whatisbms.blogspot.com/
200 OK 23 kB IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint1F:9F:66:61:40:8F:19:DE:30:44:23:EA:EB:6E:C0:FC:6D:58:69:25
ValidityMon, 16 Oct 2023 08:08:16 GMT - Mon, 08 Jan 2024 08:08:15 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (13428)
Hash 485c93c45fce3ea7ec1b389b0ed72a28
50bc608c31d5a223a6e90e69afad5d1425ae00b3
9b24fa41978da20b8335a0f1bb45bd63f7112295a0cc696b0faa11099efc2ee5
GET / HTTP/1.1
Host: whatisbms.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Thu, 09 Nov 2023 02:30:42 GMT
date: Thu, 09 Nov 2023 02:30:42 GMT
cache-control: private, max-age=0
last-modified: Tue, 25 Jul 2023 06:11:29 GMT
etag: W/"5ce1941ecd94d7b8c87a9c6ed3c8ec6130479e7499e0d505ba0d6164835eb126"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 22682
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
whatisbms.blogspot.com/js/cookienotice.js
200 OK 2.0 kB URL GET HTTP/3 whatisbms.blogspot.com/js/cookienotice.js
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint1F:9F:66:61:40:8F:19:DE:30:44:23:EA:EB:6E:C0:FC:6D:58:69:25
ValidityMon, 16 Oct 2023 08:08:16 GMT - Mon, 08 Jan 2024 08:08:15 GMT
Hash a705132a2174f88e196ec3610d68faa8
3bad57a48d973a678fec600d45933010f6edc659
068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
GET /js/cookienotice.js HTTP/1.1
Host: whatisbms.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
date: Thu, 09 Nov 2023 02:30:43 GMT
expires: Thu, 16 Nov 2023 02:30:43 GMT
cache-control: public, max-age=604800
last-modified: Wed, 08 Nov 2023 19:03:03 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtag/js?id=G-TEZPWGXDYK
200 OK 93 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-TEZPWGXDYK
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint3B:1D:9C:59:AC:F8:2F:47:8A:C6:AE:4F:88:F0:8D:84:C7:6A:47:DA
ValidityMon, 16 Oct 2023 08:02:30 GMT - Mon, 08 Jan 2024 08:02:29 GMT
File type ASCII text, with very long lines (5955)
Hash 52de75ddd4c9041668d80d939e134cd6
82153bde1980c119e32e8aa76089c121867b0daf
5f236e907d8be5474649270629050eefa6dc56b63d26a5b907d2fc8b7a6fe0e6
GET /gtag/js?id=G-TEZPWGXDYK HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 09 Nov 2023 02:30:43 GMT
expires: Thu, 09 Nov 2023 02:30:43 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 92700
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-7546351336986479&host=ca-host-pub-1556223355139109
200 OK 52 kB URL GET HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-7546351336986479&host=ca-host-pub-1556223355139109
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint30:DF:10:0D:E2:AE:CA:7A:5E:20:03:00:80:D2:EB:DD:4D:3A:F3:10
ValidityMon, 16 Oct 2023 08:02:29 GMT - Mon, 08 Jan 2024 08:02:28 GMT
File type ASCII text, with very long lines (3968)
Hash 0fda9717ac5305675084f68a601f7616
dbe44fd961c469f47c1c57d8c69f823d8095ea71
72626282fe8538d76e9fedebdbfe2d5b0a385f86e2b00af271c3a9396f4bdd70
GET /pagead/js/adsbygoogle.js?client=ca-pub-7546351336986479&host=ca-host-pub-1556223355139109 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://whatisbms.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Thu, 09 Nov 2023 02:30:43 GMT
expires: Thu, 09 Nov 2023 02:30:43 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 12140562746217435006
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 52147
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
resources.blogblog.com/img/icon18_edit_allbkg.gif
200 OK 162 B URL GET HTTP/2 resources.blogblog.com/img/icon18_edit_allbkg.gif
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint75:53:9F:32:2C:07:BD:E7:26:FE:91:BD:A8:0F:85:6C:DE:21:40:BB
ValidityMon, 16 Oct 2023 08:02:00 GMT - Mon, 08 Jan 2024 08:01:59 GMT
File type GIF image data, version 89a, 18 x 18\012- data
Hash c991641178ff05adf0d004298b5eafa9
d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
GET /img/icon18_edit_allbkg.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 162
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Nov 2023 23:51:37 GMT
expires: Thu, 09 Nov 2023 23:51:37 GMT
cache-control: public, max-age=604800
last-modified: Thu, 02 Nov 2023 08:55:39 GMT
content-type: image/gif
age: 527946
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
resources.blogblog.com/img/icon_feed12.png
200 OK 500 B URL GET HTTP/2 resources.blogblog.com/img/icon_feed12.png
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint75:53:9F:32:2C:07:BD:E7:26:FE:91:BD:A8:0F:85:6C:DE:21:40:BB
ValidityMon, 16 Oct 2023 08:02:00 GMT - Mon, 08 Jan 2024 08:01:59 GMT
File type PNG image data, 12 x 12, 8-bit colormap, non-interlaced\012- data
Hash 44e7355a788fd1082deff0018883758e
50e3a28a44978e85d13c30522e0c71c8d0b24675
3cd341f37642f8a58b0fe14c2645913449c0ffe10be6ba0986275bfef29bc319
GET /img/icon_feed12.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 500
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 Nov 2023 02:12:34 GMT
expires: Fri, 10 Nov 2023 02:12:34 GMT
cache-control: public, max-age=604800
last-modified: Thu, 02 Nov 2023 15:56:56 GMT
content-type: image/png
age: 519489
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
resources.blogblog.com/html/buttons/blogger-powerby-blue.gif
200 OK 1.0 kB URL GET HTTP/2 resources.blogblog.com/html/buttons/blogger-powerby-blue.gif
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint75:53:9F:32:2C:07:BD:E7:26:FE:91:BD:A8:0F:85:6C:DE:21:40:BB
ValidityMon, 16 Oct 2023 08:02:00 GMT - Mon, 08 Jan 2024 08:01:59 GMT
File type GIF image data, version 89a, 88 x 30\012- data
Hash a9760f09d59ff6575e57cecc878c6ade
32fbb7823860c54ac2fb0639399ec7a42ae6bc32
29ac6786094ff0fb6e51d466cd1745d60e2ce3b3d3cf051edf1fd6ccc2ad69cd
GET /html/buttons/blogger-powerby-blue.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 1040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Nov 2023 21:59:19 GMT
expires: Wed, 15 Nov 2023 21:59:19 GMT
cache-control: public, max-age=604800
last-modified: Wed, 08 Nov 2023 19:03:03 GMT
content-type: image/gif
age: 16284
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
resources.blogblog.com/img/widgets/arrow_dropdown.gif
200 OK 141 B URL GET HTTP/2 resources.blogblog.com/img/widgets/arrow_dropdown.gif
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint75:53:9F:32:2C:07:BD:E7:26:FE:91:BD:A8:0F:85:6C:DE:21:40:BB
ValidityMon, 16 Oct 2023 08:02:00 GMT - Mon, 08 Jan 2024 08:01:59 GMT
File type GIF image data, version 89a, 13 x 10\012- data
Hash 2964a07d60a4e76b299130fb1b4115f6
3b72dcc19f3ad685513eaba612e07e0ed495f2e1
28ab89f0285c48d2faed701905c185c302f2b389584a52ceaa76a91ea64dc3a7
GET /img/widgets/arrow_dropdown.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 141
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Nov 2023 21:20:27 GMT
expires: Wed, 15 Nov 2023 21:20:27 GMT
cache-control: public, max-age=604800
last-modified: Wed, 08 Nov 2023 19:03:03 GMT
content-type: image/gif
age: 18616
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
resources.blogblog.com/img/widgets/subscribe-yahoo.png
200 OK 580 B URL GET HTTP/2 resources.blogblog.com/img/widgets/subscribe-yahoo.png
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint75:53:9F:32:2C:07:BD:E7:26:FE:91:BD:A8:0F:85:6C:DE:21:40:BB
ValidityMon, 16 Oct 2023 08:02:00 GMT - Mon, 08 Jan 2024 08:01:59 GMT
File type PNG image data, 91 x 17, 8-bit colormap, non-interlaced\012- data
Hash 79f602b6ac18bee79b4e2353a6674010
28accf82263aa1a11bb821439d4d185865662530
