tmearn.com/9id1J2D
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /9id1J2D HTTP/1.1
Host: tmearn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 23 Nov 2022 11:45:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 23 Nov 2022 12:45:10 GMT
Location: https://tmearn.com/9id1J2D
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i3NC4rLKppHiVWlO2DJlS7u5K%2F05PLDZMYomCDwLa9hmVIiMob8IKXMhnXPGznsB1kXB4cW3jRSzqqcUUkBRJJfmWb2Bw3%2Fsd7uUnFwiRXLLUacC7pIrD7IyDbAQ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76e9a83a1b14fac8-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1456357aecbd23f21ad98da57e0127eb
7074815b39fa8da9013883971d665e4c1b0797ea
f3eba265ee64870b2f822f1511b36c747d763c382557789cdad8be1d3b52d1f5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F3EBA265EE64870B2F822F1511B36C747D763C382557789CDAD8BE1D3B52D1F5"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9197
Expires: Wed, 23 Nov 2022 14:18:27 GMT
Date: Wed, 23 Nov 2022 11:45:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 054ff0d1a0a43f7cb1d78dbd34e27f99
3caf54f3de1d6a8c6f6454083f8b8e7dec77db54
fcdcef8306ae31f20c366489e1f88aa40b08f154d25d45f4055c4f8cdef47634
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FCDCEF8306AE31F20C366489E1F88AA40B08F154D25D45F4055C4F8CDEF47634"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5265
Expires: Wed, 23 Nov 2022 13:12:56 GMT
Date: Wed, 23 Nov 2022 11:45:11 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 770d09773b5f304acf141fd66a4862b4
5ddc46ab75de26c858a9a6f6d1beaaec9bb181f5
c7bcc6928fa1c0bb225ce8a2f6badd6cb1bd6ea002fb808ed34e8dafbd7b3b26
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3142
Cache-Control: max-age=171507
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 11:45:11 GMT
Etag: "637df674-1d7"
Expires: Fri, 25 Nov 2022 11:23:38 GMT
Last-Modified: Wed, 23 Nov 2022 10:31:16 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 3WE7w6PeVvPAavAM4fdH6hvDGhbH1puRAIdcjWTq70c8jUUk986Qg+fSlxfFNAxaBA5ogI0P2kg=
x-amz-request-id: 4J3Z1WY4HHA1Y2XJ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 23 Nov 2022 11:39:59 GMT
age: 312
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 23 Nov 2022 11:18:47 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1584
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 11:45:11 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 8f496314c2434d7a97ea010449fa9a72
64a6a468621fc00307fbd4dccf16e56cb5e47abb
09fa9afd62e97e457ba7c3c5f482082dc2f0af76c192277f1a3891fc20529c06
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=130898
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 11:45:11 GMT
Etag: "637d6419-118"
Expires: Fri, 25 Nov 2022 00:06:49 GMT
Last-Modified: Wed, 23 Nov 2022 00:06:49 GMT
Server: nginx
Content-Length: 280
ocsp.digicert.com/
200 OK 280 B IP
Hash 8f496314c2434d7a97ea010449fa9a72
64a6a468621fc00307fbd4dccf16e56cb5e47abb
09fa9afd62e97e457ba7c3c5f482082dc2f0af76c192277f1a3891fc20529c06
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: max-age=130898
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 11:45:11 GMT
Etag: "637d6419-118"
Expires: Fri, 25 Nov 2022 00:06:49 GMT
Last-Modified: Wed, 23 Nov 2022 00:06:49 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 280
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 54a0b35f01a740da11040d0a16ecb619
31b8605b03ebd7e5744eff59b4dceb628d7a145e
637717127036c09c216eef7b068337033a6e16c140aedc156ac72dd6a533236a
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "637717127036C09C216EEF7B068337033A6E16C140AEDC156AC72DD6A533236A"
Last-Modified: Mon, 21 Nov 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18242
Expires: Wed, 23 Nov 2022 16:49:13 GMT
Date: Wed, 23 Nov 2022 11:45:11 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 23 Nov 2022 11:11:11 GMT
cache-control: public,max-age=3600
age: 2040
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash eb52164d651f5f45416e873aec29eb04
405b29bb7e7cd4367cf82988f8603e53db65f139
ed885e05db822ff30fe951e10b6d4f21e574d053939afca792992a1549a15301
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4149
Cache-Control: max-age=167451
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 11:45:11 GMT
Etag: "637de2ad-1d7"
Expires: Fri, 25 Nov 2022 10:16:02 GMT
Last-Modified: Wed, 23 Nov 2022 09:06:53 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 54a0b35f01a740da11040d0a16ecb619
31b8605b03ebd7e5744eff59b4dceb628d7a145e
637717127036c09c216eef7b068337033a6e16c140aedc156ac72dd6a533236a
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "637717127036C09C216EEF7B068337033A6E16C140AEDC156AC72DD6A533236A"
Last-Modified: Mon, 21 Nov 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18242
Expires: Wed, 23 Nov 2022 16:49:13 GMT
Date: Wed, 23 Nov 2022 11:45:11 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 2jAOuRvnergR3ACMo1EPdQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: DVcc1UnbYEqeOVfw8otw3TGEnAI=
code.jquery.com/jquery-1.12.0.min.js
200 OK 34 kB URL HTTP/2 code.jquery.com/jquery-1.12.0.min.js
IP
File type ASCII text, with very long lines (32060)
Hash e0865bea5b028ce4d913dc4d6166c751
b2df1f4068ce3040ba56512e7fa7674db72f8fcb
0dbb35dfe27885f4ab7cb2f5f3b6894d0fe03f691e4612cec613bd6a74193337
GET /jquery-1.12.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 23 Nov 2022 11:45:12 GMT
content-encoding: gzip
content-length: 33820
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-17c52"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1669203912.dop024.sk1.t,1669203912.cds067.sk1.hn,1669203912.cds229.sk1.c
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ae7674294f5a17ef8761b33ac4dad848
30a771e623dd1e3cb8694bb5f71393aaa9e87b6a
cac85ed50ce25c45d5093aaaa231a0d1cd9667f47bd2312947070ba202c5d96b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 11:45:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 065495ec7a963a205abd9c8dbc75cb5d
ea416d0df4f6706150bda5da2077174f5cdd986b
1b2a2afee887651b23a849f14ace89b330329f6bf61c331545a3f6d12037aee5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 11:45:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ae7674294f5a17ef8761b33ac4dad848
30a771e623dd1e3cb8694bb5f71393aaa9e87b6a
cac85ed50ce25c45d5093aaaa231a0d1cd9667f47bd2312947070ba202c5d96b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 11:45:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 26 kB IP
Hash 4f602a1891df2302ae5584b118068a02
604be805ededbc3e99eda8c3925393e5e1542661
35af2a26033737618080cb4b460177b82194e458e626738ed703de59e6384a2a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 11:45:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 862fa14edd3c78a3f2cda448e0e00c3c
a672477892e7098b2a17a6239686f74705144633
7d45e55e121d85f4f0fbd819d47518e4158d9132696533b0fdd0d097cfe731c7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D45E55E121D85F4F0FBD819D47518E4158D9132696533B0FDD0D097CFE731C7"
Last-Modified: Mon, 21 Nov 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=892
Expires: Wed, 23 Nov 2022 12:00:04 GMT
Date: Wed, 23 Nov 2022 11:45:12 GMT
