jhb%2FfQ6LG5P%2B%2FfAhGj%2BH0Mbg6D5oFoPlwse6Dbg%2BbSz768dc0orZvOiatMW06LjFpjZsIwhRI0grSXW9fn5HnJpt6vnIDkp9c%2Bn7u1WT4YA7cFkhsgXfVdwQdfWt41eTk4KrJHbm7kaQqUn1abvFaSlN5%2FvO35G5urFi97AafvcZLooR3rkuXrtFYqLjjyBfLSghpV4zlknyz6rYk28zc9nJm4yxZ23x9ZTVKrHROmXgEqu5v%2FAmuxqTywtOT%2F%2FnED79B2RFsViDKTsg0oMwxeLIHl8zUO0Ng9ayHJeeQZ8XQ1tnsUSsCLWc1ZQXcv2o2w%2FvuFjq2ApreRBwV6NoCXV2A6gFcNjdME3ty6d4nZXwKpitDpm3lgGmrPypH%2B85kvmNy4admia7AqdOqbIV%2BKP26ZGGbhYvUF%2B2w2Wa0HchF1qIBUjfmg2d%2F%2FQcAAP%2F%2FAQAA%2F%2F%2F4jemOhgQAAA%3D%3D
200 OK 7 B URL HTTP/1.1 disabledincomprehensiblecitizens.com/ren.gif?sid=H4sIAAAAAAAC%2F1RST2gkxReu3p0f%2FIgH%2FyJ4WQZBUJBJ9%2FxJMi6yGNdIMCbZfwSP9a8nZaq7mqru6cngIbige5yDB%2FXU%2BSbZoC7iXrwJMhFkCYo7lyUHg3fBi7iIeJCeHRh9UPW%2BV987fN979cF%2BdkZ8ZPR0823TV1rT%2BVbNr764pWJhclddv14N%2FJp%2Fsbql4oXmxWqvvGz3lcBv1fyXqm9KvmPm637g%2B4EfVFeUlaHpzU9YqOROO6i1%2FVqzXgtaTfTsf2uXeXDUg%2BiekaegxPh%2F2%2FfuQvER4uiry9LtpCZ5%2BY0o0zQ1Fl1xdCPeiU0eI5rB0HoI46NpN4wbE%2FLxOZj4aOoApntQOgBTY%2BI9CMDio6lMsO7hI6VMQ8Zg4jHk3RGkHkHREbi5CSXuE4ALrG8gjm6vG5vT3UcsLdkxqTz8HSofk8rPzyCOvlzWqle9ZnSWKhM79MICqjeC6oyQZMdI%2Bx5Ufgyevg8lfiTzD9cQRwcbThsoUUzcKzWCCkfQcgDqPGTlUR6y0EOWeIjEaZW22qHvL4YsbDSWmpzzRoPz1tKCaIlGcyn0kfFS3gBpMgDXA3C7h8TuYUcNYLNv4bYLOOHBpWPiXdlDVxTIJUHuCHJKkCuCPCXIu8Wh0K7uittCu4wF01yf5kYxNGlnnx6atCNjsp%2BckSfLuXiP%2F%2FEXduRpNRStcMFvtINwodFuhi0WCEalL5Z4U7QW%2FRBOFVDu3MRqX43Jhb%2FfQ6LG5P%2B%2FfAhGj%2BH0Mbg6D5oFoPlwse6Dbg%2BbSz768dc0orZvOiatMW06LjFpjZsIwhRI0grSXW9fn5HnJpt6vnIDkp9c%2Bn7u1WT4YA7cFkhsgXfVdwQdfWt41eTk4KrJHbm7kaQqUn1abvFaSlN5%2FvO35G5urFi97AafvcZLooR3rkuXrtFYqLjjyBfLSghpV4zlknyz6rYk28zc9nJm4yxZ23x9ZTVKrHROmXgEqu5v%2FAmuxqTywtOT%2F%2FnED79B2RFsViDKTsg0oMwxeLIHl8zUO0Ng9ayHJeeQZ8XQ1tnsUSsCLWc1ZQXcv2o2w%2FvuFjq2ApreRBwV6NoCXV2A6gFcNjdME3ty6d4nZXwKpitDpm3lgGmrPypH%2B85kvmNy4admia7AqdOqbIV%2BKP26ZGGbhYvUF%2B2w2Wa0HchF1qIBUjfmg2d%2F%2FQcAAP%2F%2FAQAA%2F%2F%2F4jemOhgQAAA%3D%3D
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RST2gkxReu3p0f%2FIgH%2FyJ4WQZBUJBJ9%2FxJMi6yGNdIMCbZfwSP9a8nZaq7mqru6cngIbige5yDB%2FXU%2BSbZoC7iXrwJMhFkCYo7lyUHg3fBi7iIeJCeHRh9UPW%2BV987fN979cF%2BdkZ8ZPR0823TV1rT%2BVbNr764pWJhclddv14N%2FJp%2Fsbql4oXmxWqvvGz3lcBv1fyXqm9KvmPm637g%2B4EfVFeUlaHpzU9YqOROO6i1%2FVqzXgtaTfTsf2uXeXDUg%2BiekaegxPh%2F2%2FfuQvER4uiry9LtpCZ5%2BY0o0zQ1Fl1xdCPeiU0eI5rB0HoI46NpN4wbE%2FLxOZj4aOoApntQOgBTY%2BI9CMDio6lMsO7hI6VMQ8Zg4jHk3RGkHkHREbi5CSXuE4ALrG8gjm6vG5vT3UcsLdkxqTz8HSofk8rPzyCOvlzWqle9ZnSWKhM79MICqjeC6oyQZMdI%2Bx5Ufgyevg8lfiTzD9cQRwcbThsoUUzcKzWCCkfQcgDqPGTlUR6y0EOWeIjEaZW22qHvL4YsbDSWmpzzRoPz1tKCaIlGcyn0kfFS3gBpMgDXA3C7h8TuYUcNYLNv4bYLOOHBpWPiXdlDVxTIJUHuCHJKkCuCPCXIu8Wh0K7uittCu4wF01yf5kYxNGlnnx6atCNjsp%2BckSfLuXiP%2F%2FEXduRpNRStcMFvtINwodFuhi0WCEalL5Z4U7QW%2FRBOFVDu3MRqX43Jhb%2FfQ6LG5P%2B%2FfAhGj%2BH0Mbg6D5oFoPlwse6Dbg%2BbSz768dc0orZvOiatMW06LjFpjZsIwhRI0grSXW9fn5HnJpt6vnIDkp9c%2Bn7u1WT4YA7cFkhsgXfVdwQdfWt41eTk4KrJHbm7kaQqUn1abvFaSlN5%2FvO35G5urFi97AafvcZLooR3rkuXrtFYqLjjyBfLSghpV4zlknyz6rYk28zc9nJm4yxZ23x9ZTVKrHROmXgEqu5v%2FAmuxqTywtOT%2F%2FnED79B2RFsViDKTsg0oMwxeLIHl8zUO0Ng9ayHJeeQZ8XQ1tnsUSsCLWc1ZQXcv2o2w%2FvuFjq2ApreRBwV6NoCXV2A6gFcNjdME3ty6d4nZXwKpitDpm3lgGmrPypH%2B85kvmNy4admia7AqdOqbIV%2BKP26ZGGbhYvUF%2B2w2Wa0HchF1qIBUjfmg2d%2F%2FQcAAP%2F%2FAQAA%2F%2F%2F4jemOhgQAAA%3D%3D HTTP/1.1
Host: disabledincomprehensiblecitizens.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 07 Dec 2022 04:30:35 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 36878c8e7435304eccd6132556192493