bbf9b924cc32bff4738bb54d86905476349f90c8b20f748633e56f64379d553e
GET /img/widgets/subscribe-yahoo.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 Nov 2023 15:31:18 GMT
expires: Fri, 10 Nov 2023 15:31:18 GMT
cache-control: public, max-age=604800
last-modified: Fri, 03 Nov 2023 07:56:15 GMT
content-type: image/png
age: 471565
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
resources.blogblog.com/img/widgets/subscribe-netvibes.png
200 OK 1.4 kB URL GET HTTP/2 resources.blogblog.com/img/widgets/subscribe-netvibes.png
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint75:53:9F:32:2C:07:BD:E7:26:FE:91:BD:A8:0F:85:6C:DE:21:40:BB
ValidityMon, 16 Oct 2023 08:02:00 GMT - Mon, 08 Jan 2024 08:01:59 GMT
File type PNG image data, 91 x 17, 8-bit colormap, non-interlaced\012- data
Hash c52a5f4ecb6be5d7e93b23ef4122ee4e
4e698a5f455daf3a8ea1e219b1998079f0546716
71b8ad79c680b3e5d452a792c3b418b23f739a0a34005e0f37ec674f4c78cb5d
GET /img/widgets/subscribe-netvibes.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 1445
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Nov 2023 21:20:21 GMT
expires: Wed, 15 Nov 2023 21:20:21 GMT
cache-control: public, max-age=604800
last-modified: Wed, 08 Nov 2023 14:57:38 GMT
content-type: image/png
age: 18622
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/1192578504-widgets.js
200 OK 59 kB URL GET HTTP/2 www.blogger.com/static/v1/widgets/1192578504-widgets.js
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint75:53:9F:32:2C:07:BD:E7:26:FE:91:BD:A8:0F:85:6C:DE:21:40:BB
ValidityMon, 16 Oct 2023 08:02:00 GMT - Mon, 08 Jan 2024 08:01:59 GMT
File type ASCII text, with very long lines (2215)
Hash 24d993e7bceacda2165c594391935f1d
ea7a1ba7708e08da7cd92d3f971fe2a8be45472f
0865ab7c88bc7ba1ea2a4b5b08da4960f124136b8e39c53760949d2407c3cb6c
GET /static/v1/widgets/1192578504-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 59230
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Nov 2023 01:56:25 GMT
expires: Thu, 07 Nov 2024 01:56:25 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 07 Nov 2023 11:59:22 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 88458
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/3566091532-css_bundle_v2.css
200 OK 7.8 kB URL GET HTTP/2 www.blogger.com/static/v1/widgets/3566091532-css_bundle_v2.css
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint75:53:9F:32:2C:07:BD:E7:26:FE:91:BD:A8:0F:85:6C:DE:21:40:BB
ValidityMon, 16 Oct 2023 08:02:00 GMT - Mon, 08 Jan 2024 08:01:59 GMT
File type ASCII text, with very long lines (35959)
Hash 1e32420a7b6ddbdcb7def8b3141c4d1e
a1be54d42ff1f95244c9653539f90318f5bc0580
a9ca837900b6ae007386d400f659c233120b8af7d93407fd6475c9180d9e83d2
GET /static/v1/widgets/3566091532-css_bundle_v2.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 7756
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Nov 2023 08:06:19 GMT
expires: Fri, 01 Nov 2024 08:06:19 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 01 Nov 2023 22:58:00 GMT
content-type: text/css
vary: Accept-Encoding
age: 584664
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
resources.blogblog.com/blogblog/data/1kt/simple/gradients_light.png
200 OK 403 B URL GET HTTP/3 resources.blogblog.com/blogblog/data/1kt/simple/gradients_light.png
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint75:53:9F:32:2C:07:BD:E7:26:FE:91:BD:A8:0F:85:6C:DE:21:40:BB
ValidityMon, 16 Oct 2023 08:02:00 GMT - Mon, 08 Jan 2024 08:01:59 GMT
File type PNG image data, 20 x 1100, 8-bit/color RGBA, non-interlaced\012- data
Hash 4f7de2e6afefb125b1f14fa5cda610ee
57a145f234b504a73f9d55cf39f2231a04719456
ecb30886406e3f776ff7bc3834de849944471e626ff148bed2fa389d02866044
GET /blogblog/data/1kt/simple/gradients_light.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 403
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Nov 2023 21:37:32 GMT
expires: Wed, 15 Nov 2023 21:37:32 GMT
cache-control: public, max-age=604800
last-modified: Wed, 08 Nov 2023 19:03:03 GMT
content-type: image/png
age: 17592
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.blogger.com/img/share_buttons_20_3.png
200 OK 5.1 kB URL GET HTTP/3 www.blogger.com/img/share_buttons_20_3.png
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint75:53:9F:32:2C:07:BD:E7:26:FE:91:BD:A8:0F:85:6C:DE:21:40:BB
ValidityMon, 16 Oct 2023 08:02:00 GMT - Mon, 08 Jan 2024 08:01:59 GMT
File type PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash ad9999106d5f550920b586e8e1704e5a
93fd02c51166402a41f96509cd0ca3fb917877dd
3829a5b2ade7cfc416c80b8f3df71e49e68672875f025d525223978f5cee3fd3
GET /img/share_buttons_20_3.png HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/static/v1/widgets/3566091532-css_bundle_v2.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 5080
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 Nov 2023 12:48:34 GMT
expires: Fri, 10 Nov 2023 12:48:34 GMT
cache-control: public, max-age=604800
last-modified: Fri, 03 Nov 2023 00:55:55 GMT
content-type: image/png
age: 481330
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
resources.blogblog.com/img/widgets/s_top.png
200 OK 335 B URL GET HTTP/3 resources.blogblog.com/img/widgets/s_top.png
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint75:53:9F:32:2C:07:BD:E7:26:FE:91:BD:A8:0F:85:6C:DE:21:40:BB
ValidityMon, 16 Oct 2023 08:02:00 GMT - Mon, 08 Jan 2024 08:01:59 GMT
File type PNG image data, 144 x 400, 4-bit colormap, non-interlaced\012- data
Hash c4908f4189f7698dc8afdd67df8ce041
b6f7cd64ff84e7cedb4b8b92ceb8b9800ad7624a
cfe1d5dd45c7f0897d769e6c95ae9036fbdc7dad76ac9ed6ce6b21a785ecd6de
GET /img/widgets/s_top.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 335
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Nov 2023 21:37:57 GMT
expires: Wed, 15 Nov 2023 21:37:57 GMT
cache-control: public, max-age=604800
last-modified: Wed, 08 Nov 2023 08:58:51 GMT
content-type: image/png
age: 17567
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
resources.blogblog.com/img/widgets/s_bottom.png
200 OK 172 B URL GET HTTP/3 resources.blogblog.com/img/widgets/s_bottom.png
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint75:53:9F:32:2C:07:BD:E7:26:FE:91:BD:A8:0F:85:6C:DE:21:40:BB
ValidityMon, 16 Oct 2023 08:02:00 GMT - Mon, 08 Jan 2024 08:01:59 GMT
File type PNG image data, 144 x 3, 4-bit colormap, non-interlaced\012- data
Hash a9bbd1bf495055e06e61aec7f8c1b6c4
491c1a006da8a9eea4f3d1bb27e5815ab66a9f45
91fe35689444e53c1bf3e04f24c154fa0468be9edd3c84344f9f64c2eff89eeb
GET /img/widgets/s_bottom.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 172
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Nov 2023 11:21:58 GMT
expires: Thu, 09 Nov 2023 11:21:58 GMT
cache-control: public, max-age=604800
last-modified: Thu, 02 Nov 2023 03:56:02 GMT
content-type: image/png
age: 572926
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
themes.googleusercontent.com/image?id=1KH22PlFqsiVYxboQNAoJjYmRbw5M4REHmdJbHT5M2x9zVMGrCqwSjZvaQW_A10KPc6Il&options=w1600
200 OK 412 kB URL GET HTTP/2 themes.googleusercontent.com/image?id=1KH22PlFqsiVYxboQNAoJjYmRbw5M4REHmdJbHT5M2x9zVMGrCqwSjZvaQW_A10KPc6Il&options=w1600
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintCB:BB:D8:FC:60:AA:94:8F:47:5C:88:BB:C3:30:22:92:26:D3:85:2F
ValidityMon, 16 Oct 2023 08:09:46 GMT - Mon, 08 Jan 2024 08:09:45 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Picasa], baseline, precision 8, 1600x1067, components 3\012- data