Connection: keep-alive
www.google.com/recaptcha/api.js?onload=loadCaptcha&render=explicit
200 OK 574 B URL HTTP/2 www.google.com/recaptcha/api.js?onload=loadCaptcha&render=explicit
IP
File type ASCII text, with very long lines (906), with no line terminators
Hash 35ba813b923d084f7bd4ab6cb52ba5af
0403c455a4ff965460cbf20cafbcaeee90540385
567da270e8a1ff1779fa45dd7e2ef0910b790c2f72f790bc939d818d6d331390
GET /recaptcha/api.js?onload=loadCaptcha&render=explicit HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Wed, 23 Nov 2022 11:45:12 GMT
date: Wed, 23 Nov 2022 11:45:12 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 574
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js
200 OK 553 B URL HTTP/2 www.google.com/recaptcha/api.js
IP
File type ASCII text, with very long lines (850), with no line terminators
Hash 1309ff133720d219cc98090d66a051ed
b96fc5a893e42be16d687d7abdecdb13d348a019
358683c66634ea5ee3021c93111d8621d583880bcbbfadf3ec2ff87a15ea1038
GET /recaptcha/api.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Wed, 23 Nov 2022 11:45:12 GMT
date: Wed, 23 Nov 2022 11:45:12 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 553
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-233612758-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-233612758-1
IP
File type ASCII text, with very long lines (1921)
Hash 123f15312226e10a8d89286e2bdd7d49
d345eaeaa61a4be52a7136cdd2db6ecec9800ba2
6a3c1798e32ce6f8be11042694874d4dec24f78633abc3f13b333bd6a3b7c71d
GET /gtag/js?id=UA-233612758-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 23 Nov 2022 11:45:12 GMT
expires: Wed, 23 Nov 2022 11:45:12 GMT
cache-control: private, max-age=900
last-modified: Wed, 23 Nov 2022 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43617
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
roucoutaivers.com/1clkn/28562
200 OK 26 B URL HTTP/1.1 roucoutaivers.com/1clkn/28562
IP
File type ASCII text, with no line terminators
Hash 414a242a6fee8464282857e475d3ef61
f669890350347f53aa9bd19c1a355692e8d17d2f
d4914e81dd0b4c1d8ee8e789f6b369d107b93ac886f862930e1a98580e79aafa
GET /1clkn/28562 HTTP/1.1
Host: roucoutaivers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 23 Nov 2022 11:45:12 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Set-Cookie: GL_UI4=eJw9jd1OhDAYRIHy42aFOAkPsI9QVBAvvfEVvCSl%2FcC60G5KXfTtbUz07mTmTCaKoqSuEF9zBvYpWpzU1HSS9428bx9417WPgtM09s9j%2F9Q1gvc46G3wYlzIp7idyZDTcpBWUYm7UP0lZ2N3kyIbnTCqRLYGYylRjM7uG7maITViJRSv2tFkv4IhPqwDa3gbWJvAMUdit5pVBxRv2qiwrI5IGl6VeYTjZRF%2Bsm4dtMpjZLMTihC%2F4EYKT7N13ygUbWdvL4Bd1PDv%2Fx6zveHIFV21JGTWv5P7AaoaStk%3D; expires=Thu, 24-Nov-2022 11:45:12 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJxNjM0KgkAYRW0qSwrjQg%2FQC2T%2Fi7bVMnThAwxmXzFg84kz%2FdjTpwbR5nI4cK7jOGLsQ6gcw%2B0i2M6D9TJYbNZoX4khwgjDlO%2FaFqXUyY3ghlw8kxJuQVfFGmK%2BwuDLMuUzoRtG0z%2FXRIPIZDzZ1z8lOqmqt1bwav52vaprXFuZHP4uU69JzNndVi8GniYrTU50hrdPThnNDvER%2Fs82H24LfWVkXvCrrHhk1Y3erEny5WLIVqr1cMUHDLFHVQ%3D%3D; expires=Thu, 24-Nov-2022 11:45:12 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 065495ec7a963a205abd9c8dbc75cb5d
ea416d0df4f6706150bda5da2077174f5cdd986b
1b2a2afee887651b23a849f14ace89b330329f6bf61c331545a3f6d12037aee5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 11:45:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 32 kB IP
Hash ae0bce530aa360f10ef3902791fe27f4
0cd0d76f2144230ce746409fb0a8e7fa91809b0b
2a43b71db6bf9c0ebe9f31215a9101dc848c4eb463ed250d185d56a60b532566
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 11:45:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fb4ee3082622f9f3340432290d63437e
852ca64934462e133e34043fca561aca215e6255
d4c2f665873baede94309128e276df6fdf7f0e1ec15699e75cd6bae2c24d556a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 11:45:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash 2555dc6100b8a3b952b309f1295c3890
4bcde9ff2d92d3c049beb70579f26ef14d47fb51
49f571d69a16ddcf6bc2957116c27e5aa1ca5222319b09816424b6187ecf5e2f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4623
Cache-Control: max-age=122555
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 11:45:12 GMT
Etag: "637d3174-117"
Expires: Thu, 24 Nov 2022 21:47:47 GMT
Last-Modified: Tue, 22 Nov 2022 20:30:44 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 969 B IP
Hash 822b64d5883dd718ce43754423933895
f4013bcfb0955bfb703f597fd434fcc499dfc25f
efdbddcf084af10742f27620b178ff621b26e7bcb982aceaa15c6cdfdd749494
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5857
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 11:45:12 GMT
Etag: "637d3174-117"
Last-Modified: Wed, 23 Nov 2022 10:07:35 GMT
Server: ECS (amb/6B8C)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4f22437494cab8f3b1de6d48c3677f43
42461557365b59e300ae356c37b95f652e10dacd
420bc8cc7c6624d9201c6e12fb6478f4a9cf77e90aad033b4d12687968003ccf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 11:45:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/droidsans/v18/SlGVmQWMvZQIdix7AFxXkHNSbQ.woff2
200 OK 21 kB URL HTTP/2 fonts.gstatic.com/s/droidsans/v18/SlGVmQWMvZQIdix7AFxXkHNSbQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 21224, version 1.0\012- data
Hash 13bdfb843f942ccd9f485eb6c0bc1934
2bad44362ff7569f24f2a3df2521b27a97ec1297
7a291479495fbb281655d5e870c6d118dc6b7ed18e8c235aef5974c1e9de4e6c
GET /s/droidsans/v18/SlGVmQWMvZQIdix7AFxXkHNSbQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://blogmado.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21224
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 23:13:50 GMT
expires: Wed, 22 Nov 2023 23:13:50 GMT
cache-control: public, max-age=31536000
age: 45082
last-modified: Tue, 19 Apr 2022 18:04:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 72bbc29f6b924f6a4634bb9344ac774e
4ff385782b756a058c57b2659abaf1c64b0ee83e
90814dc375b181f2e5179dc4db5a36522e43f4bca06b55a34b87ae5d92e253a6
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "90814DC375B181F2E5179DC4DB5A36522E43F4BCA06B55A34B87AE5D92E253A6"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17778
Expires: Wed, 23 Nov 2022 16:41:30 GMT
Date: Wed, 23 Nov 2022 11:45:12 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 72bbc29f6b924f6a4634bb9344ac774e
4ff385782b756a058c57b2659abaf1c64b0ee83e
90814dc375b181f2e5179dc4db5a36522e43f4bca06b55a34b87ae5d92e253a6
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "90814DC375B181F2E5179DC4DB5A36522E43F4BCA06B55A34B87AE5D92E253A6"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17778
Expires: Wed, 23 Nov 2022 16:41:30 GMT
Date: Wed, 23 Nov 2022 11:45:12 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 72bbc29f6b924f6a4634bb9344ac774e
4ff385782b756a058c57b2659abaf1c64b0ee83e
90814dc375b181f2e5179dc4db5a36522e43f4bca06b55a34b87ae5d92e253a6
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "90814DC375B181F2E5179DC4DB5A36522E43F4BCA06B55A34B87AE5D92E253A6"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17778
Expires: Wed, 23 Nov 2022 16:41:30 GMT
Date: Wed, 23 Nov 2022 11:45:12 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 72bbc29f6b924f6a4634bb9344ac774e