Strict-Transport-Security: max-age=0; includeSubdomains
disabledincomprehensiblecitizens.com/impr.gif?sid=H4sIAAAAAAAC%2F1RST2gkxReu3p0f%2FIgH%2FyJ4WQZBUJBJ9%2FzJzLjIYlwjwZhk%2FxE8VldVT8pUdzVV3dOTwUNwQfc4Bw%2FqqfNNskFdxL14E2QiyBIUty9LDgbvHjyIi4gH6dmB0Qf93vf6e4fve68%2B2E%2FPiIuUnm6%2BrYdSKbrYqrnVF7dkxHVmq%2BvXq55bcy9Wt2S01LxYHZTJ9F%2Fx3FbNfan6pmA7erHueq7ruV51RRoR6MHilIWM73S9WtetNes1r9XEwPy3t6kDSx3w%2Fhl5CpIX%2F9u%2BdxeSTRCFX10WdifR8ctvhKmiiTbo86Mb0U6kswjhHAbGQRAdzaahbUHIx%2Bego6OZA%2Bj%2BQekAviyI88CDHx3NZMLvHz5S6iuICD5%2FDFl%2FAqEmkHQCpm9C8vsEYBzrG4jC2%2BvaZHT3EUtLtiCVh79DZgWp%2FPwMovDLZSUH1WtapYnUkcUgyCEHE8jeBHF6jGToQGbHYMn7kPxHsvhwDVF4sGGVhuT51L2UE8hgAiVGoNZBWn7SQRo4SGMHIT%2Bt0lY3cN124AeNRqfJGGs0GGt1lniLN5qdwEXKSnkjJPEITI3AzB5is4cdOYJJv4XdzmG5A5sUxLmyhz7PkQmCzBJklCCTBFlCkPXzQ65s3ea3ubKp781qfVYb%2BVgnvX16qJOeiMh%2BfEaeLPfiPP7HX9gRp9WAt4Ilt9H1gqVGtxm0fI%2F7VLi8w5q81XYDWJlD2nNTq0NZkAt%2Fv4dYFuT%2Fv3wInx7DqmMweR409UCzcbvugm6Pmx0Xw%2BhrGlIz1D2d1HylezbWSY3pEFzniJMKkl1nX52R56aXer7yDgQ7ufT9wqvx%2BMECmMkRmxzvyu8IeurW%2BKrOyMFVnVlydyNOZCiHtLzitYQm4vznb4ndTBu%2BetmOPnuNlUQJ71wXNlmjEZdRz5IvliXnwqxowwT5ZtVuCX8ztdvLqYnSeG3z9ZXVMDbCWqmjCai8v%2FEnmCxI5YWnp%2B%2FziR9%2BgzQTmDRHmJ6QWUDqY7B4Dzaeq7eawKj5jB87yNJ8bOr%2B%2FKeSBErMe%2BrnsP%2Fq%2FTnet7fQMxXQ5CaiMEff5OirHFSNYNOFcRKbk0v3PinjU%2FiqMvaVqRz4yqiPpqst042CXPipWaIrsPK02vKaouN32oxzXzDuteuNTsN165w3213hdZHYgo2e%2FfUfAAAA%2F%2F8BAAD%2F%2F55P7kKGBAAA
200 OK 7 B URL HTTP/1.1 disabledincomprehensiblecitizens.com/impr.gif?sid=H4sIAAAAAAAC%2F1RST2gkxReu3p0f%2FIgH%2FyJ4WQZBUJBJ9%2FzJzLjIYlwjwZhk%2FxE8VldVT8pUdzVV3dOTwUNwQfc4Bw%2FqqfNNskFdxL14E2QiyBIUty9LDgbvHjyIi4gH6dmB0Qf93vf6e4fve68%2B2E%2FPiIuUnm6%2BrYdSKbrYqrnVF7dkxHVmq%2BvXq55bcy9Wt2S01LxYHZTJ9F%2Fx3FbNfan6pmA7erHueq7ruV51RRoR6MHilIWM73S9WtetNes1r9XEwPy3t6kDSx3w%2Fhl5CpIX%2F9u%2BdxeSTRCFX10WdifR8ctvhKmiiTbo86Mb0U6kswjhHAbGQRAdzaahbUHIx%2Bego6OZA%2Bj%2BQekAviyI88CDHx3NZMLvHz5S6iuICD5%2FDFl%2FAqEmkHQCpm9C8vsEYBzrG4jC2%2BvaZHT3EUtLtiCVh79DZgWp%2FPwMovDLZSUH1WtapYnUkcUgyCEHE8jeBHF6jGToQGbHYMn7kPxHsvhwDVF4sGGVhuT51L2UE8hgAiVGoNZBWn7SQRo4SGMHIT%2Bt0lY3cN124AeNRqfJGGs0GGt1lniLN5qdwEXKSnkjJPEITI3AzB5is4cdOYJJv4XdzmG5A5sUxLmyhz7PkQmCzBJklCCTBFlCkPXzQ65s3ea3ubKp781qfVYb%2BVgnvX16qJOeiMh%2BfEaeLPfiPP7HX9gRp9WAt4Ilt9H1gqVGtxm0fI%2F7VLi8w5q81XYDWJlD2nNTq0NZkAt%2Fv4dYFuT%2Fv3wInx7DqmMweR409UCzcbvugm6Pmx0Xw%2BhrGlIz1D2d1HylezbWSY3pEFzniJMKkl1nX52R56aXer7yDgQ7ufT9wqvx%2BMECmMkRmxzvyu8IeurW%2BKrOyMFVnVlydyNOZCiHtLzitYQm4vznb4ndTBu%2BetmOPnuNlUQJ71wXNlmjEZdRz5IvliXnwqxowwT5ZtVuCX8ztdvLqYnSeG3z9ZXVMDbCWqmjCai8v%2FEnmCxI5YWnp%2B%2FziR9%2BgzQTmDRHmJ6QWUDqY7B4Dzaeq7eawKj5jB87yNJ8bOr%2B%2FKeSBErMe%2BrnsP%2Fq%2FTnet7fQMxXQ5CaiMEff5OirHFSNYNOFcRKbk0v3PinjU%2FiqMvaVqRz4yqiPpqst042CXPipWaIrsPK02vKaouN32oxzXzDuteuNTsN165w3213hdZHYgo2e%2FfUfAAAA%2F%2F8BAAD%2F%2F55P7kKGBAAA
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RST2gkxReu3p0f%2FIgH%2FyJ4WQZBUJBJ9%2FzJzLjIYlwjwZhk%2FxE8VldVT8pUdzVV3dOTwUNwQfc4Bw%2FqqfNNskFdxL14E2QiyBIUty9LDgbvHjyIi4gH6dmB0Qf93vf6e4fve68%2B2E%2FPiIuUnm6%2BrYdSKbrYqrnVF7dkxHVmq%2BvXq55bcy9Wt2S01LxYHZTJ9F%2Fx3FbNfan6pmA7erHueq7ruV51RRoR6MHilIWM73S9WtetNes1r9XEwPy3t6kDSx3w%2Fhl5CpIX%2F9u%2BdxeSTRCFX10WdifR8ctvhKmiiTbo86Mb0U6kswjhHAbGQRAdzaahbUHIx%2Bego6OZA%2Bj%2BQekAviyI88CDHx3NZMLvHz5S6iuICD5%2FDFl%2FAqEmkHQCpm9C8vsEYBzrG4jC2%2BvaZHT3EUtLtiCVh79DZgWp%2FPwMovDLZSUH1WtapYnUkcUgyCEHE8jeBHF6jGToQGbHYMn7kPxHsvhwDVF4sGGVhuT51L2UE8hgAiVGoNZBWn7SQRo4SGMHIT%2Bt0lY3cN124AeNRqfJGGs0GGt1lniLN5qdwEXKSnkjJPEITI3AzB5is4cdOYJJv4XdzmG5A5sUxLmyhz7PkQmCzBJklCCTBFlCkPXzQ65s3ea3ubKp781qfVYb%2BVgnvX16qJOeiMh%2BfEaeLPfiPP7HX9gRp9WAt4Ilt9H1gqVGtxm0fI%2F7VLi8w5q81XYDWJlD2nNTq0NZkAt%2Fv4dYFuT%2Fv3wInx7DqmMweR409UCzcbvugm6Pmx0Xw%2BhrGlIz1D2d1HylezbWSY3pEFzniJMKkl1nX52R56aXer7yDgQ7ufT9wqvx%2BMECmMkRmxzvyu8IeurW%2BKrOyMFVnVlydyNOZCiHtLzitYQm4vznb4ndTBu%2BetmOPnuNlUQJ71wXNlmjEZdRz5IvliXnwqxowwT5ZtVuCX8ztdvLqYnSeG3z9ZXVMDbCWqmjCai8v%2FEnmCxI5YWnp%2B%2FziR9%2BgzQTmDRHmJ6QWUDqY7B4Dzaeq7eawKj5jB87yNJ8bOr%2B%2FKeSBErMe%2BrnsP%2Fq%2FTnet7fQMxXQ5CaiMEff5OirHFSNYNOFcRKbk0v3PinjU%2FiqMvaVqRz4yqiPpqst042CXPipWaIrsPK02vKaouN32oxzXzDuteuNTsN165w3213hdZHYgo2e%2FfUfAAAA%2F%2F8BAAD%2F%2F55P7kKGBAAA HTTP/1.1
Host: disabledincomprehensiblecitizens.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 07 Dec 2022 04:30:35 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: beecf0cf0e4c756008c4f3f352618dfd
Strict-Transport-Security: max-age=0; includeSubdomains
disabledincomprehensiblecitizens.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSS2gkVRR9NdOCjKD4QXAzNIKgIp2q%2FiRpBxmMYyQYk8yP4PL9qvPMq3rFe1VdncZFcEBn2QsX6qpyOpmgDuJs3AnSEWQIiOnNkIXBvUtxEHEh1dPQeqHuPbfOXZxz7%2Ft4LzsjPjJ6uvGe6Sut6Vyr5ldf3lSxMLmrrt2oBn7Nv1TdVPF881K1VybbfT3wWzX%2Fleo7km%2Bbubof%2BH7gB9VlZWVoenMTFiq52w5qbb%2FWrNeCVhM9%2B%2F%2FeZR4c9SC6Z%2BQZKDF%2BbOv%2BPSg%2BQhx9e0W67dQkr70dZZqmxqIrDm%2FG27HJY0QzGFoPYXw4nYZxY0I%2BOwcTH04dwHT3Swdgaky8BwFYfDiVCdY9eKSUacgYTDyBvDuC1CMoOgI3t6DECQG4wNo64ujOmrE53XnE0pIdk8rDP6DyMan8%2Bhzi6JslrXrV60ZnqTKxQy8soHojqM4ISXaEtO9B5Ufg6UdQ4mcy93AVcbS%2F7rSBEsXEvVIjqHAELQegzkNWfspDFnrIEg%2BROK3SVjv0%2FYWQhY3GYpNz3mhw3lqcFy3RaC6GPjJeyhsgTQbgegBud5HYXWyrAWz2A9xWASc8uHRMvKu76IoCuSTIHUFOCXJFkKcEebc4ENrVXXFHaJexYFrr09oohibt7NEDk3ZkTPaSM%2FJ0uRfvqT%2F%2FxrY8rYaiFc77jXYQzjfazbDFAsGo9MUib4rWgh%2FCqQLKnZtY7asxufjPh0jUmDz%2B2ydg9AhOH4Gr86BZAJoPF%2Bo%2B6NawueijH39HI2r7pmPSGtOm4xKT1riJIEyBJK0g3fH29Bl5YXKpi780Ifnx5Z8uvJEMH1wAtwUSW%2BAD9SNBR98eXjM52b9mckfurSepilSflle8ntJUnv%2FqXbmTGytWrrjBl2%2Fykijh3RvSpas0FiruOPL1khJC2mVjuSTfr7hNyTYyt7WU2ThLVjfeWl6JEiudUyYegaqT9b%2FA1ZhUXnp28j6fPHkVyo5gswJRdkymAWWOwJNduGSm3hkCq2czLDmPPCuGts5mP7Ui0HLWU1bA%2FadnM7znbqNjK6DpLcRRga4t0NUFqB7AZReGaWKPL9%2F%2FvIwvwHRlyLSt7DNt9adj8mLl%2FTLdnCy5RFfh1GlVtkI%2FlH5dsrDNwgXqi3bYbDPaDuQCa9EAqRvzwfO%2F%2FwsAAP%2F%2FAQAA%2F%2F8fTm%2B%2FhgQAAA%3D%3D
200 OK 7 B URL HTTP/1.1 disabledincomprehensiblecitizens.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSS2gkVRR9NdOCjKD4QXAzNIKgIp2q%2FiRpBxmMYyQYk8yP4PL9qvPMq3rFe1VdncZFcEBn2QsX6qpyOpmgDuJs3AnSEWQIiOnNkIXBvUtxEHEh1dPQeqHuPbfOXZxz7%2Ft4LzsjPjJ6uvGe6Sut6Vyr5ldf3lSxMLmrrt2oBn7Nv1TdVPF881K1VybbfT3wWzX%2Fleo7km%2Bbubof%2BH7gB9VlZWVoenMTFiq52w5qbb%2FWrNeCVhM9%2B%2F%2FeZR4c9SC6Z%2BQZKDF%2BbOv%2BPSg%2BQhx9e0W67dQkr70dZZqmxqIrDm%2FG27HJY0QzGFoPYXw4nYZxY0I%2BOwcTH04dwHT3Swdgaky8BwFYfDiVCdY9eKSUacgYTDyBvDuC1CMoOgI3t6DECQG4wNo64ujOmrE53XnE0pIdk8rDP6DyMan8%2Bhzi6JslrXrV60ZnqTKxQy8soHojqM4ISXaEtO9B5Ufg6UdQ4mcy93AVcbS%2F7rSBEsXEvVIjqHAELQegzkNWfspDFnrIEg%2BROK3SVjv0%2FYWQhY3GYpNz3mhw3lqcFy3RaC6GPjJeyhsgTQbgegBud5HYXWyrAWz2A9xWASc8uHRMvKu76IoCuSTIHUFOCXJFkKcEebc4ENrVXXFHaJexYFrr09oohibt7NEDk3ZkTPaSM%2FJ0uRfvqT%2F%2FxrY8rYaiFc77jXYQzjfazbDFAsGo9MUib4rWgh%2FCqQLKnZtY7asxufjPh0jUmDz%2B2ydg9AhOH4Gr86BZAJoPF%2Bo%2B6NawueijH39HI2r7pmPSGtOm4xKT1riJIEyBJK0g3fH29Bl5YXKpi780Ifnx5Z8uvJEMH1wAtwUSW%2BAD9SNBR98eXjM52b9mckfurSepilSflle8ntJUnv%2FqXbmTGytWrrjBl2%2Fykijh3RvSpas0FiruOPL1khJC2mVjuSTfr7hNyTYyt7WU2ThLVjfeWl6JEiudUyYegaqT9b%2FA1ZhUXnp28j6fPHkVyo5gswJRdkymAWWOwJNduGSm3hkCq2czLDmPPCuGts5mP7Ui0HLWU1bA%2FadnM7znbqNjK6DpLcRRga4t0NUFqB7AZReGaWKPL9%2F%2FvIwvwHRlyLSt7DNt9adj8mLl%2FTLdnCy5RFfh1GlVtkI%2FlH5dsrDNwgXqi3bYbDPaDuQCa9EAqRvzwfO%2F%2FwsAAP%2F%2FAQAA%2F%2F8fTm%2B%2FhgQAAA%3D%3D