Size 412 kB (411839 bytes)
Hash 1e7dc46a577f75f2fa10093025053a53
5215892e0e19bea00d27f44743f124fda0702f61
c2bd405a0c997d3767bd087a969c67c1e2bb21563bd50007c6f18702e82c6744
GET /image?id=1KH22PlFqsiVYxboQNAoJjYmRbw5M4REHmdJbHT5M2x9zVMGrCqwSjZvaQW_A10KPc6Il&options=w1600 HTTP/1.1
Host: themes.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 10 Nov 2023 02:30:44 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Thu, 09 Nov 2023 02:30:44 GMT
server: fife
content-length: 411839
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=CAM/d=0/rs=AN8SPfraOsu5efVNBOQ1KgAVxhCYpwxnBg/m=el_main_css
200 OK 4.0 kB URL GET HTTP/3 www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=CAM/d=0/rs=AN8SPfraOsu5efVNBOQ1KgAVxhCYpwxnBg/m=el_main_css
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type ASCII text, with very long lines (20367), with no line terminators
Hash 72d3a735ccca1027f6b3afba2c93e3a7
67f8eff8d17334c59c28fc1753bf451527c7490d
c8c845f55e2346b89894ce0df8185ee182359e096bf29987d5cf1f8a7391bef1
GET /_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=CAM/d=0/rs=AN8SPfraOsu5efVNBOQ1KgAVxhCYpwxnBg/m=el_main_css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 3960
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Nov 2023 17:29:21 GMT
expires: Thu, 07 Nov 2024 17:29:21 GMT
cache-control: public, max-age=31536000
age: 32483
last-modified: Sat, 15 Jul 2023 01:09:03 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
whatisbms.blogspot.com/?action=getFeed&widgetId=Feed3&widgetType=Feed&responseType=js&xssi_token=AOuZoY7JkX2xYjtEGfw0TdkVcj2FODFFVQ%3A1699497042552
200 OK 463 B URL GET HTTP/3 whatisbms.blogspot.com/?action=getFeed&widgetId=Feed3&widgetType=Feed&responseType=js&xssi_token=AOuZoY7JkX2xYjtEGfw0TdkVcj2FODFFVQ%3A1699497042552
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint1F:9F:66:61:40:8F:19:DE:30:44:23:EA:EB:6E:C0:FC:6D:58:69:25
ValidityMon, 16 Oct 2023 08:08:16 GMT - Mon, 08 Jan 2024 08:08:15 GMT
File type ASCII text, with very long lines (921)
Hash 15e8034a3b22263c92470fced05ccdaa
6d16d0562f674a23feca64ce482f99c9039a0121
5420e82b9b01cc6cd3ec33433d5f45445943e967fbc990cf2261a4a015e662d6
GET /?action=getFeed&widgetId=Feed3&widgetType=Feed&responseType=js&xssi_token=AOuZoY7JkX2xYjtEGfw0TdkVcj2FODFFVQ%3A1699497042552 HTTP/1.1
Host: whatisbms.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Cookie: _ga_TEZPWGXDYK=GS1.1.1699497044.1.0.1699497044.0.0.0; _ga=GA1.1.1174580009.1699497044
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
expires: Thu, 09 Nov 2023 02:30:44 GMT
date: Thu, 09 Nov 2023 02:30:44 GMT
cache-control: private, max-age=0
last-modified: Tue, 25 Jul 2023 06:11:29 GMT
etag: "560ab4c4-aae6-471a-aae2-06fc76b2ebd4"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 463
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.svLCl1W2kmE.O/d=1/exm=el_conf/ed=1/rs=AN8SPfooinsAFKLbc9kwuKxgh5trc_Bkiw/m=el_main
200 OK 82 kB URL GET HTTP/2 translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.svLCl1W2kmE.O/d=1/exm=el_conf/ed=1/rs=AN8SPfooinsAFKLbc9kwuKxgh5trc_Bkiw/m=el_main
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintFA:D7:68:E4:12:7D:FE:22:87:DE:95:F1:1E:49:5A:49:FA:12:1E:B9
ValidityMon, 16 Oct 2023 08:10:01 GMT - Mon, 08 Jan 2024 08:10:00 GMT
File type ASCII text, with very long lines (1671)
Hash 7b9cbc8b3860ce1f0e490b9e7828acd1
b943f3e0685a9040b23fb07b45afe8a239273b99
0cea694d66aeec02bcae07901bf90e0f779b49d04a4fc48387d8de8adb4ab2a3
GET /_/translate_http/_/js/k=translate_http.tr.no.svLCl1W2kmE.O/d=1/exm=el_conf/ed=1/rs=AN8SPfooinsAFKLbc9kwuKxgh5trc_Bkiw/m=el_main HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 82354
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Nov 2023 20:07:13 GMT
expires: Thu, 07 Nov 2024 20:07:13 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 07 Nov 2023 14:10:32 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 23011
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/managed/js/adsense/m202311020101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-7546351336986479&plah=whatisbms.blogspot.com
200 OK 138 kB URL GET HTTP/3 pagead2.googlesyndication.com/pagead/managed/js/adsense/m202311020101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-7546351336986479&plah=whatisbms.blogspot.com
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint30:DF:10:0D:E2:AE:CA:7A:5E:20:03:00:80:D2:EB:DD:4D:3A:F3:10
ValidityMon, 16 Oct 2023 08:02:29 GMT - Mon, 08 Jan 2024 08:02:28 GMT
File type ASCII text, with very long lines (2107)
Size 138 kB (138486 bytes)
Hash e7b16070babd1ad1feec171a6b4be57f
e1a464c527a6c2f9e687588a5f6fc931406f578a
67e126698d4dd250004ec40df01db7cb52e0054f51dd7e0486ae97e64a1b2386
GET /pagead/managed/js/adsense/m202311020101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-7546351336986479&plah=whatisbms.blogspot.com HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Thu, 09 Nov 2023 02:30:44 GMT
expires: Thu, 09 Nov 2023 02:30:44 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
content-type: text/javascript; charset=UTF-8
etag: 9681804270342520243
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 138486
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/images/branding/product/2x/translate_24dp.png
200 OK 1.8 kB URL GET HTTP/3 www.gstatic.com/images/branding/product/2x/translate_24dp.png
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash c69c796362406f9e11c7f4bf5bb628da
e489ce95ab56208090868882113d7416abf46775
4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82
GET /images/branding/product/2x/translate_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=CAM/d=0/rs=AN8SPfraOsu5efVNBOQ1KgAVxhCYpwxnBg/m=el_main_css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 1842
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 06 Nov 2023 18:10:07 GMT
expires: Tue, 05 Nov 2024 18:10:07 GMT
cache-control: public, max-age=31536000
age: 202837
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
content-type: image/png
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=CAM/d=0/rs=AN8SPfraOsu5efVNBOQ1KgAVxhCYpwxnBg/m=el_main_css
200 OK 4.0 kB URL GET HTTP/3 www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=CAM/d=0/rs=AN8SPfraOsu5efVNBOQ1KgAVxhCYpwxnBg/m=el_main_css
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type ASCII text, with very long lines (20367), with no line terminators
Hash 72d3a735ccca1027f6b3afba2c93e3a7
67f8eff8d17334c59c28fc1753bf451527c7490d
c8c845f55e2346b89894ce0df8185ee182359e096bf29987d5cf1f8a7391bef1
GET /_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=CAM/d=0/rs=AN8SPfraOsu5efVNBOQ1KgAVxhCYpwxnBg/m=el_main_css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 3960
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Nov 2023 17:29:21 GMT
expires: Thu, 07 Nov 2024 17:29:21 GMT
cache-control: public, max-age=31536000
age: 32483
last-modified: Sat, 15 Jul 2023 01:09:03 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
200 OK 3.3 kB URL GET HTTP/2 fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (6225), with no line terminators
Hash 2bd5c073a88b83ed74db88282a56ddfb
d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650
ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09
GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
content-length: 3340
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Nov 2023 07:22:20 GMT