4ff385782b756a058c57b2659abaf1c64b0ee83e
90814dc375b181f2e5179dc4db5a36522e43f4bca06b55a34b87ae5d92e253a6
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "90814DC375B181F2E5179DC4DB5A36522E43F4BCA06B55A34B87AE5D92E253A6"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17778
Expires: Wed, 23 Nov 2022 16:41:30 GMT
Date: Wed, 23 Nov 2022 11:45:12 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4f22437494cab8f3b1de6d48c3677f43
42461557365b59e300ae356c37b95f652e10dacd
420bc8cc7c6624d9201c6e12fb6478f4a9cf77e90aad033b4d12687968003ccf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 11:45:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash 2555dc6100b8a3b952b309f1295c3890
4bcde9ff2d92d3c049beb70579f26ef14d47fb51
49f571d69a16ddcf6bc2957116c27e5aa1ca5222319b09816424b6187ecf5e2f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5857
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 11:45:12 GMT
Last-Modified: Wed, 23 Nov 2022 10:07:35 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 279
fstatic.netpub.media/r/14f9494694a9078dc2f4ae3c92e41760/service.js
302 Found 799 B URL HTTP/2 fstatic.netpub.media/r/14f9494694a9078dc2f4ae3c92e41760/service.js
IP
Hash 412bba7c718f667e9e65208ab26773f0
6183fa8b6771f68f83765d78e7b1ccfc264b3f36
2154be940137c49a288142005cae19426b667eb4217c840e745d03a2a1aa6b88
GET /r/14f9494694a9078dc2f4ae3c92e41760/service.js HTTP/1.1
Host: fstatic.netpub.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://blogmado.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Wed, 23 Nov 2022 11:45:12 GMT
content-type: text/html; charset=iso-8859-1
location: https://fstatic.netpub.media/r/14f9494694a9078dc2f4ae3c92e41760/450e059b.js?npr=c1a3b9540f4290a1a965ead6c5f2ea5c
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2qEYXbBot1vXkOOVJbdOsrOVX4xNwGBaWz8NiZkdmp4zNCr18RtrYs%2BY6%2BHxPMD%2Bo7vQLD%2BPC3MoETXRBP0%2Fcz6n%2BafPq3MU5zj1sR%2FWxQDbuhRpYsj5rz34Qn9WckQUpiaMdIfd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76e9a8458ea30b3d-OSL
X-Firefox-Spdy: h2
plungebriefinggladly.com/7e/1d/8f/7e1d8f1ae70c40a4c328807cbe5300ca.js
200 OK 21 kB URL HTTP/1.1 plungebriefinggladly.com/7e/1d/8f/7e1d8f1ae70c40a4c328807cbe5300ca.js
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document, ASCII text, with very long lines (60209), with no line terminators
Hash 0513af96f0ad23c121b575282b4a64cd
7e416b7b30333ee3b0094ee69ade16cfab0e4d7f
464ee55cd452ec4395401bb091249ea81cc34ebf220332e2a92ac37624d80674
GET /7e/1d/8f/7e1d8f1ae70c40a4c328807cbe5300ca.js HTTP/1.1
Host: plungebriefinggladly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Wed, 23 Nov 2022 11:45:12 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f4efac056e56d620624960f4015447fa
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
fstatic.netpub.media/static/14f9494694a9078dc2f4ae3c92e41760.min.js?1669203911789
301 Moved Permanently 24 kB URL HTTP/2 fstatic.netpub.media/static/14f9494694a9078dc2f4ae3c92e41760.min.js?1669203911789
IP
Hash 51d9789aae91e94a455491922f198e68
7c872c7978a54d7c15aa412a907037a36382c492
2ff2b498b359fd8e1c6d2a69679cd5a05d089a876d3044a92c1d3088ef68fd03
GET /static/14f9494694a9078dc2f4ae3c92e41760.min.js?1669203911789 HTTP/1.1
Host: fstatic.netpub.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Wed, 23 Nov 2022 11:45:12 GMT
location: https://fstatic.netpub.media/r/14f9494694a9078dc2f4ae3c92e41760/service.js
cache-control: max-age=3600
expires: Wed, 23 Nov 2022 12:45:12 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PsJt%2FobhcIubxRy6bx%2BYm3TvshhQwhTDZmfqCoHER54RmWKRJ8XwMr1QmXGIY2%2BH44BMz1Jd9N2zu3G07L2BOsZVfioGJFhvfINYqoOlcGVHH2vKvBaJ4xPLosahqI3zaT6SdoRU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e9a844cd880b3d-OSL
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 3ac9d4b21bf0dd17e1a638b3ffb7b550
99f0b6faf30610a0f701dce2f4f5ac885a2b5a3a
6a685e8d10b091280d4896ea3d1babc05c08aa9ab4d527a3dca07bca7a95ac67
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=97530
Date: Wed, 23 Nov 2022 11:45:13 GMT
Etag: "637ccf16-1d7"
Expires: Thu, 24 Nov 2022 14:50:43 GMT
Last-Modified: Tue, 22 Nov 2022 13:31:02 GMT
Server: ECS (bsa/EB1A)
X-Cache: Miss from cloudfront
Via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: sUKwUipCuPm4WjCkEOs_EA0tHDO4Y7R_m5WH8PF3pMIMgCgmDtHclg==
Age: 4781
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 06f708b34cc3cf70aae7998884722abf
989d6ff5030d95ef18dca268037a78b60002a070
ff30a17921612e9d14cae41137f0346d9f0effd5387979eb94ae111823ae9a88
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://blogmado.com
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 23 Nov 2022 11:45:13 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://blogmado.com
access-control-allow-credentials: true
set-cookie: uid_id2=517e04f4-448d-4c49-8f65-b20d35887496:3:1; expires=Sat, 20 Nov 2032 11:45:13 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
fstatic.netpub.media/r/14f9494694a9078dc2f4ae3c92e41760/service.js
302 Found 799 B URL HTTP/2 fstatic.netpub.media/r/14f9494694a9078dc2f4ae3c92e41760/service.js
IP
Hash d5850735304c060bf4c7d2e139c76708
c7200e4c9eabc8d24eab1bc541155bdc3172673d
2718b2e479011f2c74f2f752a0cf35473796e5dea5fb59b59de9b133140b3237
GET /r/14f9494694a9078dc2f4ae3c92e41760/service.js HTTP/1.1
Host: fstatic.netpub.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://blogmado.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Wed, 23 Nov 2022 11:45:13 GMT
content-type: text/html; charset=iso-8859-1
location: https://fstatic.netpub.media/r/14f9494694a9078dc2f4ae3c92e41760/450e059b.js?npr=c1a3b9540f4290a1a965ead6c5f2ea5c
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=im4z%2F%2FQv32RRLINf8Empd1fIPuLBhRzaYn2DHENEloL0UR6TtRWNKaafl1coSPTyElpQ0RMUiB5PJ87fR6VrGDIPeItVmUeJiXK26jX1Cyvljq1HcxBqhqkRyhUzQD6u%2F9PDKRUG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76e9a8497abc0b3d-OSL
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3911
Expires: Wed, 23 Nov 2022 12:50:24 GMT
Date: Wed, 23 Nov 2022 11:45:13 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d5a9928-3c61-44dc-af42-7d4e3c891caa.jpeg
200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d5a9928-3c61-44dc-af42-7d4e3c891caa.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 03830e3ff377979c234bf37561c54cfd
c18884ce9370c97e6b4e12ab0f827d68a1938bfa
5ba8bfc69c7eba42de4a16bf6d1e1e3570cd3918fe15cb8b2d25950ef791ddbb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d5a9928-3c61-44dc-af42-7d4e3c891caa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8365
x-amzn-requestid: e6c2ec6e-525e-4b9f-a45d-63076580df5b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-IrpFJ3oAMF4mA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637bee4a-576f678b6e364bca09532010;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:31:54 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 89jqCw8OJIxusDPoTi5-HDxWcgCfNvRrku2VFBLcQbFJwLLaZBpHGA==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 13:32:03 GMT
age: 79990
etag: "c18884ce9370c97e6b4e12ab0f827d68a1938bfa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3911