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSS2gkVRR9NdOCjKD4QXAzNIKgIp2q%2FiRpBxmMYyQYk8yP4PL9qvPMq3rFe1VdncZFcEBn2QsX6qpyOpmgDuJs3AnSEWQIiOnNkIXBvUtxEHEh1dPQeqHuPbfOXZxz7%2Ft4LzsjPjJ6uvGe6Sut6Vyr5ldf3lSxMLmrrt2oBn7Nv1TdVPF881K1VybbfT3wWzX%2Fleo7km%2Bbubof%2BH7gB9VlZWVoenMTFiq52w5qbb%2FWrNeCVhM9%2B%2F%2FeZR4c9SC6Z%2BQZKDF%2BbOv%2BPSg%2BQhx9e0W67dQkr70dZZqmxqIrDm%2FG27HJY0QzGFoPYXw4nYZxY0I%2BOwcTH04dwHT3Swdgaky8BwFYfDiVCdY9eKSUacgYTDyBvDuC1CMoOgI3t6DECQG4wNo64ujOmrE53XnE0pIdk8rDP6DyMan8%2Bhzi6JslrXrV60ZnqTKxQy8soHojqM4ISXaEtO9B5Ufg6UdQ4mcy93AVcbS%2F7rSBEsXEvVIjqHAELQegzkNWfspDFnrIEg%2BROK3SVjv0%2FYWQhY3GYpNz3mhw3lqcFy3RaC6GPjJeyhsgTQbgegBud5HYXWyrAWz2A9xWASc8uHRMvKu76IoCuSTIHUFOCXJFkKcEebc4ENrVXXFHaJexYFrr09oohibt7NEDk3ZkTPaSM%2FJ0uRfvqT%2F%2FxrY8rYaiFc77jXYQzjfazbDFAsGo9MUib4rWgh%2FCqQLKnZtY7asxufjPh0jUmDz%2B2ydg9AhOH4Gr86BZAJoPF%2Bo%2B6NawueijH39HI2r7pmPSGtOm4xKT1riJIEyBJK0g3fH29Bl5YXKpi780Ifnx5Z8uvJEMH1wAtwUSW%2BAD9SNBR98eXjM52b9mckfurSepilSflle8ntJUnv%2FqXbmTGytWrrjBl2%2Fykijh3RvSpas0FiruOPL1khJC2mVjuSTfr7hNyTYyt7WU2ThLVjfeWl6JEiudUyYegaqT9b%2FA1ZhUXnp28j6fPHkVyo5gswJRdkymAWWOwJNduGSm3hkCq2czLDmPPCuGts5mP7Ui0HLWU1bA%2FadnM7znbqNjK6DpLcRRga4t0NUFqB7AZReGaWKPL9%2F%2FvIwvwHRlyLSt7DNt9adj8mLl%2FTLdnCy5RFfh1GlVtkI%2FlH5dsrDNwgXqi3bYbDPaDuQCa9EAqRvzwfO%2F%2FwsAAP%2F%2FAQAA%2F%2F8fTm%2B%2FhgQAAA%3D%3D HTTP/1.1
Host: disabledincomprehensiblecitizens.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 07 Dec 2022 04:30:35 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6eb405fc6ea4b390dd08597586915a13
Strict-Transport-Security: max-age=0; includeSubdomains
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cd6dabd083ee1c237c8ea3ba38cc48d5
bbe4420bf1c0fe0d5621336865563418d2f16f39
c9314cdac13bc2ea94505f473538ab4d5c0a940dfbc2f5447e6f22a5af580572
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 04:30:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cd6dabd083ee1c237c8ea3ba38cc48d5
bbe4420bf1c0fe0d5621336865563418d2f16f39
c9314cdac13bc2ea94505f473538ab4d5c0a940dfbc2f5447e6f22a5af580572
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 04:30:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
disabledincomprehensiblecitizens.com/impr.gif?sid=H4sIAAAAAAAC%2F1RST2gkxReu3p0f%2FIgH%2FyJ4WQZBUJBJ9%2FzJzLjIYlwjwZhk%2FxE8VldVT8pUdzVV3dOTwUNwQfc4Bw%2FqqfNNskFdxL14E2QiyBIUty9LDgbvghdxEfEgPTsw%2BqDqfa%2B%2Bd%2Fi%2B9%2BqD%2FfSMuEjp6ebbeiiVooutmlt9cUtGXGe2un696rk192J1S0ZLzYvVQXmZ%2Fiue26q5L1XfFGxHL9Zdz3U916uuSCMCPVicspDxna5X67q1Zr3mtZoYmP%2FWNnVgqQPePyNPQfLif9v37kKyCaLwq8vC7iQ6fvmNMFU00QZ9fnQj2ol0FiGcw8A4CKKjWTe0LQj5%2BBx0dDRzAN0%2FKB3AlwVxHnjwo6OZTPj9w0dKfQURweePIetPINQEkk7A9E1Ifp8AjGN9A1F4e12bjO4%2BYmnJFqTy8HfIrCCVn59BFH65rOSgek2rNJE6shgEOeRgAtmbIE6PkQwdyOwYLHkfkv9IFh%2BuIQoPNqzSkDyfupdyAhlMoMQI1DpIyyMdpIGDNHYQ8tMqbXUD120HftBodJqMsUaDsVZnibd4o9kJXKSslDdCEo%2FA1AjM7CE2e9iRI5j0W9jtHJY7sElBnCt76PMcmSDILEFGCTJJkCUEWT8%2F5MrWbX6bK5v63izXZ7mRj3XS26eHOumJiOzHZ%2BTJci7O43%2F8hR1xWg14K1hyG10vWGp0m