expires: Thu, 07 Nov 2024 07:22:20 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 20 Apr 2022 14:24:23 GMT
content-type: image/svg+xml
vary: Accept-Encoding
age: 68904
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/images/cleardot.gif
200 OK 43 B URL GET HTTP/2 www.google.com/images/cleardot.gif
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintF5:CC:DA:B5:BA:1E:14:14:44:CC:27:90:92:CC:60:1F:5F:08:AF:77
ValidityMon, 16 Oct 2023 08:10:46 GMT - Mon, 08 Jan 2024 08:10:45 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /images/cleardot.gif HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/gif
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 43
date: Thu, 09 Nov 2023 02:30:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Tue, 22 Oct 2019 18:30:00 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/dyn-css/authorization.css?targetBlogID=5294822826508461026&zx=560ab4c4-aae6-471a-aae2-06fc76b2ebd4
200 OK 21 B URL GET HTTP/3 www.blogger.com/dyn-css/authorization.css?targetBlogID=5294822826508461026&zx=560ab4c4-aae6-471a-aae2-06fc76b2ebd4
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint75:53:9F:32:2C:07:BD:E7:26:FE:91:BD:A8:0F:85:6C:DE:21:40:BB
ValidityMon, 16 Oct 2023 08:02:00 GMT - Mon, 08 Jan 2024 08:01:59 GMT
File type very short file (no magic)
Hash 68b329da9893e34099c7d8ad5cb9c940
adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /dyn-css/authorization.css?targetBlogID=5294822826508461026&zx=560ab4c4-aae6-471a-aae2-06fc76b2ebd4 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 09 Nov 2023 02:30:44 GMT
last-modified: Thu, 09 Nov 2023 02:30:44 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
translate-pa.googleapis.com/v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback
1.4 kB URL translate-pa.googleapis.com/v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback
IP
Hash a3eefe14b1b4698460d992bd1673a26b
a2fca6ebb00b8bdcca3eda88654d02d2c165b9c4
87514750a90cd70dd22c8673cfa80d804ef55840bd0755950af2118d8d218067
GET /v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback HTTP/1.1
Host: translate-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-type: text/javascript; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 09 Nov 2023 02:30:44 GMT
server: ESF
cache-control: private
content-length: 1392
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: NID=511=O2IcvmZNamp9NYZJvYnWRqQp9h3IcTwt4fbb2N0E43cIvLF_CmY4agHE7aXlXmTm8_f5rfffdbA5pDO1eQFbQpR8sfRKQxOrczd8UzCW2JC0DE1Q8oD4qTqo1aTJHDZlGQQB384S8yYpW88ZLWXjiyCWk5tfEmDQcfS9fTKLzQM; expires=Fri, 10-May-2024 02:30:44 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly
CONSENT=PENDING+620; expires=Sat, 08-Nov-2025 02:30:44 GMT; path=/; domain=.googleapis.com; Secure
expires: Thu, 09 Nov 2023 02:30:44 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
pagead2.googlesyndication.com/pagead/gen_204?id=ach_evt&tn=DIV&id=cookieChoiceInfo&cls=cookie-choices-info%20singleton-element&ign=false&pw=1280&ph=1024&x=0&y=0
204 No Content 0 B URL GET HTTP/3 pagead2.googlesyndication.com/pagead/gen_204?id=ach_evt&tn=DIV&id=cookieChoiceInfo&cls=cookie-choices-info%20singleton-element&ign=false&pw=1280&ph=1024&x=0&y=0
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint30:DF:10:0D:E2:AE:CA:7A:5E:20:03:00:80:D2:EB:DD:4D:3A:F3:10
ValidityMon, 16 Oct 2023 08:02:29 GMT - Mon, 08 Jan 2024 08:02:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/gen_204?id=ach_evt&tn=DIV&id=cookieChoiceInfo&cls=cookie-choices-info%20singleton-element&ign=false&pw=1280&ph=1024&x=0&y=0 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 09 Nov 2023 02:30:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
translate.google.com/gen204?sl=en&nca=te_ap&client=te&logld=vTE_20231107
204 No Content 0 B URL GET HTTP/3 translate.google.com/gen204?sl=en&nca=te_ap&client=te&logld=vTE_20231107
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gen204?sl=en&nca=te_ap&client=te&logld=vTE_20231107 HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: image/gif; charset=us-ascii
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 09 Nov 2023 02:30:44 GMT
cross-origin-resource-policy: cross-origin
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-security-policy: script-src 'nonce-g99UwsjWBnnmutT4KYk4gg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self', require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport
cross-origin-opener-policy: same-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: __Secure-ENID=16.SE=OZIvuKm51AcDNC7MtLrX01ZcRHMoN7pUFtAxgfTJmk3JoMhy7x1DzvqBWVnGXUDOILu30MRqxMGYG0Ijy0ih0oi3dQ2xrPK0R-46OZOvXe2ZTjZUS8UJMsbYk97Hv9FsVbcP1e017K0M8vB96H7yQN_ozssa_rhM0capUfLTO9o; expires=Sun, 08-Dec-2024 18:49:02 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
amgtui.com/ntload?a=1&e=aeyJwaWQiOjEwNTk5OTUsInNpZCI6MTIzNTExMCwid2lkIjo0NjI1OTUsImQiOiJ3aGF0aXNibXMuYmxvZ3Nwb3QuY29tIiwibGkiOjJ9&tz=0&if=0&u=aHR0cHM6Ly93aGF0aXNibXMuYmxvZ3Nwb3QuY29tLw%3D%3D&ntli=2
200 OK 2 B URL GET HTTP/2 amgtui.com/ntload?a=1&e=aeyJwaWQiOjEwNTk5OTUsInNpZCI6MTIzNTExMCwid2lkIjo0NjI1OTUsImQiOiJ3aGF0aXNibXMuYmxvZ3Nwb3QuY29tIiwibGkiOjJ9&tz=0&if=0&u=aHR0cHM6Ly93aGF0aXNibXMuYmxvZ3Nwb3QuY29tLw%3D%3D&ntli=2
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://whatisbms.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectamgtui.com
FingerprintDA:EF:1B:4D:4B:3D:04:5A:E3:E9:DC:2F:3C:4D:4A:5A:E3:47:33:73
ValidityThu, 21 Sep 2023 07:59:01 GMT - Wed, 20 Dec 2023 07:59:00 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ntload?a=1&e=aeyJwaWQiOjEwNTk5OTUsInNpZCI6MTIzNTExMCwid2lkIjo0NjI1OTUsImQiOiJ3aGF0aXNibXMuYmxvZ3Nwb3QuY29tIiwibGkiOjJ9&tz=0&if=0&u=aHR0cHM6Ly93aGF0aXNibXMuYmxvZ3Nwb3QuY29tLw%3D%3D&ntli=2 HTTP/1.1
Host: amgtui.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://whatisbms.blogspot.com/
Origin: https://whatisbms.blogspot.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 09 Nov 2023 02:30:44 GMT
content-type: application/javascript; charset=utf-8
content-length: 2
access-control-allow-origin: https://whatisbms.blogspot.com
accept-ch: Sec-CH-UA-Platform-Version
X-Firefox-Spdy: h2
partner.googleadservices.com/gampad/cookie.js?domain=whatisbms.blogspot.com&callback=_gfp_s_&client=ca-pub-7546351336986479
200 OK 251 B URL GET HTTP/2 partner.googleadservices.com/gampad/cookie.js?domain=whatisbms.blogspot.com&callback=_gfp_s_&client=ca-pub-7546351336986479
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.googleadservices.com
Fingerprint0C:B4:36:FB:21:D8:B0:4A:B4:9C:34:0A:D5:1D:69:DD:8B:24:91:83
ValidityMon, 16 Oct 2023 08:08:36 GMT - Mon, 08 Jan 2024 08:08:35 GMT
File type ASCII text, with very long lines (391), with no line terminators
Hash 3156827f2803a28e9c0e4a3625275767
a9c0e2e87774d0fa29056dd5a82c968d5adb3415
7c63a94dc1b0df52fa35672d479d03d3ef7b96b51377b9341f4600a08596416c
GET /gampad/cookie.js?domain=whatisbms.blogspot.com&callback=_gfp_s_&client=ca-pub-7546351336986479 HTTP/1.1
Host: partner.googleadservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Thu, 09 Nov 2023 02:30:44 GMT
server: cafe
cache-control: private
content-length: 251
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
whatisbms.blogspot.com/b/stats?style=BLACK_TRANSPARENT&timeRange=ALL_TIME&token=APq4FmCL8_x8gpukGoIXisDdYeca-KtLjt5UN0iNnlf_Ssu5Shhq69F6NmS61nftgzstEyNKqUT19NB-LvFpY7bzJLArwv_aCQ
200 OK 233 B URL GET HTTP/3 whatisbms.blogspot.com/b/stats?style=BLACK_TRANSPARENT&timeRange=ALL_TIME&token=APq4FmCL8_x8gpukGoIXisDdYeca-KtLjt5UN0iNnlf_Ssu5Shhq69F6NmS61nftgzstEyNKqUT19NB-LvFpY7bzJLArwv_aCQ