Expires: Wed, 23 Nov 2022 12:50:24 GMT
Date: Wed, 23 Nov 2022 11:45:13 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44f9633f-15fe-459e-aebf-06d2b582efa8.jpeg
200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44f9633f-15fe-459e-aebf-06d2b582efa8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3e8d7af3a5d030774447a0f71c7824f0
663cace8681891ad55943dd0273493aa9474d102
22068df04672281e392caa485259df103d591ab247c3eb5e0ccba10ffd8a9ef0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44f9633f-15fe-459e-aebf-06d2b582efa8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9766
x-amzn-requestid: ca8b7a9f-3c1a-419d-953e-2944bf820e5e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cBcR_Hd4IAMFWUg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d40d9-4ca5e9b2476a47cd199b9cba;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 21:36:25 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: RZqqB_Aaam7hYpdAB2fbx-i3iQth9M-OgA25IgCB5Uz0swqVi3-bVg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 21:48:19 GMT
age: 50214
etag: "663cace8681891ad55943dd0273493aa9474d102"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0ea68cc-d723-41ae-8bc2-16e2e422e2aa.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0ea68cc-d723-41ae-8bc2-16e2e422e2aa.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c6380f73d47906bd63b9c48137e4df61
94e053461d2db89e9d08321f26a2555ebcd7e0b9
84144e3c3e7acc7339fd1da9b373f18582734b6f4d235b2aef8c90616ed1c8a7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0ea68cc-d723-41ae-8bc2-16e2e422e2aa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5914
x-amzn-requestid: 8dea187e-ee61-4691-aff7-59202f978565
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b2P4MF0UIAMFWBw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6378c69a-011430f86689624a29d71215;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 12:05:46 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: c2w_q7fYc60JSQ4GcAlmUFyp7csfflgG8GvCXJuy_wWlvf9mIG0u9g==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 22:38:55 GMT
age: 47178
etag: "94e053461d2db89e9d08321f26a2555ebcd7e0b9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f159cda-2152-46b5-8f3f-971d5d406960.jpeg
200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f159cda-2152-46b5-8f3f-971d5d406960.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 050f43f830803646a2ece48e01ac8d24
d359314799f8873b35580dd5f8c64b75dfa4ffe3
d4ad8c9e5e1fe428c55c02e567aba32664055f8a881ee6aff8438c3a09124f3f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f159cda-2152-46b5-8f3f-971d5d406960.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6475
x-amzn-requestid: b3f37508-ce80-4bfd-8f40-d98c1ee57f7d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: byQlaF-9IAMFh8A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63772e22-42b6d99c69142d1e37161d69;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 07:02:58 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: QUkCjTAybAgpQQtHzlnzyOGXy7K7mB8G6iap0_OlDkTVGJe_sK3-zQ==
via: 1.1 cca7d60248a961ff8fc8c5640024b652.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 07:43:39 GMT
age: 14494
etag: "d359314799f8873b35580dd5f8c64b75dfa4ffe3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 841a4b110022a99ddea6f7bf66df0fa1
126771b86638108050cf57c0d12faa27f80f0edb
240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4309
x-amzn-requestid: 47c2739d-73c5-4d91-914c-fe635cb09772
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b1U8xGxgIAMF-qQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63786851-6fbe19dc5c4c20dd657604e3;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 05:23:29 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: j_8oVo464QMWMnmkxQJIDRhaIVmwhzCTHe4A57OdmaUr9HcyTtBUjg==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 2750b94b402c92287d764b5fa115a042.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 06:36:36 GMT
age: 18517
etag: "126771b86638108050cf57c0d12faa27f80f0edb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff4ba2cc1-6e28-45a2-bc78-97012bdeedb2.png
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff4ba2cc1-6e28-45a2-bc78-97012bdeedb2.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8b591bcc9d645eed0ea6ebc5dae07d31
97278cc5c5a1be7926d53fd8daf9e802bfb6cbdb
82dde9a4d139bdfae1d8859f4d7a77f92182c65ad630e25d0cc52f346dd1dfad
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff4ba2cc1-6e28-45a2-bc78-97012bdeedb2.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11793
x-amzn-requestid: 7edbd95e-83c8-4162-886f-b0bf88deee5f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-I6oFrQIAMFnYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637beeaa-4f1317ec61500d713816830d;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:33:30 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: WYzBlSLCZWYEtLVSlKROHJMgK7WYhBNym1oizSWYlwg5oBatM9eRYQ==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 08:07:46 GMT
age: 13047
etag: "97278cc5c5a1be7926d53fd8daf9e802bfb6cbdb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash a2cc21e2248758db1a942dfe612c2d2a
07bf7a6aa73ce334fc5facbc9eba1d1d2939a661
db9f71ca2516f25200ee836da69116ff01da443664375ff3c794d0a61e945edf
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 11:45:13 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 20 Nov 2022 12:04:30 GMT
Expires: Sun, 27 Nov 2022 12:04:29 GMT
Etag: "07bf7a6aa73ce334fc5facbc9eba1d1d2939a661"
Cache-Control: max-age=346155,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76e9a84aecdbb4fa-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash a2cc21e2248758db1a942dfe612c2d2a
07bf7a6aa73ce334fc5facbc9eba1d1d2939a661
db9f71ca2516f25200ee836da69116ff01da443664375ff3c794d0a61e945edf
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 11:45:13 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 20 Nov 2022 12:04:30 GMT
Expires: Sun, 27 Nov 2022 12:04:29 GMT
Etag: "07bf7a6aa73ce334fc5facbc9eba1d1d2939a661"
Cache-Control: max-age=346155,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76e9a84b6d5eb4fa-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 469c8a9240f4fe5c3b16712541753eba
45fe406d3afadf6fe6a60ef716141b723c169215
a4b3b1ad956d708386ed0b53d59b9ae26398bf1aad5871f62f2ef8f33e4c7230
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A4B3B1AD956D708386ED0B53D59B9AE26398BF1AAD5871F62F2EF8F33E4C7230"
Last-Modified: Mon, 21 Nov 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3244
Expires: Wed, 23 Nov 2022 12:39:17 GMT
Date: Wed, 23 Nov 2022 11:45:13 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 469c8a9240f4fe5c3b16712541753eba
45fe406d3afadf6fe6a60ef716141b723c169215
a4b3b1ad956d708386ed0b53d59b9ae26398bf1aad5871f62f2ef8f33e4c7230
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A4B3B1AD956D708386ED0B53D59B9AE26398BF1AAD5871F62F2EF8F33E4C7230"
Last-Modified: Mon, 21 Nov 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3244
Expires: Wed, 23 Nov 2022 12:39:17 GMT
Date: Wed, 23 Nov 2022 11:45:13 GMT