0HL97hPhcs7rMlbbTeAlTmkPTe1OpQFufD3e4hlQf7%2Fy4fw6TGsOgaT50FTDzQbt%2Bsu6Pa42XExjL6mITVD3dNJzVe6Z2Od1JgOwXWOOKkg2XX21Rl5brqp5ys3INjJpe8XXo3HDxbATI7Y5HhXfkfQU7fGV3VGDq7qzJK7G3EiQzmk5RavJTQR5z9%2FS%2Bxm2vDVy3b02WusJEp457qwyRqNuIx6lnyxLDkXZkUbJsg3q3ZL%2BJup3V5OTZTGa5uvr6yGsRHWSh1NQOX9jT%2FBZEEqLzw9%2FZ9P%2FPAbpJnApDnC9ITMAlIfg8V7sPFcvdUERs17%2FPgcsjQfm7o%2Ff1SSQIl5Tf0c9l%2B1P8f79hZ6pgKa3EQU5uibHH2Vg6oRbLowTmJzcuneJ2V8Cl9Vxr4ylQNfGfVROdp3pvMtyIWfmiW6AitPqy2vKTp%2Bp8049wXjXrve6DRct855s90VXheJLdjo2V%2F%2FAQAA%2F%2F8BAAD%2F%2F%2ByFZ2iGBAAA
200 OK 7 B URL HTTP/1.1 disabledincomprehensiblecitizens.com/impr.gif?sid=H4sIAAAAAAAC%2F1RST2gkxReu3p0f%2FIgH%2FyJ4WQZBUJBJ9%2FzJzLjIYlwjwZhk%2FxE8VldVT8pUdzVV3dOTwUNwQfc4Bw%2FqqfNNskFdxL14E2QiyBIUty9LDgbvghdxEfEgPTsw%2BqDqfa%2B%2Bd%2Fi%2B9%2BqD%2FfSMuEjp6ebbeiiVooutmlt9cUtGXGe2un696rk192J1S0ZLzYvVQXmZ%2Fiue26q5L1XfFGxHL9Zdz3U916uuSCMCPVicspDxna5X67q1Zr3mtZoYmP%2FWNnVgqQPePyNPQfLif9v37kKyCaLwq8vC7iQ6fvmNMFU00QZ9fnQj2ol0FiGcw8A4CKKjWTe0LQj5%2BBx0dDRzAN0%2FKB3AlwVxHnjwo6OZTPj9w0dKfQURweePIetPINQEkk7A9E1Ifp8AjGN9A1F4e12bjO4%2BYmnJFqTy8HfIrCCVn59BFH65rOSgek2rNJE6shgEOeRgAtmbIE6PkQwdyOwYLHkfkv9IFh%2BuIQoPNqzSkDyfupdyAhlMoMQI1DpIyyMdpIGDNHYQ8tMqbXUD120HftBodJqMsUaDsVZnibd4o9kJXKSslDdCEo%2FA1AjM7CE2e9iRI5j0W9jtHJY7sElBnCt76PMcmSDILEFGCTJJkCUEWT8%2F5MrWbX6bK5v63izXZ7mRj3XS26eHOumJiOzHZ%2BTJci7O43%2F8hR1xWg14K1hyG10vWGp0m0HL97hPhcs7rMlbbTeAlTmkPTe1OpQFufD3e4hlQf7%2Fy4fw6TGsOgaT50FTDzQbt%2Bsu6Pa42XExjL6mITVD3dNJzVe6Z2Od1JgOwXWOOKkg2XX21Rl5brqp5ys3INjJpe8XXo3HDxbATI7Y5HhXfkfQU7fGV3VGDq7qzJK7G3EiQzmk5RavJTQR5z9%2FS%2Bxm2vDVy3b02WusJEp457qwyRqNuIx6lnyxLDkXZkUbJsg3q3ZL%2BJup3V5OTZTGa5uvr6yGsRHWSh1NQOX9jT%2FBZEEqLzw9%2FZ9P%2FPAbpJnApDnC9ITMAlIfg8V7sPFcvdUERs17%2FPgcsjQfm7o%2Ff1SSQIl5Tf0c9l%2B1P8f79hZ6pgKa3EQU5uibHH2Vg6oRbLowTmJzcuneJ2V8Cl9Vxr4ylQNfGfVROdp3pvMtyIWfmiW6AitPqy2vKTp%2Bp8049wXjXrve6DRct855s90VXheJLdjo2V%2F%2FAQAA%2F%2F8BAAD%2F%2F%2ByFZ2iGBAAA
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RST2gkxReu3p0f%2FIgH%2FyJ4WQZBUJBJ9%2FzJzLjIYlwjwZhk%2FxE8VldVT8pUdzVV3dOTwUNwQfc4Bw%2FqqfNNskFdxL14E2QiyBIUty9LDgbvghdxEfEgPTsw%2BqDqfa%2B%2Bd%2Fi%2B9%2BqD%2FfSMuEjp6ebbeiiVooutmlt9cUtGXGe2un696rk192J1S0ZLzYvVQXmZ%2Fiue26q5L1XfFGxHL9Zdz3U916uuSCMCPVicspDxna5X67q1Zr3mtZoYmP%2FWNnVgqQPePyNPQfLif9v37kKyCaLwq8vC7iQ6fvmNMFU00QZ9fnQj2ol0FiGcw8A4CKKjWTe0LQj5%2BBx0dDRzAN0%2FKB3AlwVxHnjwo6OZTPj9w0dKfQURweePIetPINQEkk7A9E1Ifp8AjGN9A1F4e12bjO4%2BYmnJFqTy8HfIrCCVn59BFH65rOSgek2rNJE6shgEOeRgAtmbIE6PkQwdyOwYLHkfkv9IFh%2BuIQoPNqzSkDyfupdyAhlMoMQI1DpIyyMdpIGDNHYQ8tMqbXUD120HftBodJqMsUaDsVZnibd4o9kJXKSslDdCEo%2FA1AjM7CE2e9iRI5j0W9jtHJY7sElBnCt76PMcmSDILEFGCTJJkCUEWT8%2F5MrWbX6bK5v63izXZ7mRj3XS26eHOumJiOzHZ%2BTJci7O43%2F8hR1xWg14K1hyG10vWGp0m0HL97hPhcs7rMlbbTeAlTmkPTe1OpQFufD3e4hlQf7%2Fy4fw6TGsOgaT50FTDzQbt%2Bsu6Pa42XExjL6mITVD3dNJzVe6Z2Od1JgOwXWOOKkg2XX21Rl5brqp5ys3INjJpe8XXo3HDxbATI7Y5HhXfkfQU7fGV3VGDq7qzJK7G3EiQzmk5RavJTQR5z9%2FS%2Bxm2vDVy3b02WusJEp457qwyRqNuIx6lnyxLDkXZkUbJsg3q3ZL%2BJup3V5OTZTGa5uvr6yGsRHWSh1NQOX9jT%2FBZEEqLzw9%2FZ9P%2FPAbpJnApDnC9ITMAlIfg8V7sPFcvdUERs17%2FPgcsjQfm7o%2Ff1SSQIl5Tf0c9l%2B1P8f79hZ6pgKa3EQU5uibHH2Vg6oRbLowTmJzcuneJ2V8Cl9Vxr4ylQNfGfVROdp3pvMtyIWfmiW6AitPqy2vKTp%2Bp8049wXjXrve6DRct855s90VXheJLdjo2V%2F%2FAQAA%2F%2F8BAAD%2F%2F%2ByFZ2iGBAAA HTTP/1.1
Host: disabledincomprehensiblecitizens.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 07 Dec 2022 04:30:35 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7ff32373f24d1a7391f31685d66dac18