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint1F:9F:66:61:40:8F:19:DE:30:44:23:EA:EB:6E:C0:FC:6D:58:69:25
ValidityMon, 16 Oct 2023 08:08:16 GMT - Mon, 08 Jan 2024 08:08:15 GMT
File type JSON data\012- , ASCII text, with very long lines (383), with no line terminators
Hash 6b0251f7d32ad9ca1588f68eadede190
ccd5ef6ab1fb3e3e9c771139c76668ebf8bbe45c
dd0abfa81711aae9066ffe90f869de884a760a584c4dd550465001c914d11018
GET /b/stats?style=BLACK_TRANSPARENT&timeRange=ALL_TIME&token=APq4FmCL8_x8gpukGoIXisDdYeca-KtLjt5UN0iNnlf_Ssu5Shhq69F6NmS61nftgzstEyNKqUT19NB-LvFpY7bzJLArwv_aCQ HTTP/1.1
Host: whatisbms.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Cookie: _ga_TEZPWGXDYK=GS1.1.1699497044.1.0.1699497044.0.0.0; _ga=GA1.1.1174580009.1699497044
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-security-policy: upgrade-insecure-requests
content-security-policy-report-only: default-src https: blob: data: 'unsafe-inline' 'unsafe-eval'; report-to blogspot; report-uri https://www.blogger.com/cspreport
report-to: {"group":"blogspot","max_age":2592000,"endpoints":[{"url":"https://www.blogger.com/cspreport"}]}
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Thu, 09 Nov 2023 02:30:44 GMT
expires: Thu, 09 Nov 2023 02:30:44 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 233
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.blogger.com/img/widgets/stats-flipper.png
200 OK 233 B URL GET HTTP/3 www.blogger.com/img/widgets/stats-flipper.png
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint75:53:9F:32:2C:07:BD:E7:26:FE:91:BD:A8:0F:85:6C:DE:21:40:BB
ValidityMon, 16 Oct 2023 08:02:00 GMT - Mon, 08 Jan 2024 08:01:59 GMT
File type PNG image data, 88 x 30, 8-bit grayscale, non-interlaced\012- data
Hash 99a2cb03ed5a76104972e477196f1f09
4e12527ed6d99f198728c6631bf7a787911bf4bc
2911f4e04096744757ceab7a895e0ee51494b6feaefaef9f1870272b3dc2dcca
GET /img/widgets/stats-flipper.png HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/static/v1/widgets/3566091532-css_bundle_v2.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 233
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Nov 2023 21:20:27 GMT
expires: Wed, 15 Nov 2023 21:20:27 GMT
cache-control: public, max-age=604800
last-modified: Wed, 08 Nov 2023 19:03:03 GMT
content-type: image/png
age: 18617
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
whatisbms.blogspot.com/?action=getFeed&widgetId=Feed2&widgetType=Feed&responseType=js&xssi_token=AOuZoY7JkX2xYjtEGfw0TdkVcj2FODFFVQ%3A1699497042552
200 OK 463 B URL GET HTTP/3 whatisbms.blogspot.com/?action=getFeed&widgetId=Feed2&widgetType=Feed&responseType=js&xssi_token=AOuZoY7JkX2xYjtEGfw0TdkVcj2FODFFVQ%3A1699497042552
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint1F:9F:66:61:40:8F:19:DE:30:44:23:EA:EB:6E:C0:FC:6D:58:69:25
ValidityMon, 16 Oct 2023 08:08:16 GMT - Mon, 08 Jan 2024 08:08:15 GMT
File type ASCII text, with very long lines (921)
Hash 48f64dcc1ac32010ae5714497e8c54cc
3534611a221e3c6bf4ece0f310db09ce1bba4190
2a0a05cc064e8b278023beda7676df2c583c5be423437b453e5c2c2670f6f897
GET /?action=getFeed&widgetId=Feed2&widgetType=Feed&responseType=js&xssi_token=AOuZoY7JkX2xYjtEGfw0TdkVcj2FODFFVQ%3A1699497042552 HTTP/1.1
Host: whatisbms.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Cookie: _ga_TEZPWGXDYK=GS1.1.1699497044.1.0.1699497044.0.0.0; _ga=GA1.1.1174580009.1699497044
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-security-policy: upgrade-insecure-requests
content-security-policy-report-only: default-src https: blob: data: 'unsafe-inline' 'unsafe-eval'; report-to blogspot; report-uri https://www.blogger.com/cspreport
report-to: {"group":"blogspot","max_age":2592000,"endpoints":[{"url":"https://www.blogger.com/cspreport"}]}
content-type: text/javascript; charset=UTF-8
expires: Thu, 09 Nov 2023 02:30:44 GMT
date: Thu, 09 Nov 2023 02:30:44 GMT
cache-control: private, max-age=0
last-modified: Tue, 25 Jul 2023 06:11:29 GMT
etag: "560ab4c4-aae6-471a-aae2-06fc76b2ebd4"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 463
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
200 OK 0 B URL HEAD HTTP/3 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint30:DF:10:0D:E2:AE:CA:7A:5E:20:03:00:80:D2:EB:DD:4D:3A:F3:10
ValidityMon, 16 Oct 2023 08:02:29 GMT - Mon, 08 Jan 2024 08:02:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://whatisbms.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Thu, 09 Nov 2023 02:30:44 GMT
expires: Thu, 09 Nov 2023 02:30:44 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 8637100935149427598
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 52405
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
whatisbms.blogspot.com/?action=getFeed&widgetId=Feed1&widgetType=Feed&responseType=js&xssi_token=AOuZoY7JkX2xYjtEGfw0TdkVcj2FODFFVQ%3A1699497042552
200 OK 463 B URL GET HTTP/3 whatisbms.blogspot.com/?action=getFeed&widgetId=Feed1&widgetType=Feed&responseType=js&xssi_token=AOuZoY7JkX2xYjtEGfw0TdkVcj2FODFFVQ%3A1699497042552
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint1F:9F:66:61:40:8F:19:DE:30:44:23:EA:EB:6E:C0:FC:6D:58:69:25
ValidityMon, 16 Oct 2023 08:08:16 GMT - Mon, 08 Jan 2024 08:08:15 GMT
File type ASCII text, with very long lines (921)
Hash 8bf45399382279b4b188636e2ec799a0
297be139a4038d4ec74beb59464282037c2bd324
d9aa27fd92039883788a77374741dfa956dce1a0c190ee175b2bbd73bb5394fa
GET /?action=getFeed&widgetId=Feed1&widgetType=Feed&responseType=js&xssi_token=AOuZoY7JkX2xYjtEGfw0TdkVcj2FODFFVQ%3A1699497042552 HTTP/1.1
Host: whatisbms.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Cookie: _ga_TEZPWGXDYK=GS1.1.1699497044.1.0.1699497044.0.0.0; _ga=GA1.1.1174580009.1699497044
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
expires: Thu, 09 Nov 2023 02:30:44 GMT
date: Thu, 09 Nov 2023 02:30:44 GMT
cache-control: private, max-age=0
last-modified: Tue, 25 Jul 2023 06:11:29 GMT
etag: "560ab4c4-aae6-471a-aae2-06fc76b2ebd4"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 463
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ptxhzp.com/abs?f=10&wid=462595&di=zvwhrc.com&dl=amgtui.com&d=whatisbms.blogspot.com&lok=1&abf=0
200 OK 0 B URL GET HTTP/2 ptxhzp.com/abs?f=10&wid=462595&di=zvwhrc.com&dl=amgtui.com&d=whatisbms.blogspot.com&lok=1&abf=0
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://whatisbms.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectptxhzp.com
Fingerprint8B:EF:2A:F0:06:9F:4A:9D:24:16:D2:E8:9A:14:47:0E:99:16:F1:3B
ValidityWed, 20 Sep 2023 14:10:38 GMT - Tue, 19 Dec 2023 14:10:37 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /abs?f=10&wid=462595&di=zvwhrc.com&dl=amgtui.com&d=whatisbms.blogspot.com&lok=1&abf=0 HTTP/1.1
Host: ptxhzp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://whatisbms.blogspot.com/
Origin: https://whatisbms.blogspot.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 09 Nov 2023 02:30:45 GMT
content-length: 0
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ch: Sec-CH-UA-Platform-Version
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20231106&st=env
200 OK 12 kB URL GET HTTP/3 pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20231106&st=env
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint30:DF:10:0D:E2:AE:CA:7A:5E:20:03:00:80:D2:EB:DD:4D:3A:F3:10
ValidityMon, 16 Oct 2023 08:02:29 GMT - Mon, 08 Jan 2024 08:02:28 GMT