Connection: keep-alive
6.adsco.re/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://blogmado.com
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 23 Nov 2022 11:45:13 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
access-control-allow-origin: https://blogmado.com
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e9a84bfef7b4ff-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
4.adsco.re/
200 OK 62 B IP
File type ASCII text, with no line terminators
Hash adde5febc7b5b6c2c759ec735cce83a0
77ec17be8a9970ff04663294d41c590d0d24fde4
ce2b9f2e5005195de7add565505005be6f2ef0d37521771e15106d1e1b9260ff
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://blogmado.com
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 11:45:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: https://blogmado.com
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
integrityprinciplesthorough.com/pixel/purst?dl=0&th=0&sc=0&rs=2337&rd=2337&fd=907&bv=22.10.v.9&tmpl=70
200 OK 0 B URL HTTP/1.1 integrityprinciplesthorough.com/pixel/purst?dl=0&th=0&sc=0&rs=2337&rd=2337&fd=907&bv=22.10.v.9&tmpl=70
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=2337&rd=2337&fd=907&bv=22.10.v.9&tmpl=70 HTTP/1.1
Host: integrityprinciplesthorough.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Wed, 23 Nov 2022 11:45:13 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
fstatic.netpub.media/r/14f9494694a9078dc2f4ae3c92e41760/service.js
302 Found 14 kB URL HTTP/2 fstatic.netpub.media/r/14f9494694a9078dc2f4ae3c92e41760/service.js
IP
Hash c7ed499880468bf6871bd995facffcb3
b6467a03ce38d25e641306253f02442edc96e416
dc57b263a1cda5255b8f5e0690a6ca1aa1643d2e716a887bcd38737a55098a6f
GET /r/14f9494694a9078dc2f4ae3c92e41760/service.js HTTP/1.1
Host: fstatic.netpub.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://blogmado.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Wed, 23 Nov 2022 11:45:12 GMT
content-type: text/html; charset=iso-8859-1
location: https://fstatic.netpub.media/r/14f9494694a9078dc2f4ae3c92e41760/450e059b.js?npr=c1a3b9540f4290a1a965ead6c5f2ea5c
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P%2BSKUl3Zj%2BL0cFiLNPSYu3RpSVz90ER%2FcYDxOFR%2BxqFEvLnvpssgJjPs6vALq4N5SWQnQpORxESvjEQ5E0IQRFg%2FPaBYlU%2FQJTYWqbU4SROLWlTof7rB9M%2Ft5ocRzQ6Ap9YpJB9m"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76e9a8458ea10b3d-OSL
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 06f708b34cc3cf70aae7998884722abf
989d6ff5030d95ef18dca268037a78b60002a070
ff30a17921612e9d14cae41137f0346d9f0effd5387979eb94ae111823ae9a88
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://blogmado.com
Connection: keep-alive
Referer: https://blogmado.com/
Cookie: uid_id2=517e04f4-448d-4c49-8f65-b20d35887496:3:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 11:45:13 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://blogmado.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cc6f115d8a52093a9ea79b4a521bfabd
709518d818bb47271fc70aac22a5bb12f54e1429
2dd086344c880a83a4d40f359edce224cabddc664b0a3bafd4ec36ec1d4166e6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2DD086344C880A83A4D40F359EDCE224CABDDC664B0A3BAFD4EC36EC1D4166E6"
Last-Modified: Mon, 21 Nov 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4286
Expires: Wed, 23 Nov 2022 12:56:39 GMT
Date: Wed, 23 Nov 2022 11:45:13 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 82401689b683af7cb8bfc79971fcaacc
e1bd44f9f5a52703768671ebed52417d29c70d14
a0edcb7c8b70be0faae8f29ae8a8672a29e1113389d93454d821fb69d3d1e28c
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "A0EDCB7C8B70BE0FAAE8F29AE8A8672A29E1113389D93454D821FB69D3D1E28C"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8403
Expires: Wed, 23 Nov 2022 14:05:16 GMT
Date: Wed, 23 Nov 2022 11:45:13 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 607232423af0b8b170455e11c4b2326f
d4ece5924755b6bb2b5b9003ca016fe6976108de
22d9df5c536dcac72101a81dcfef75af8b69f3f7fead38f8ae75efdbbf5b15fb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22D9DF5C536DCAC72101A81DCFEF75AF8B69F3F7FEAD38F8AE75EFDBBF5B15FB"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5182
Expires: Wed, 23 Nov 2022 13:11:35 GMT
Date: Wed, 23 Nov 2022 11:45:13 GMT
Connection: keep-alive
w9cwwpaff621.n4.adsco.re/
200 OK 0 B URL HTTP/1.1 w9cwwpaff621.n4.adsco.re/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: w9cwwpaff621.n4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://blogmado.com
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 11:45:13 GMT
Content-Type: text/html
Content-Length: 0
Last-Modified: Mon, 30 Jul 2018 15:32:42 GMT
Connection: close
ETag: "5b5f2f9a-0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Accept-Ranges: bytes
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 82401689b683af7cb8bfc79971fcaacc
e1bd44f9f5a52703768671ebed52417d29c70d14
a0edcb7c8b70be0faae8f29ae8a8672a29e1113389d93454d821fb69d3d1e28c
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "A0EDCB7C8B70BE0FAAE8F29AE8A8672A29E1113389D93454D821FB69D3D1E28C"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8402
Expires: Wed, 23 Nov 2022 14:05:16 GMT
Date: Wed, 23 Nov 2022 11:45:14 GMT
Connection: keep-alive
banquetunarmedgrater.com/advertisers.js
200 OK 0 B URL HTTP/1.1 banquetunarmedgrater.com/advertisers.js
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /advertisers.js HTTP/1.1
Host: banquetunarmedgrater.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Wed, 23 Nov 2022 11:45:14 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5bdb4a528ab628597fcc4a635b42ed18
Strict-Transport-Security: max-age=0; includeSubdomains
friendshipmale.com/sfp.js
200 OK 27 kB URL HTTP/2 friendshipmale.com/sfp.js
IP
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 94522ef3d3f30fce061fb47fb983689b
9ebccefbbd8bddf29f419a7d9bbdfed612fab3a8
61d754b6db3a230540d00fcf4ae2cb7a350989ce614d222e499a7643d79e0449
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 23 Nov 2022 11:45:14 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: e40de9d0cc26828911385f675d32859e
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: MISS
last-modified: Wed, 23 Nov 2022 11:45:13 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LDvMWrwZFcP6CGZIlK7%2F79C8dHfbZwjktZgfYCQ507OyzFunI%2FzGTUp3%2FV3i1vDyG%2BjUVxMs90Q%2FEQxdQ3H9KR7Fv5QTYXjjBO%2Bp4%2BEgLJbnTAcCZ9epPtsSIIzXG6toJ4c5bEE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e9a84e0a4e8892-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Wed, 23 Nov 2022 10:41:08 GMT
expires: Wed, 23 Nov 2022 12:41:08 GMT
cache-control: public, max-age=7200
age: 3846
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b2b92f1110c82662bfa1addc9bab3130
d6f86300cbfd5b21b3d505c08ffd6edef34b654a
6914944644172d563d0d7c2a5084690fce86ead13949ff29f42842d4bb6e0734
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 11:45:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
200 OK 163 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
IP
File type ASCII text, with very long lines (730)
Size 163 kB (162976 bytes)