Strict-Transport-Security: max-age=0; includeSubdomains
disabledincomprehensiblecitizens.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3h1BVlD8QfCyDIKgIpPu%2BcnMuMhiXCPBmGT%2FCB6rq6onZaq7mqru6cngIbige5yDB%2FXU%2BSbZoC7iXrwJMhFkCYjpy5KDwbtHcRHxID07MPqg3%2Ftef%2B%2Fwfe%2FVx3vpGXGR0tON9%2FRQKkUXWjW3%2BvKmjLjObHXtRtVza%2B6l6qaMFpuXqoMymf7rntuqua9U3xFsWy%2FUXc91PderLksjAj1YmLKQ8d2uV%2Bu6tWa95rWaGJj%2F9zZ1YKkD3j8jz0Dy4rGt%2B%2Fcg2QRR%2BO0VYbcTHb%2F2dpgqmmiDPj%2B8GW1HOosQzmFgHATR4Wwa2haEfHYOOjqcOYDu75cO4MuCOA88%2BNHhTCb8%2FsEjpb6CiODzJ5D1JxBqAkknYPoWJD8hAONYW0cU3lnTJqM7j1hasgWpPPwDMitI5dfnEIXfLCk5qF7XKk2kjiwGQQ45mED2JojTIyRDBzI7Aks%2BguQ%2Fk4WHq4jC%2FXWrNCTPp%2B6lnEAGEygxArUO0vKTDtLAQRo7CPlplba6geu2Az9oNDpNxlijwVirs8hbvNHsBC5SVsobIYlHYGoEZnYRm11syxFM%2BgPsVg7LHdikIM7VXfR5jkwQZJYgowSZJMgSgqyfH3Bl6za%2Fw5VNfW9W67PayMc66e3RA530RET24jPydLkX56k%2F%2F8a2OK0GvBUsuo2uFyw2us2g5Xvcp8LlHdbkrbYbwMoc0p6bWh3Kglz850PEsiCP%2F%2FYJfHoEq47A5HnQ1APNxu26C7o1bnZcDKPvaEjNUPd0UvOV7tlYJzWmQ3CdI04qSHacPXVGXphe6uIvTQh2fPmnC2%2FE4wcXwEyO2OT4QP5I0FO3x9d0Rvav6cySe%2BtxIkM5pOUVryc0Eee%2FelfsZNrwlSt29OWbrCRKePeGsMkqjbiMepZ8vSQ5F2ZZGybI9yt2U%2Fgbqd1aSk2Uxqsbby2vhLER1kodTUDlyfpfYLIglZeenb7PJ09ehTQTmDRHmB6TWUDqI7B4Fzaeq7eawKj5jB%2BfR5bmY1P35z%2BVJFBi3lM%2Fh%2F1P78%2Fxnr2NnqmAJrcQhTn6Jkdf5aBqBJteGCexOb58%2F%2FMyvoCvKmNfmcq%2Br4z6tCAvVt4v083pkkt0FVaeVlteU3T8Tptx7gvGvXa90Wm4bp3zZrsrvC4SW7DR87%2F%2FCwAA%2F%2F8BAAD%2F%2FwtG4VmGBAAA
200 OK 7 B URL HTTP/1.1 disabledincomprehensiblecitizens.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3h1BVlD8QfCyDIKgIpPu%2BcnMuMhiXCPBmGT%2FCB6rq6onZaq7mqru6cngIbige5yDB%2FXU%2BSbZoC7iXrwJMhFkCYjpy5KDwbtHcRHxID07MPqg3%2Ftef%2B%2Fwfe%2FVx3vpGXGR0tON9%2FRQKkUXWjW3%2BvKmjLjObHXtRtVza%2B6l6qaMFpuXqoMymf7rntuqua9U3xFsWy%2FUXc91PderLksjAj1YmLKQ8d2uV%2Bu6tWa95rWaGJj%2F9zZ1YKkD3j8jz0Dy4rGt%2B%2Fcg2QRR%2BO0VYbcTHb%2F2dpgqmmiDPj%2B8GW1HOosQzmFgHATR4Wwa2haEfHYOOjqcOYDu75cO4MuCOA88%2BNHhTCb8%2FsEjpb6CiODzJ5D1JxBqAkknYPoWJD8hAONYW0cU3lnTJqM7j1hasgWpPPwDMitI5dfnEIXfLCk5qF7XKk2kjiwGQQ45mED2JojTIyRDBzI7Aks%2BguQ%2Fk4WHq4jC%2FXWrNCTPp%2B6lnEAGEygxArUO0vKTDtLAQRo7CPlplba6geu2Az9oNDpNxlijwVirs8hbvNHsBC5SVsobIYlHYGoEZnYRm11syxFM%2BgPsVg7LHdikIM7VXfR5jkwQZJYgowSZJMgSgqyfH3Bl6za%2Fw5VNfW9W67PayMc66e3RA530RET24jPydLkX56k%2F%2F8a2OK0GvBUsuo2uFyw2us2g5Xvcp8LlHdbkrbYbwMoc0p6bWh3Kglz850PEsiCP%2F%2FYJfHoEq47A5HnQ1APNxu26C7o1bnZcDKPvaEjNUPd0UvOV7tlYJzWmQ3CdI04qSHacPXVGXphe6uIvTQh2fPmnC2%2FE4wcXwEyO2OT4QP5I0FO3x9d0Rvav6cySe%2BtxIkM5pOUVryc0Eee%2FelfsZNrwlSt29OWbrCRKePeGsMkqjbiMepZ8vSQ5F2ZZGybI9yt2U%2Fgbqd1aSk2Uxqsbby2vhLER1kodTUDlyfpfYLIglZeenb7PJ09ehTQTmDRHmB6TWUDqI7B4Fzaeq7eawKj5jB%2BfR5bmY1P35z%2BVJFBi3lM%2Fh%2F1P78%2Fxnr2NnqmAJrcQhTn6Jkdf5aBqBJteGCexOb58%2F%2FMyvoCvKmNfmcq%2Br4z6tCAvVt4v083pkkt0FVaeVlteU3T8Tptx7gvGvXa90Wm4bp3zZrsrvC4SW7DR87%2F%2FCwAA%2F%2F8BAAD%2F%2FwtG4VmGBAAA
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3h1BVlD8QfCyDIKgIpPu%2BcnMuMhiXCPBmGT%2FCB6rq6onZaq7mqru6cngIbige5yDB%2FXU%2BSbZoC7iXrwJMhFkCYjpy5KDwbtHcRHxID07MPqg3%2Ftef%2B%2Fwfe%2FVx3vpGXGR0tON9%2FRQKkUXWjW3%2BvKmjLjObHXtRtVza%2B6l6qaMFpuXqoMymf7rntuqua9U3xFsWy%2FUXc91PderLksjAj1YmLKQ8d2uV%2Bu6tWa95rWaGJj%2F9zZ1YKkD3j8jz0Dy4rGt%2B%2Fcg2QRR%2BO0VYbcTHb%2F2dpgqmmiDPj%2B8GW1HOosQzmFgHATR4Wwa2haEfHYOOjqcOYDu75cO4MuCOA88%2BNHhTCb8%2FsEjpb6CiODzJ5D1JxBqAkknYPoWJD8hAONYW0cU3lnTJqM7j1hasgWpPPwDMitI5dfnEIXfLCk5qF7