File type JSON data\012- , ASCII text, with very long lines (16102), with no line terminators
Hash ed8466c5b896708bf47ff24012fc092d
ba6879e5e25d023af9906181d4004a81744b78c6
c7f1b002243d0136fc0b8931642d1c83b71ee7605136803a2675141277255bf9
GET /getconfig/sodar?sv=200&tid=gda&tv=r20231106&st=env HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://whatisbms.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: application/json; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
date: Thu, 09 Nov 2023 02:30:45 GMT
server: cafe
content-length: 12147
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=CAM/d=0/rs=AN8SPfraOsu5efVNBOQ1KgAVxhCYpwxnBg/m=el_main_css
200 OK 10 kB URL GET HTTP/3 www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=CAM/d=0/rs=AN8SPfraOsu5efVNBOQ1KgAVxhCYpwxnBg/m=el_main_css
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type gzip compressed data\012- data
Hash 1b0eeca33765387f3b6e4eae038eef6c
ec08d9ecb2eb0043f3c0186c78026195520cfed9
44b647587c3a4fc297266b6e3e0f3ae19b77f5626cc5f6a31acd1db38ffec154
GET /_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=CAM/d=0/rs=AN8SPfraOsu5efVNBOQ1KgAVxhCYpwxnBg/m=el_main_css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 3960
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Nov 2023 17:29:21 GMT
expires: Thu, 07 Nov 2024 17:29:21 GMT
cache-control: public, max-age=31536000
age: 32483
last-modified: Sat, 15 Jul 2023 01:09:03 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
tpc.googlesyndication.com/sodar/sodar2/225/runner.html
200 OK 5.0 kB URL GET HTTP/3 tpc.googlesyndication.com/sodar/sodar2/225/runner.html
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint30:DF:10:0D:E2:AE:CA:7A:5E:20:03:00:80:D2:EB:DD:4D:3A:F3:10
ValidityMon, 16 Oct 2023 08:02:29 GMT - Mon, 08 Jan 2024 08:02:28 GMT
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2020)
Hash 1d3d22df067f5219073f9c0fabb74fdd
d5c226022639323d93946df3571404116041e588
55a119c0394f901a8a297e109c17b5e5402689708b999ab10691c16179f32a4a
GET /sodar/sodar2/225/runner.html HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 5046
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Nov 2023 02:44:58 GMT
expires: Thu, 07 Nov 2024 02:44:58 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 21 Jun 2021 20:47:05 GMT
content-type: text/html
vary: Accept-Encoding
age: 85547
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
pagead2.googlesyndication.com/bg/4WwaGfWzeDAeGvs0ZrtmWMJUG7fu6zGPBJzQt4duOkA.js
15 kB URL pagead2.googlesyndication.com/bg/4WwaGfWzeDAeGvs0ZrtmWMJUG7fu6zGPBJzQt4duOkA.js
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint30:DF:10:0D:E2:AE:CA:7A:5E:20:03:00:80:D2:EB:DD:4D:3A:F3:10
ValidityMon, 16 Oct 2023 08:02:29 GMT - Mon, 08 Jan 2024 08:02:28 GMT
File type ASCII text, with very long lines (38356)
Hash ffbc076f809d5b38a52e9a290665b9bd
3d89c8ef623b70e0cb67e0ad84234ffe473b43fb
e16c1a19f5b378301e1afb3466bb6658c2541bb7eeeb318f049cd0b7876e3a40
GET /bg/4WwaGfWzeDAeGvs0ZrtmWMJUG7fu6zGPBJzQt4duOkA.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tpc.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 15096
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Nov 2023 02:45:02 GMT
expires: Thu, 07 Nov 2024 02:45:02 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 31 Oct 2023 13:58:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 85543
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&li=gda_r20231106&jk=2315408667161823&rc=
204 No Content 0 B URL GET HTTP/3 pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&li=gda_r20231106&jk=2315408667161823&rc=
IP
Requested by https://www.google.com/recaptcha/api2/aframe
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint30:DF:10:0D:E2:AE:CA:7A:5E:20:03:00:80:D2:EB:DD:4D:3A:F3:10
ValidityMon, 16 Oct 2023 08:02:29 GMT - Mon, 08 Jan 2024 08:02:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/sodar?id=sodar2&v=225&li=gda_r20231106&jk=2315408667161823&rc= HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Thu, 09 Nov 2023 02:30:45 GMT
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
whatisbms.blogspot.com/favicon.ico
200 OK 412 B URL GET HTTP/3 whatisbms.blogspot.com/favicon.ico
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint1F:9F:66:61:40:8F:19:DE:30:44:23:EA:EB:6E:C0:FC:6D:58:69:25
ValidityMon, 16 Oct 2023 08:08:16 GMT - Mon, 08 Jan 2024 08:08:15 GMT
File type MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel\012- data
Hash 59a0c7b6e4848ccdabcea0636efda02b
30ef5c54b8bbc3487ea2b4c45cd11ea2932e4340
a1495da3cf3db37bf105a12658636ff628fee7b73975b9200049af7747e60b1f
GET /favicon.ico HTTP/1.1
Host: whatisbms.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Cookie: _ga_TEZPWGXDYK=GS1.1.1699497044.1.0.1699497044.0.0.0; _ga=GA1.1.1174580009.1699497044
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/x-icon; charset=UTF-8
expires: Thu, 09 Nov 2023 02:30:45 GMT
date: Thu, 09 Nov 2023 02:30:45 GMT
cache-control: private, max-age=86400
last-modified: Tue, 25 Jul 2023 06:11:29 GMT
etag: W/"5ce1941ecd94d7b8c87a9c6ed3c8ec6130479e7499e0d505ba0d6164835eb126"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 412
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
tpc.googlesyndication.com/generate_204?oLxHwA
0 B URL tpc.googlesyndication.com/generate_204?oLxHwA
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint30:DF:10:0D:E2:AE:CA:7A:5E:20:03:00:80:D2:EB:DD:4D:3A:F3:10
ValidityMon, 16 Oct 2023 08:02:29 GMT - Mon, 08 Jan 2024 08:02:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?oLxHwA HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Thu, 09 Nov 2023 02:30:45 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&t=2&li=gda_r20231106&jk=2315408667161823&bg=!DwylDEPNAAb4oU7C2KE7ADQBe5WfOMQb-xs6Cee40BiSGbFadQc50XNjpTwM2YRzE853eqwtJlZwWqTwS8JFsm6ayh-2AgAAAQhSAAAAFWgBBwoAzbIIF86rxyIGMo60K9YFq6S5ARnmUEn9GM5As3ADsIl9_huGEVvG9Br12aEGLmxhJXf9ky1d_Jw9AKe6BFKgGpHB9ljP5KuFYsR3wea3tMXs0zLJEf1w6RUW0p3RK8xqAxZ09PFl8oOnG2dEmAv-ZuFk2s6sDC0m7IfSqEYtorbc_i0wzKQ5MC2hNBTgxXg5KAefm6Pj83Io3lWUPvTKXnKBJVy1WXsJimCzE-JiGgyjMti9DRalScYTTirfo2g4Ey7HJ-sMizZc3MwtKAKZAn02H9qwFQldiiT1e7YcxrTFuKJaO_uP7CMu3v9veE5OMx3dgKx1vCh9FU8vlyhB9xCBvUUQ_AcmWMsLIgqXrcRjviORhgiA-nrspadnIBhtuOnZQSIwgwRlPWwJakxuQ53B8j_Z-2ReaGghjgzo2VEnnO3t0iiR-r_7p_UTv3_Fe0z6SYgRnJD8aP2hF7meAZ0xokHf8-lFz-9iNX-ErZoErqvDOa6uObnv-GiMimHkYz5Kgl-1rNEgFI04H7frDcZtz3eTy6Jk2sj4_dPndMaGtSTU0i5-Cwmcxk4XrepB5IQRj2EU9wYmUW63agX1DbF6thkR7sFAk9IKpjwxmlid59Gs2qNjwBqx_3wL0Q9jbMXoGIXtxhVU3Mt7rb6xl3KU2e6ZFwWI-pPTywZ55YhMEqqmmHfJ9V3vCFelY3rep56zqzO4xFQMj-fXOQG6vdXtmKX1uFENOa3Eulc9Ntl9dD2G_G_St7iHR6eF59eO_tgvXjhcbJRLhBtLbU6pM4aVIBz1syOHQvdGpkVuN7pUvQ61wpUkaa3NT3DZbPWjTezKiMAXnhDVLVyl48nhX5M2H8DLICsH4mQ8NCEgfRRCUYfiiVAPIeGhe3Zi4TTIuR7j7N4yv2ZtXV1F2j6s2PtwfIDYL_povWkwj5961HxbcZgUGG0vEcGaT_vbUyNQBFtNYUe878f1SxRswtimJ7_zfZ9dGBzcd_j6FRMW4tkuC4yQWSaohx0by0v2S8uFZnDzw-Evo39WoWpUndas8Tk-BwPeM-mtJPfPCHc-ZxvzCWzzMTLUyTiftvalKcxpkocvF0mnkvwFOCqcCGUUSLnVfuvIg9QrmvC2EkzZ