Hash 79d18cf4265108d7cecca1bf4ada6109
e51d0285a545381d4c39e9e0292a650ffeeecbb9
59ce7253f371df0833c3f72d4748ef812002b90a49413c56d0ca7c40bb5a0ab6
GET /recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://blogmado.com
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 10:35:38 GMT
expires: Thu, 23 Nov 2023 10:35:38 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 03:01:59 GMT
content-type: text/javascript
age: 4176
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9a2f2404e1a2caf586155a962b7fe4ec
c6ca53150de9ce525562fb524e4742f5dd0fae9f
6f01b0ebc8013fcfe27f48228de066791c1c6b0189a4add8ef4a1f980385d382
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6F01B0EBC8013FCFE27F48228DE066791C1C6B0189A4ADD8EF4A1F980385D382"
Last-Modified: Mon, 21 Nov 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15636
Expires: Wed, 23 Nov 2022 16:05:50 GMT
Date: Wed, 23 Nov 2022 11:45:14 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b2b92f1110c82662bfa1addc9bab3130
d6f86300cbfd5b21b3d505c08ffd6edef34b654a
6914944644172d563d0d7c2a5084690fce86ead13949ff29f42842d4bb6e0734
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 11:45:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 471 B IP
Hash e4a2adde46b25bb65c338fa7e9cac875
7ae87e274ca7351d70bbe085024e507379ac572e
3c32e0775502caa268a39c7b2f0d1fb267ea116b84f148771547dfaffa7d836c
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 11:45:14 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 20 Nov 2022 17:30:49 GMT
Expires: Sun, 27 Nov 2022 17:30:48 GMT
Etag: "7ae87e274ca7351d70bbe085024e507379ac572e"
Cache-Control: max-age=365733,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76e9a851dd29b4fa-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 25a6f78f8ff60538bb3eb171f44b8f59
02d995a4ec9232640b360faa08f29edaea16093f
296da0f5f048f82401ac864f83f1366b665f873f0e90b1943d16cdda3cdf3923
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "296DA0F5F048F82401AC864F83F1366B665F873F0E90B1943D16CDDA3CDF3923"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10639
Expires: Wed, 23 Nov 2022 14:42:33 GMT
Date: Wed, 23 Nov 2022 11:45:14 GMT
Connection: keep-alive
xadsmart.com/UBadVR.aspx?_=BAYAY34HygFjfgfKgAGBAsAAIMuxSzSawb0PlCVDbpfZzbrR25-5ScLgt2eH3xZdZK19wQBHMEUCIQDfUTs-0NmnPPzCxBUhDr56rBT1HCf3-riirn07VRp94QIgH1vk5ROuC0dtJouq2jfDkLlkAN7IjB7ERSgLIEkpf0M&v=4&omrXpnWE=4792524&minBid=&oImZMaRu=0,0&PJAakiyh=&MbceEzgs=&s=1280,1024,1,1280,1024,0
200 OK 44 B URL HTTP/2 xadsmart.com/UBadVR.aspx?_=BAYAY34HygFjfgfKgAGBAsAAIMuxSzSawb0PlCVDbpfZzbrR25-5ScLgt2eH3xZdZK19wQBHMEUCIQDfUTs-0NmnPPzCxBUhDr56rBT1HCf3-riirn07VRp94QIgH1vk5ROuC0dtJouq2jfDkLlkAN7IjB7ERSgLIEkpf0M&v=4&omrXpnWE=4792524&minBid=&oImZMaRu=0,0&PJAakiyh=&MbceEzgs=&s=1280,1024,1,1280,1024,0
IP
File type ASCII text, with no line terminators
Hash d5f0a25e4d3522d56d48ce7bc3e518fb
86794caff58f7fee6e684c2ba7195f970a8d6f4c
9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5
GET /UBadVR.aspx?_=BAYAY34HygFjfgfKgAGBAsAAIMuxSzSawb0PlCVDbpfZzbrR25-5ScLgt2eH3xZdZK19wQBHMEUCIQDfUTs-0NmnPPzCxBUhDr56rBT1HCf3-riirn07VRp94QIgH1vk5ROuC0dtJouq2jfDkLlkAN7IjB7ERSgLIEkpf0M&v=4&omrXpnWE=4792524&minBid=&oImZMaRu=0,0&PJAakiyh=&MbceEzgs=&s=1280,1024,1,1280,1024,0 HTTP/1.1
Host: xadsmart.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
asf: 9
popads-ec: ASB
content-type: text/javascript;charset=UTF-8
content-length: 44
date: Wed, 23 Nov 2022 11:45:14 GMT
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 19 Nov 2022 12:31:58 GMT
expires: Sun, 19 Nov 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 342796
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
w9cwwpaff621.s4.adsco.re/
200 OK 0 B URL HTTP/1.1 w9cwwpaff621.s4.adsco.re/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: w9cwwpaff621.s4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://blogmado.com
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 11:45:14 GMT
Content-Type: text/html
Content-Length: 0
Last-Modified: Mon, 30 Jul 2018 15:38:01 GMT
Connection: close
ETag: "5b5f30d9-0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8069f5e67c25fc0b7388ba5d4decd8c9
64a85ba44c80ea206f4382f573c3d61e4f607ccf
7587cd04333ddf1cff15ae219cb8fca0618786a9fe4cee989975f4d50889e72a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 11:45:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.com/adsid/integrator.js?domain=blogmado.com
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=blogmado.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=blogmado.com HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Wed, 23 Nov 2022 11:45:15 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
relativelyweptcurls.com/sbar.json?key=01ffd36dfbce3d569baf8d846cd7bc65&uuid=517e04f4-448d-4c49-8f65-b20d35887496%3A3%3A1
200 OK 4.1 kB URL HTTP/1.1 relativelyweptcurls.com/sbar.json?key=01ffd36dfbce3d569baf8d846cd7bc65&uuid=517e04f4-448d-4c49-8f65-b20d35887496%3A3%3A1
IP
File type JSON data\012- , ASCII text, with very long lines (5763), with no line terminators
Hash 49f5f37611a9b9f75e3ac2242fa4532f
7d7c598774ed5aedff1db6a823fb62c94e54b15b
fc3bf11fc40c0b57ba3f6fa032cc43bac25f625abb34b1557aaf89c56baee61b
Analyzer Verdict Alert quad9 Sinkholed
GET /sbar.json?key=01ffd36dfbce3d569baf8d846cd7bc65&uuid=517e04f4-448d-4c49-8f65-b20d35887496%3A3%3A1 HTTP/1.1
Host: relativelyweptcurls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://blogmado.com
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 23 Nov 2022 11:45:15 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://blogmado.com
Access-Control-Allow-Origin: https://blogmado.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=16650200; expires=Thu, 24 Nov 2022 11:45:14 GMT; secure; SameSite=None
uid_id2=517e04f4-448d-4c49-8f65-b20d35887496:3:1; expires=Wed, 30 Nov 2022 11:45:14 GMT; secure; SameSite=None
pdhtkv=true; expires=Thu, 24 Nov 2022 11:45:15 GMT; secure; SameSite=None
uncs=1; expires=Thu, 24 Nov 2022 11:45:15 GMT; secure; SameSite=None
pdhtkv29=true; expires=Thu, 24 Nov 2022 11:45:15 GMT; secure; SameSite=None
uncs29=1; expires=Thu, 24 Nov 2022 11:45:15 GMT; secure; SameSite=None
slec01ffd36dfbce3d569baf8d846cd7bc65=[3760951]; expires=Wed, 23 Nov 2022 11:45:20 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1f6a9467eaa78dd76d857bee6a16294d
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ad787c420232a4fa81143468b01d0a30.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html?n=1
200 OK 2.7 kB URL HTTP/2 ad787c420232a4fa81143468b01d0a30.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html?n=1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5657)
Hash e8ee9c011ff8e1f464e74c37113119ee
64ad72134ea05877de0f2b6503f5c0d8c3f78197
09e42988871806c7f0a897bda7bc4247f47f4d8590749eaa245b8ff1fa907303
GET /safeframe/1-0-40/html/container.html?n=1 HTTP/1.1
Host: ad787c420232a4fa81143468b01d0a30.safeframe.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/html
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 2653
date: Wed, 23 Nov 2022 11:45:15 GMT