XKk2kjiwGQQ45mED2JojTIyRDBzI7Aks%2BguQ%2Fk4WHq4jC%2FXWrNCTPp%2B6lnEAGEygxArUO0vKTDtLAQRo7CPlplba6geu2Az9oNDpNxlijwVirs8hbvNHsBC5SVsobIYlHYGoEZnYRm11syxFM%2BgPsVg7LHdikIM7VXfR5jkwQZJYgowSZJMgSgqyfH3Bl6za%2Fw5VNfW9W67PayMc66e3RA530RET24jPydLkX56k%2F%2F8a2OK0GvBUsuo2uFyw2us2g5Xvcp8LlHdbkrbYbwMoc0p6bWh3Kglz850PEsiCP%2F%2FYJfHoEq47A5HnQ1APNxu26C7o1bnZcDKPvaEjNUPd0UvOV7tlYJzWmQ3CdI04qSHacPXVGXphe6uIvTQh2fPmnC2%2FE4wcXwEyO2OT4QP5I0FO3x9d0Rvav6cySe%2BtxIkM5pOUVryc0Eee%2FelfsZNrwlSt29OWbrCRKePeGsMkqjbiMepZ8vSQ5F2ZZGybI9yt2U%2Fgbqd1aSk2Uxqsbby2vhLER1kodTUDlyfpfYLIglZeenb7PJ09ehTQTmDRHmB6TWUDqI7B4Fzaeq7eawKj5jB%2BfR5bmY1P35z%2BVJFBi3lM%2Fh%2F1P78%2Fxnr2NnqmAJrcQhTn6Jkdf5aBqBJteGCexOb58%2F%2FMyvoCvKmNfmcq%2Br4z6tCAvVt4v083pkkt0FVaeVlteU3T8Tptx7gvGvXa90Wm4bp3zZrsrvC4SW7DR87%2F%2FCwAA%2F%2F8BAAD%2F%2FwtG4VmGBAAA HTTP/1.1
Host: disabledincomprehensiblecitizens.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 07 Dec 2022 04:30:35 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 151d7e1b52328af1c983f363d367fc20
Strict-Transport-Security: max-age=0; includeSubdomains
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://draft.blogger.com/
Origin: https://draft.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://draft.blogger.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Wed, 07 Dec 2022 04:30:36 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+459; expires=Fri, 06-Dec-2024 04:30:36 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Wed, 07 Dec 2022 04:30:36 GMT
cache-control: private
X-Firefox-Spdy: h2
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 131 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash babb6f090aeebc6f421624475b4aefff
06079b7547949822c118224e51604f4c5ebf80c8
b2fe8b91f31edc7284cc9690e90dd4a38d985598374df68967d917590beb55dd
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://draft.blogger.com/
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 2975
Origin: https://draft.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
access-control-allow-origin: https://draft.blogger.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Wed, 07 Dec 2022 04:30:36 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: NID=511=CSR8dyygc1EtXYjaZy2qYzeC9XY_suRouiewnFF1CKyTMZXVHkkANeJEJsvE3jFzVQSiRMlnY0plx8tmPEF5C2wVTonDrpaujtFVukfO8yh5C64Pn6UYsJFIlF5spodAvIME1dyETR4-yz8fD1SDXnzmcEbffqjb6ZzjmdM3iJs; expires=Thu, 08-Jun-2023 04:30:36 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+226; expires=Fri, 06-Dec-2024 04:30:36 GMT; path=/; domain=.google.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Wed, 07 Dec 2022 04:30:36 GMT
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 21:48:03 GMT
expires: Fri, 01 Dec 2023 21:48:03 GMT
cache-control: public, max-age=31536000
age: 456153
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 16:40:43 GMT
expires: Fri, 01 Dec 2023 16:40:43 GMT
cache-control: public, max-age=31536000
age: 474593
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash d44205a852cedc47da2373b3542f2ca0
884e5d2d7ef372a86e7edc3f8c1dc63a3b4fbe82
f2adb5b3e4b05ad953d43f483497243ae66c148f2af8f39473ddc6fcf2623bb9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4936
Cache-Control: max-age=121254
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 04:30:36 GMT
Etag: "638f3a4a-1d7"
Expires: Thu, 08 Dec 2022 14:11:30 GMT