204 No Content 0 B URL GET HTTP/3 pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&t=2&li=gda_r20231106&jk=2315408667161823&bg=!DwylDEPNAAb4oU7C2KE7ADQBe5WfOMQb-xs6Cee40BiSGbFadQc50XNjpTwM2YRzE853eqwtJlZwWqTwS8JFsm6ayh-2AgAAAQhSAAAAFWgBBwoAzbIIF86rxyIGMo60K9YFq6S5ARnmUEn9GM5As3ADsIl9_huGEVvG9Br12aEGLmxhJXf9ky1d_Jw9AKe6BFKgGpHB9ljP5KuFYsR3wea3tMXs0zLJEf1w6RUW0p3RK8xqAxZ09PFl8oOnG2dEmAv-ZuFk2s6sDC0m7IfSqEYtorbc_i0wzKQ5MC2hNBTgxXg5KAefm6Pj83Io3lWUPvTKXnKBJVy1WXsJimCzE-JiGgyjMti9DRalScYTTirfo2g4Ey7HJ-sMizZc3MwtKAKZAn02H9qwFQldiiT1e7YcxrTFuKJaO_uP7CMu3v9veE5OMx3dgKx1vCh9FU8vlyhB9xCBvUUQ_AcmWMsLIgqXrcRjviORhgiA-nrspadnIBhtuOnZQSIwgwRlPWwJakxuQ53B8j_Z-2ReaGghjgzo2VEnnO3t0iiR-r_7p_UTv3_Fe0z6SYgRnJD8aP2hF7meAZ0xokHf8-lFz-9iNX-ErZoErqvDOa6uObnv-GiMimHkYz5Kgl-1rNEgFI04H7frDcZtz3eTy6Jk2sj4_dPndMaGtSTU0i5-Cwmcxk4XrepB5IQRj2EU9wYmUW63agX1DbF6thkR7sFAk9IKpjwxmlid59Gs2qNjwBqx_3wL0Q9jbMXoGIXtxhVU3Mt7rb6xl3KU2e6ZFwWI-pPTywZ55YhMEqqmmHfJ9V3vCFelY3rep56zqzO4xFQMj-fXOQG6vdXtmKX1uFENOa3Eulc9Ntl9dD2G_G_St7iHR6eF59eO_tgvXjhcbJRLhBtLbU6pM4aVIBz1syOHQvdGpkVuN7pUvQ61wpUkaa3NT3DZbPWjTezKiMAXnhDVLVyl48nhX5M2H8DLICsH4mQ8NCEgfRRCUYfiiVAPIeGhe3Zi4TTIuR7j7N4yv2ZtXV1F2j6s2PtwfIDYL_povWkwj5961HxbcZgUGG0vEcGaT_vbUyNQBFtNYUe878f1SxRswtimJ7_zfZ9dGBzcd_j6FRMW4tkuC4yQWSaohx0by0v2S8uFZnDzw-Evo39WoWpUndas8Tk-BwPeM-mtJPfPCHc-ZxvzCWzzMTLUyTiftvalKcxpkocvF0mnkvwFOCqcCGUUSLnVfuvIg9QrmvC2EkzZ
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint30:DF:10:0D:E2:AE:CA:7A:5E:20:03:00:80:D2:EB:DD:4D:3A:F3:10
ValidityMon, 16 Oct 2023 08:02:29 GMT - Mon, 08 Jan 2024 08:02:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/sodar?id=sodar2&v=225&t=2&li=gda_r20231106&jk=2315408667161823&bg=!DwylDEPNAAb4oU7C2KE7ADQBe5WfOMQb-xs6Cee40BiSGbFadQc50XNjpTwM2YRzE853eqwtJlZwWqTwS8JFsm6ayh-2AgAAAQhSAAAAFWgBBwoAzbIIF86rxyIGMo60K9YFq6S5ARnmUEn9GM5As3ADsIl9_huGEVvG9Br12aEGLmxhJXf9ky1d_Jw9AKe6BFKgGpHB9ljP5KuFYsR3wea3tMXs0zLJEf1w6RUW0p3RK8xqAxZ09PFl8oOnG2dEmAv-ZuFk2s6sDC0m7IfSqEYtorbc_i0wzKQ5MC2hNBTgxXg5KAefm6Pj83Io3lWUPvTKXnKBJVy1WXsJimCzE-JiGgyjMti9DRalScYTTirfo2g4Ey7HJ-sMizZc3MwtKAKZAn02H9qwFQldiiT1e7YcxrTFuKJaO_uP7CMu3v9veE5OMx3dgKx1vCh9FU8vlyhB9xCBvUUQ_AcmWMsLIgqXrcRjviORhgiA-nrspadnIBhtuOnZQSIwgwRlPWwJakxuQ53B8j_Z-2ReaGghjgzo2VEnnO3t0iiR-r_7p_UTv3_Fe0z6SYgRnJD8aP2hF7meAZ0xokHf8-lFz-9iNX-ErZoErqvDOa6uObnv-GiMimHkYz5Kgl-1rNEgFI04H7frDcZtz3eTy6Jk2sj4_dPndMaGtSTU0i5-Cwmcxk4XrepB5IQRj2EU9wYmUW63agX1DbF6thkR7sFAk9IKpjwxmlid59Gs2qNjwBqx_3wL0Q9jbMXoGIXtxhVU3Mt7rb6xl3KU2e6ZFwWI-pPTywZ55YhMEqqmmHfJ9V3vCFelY3rep56zqzO4xFQMj-fXOQG6vdXtmKX1uFENOa3Eulc9Ntl9dD2G_G_St7iHR6eF59eO_tgvXjhcbJRLhBtLbU6pM4aVIBz1syOHQvdGpkVuN7pUvQ61wpUkaa3NT3DZbPWjTezKiMAXnhDVLVyl48nhX5M2H8DLICsH4mQ8NCEgfRRCUYfiiVAPIeGhe3Zi4TTIuR7j7N4yv2ZtXV1F2j6s2PtwfIDYL_povWkwj5961HxbcZgUGG0vEcGaT_vbUyNQBFtNYUe878f1SxRswtimJ7_zfZ9dGBzcd_j6FRMW4tkuC4yQWSaohx0by0v2S8uFZnDzw-Evo39WoWpUndas8Tk-BwPeM-mtJPfPCHc-ZxvzCWzzMTLUyTiftvalKcxpkocvF0mnkvwFOCqcCGUUSLnVfuvIg9QrmvC2EkzZ HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Thu, 09 Nov 2023 02:30:46 GMT
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
tdmrfw.com/wnload?a=1&e=aeyJwaWQiOjEwNTk5OTUsInNpZCI6MTIzNTExMCwid2lkIjo0NjI1OTMsImQiOiJ3aGF0aXNibXMuYmxvZ3Nwb3QuY29tIiwibGkiOjJ9&tz=0&if=0&u=aHR0cHM6Ly93aGF0aXNibXMuYmxvZ3Nwb3QuY29tLw==&inc=1
200 OK 281 B URL GET HTTP/2 tdmrfw.com/wnload?a=1&e=aeyJwaWQiOjEwNTk5OTUsInNpZCI6MTIzNTExMCwid2lkIjo0NjI1OTMsImQiOiJ3aGF0aXNibXMuYmxvZ3Nwb3QuY29tIiwibGkiOjJ9&tz=0&if=0&u=aHR0cHM6Ly93aGF0aXNibXMuYmxvZ3Nwb3QuY29tLw==&inc=1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://whatisbms.blogspot.com/
Certificate IssuerLet's Encrypt
Subjecttdmrfw.com
Fingerprint15:E8:1D:00:E5:D0:78:F2:E9:68:88:EE:83:42:35:28:82:3A:82:2B
ValidityWed, 20 Sep 2023 10:42:45 GMT - Tue, 19 Dec 2023 10:42:44 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (359), with no line terminators
Hash e8263cf74bd149d1a1a459d6528b7619
7e81534e1329ec17910928f610daa6185db890e4
8b0cad21b798ba48eeb87b5a3bd85206726cdd5717b46b13df01b7d036400651
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wnload?a=1&e=aeyJwaWQiOjEwNTk5OTUsInNpZCI6MTIzNTExMCwid2lkIjo0NjI1OTMsImQiOiJ3aGF0aXNibXMuYmxvZ3Nwb3QuY29tIiwibGkiOjJ9&tz=0&if=0&u=aHR0cHM6Ly93aGF0aXNibXMuYmxvZ3Nwb3QuY29tLw==&inc=1 HTTP/1.1
Host: tdmrfw.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://whatisbms.blogspot.com/
Origin: https://whatisbms.blogspot.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 09 Nov 2023 02:30:49 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
accept-ch: Sec-CH-UA-Platform-Version
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
X-Firefox-Spdy: h2
ptxhzp.com/abs?f=8&wid=462593&di=xdiwbc.com&dl=tdmrfw.com&d=whatisbms.blogspot.com&lok=1&abf=0
200 OK 0 B URL GET HTTP/2 ptxhzp.com/abs?f=8&wid=462593&di=xdiwbc.com&dl=tdmrfw.com&d=whatisbms.blogspot.com&lok=1&abf=0
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://whatisbms.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectptxhzp.com
Fingerprint8B:EF:2A:F0:06:9F:4A:9D:24:16:D2:E8:9A:14:47:0E:99:16:F1:3B
ValidityWed, 20 Sep 2023 14:10:38 GMT - Tue, 19 Dec 2023 14:10:37 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /abs?f=8&wid=462593&di=xdiwbc.com&dl=tdmrfw.com&d=whatisbms.blogspot.com&lok=1&abf=0 HTTP/1.1
Host: ptxhzp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://whatisbms.blogspot.com/
Origin: https://whatisbms.blogspot.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 09 Nov 2023 02:30:49 GMT
content-length: 0
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ch: Sec-CH-UA-Platform-Version
X-Firefox-Spdy: h2
nwwais.com/template/light.html
200 OK 1.6 kB URL GET HTTP/2 nwwais.com/template/light.html
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnwwais.com
Fingerprint9A:69:8E:82:04:37:3E:95:DE:30:E0:EA:0E:AF:5A:97:E2:A3:D6:3F
ValidityMon, 25 Sep 2023 07:28:16 GMT - Sun, 24 Dec 2023 07:28:15 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5123), with no line terminators
Hash dd40ee0f374d735c36200776c17b16f7
d3976e1e8d872c056fa32472c9a52522fa3b7e39
e87eb4e12fc90b4ff647824cb065012ca28bd18a584dc0ff9d8160b57de2d520
GET /template/light.html HTTP/1.1
Host: nwwais.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://whatisbms.blogspot.com/
Origin: https://whatisbms.blogspot.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 09 Nov 2023 02:30:49 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://whatisbms.blogspot.com
cache-control: max-age=14400
cf-cache-status: MISS
last-modified: Thu, 09 Nov 2023 02:30:49 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0hidG4pijoZKPC%2FCzNZq6%2BH%2Fw%2FyPPaEkKQc%2F7rmUYffPlL%2FlP6qYt%2FVpvjmuR8xYcT3QKwIGsatYYzesOKqmcYgSPAFjWKfdoBYWDlxVM4RJ6bhgci82Xwwv7wIl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8232a2d0b9a6b4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL POST HTTP/3 translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintFA:D7:68:E4:12:7D:FE:22:87:DE:95:F1:1E:49:5A:49:FA:12:1E:B9
ValidityMon, 16 Oct 2023 08:10:01 GMT - Mon, 08 Jan 2024 08:10:00 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /element/log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-encoding,content-type,x-goog-authuser
Referer: https://whatisbms.blogspot.com/
Origin: https://whatisbms.blogspot.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://whatisbms.blogspot.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,content-encoding,content-type,x-goog-authuser,origin
content-type: text/plain; charset=UTF-8
date: Thu, 09 Nov 2023 02:30:54 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+030; expires=Sat, 08-Nov-2025 02:30:54 GMT; path=/; domain=.googleapis.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Thu, 09 Nov 2023 02:30:54 GMT
cache-control: private
translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0