expires: Thu, 23 Nov 2023 11:45:15 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Thu, 03 Nov 2022 19:10:08 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 35795580ef5cca935fb38d48d79d2d72
a06195472b0f405f52dba76ae8ea61f8559b5264
77a28598855d5e5eb1846a9ff06daed74a33cb003900033f25d9f9abd6327241
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5191
Cache-Control: max-age=115588
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 11:45:15 GMT
Etag: "637d1408-116"
Expires: Thu, 24 Nov 2022 19:51:43 GMT
Last-Modified: Tue, 22 Nov 2022 18:25:12 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 278
relativelyweptcurls.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTYgcRRSuTlYEPUjEiwdlDh4UsrPdM93zYw7BGCPBJBuSSMBb%2FfVsudVdTVX39OweZDEgOSiMeNBj7ze7WYxRzMWLiDLrJQwIGQXdg%2BvZmxDJTZGZHVh8h3rv1fcO3%2Fe998F2cUh8FPTg6mWzqbSmK1Hdr718U6XClK525UYt8Ov%2BmdpNlbbCM7XB7LH9VwM%2Fqvuv1N6UfN2sNPzA9wM%2FqF1QVsZmsDJHobJ73aDe9ethox5EIQb2%2F70rPDjqQfQPybNQYvrE2oP7UHyMNPn6vHTruclOv5EUmubGoi%2F23k7XU1OmSI7L2HqI073FNIybEvLZCZh0b6EApr8zUwCmpsT7NQBL9xY0wfq7R0yZhkzBxNMo%2B2NIPYaiY3BzC0o8JAAXuLKKNLlzxdiSbhyhdIZOydLjR1DllCz9%2FhzS5KtzWg1q140ucmVSh0FcQQ3GUL0xsmIf%2BaYHVe6D5%2B9DiZ%2FIyuNLSJOdVacNlDh4KQra0g%2FjcDkMO2I55GF3uRO3omXW8EUz6nTaYbc1t0ipMVQ8hpZDUHcShfNQKA9F7KHIPCTioEajbuz77ZjFzWYn5Jw3m5xHnZaIRDPsxD4KPtMwRJ4NwfUQ3G4hs1tYV0PY4ge4tQpOeHA5QV9UKCVB6QhKSlAqgjInKPvVrtCu4ao7QruCBYvcWORmNTJ5b5vumrwnU7KdHZJTc%2BP%2BfeY3rMuDmh%2FEsWi2RMy4bIqo1WU07ohO2OKizXgrglMVlDsB6jxszrb45WlkakrIt3%2BD0X04vQ%2BuToEWL4CWo3bDB10bhR0fm%2BndPJHUpnVuEghTIcuXkG942%2FqQPD9n0eVtSD45e%2Fjn4Jd%2FHn0DbitktsK76keCnr49umZKsnPNlI7cX81ylahNOlvt9ZzmcunuW3KjNFZcPO%2BGn7%2FGZ8CsvHdDuvwSTYVKe458cU4JIe0FY7kk3110NyW7Wri1c4VNi%2BzS1dcvXEwyK51TJh2DqoftT8DVlDx1eWt%2BtC9%2B%2BADKjmGLCkkxIYuAMvvg2RZcNjn76Uerf5wR78AZAquPZ1jmoSyqkW2w40%2BtCLQ87imr4OSxBUxOvv%2FrCNt2t9GzHmh%2BC2lSoW8r9HUFqodwxclRntnJ2Z%2Bb8wDT3ohp6%2B0wbfXHR9Y6dVCTUezH0m9IFndZ3Ka%2B6MZhl9FuINssogFyN%2BXvPTn5DwAA%2F%2F8BAAD%2F%2Fxr1xuaMBAAA
200 OK 7 B URL HTTP/1.1 relativelyweptcurls.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTYgcRRSuTlYEPUjEiwdlDh4UsrPdM93zYw7BGCPBJBuSSMBb%2FfVsudVdTVX39OweZDEgOSiMeNBj7ze7WYxRzMWLiDLrJQwIGQXdg%2BvZmxDJTZGZHVh8h3rv1fcO3%2Fe998F2cUh8FPTg6mWzqbSmK1Hdr718U6XClK525UYt8Ov%2BmdpNlbbCM7XB7LH9VwM%2Fqvuv1N6UfN2sNPzA9wM%2FqF1QVsZmsDJHobJ73aDe9ethox5EIQb2%2F70rPDjqQfQPybNQYvrE2oP7UHyMNPn6vHTruclOv5EUmubGoi%2F23k7XU1OmSI7L2HqI073FNIybEvLZCZh0b6EApr8zUwCmpsT7NQBL9xY0wfq7R0yZhkzBxNMo%2B2NIPYaiY3BzC0o8JAAXuLKKNLlzxdiSbhyhdIZOydLjR1DllCz9%2FhzS5KtzWg1q140ucmVSh0FcQQ3GUL0xsmIf%2BaYHVe6D5%2B9DiZ%2FIyuNLSJOdVacNlDh4KQra0g%2FjcDkMO2I55GF3uRO3omXW8EUz6nTaYbc1t0ipMVQ8hpZDUHcShfNQKA9F7KHIPCTioEajbuz77ZjFzWYn5Jw3m5xHnZaIRDPsxD4KPtMwRJ4NwfUQ3G4hs1tYV0PY4ge4tQpOeHA5QV9UKCVB6QhKSlAqgjInKPvVrtCu4ao7QruCBYvcWORmNTJ5b5vumrwnU7KdHZJTc%2BP%2BfeY3rMuDmh%2FEsWi2RMy4bIqo1WU07ohO2OKizXgrglMVlDsB6jxszrb45WlkakrIt3%2BD0X04vQ%2BuToEWL4CWo3bDB10bhR0fm%2BndPJHUpnVuEghTIcuXkG942%2FqQPD9n0eVtSD45e%2Fjn4Jd%2FHn0DbitktsK76keCnr49umZKsnPNlI7cX81ylahNOlvt9ZzmcunuW3KjNFZcPO%2BGn7%2FGZ8CsvHdDuvwSTYVKe458cU4JIe0FY7kk3110NyW7Wri1c4VNi%2BzS1dcvXEwyK51TJh2DqoftT8DVlDx1eWt%2BtC9%2B%2BADKjmGLCkkxIYuAMvvg2RZcNjn76Uerf5wR78AZAquPZ1jmoSyqkW2w40%2BtCLQ87imr4OSxBUxOvv%2FrCNt2t9GzHmh%2BC2lSoW8r9HUFqodwxclRntnJ2Z%2Bb8wDT3ohp6%2B0wbfXHR9Y6dVCTUezH0m9IFndZ3Ka%2B6MZhl9FuINssogFyN%2BXvPTn5DwAA%2F%2F8BAAD%2F%2Fxr1xuaMBAAA
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSTYgcRRSuTlYEPUjEiwdlDh4UsrPdM93zYw7BGCPBJBuSSMBb%2FfVsudVdTVX39OweZDEgOSiMeNBj7ze7WYxRzMWLiDLrJQwIGQXdg%2BvZmxDJTZGZHVh8h3rv1fcO3%2Fe998F2cUh8FPTg6mWzqbSmK1Hdr718U6XClK525UYt8Ov%2BmdpNlbbCM7XB7LH9VwM%2Fqvuv1N6UfN2sNPzA9wM%2FqF1QVsZmsDJHobJ73aDe9ethox5EIQb2%2F70rPDjqQfQPybNQYvrE2oP7UHyMNPn6vHTruclOv5EUmubGoi%2F23k7XU1OmSI7L2HqI073FNIybEvLZCZh0b6EApr8zUwCmpsT7NQBL9xY0wfq7R0yZhkzBxNMo%2B2NIPYaiY3BzC0o8JAAXuLKKNLlzxdiSbhyhdIZOydLjR1DllCz9%2FhzS5KtzWg1q140ucmVSh0FcQQ3GUL0xsmIf%2BaYHVe6D5%2B9DiZ%2FIyuNLSJOdVacNlDh4KQra0g%2FjcDkMO2I55GF3uRO3omXW8EUz6nTaYbc1t0ipMVQ8hpZDUHcShfNQKA9F7KHIPCTioEajbuz77ZjFzWYn5Jw3m5xHnZaIRDPsxD4KPtMwRJ4NwfUQ3G4hs1tYV0PY4ge4tQpOeHA5QV9UKCVB6QhKSlAqgjInKPvVrtCu4ao7QruCBYvcWORmNTJ5b5vumrwnU7KdHZJTc%2BP%2BfeY3rMuDmh%2FEsWi2RMy4bIqo1WU07ohO2OKizXgrglMVlDsB6jxszrb45WlkakrIt3%2BD0X04vQ%2BuToEWL4CWo3bDB10bhR0fm%2BndPJHUpnVuEghTIcuXkG942%2FqQPD9n0eVtSD45e%2Fjn4Jd%2FHn0DbitktsK76keCnr49umZKsnPNlI7cX81ylahNOlvt9ZzmcunuW3KjNFZcPO%2BGn7%2FGZ8CsvHdDuvwSTYVKe458cU4JIe0FY7kk3110NyW7Wri1c4VNi%2BzS1dcvXEwyK51TJh2DqoftT8DVlDx1eWt%2BtC9%2B%2BADKjmGLCkkxIYuAMvvg2RZcNjn76Uerf5wR78AZAquPZ1jmoSyqkW2w40%2BtCLQ87imr4OSxBUxOvv%2FrCNt2t9GzHmh%2BC2lSoW8r9HUFqodwxclRntnJ2Z%2Bb8wDT3ohp6%2B0wbfXHR9Y6dVCTUezH0m9IFndZ3Ka%2B6MZhl9FuINssogFyN%2BXvPTn5DwAA%2F%2F8BAAD%2F%2Fxr1xuaMBAAA HTTP/1.1
Host: relativelyweptcurls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Cookie: u_pl=16650200; uid_id2=517e04f4-448d-4c49-8f65-b20d35887496:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec01ffd36dfbce3d569baf8d846cd7bc65=[3760951]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 23 Nov 2022 11:45:15 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f86b2db612c1e8681042aafda5d96f80
Strict-Transport-Security: max-age=0; includeSubdomains
pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=2022111501&st=env
200 OK 11 kB URL HTTP/2 pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=2022111501&st=env
IP
File type JSON data\012- , ASCII text, with very long lines (14783), with no line terminators
Hash d4fb6b2ff488d13c60c4ddfd8669df0a
1f51dd333dd5ae7200c7d5896d6d6c3de00df782
1deb282bd40dd19a5536fbac13538847f61e0ccb9853bf015119c8f114d8ab35
GET /getconfig/sodar?sv=200&tid=gpt&tv=2022111501&st=env HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://blogmado.com
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: application/json; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
date: Wed, 23 Nov 2022 11:45:15 GMT
server: cafe
content-length: 11159
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
px.netpub.media/iab?o=474&k=5&b=fetch&xx=15663b3c58a43d9a93f21c260527a47a&s=complete&g=1&p=515.5&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&e=0&w=14f9494694a9078dc2f4ae3c92e41760&z=1c2b3d8f5084c3670b0ffbd768d4c149&m=898&f=dfp&c=FR&q=320&i=1&a=true&y=%2F29636627%2C22620349674%2Fblogmado.com_fluid_6&v=1.6.0&x=netpub&r=100&yy=f34f336f7278c146e753e83ab53009ee&zz=a2302996a403f19e6e59ea1be534c7f07672dc1417748ef308fa580490652a4e&aa=5a4fc3df82df6af687e37ede081e671f5224a4c52beec2e57327aa7e874220a3&j=0&n=100&l=1268&t=1669203915256&h=0&d=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F
200 OK 182 B URL HTTP/2 px.netpub.media/iab?o=474&k=5&b=fetch&xx=15663b3c58a43d9a93f21c260527a47a&s=complete&g=1&p=515.5&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&e=0&w=14f9494694a9078dc2f4ae3c92e41760&z=1c2b3d8f5084c3670b0ffbd768d4c149&m=898&f=dfp&c=FR&q=320&i=1&a=true&y=%2F29636627%2C22620349674%2Fblogmado.com_fluid_6&v=1.6.0&x=netpub&r=100&yy=f34f336f7278c146e753e83ab53009ee&zz=a2302996a403f19e6e59ea1be534c7f07672dc1417748ef308fa580490652a4e&aa=5a4fc3df82df6af687e37ede081e671f5224a4c52beec2e57327aa7e874220a3&j=0&n=100&l=1268&t=1669203915256&h=0&d=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 68afddc5fc6dff20732a10e111220622