Last-Modified: Tue, 06 Dec 2022 12:49:14 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/sdk.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js
IP
File type ASCII text, with very long lines (1957)
Hash 6ddd56d32c5f42f251e99963d4ace9d6
bf7e6d55cb4a96a5bb2dc13d8e56646c4a5cf904
c0e18cd85b89579e78d221bb34c516eb9f5e46262c8ba3f3c7c73213dfd00034
GET /en_US/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 4474f1b195107fa6ea18d8b163dec57c
etag: "4f535f0282e31b95800cd4af5f07fddc"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Wed, 07 Dec 2022 04:34:37 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: bd1W0yxfQvJR6Zlj1Kzp1g==
x-fb-debug: 9N8YPZvrUXGQ2KYBrmNXbM/uK1QS/JeZP17OejWlRcGQTKJWvBIqMNJGmZE04GX5IsoKt7IbO0jAGWG0lAsWYA==
priority: u=1,i
content-length: 1686
x-fb-trip-id: 1679558926
date: Wed, 07 Dec 2022 04:30:36 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash d44205a852cedc47da2373b3542f2ca0
884e5d2d7ef372a86e7edc3f8c1dc63a3b4fbe82
f2adb5b3e4b05ad953d43f483497243ae66c148f2af8f39473ddc6fcf2623bb9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4936
Cache-Control: max-age=121254
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 04:30:36 GMT
Etag: "638f3a4a-1d7"
Expires: Thu, 08 Dec 2022 14:11:30 GMT
Last-Modified: Tue, 06 Dec 2022 12:49:14 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/sdk.js?hash=9bee55b45696e557afd8c289af7fb24d
200 OK 88 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js?hash=9bee55b45696e557afd8c289af7fb24d
IP
File type ASCII text, with very long lines (17777)
Hash 3351011d24a81a34418173fe7bac3ab7
d4d81a2ce9384fe848027add4e811a110903e1e0
2a0dcd6344a3cb237c35fe4e274cdaa2b15caaeea7f9993c65d3aa8d02530580
GET /en_US/sdk.js?hash=9bee55b45696e557afd8c289af7fb24d HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://amarzogot.blogspot.com
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 657b0c55050e624d962c77030f02bdfd
etag: "5a526dd5efdcc99280adfb535fde7432"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Thu, 07 Dec 2023 04:00:27 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: M1EBHSSoGjRBgXP+e6w6tw==
x-fb-debug: EyOMy9vuf5KySiVOvppMLo6qnQgkdvursaEGiVtiK/Q4fbf6DVcq6wgWb6Hg9bXGArJghBCZO34CwP6aNUV8bw==
priority: u=3,i
content-length: 88339
x-fb-trip-id: 1679558926
date: Wed, 07 Dec 2022 04:30:36 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
200 OK 0 B URL HTTP/2 stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
IP
GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 04:30:34 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 11/15/2021 21:49:00
cdn-proxyver: 1.0
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 723
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: 2729ae8f2fc6c761bdc17d91cc795f58
cdn-cache: HIT
cf-cache-status: HIT
age: 15834188
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 775a86d6ed89b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:300,400,400i,600,600i,700,700i
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:300,400,400i,600,600i,700,700i
IP
GET /css?family=Open+Sans:300,400,400i,600,600i,700,700i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amarzogot.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 07 Dec 2022 04:30:34 GMT
date: Wed, 07 Dec 2022 04:30:34 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
172.217.21.161
157.240.200.14
104.17.24.14
18.185.190.54
188.114.96.1
23.33.119.27
93.184.220.29