200 OK 131 B URL POST HTTP/3 translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintFA:D7:68:E4:12:7D:FE:22:87:DE:95:F1:1E:49:5A:49:FA:12:1E:B9
ValidityMon, 16 Oct 2023 08:10:01 GMT - Mon, 08 Jan 2024 08:10:00 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash ca0b7e866005f6774d284b9f438ebfd2
53644f5ee3640189bdb223473ba6a2d46606c556
502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /element/log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Encoding: gzip
Content-Type: application/binary
Content-Length: 328
Origin: https://whatisbms.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://whatisbms.blogspot.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Thu, 09 Nov 2023 02:30:54 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+647; expires=Sat, 08-Nov-2025 02:30:54 GMT; path=/; domain=.googleapis.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Thu, 09 Nov 2023 02:30:54 GMT
tdmrfw.com/wnrw?aid=8230154212186211397&a=1
200 OK 0 B URL GET HTTP/2 tdmrfw.com/wnrw?aid=8230154212186211397&a=1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://whatisbms.blogspot.com/
Certificate IssuerLet's Encrypt
Subjecttdmrfw.com
Fingerprint15:E8:1D:00:E5:D0:78:F2:E9:68:88:EE:83:42:35:28:82:3A:82:2B
ValidityWed, 20 Sep 2023 10:42:45 GMT - Tue, 19 Dec 2023 10:42:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wnrw?aid=8230154212186211397&a=1 HTTP/1.1
Host: tdmrfw.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://whatisbms.blogspot.com/
Origin: https://whatisbms.blogspot.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 09 Nov 2023 02:30:49 GMT
content-length: 0
access-control-allow-origin: https://whatisbms.blogspot.com
X-Firefox-Spdy: h2
translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
200 OK 90 kB URL GET HTTP/2 translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
File type ASCII text, with very long lines (2462)
Hash 74f9e3d3d9c6af1140a52a77a65ece34
f6c0c24c939fe2266a3277b26868afa7f25306f2
002b2a68ac16f84d93676ae172d66fcb40d5e1e8c55f328ddd73f6796c288831
GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 09 Nov 2023 02:30:43 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+121; expires=Sat, 08-Nov-2025 02:30:43 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
xdiwbc.com/pw/waWQiOjEwNTk5OTUsInNpZCI6MTIzNTExMCwid2lkIjo0NjI1OTMsInNyYyI6Mn0=eyJ.js
200 OK 28 kB URL GET HTTP/2 xdiwbc.com/pw/waWQiOjEwNTk5OTUsInNpZCI6MTIzNTExMCwid2lkIjo0NjI1OTMsInNyYyI6Mn0=eyJ.js
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectxdiwbc.com
Fingerprint5D:41:10:46:C6:59:EE:4D:26:CD:FC:4F:4C:13:35:6F:6E:2E:05:91
ValidityMon, 02 Oct 2023 04:50:38 GMT - Sun, 31 Dec 2023 04:50:37 GMT
File type ASCII text, with very long lines (28264), with no line terminators
Hash 8ae25e8d24ea61274e5824613fa09377
fb0bb2e440093ccb6c8ef682840b241a76c81830
a56ad0259805837f2bd5644b5d219cf1b13bf082af9cde3150b8e828b539c4f6
GET /pw/waWQiOjEwNTk5OTUsInNpZCI6MTIzNTExMCwid2lkIjo0NjI1OTMsInNyYyI6Mn0=eyJ.js HTTP/1.1
Host: xdiwbc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 09 Nov 2023 02:30:43 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://whatisbms.blogspot.com
e-tag: 82303b000d8b4bceff7f8301de3e36dc
cache-control: max-age=14400
cf-cache-status: MISS
last-modified: Thu, 09 Nov 2023 02:30:43 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VmoluAXq%2BYqnZ%2FycN6Xe9uoZmrmZqpSry9CokbyERy1bf%2Bm2yh58AWL0ro9vBeK6KaNEXwQWTzxsI4atgO3aZk0BUU0KAjwdkiTt1blrn%2BBc%2BkWvRhTDyvWoXMqw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8232a2a9c93b5685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png
0 B URL GET www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/branding/googlelogo/1x/googlelogo_color_68x28dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
tpc.googlesyndication.com/sodar/sodar2.js
200 OK 17 kB URL GET HTTP/2 tpc.googlesyndication.com/sodar/sodar2.js
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttpc.googlesyndication.com
FingerprintB5:FE:85:38:7B:87:81:A3:BC:C0:81:1B:57:17:C4:8D:FC:4B:61:2E
ValidityMon, 16 Oct 2023 08:09:55 GMT - Mon, 08 Jan 2024 08:09:54 GMT
File type ASCII text, with very long lines (1321)
Hash 2cc87e9764aebcbbf36ff2061e6a2793
b4f2ffdf4c695aa79f0e63651c18a88729c2407b
61c32059a5e94075a7ecff678b33907966fc9cfa384daa01aa057f872da14dbb
GET /sodar/sodar2.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 6386
date: Thu, 09 Nov 2023 02:30:45 GMT
expires: Thu, 09 Nov 2023 02:30:45 GMT
cache-control: private, max-age=3000
etag: "1637097310169751"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
zvwhrc.com/na/waWQiOjEwNTk5OTUsInNpZCI6MTIzNTExMCwid2lkIjo0NjI1OTUsInNyYyI6Mn0=eyJ.js
200 OK 21 kB URL GET HTTP/2 zvwhrc.com/na/waWQiOjEwNTk5OTUsInNpZCI6MTIzNTExMCwid2lkIjo0NjI1OTUsInNyYyI6Mn0=eyJ.js
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectzvwhrc.com
FingerprintD0:45:D5:86:21:8B:B5:23:F3:EE:7B:15:64:83:27:01:A0:59:68:85
ValidityWed, 08 Nov 2023 21:35:33 GMT - Tue, 06 Feb 2024 21:35:32 GMT
File type ASCII text, with very long lines (21393), with no line terminators
Hash a7c8ea1b94f99e07571142c07d40ea76
0f70e1479c5f748b6a94771d25d054e6fa02c2be
5cc37514e5d48853954296cd41dfe0461fc39231520d2a32ab8ae9cd5f8ec303
GET /na/waWQiOjEwNTk5OTUsInNpZCI6MTIzNTExMCwid2lkIjo0NjI1OTUsInNyYyI6Mn0=eyJ.js HTTP/1.1
Host: zvwhrc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 09 Nov 2023 02:30:43 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://whatisbms.blogspot.com
e-tag: 0d7521f60f7a40be74bf7bc71a20bf8d
cache-control: max-age=14400
cf-cache-status: MISS
last-modified: Thu, 09 Nov 2023 02:30:43 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=foF%2FyGTlxyla%2F8JvhYgua5%2FvIzv%2FTs63841GjaQ4I42cErJ3%2FfSmzpkgpv%2FVpEhQMobW1rrVprPijiyWjOfSI45b8Dh%2FjdNe26%2FBUy1izKyjMQ7vZGyXZSZLeFvj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8232a2a8e9c20b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.google.com/recaptcha/api2/aframe
200 OK 829 B URL GET HTTP/3 www.google.com/recaptcha/api2/aframe
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (853), with no line terminators
Hash 5118916ef4e4ab3337becb5b4d223bba
bc32e787f5b62ff2858864971e171b8b8de457ba
71c7da0db32c48e2cd197401c54ced63f27ad781718f527dee54fdf08f688e90
GET /recaptcha/api2/aframe HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatisbms.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Thu, 09 Nov 2023 02:30:45 GMT
date: Thu, 09 Nov 2023 02:30:45 GMT
cache-control: private, max-age=300
content-security-policy: script-src 'nonce--W7uK04eJFXphm0_gIKLEg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
i.wmgtr.com/cic/mNNTBiVlMWgDQW_92myAiSZTMO9noDpw.png
0 B URL GET i.wmgtr.com/cic/mNNTBiVlMWgDQW_92myAiSZTMO9noDpw.png
IP
Requested by https://whatisbms.blogspot.com/
Certificate IssuerLet's Encrypt
Subjecti.wmgtr.com
FingerprintEC:B5:1E:3E:A4:6B:92:23:E2:9E:1E:FC:99:58:59:8E:23:DD:C1:25
ValidityMon, 23 Oct 2023 00:02:20 GMT - Sun, 21 Jan 2024 00:02:19 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cic/mNNTBiVlMWgDQW_92myAiSZTMO9noDpw.png HTTP/1.1
Host: i.wmgtr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 09 Nov 2023 02:30:50 GMT
content-type: image/png
server: nginx/1.19.0
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-option: nosniff
content-encoding: gzip
cache-control: max-age=82800
expires: Fri, 10 Nov 2023 01:30:50 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
216.58.207.193
185.162.85.2
188.114.97.1
0.0.0.0
0.0.0.0