eff6f5a1bc6cea1bdcb4b62b02d5c345a638c811
e2d9f74c1dc050a2bcd7d6b7a8803b1ec8387e4e4c3b85978742dc182d0b5383
GET /iab?o=474&k=5&b=fetch&xx=15663b3c58a43d9a93f21c260527a47a&s=complete&g=1&p=515.5&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&e=0&w=14f9494694a9078dc2f4ae3c92e41760&z=1c2b3d8f5084c3670b0ffbd768d4c149&m=898&f=dfp&c=FR&q=320&i=1&a=true&y=%2F29636627%2C22620349674%2Fblogmado.com_fluid_6&v=1.6.0&x=netpub&r=100&yy=f34f336f7278c146e753e83ab53009ee&zz=a2302996a403f19e6e59ea1be534c7f07672dc1417748ef308fa580490652a4e&aa=5a4fc3df82df6af687e37ede081e671f5224a4c52beec2e57327aa7e874220a3&j=0&n=100&l=1268&t=1669203915256&h=0&d=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F HTTP/1.1
Host: px.netpub.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 11:45:15 GMT
content-type: image/png
access-control-allow-origin: *
access-control-allow-headers: X-HTTPREQUEST
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JUqPkRdJSK52q3aXk56DbqVGhwj6CESTM0wtmm2Cis7HtACcevU%2B2B%2F%2BJKlQqApAEIKd3ly8CSKkEGv5OLdweGPiHNaFv90K2JxL4ko7UnGRZF6WLkTfHM2jBTB6ts8nVw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76e9a8596d940b3d-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ad551ace7091b0bcbb73a9f0b0758b00
6f66566bd59661ddbe2cb8d84c2f54fc88d80f20
285174281781fecaca35ea75d2460b2585335b0ecf15f80b15575041bf385894
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 11:45:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpc.googlesyndication.com/pagead/js/r20221110/r20110914/client/qs_click_protection_fy2021.js
200 OK 7.5 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20221110/r20110914/client/qs_click_protection_fy2021.js
IP
File type ASCII text, with very long lines (1540)
Hash d22e40b1bc4f1b0f1727b96a0f32f7dd
57030c5040f0013120cca1e77fe38af35d4610e0
6f6d3797f9b19ffcd2f416a7566a58cf70fd4fb0ab17dec03fa5b690c6939494
GET /pagead/js/r20221110/r20110914/client/qs_click_protection_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad787c420232a4fa81143468b01d0a30.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 7458
x-xss-protection: 0
date: Tue, 22 Nov 2022 15:55:37 GMT
expires: Tue, 06 Dec 2022 15:55:37 GMT
cache-control: public, max-age=1209600
age: 71378
etag: 16870613375306414947
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
200 OK 48 kB URL HTTP/2 www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
IP
File type ASCII text, with very long lines (3502)
Hash 297e24828abaf97fb29460fd75369140
e9e02d737f1bcf9874a55562edff5f795a1c170c
cdbe4e689ca060e94f00f0aa4c45a89efacddac90df42929ff42a3bff44a9d3e
GET /activeview/js/current/rx_lidar.js?cache=r20110914 HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad787c420232a4fa81143468b01d0a30.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/active-view-scs-read-write-acl
cross-origin-opener-policy: same-origin; report-to="active-view-scs-read-write-acl"
report-to: {"group":"active-view-scs-read-write-acl","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/active-view-scs-read-write-acl"}]}
content-length: 48265
date: Wed, 23 Nov 2022 11:45:15 GMT
expires: Wed, 23 Nov 2022 11:45:15 GMT
cache-control: private, max-age=3000
etag: "1668095300071091"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
px.netpub.media/iab?o=474&k=5&b=fetch&xx=15663b3c58a43d9a93f21c260527a47a&s=complete&g=0&p=515.5&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&e=0&w=14f9494694a9078dc2f4ae3c92e41760&z=1c2b3d8f5084c3670b0ffbd768d4c149&m=898&f=dfp&c=FR&q=320&i=1&a=true&y=%2F29636627%2C22620349674%2Fblogmado.com_fluid_6&v=1.6.0&x=netpub&r=100&yy=f34f336f7278c146e753e83ab53009ee&zz=a2302996a403f19e6e59ea1be534c7f07672dc1417748ef308fa580490652a4e&aa=5a4fc3df82df6af687e37ede081e671f5224a4c52beec2e57327aa7e874220a3&j=0&n=100&l=1268&t=1669203915247&h=0&d=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F
200 OK 182 B URL HTTP/2 px.netpub.media/iab?o=474&k=5&b=fetch&xx=15663b3c58a43d9a93f21c260527a47a&s=complete&g=0&p=515.5&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&e=0&w=14f9494694a9078dc2f4ae3c92e41760&z=1c2b3d8f5084c3670b0ffbd768d4c149&m=898&f=dfp&c=FR&q=320&i=1&a=true&y=%2F29636627%2C22620349674%2Fblogmado.com_fluid_6&v=1.6.0&x=netpub&r=100&yy=f34f336f7278c146e753e83ab53009ee&zz=a2302996a403f19e6e59ea1be534c7f07672dc1417748ef308fa580490652a4e&aa=5a4fc3df82df6af687e37ede081e671f5224a4c52beec2e57327aa7e874220a3&j=0&n=100&l=1268&t=1669203915247&h=0&d=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 68afddc5fc6dff20732a10e111220622
eff6f5a1bc6cea1bdcb4b62b02d5c345a638c811
e2d9f74c1dc050a2bcd7d6b7a8803b1ec8387e4e4c3b85978742dc182d0b5383
GET /iab?o=474&k=5&b=fetch&xx=15663b3c58a43d9a93f21c260527a47a&s=complete&g=0&p=515.5&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&e=0&w=14f9494694a9078dc2f4ae3c92e41760&z=1c2b3d8f5084c3670b0ffbd768d4c149&m=898&f=dfp&c=FR&q=320&i=1&a=true&y=%2F29636627%2C22620349674%2Fblogmado.com_fluid_6&v=1.6.0&x=netpub&r=100&yy=f34f336f7278c146e753e83ab53009ee&zz=a2302996a403f19e6e59ea1be534c7f07672dc1417748ef308fa580490652a4e&aa=5a4fc3df82df6af687e37ede081e671f5224a4c52beec2e57327aa7e874220a3&j=0&n=100&l=1268&t=1669203915247&h=0&d=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F HTTP/1.1
Host: px.netpub.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 11:45:15 GMT
content-type: image/png
access-control-allow-origin: *
access-control-allow-headers: X-HTTPREQUEST
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W9EYgv%2FZ6NBqr53%2BAoyRVxISzcHj4t1Shw0t7WqfrM7srxtpVFA1a5f0Rx7ljrvA%2BNZsaijjgO%2BAqmvm1IWRvsuCCFRS5HlrqwmxRSwu7GxTPNSF99pDUWII2dslkEMNlA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76e9a8596d900b3d-OSL
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4b881d726e25132b1fdb29458a277e09
4009ab16c34b6e4a1dc675819c5467af74133b9a
e641e981ae28652eb5d8dee36a088fc037f76c6314cabca5c26eb979e9340618
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E641E981AE28652EB5D8DEE36A088FC037F76C6314CABCA5C26EB979E9340618"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3579
Expires: Wed, 23 Nov 2022 12:44:55 GMT
Date: Wed, 23 Nov 2022 11:45:16 GMT
Connection: keep-alive
hal9000.redintelligence.net/zone/mq1e9wqsk7c5?subid=&gdpr=-1&gdpr_consent=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCACENywd-Y_OTFZmMmAfY-rugBMm5opxp3LDNztUP8C4QASDj4LwjYMOEgICYGMgBCakCNQR7uIpOsT6oAwGqBJACT9ADpxOPRIn7k64t4hu1i2Ls7DMg2ADrY6WMZLmu0TS_3LHJO23Y9NOkv3YHVDae_eVl17rNWbYom5OGGTH0Qz6c-NLnfBJ4ZSFY7p0jBQmn9bzcbEd7ogE065kXxd509uI6Fnc_3ciZIO4HQ6uUfxwtmlJ5AUtgpA7aZpPo29ct8Huync9HIGBM-VDqSppGPJhAsYpCmt9JcxcjWcM1K-JViCRvTi5TSFi6CSv0Qpb36w2bTurgqq4hCGslK8--b-VQd7MWRXkCgTIPg1JfJ25_sZEJyfCVyeUoSnBJy3blTOyHlIt3DAK5r7n5pahO_odMLv-El0X03uPP-IztMDvAXQdGYW2LISnlgO6GQeDABMG9lPzzA-AEA5AGAaAGTYAHrK31nwOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAf_nrECqAffn7EC2AcA0ggRCIDhgBAQARgdMgKqAjoCgECACgOYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSSwDq26N9sPvcK8VY41HlcyINoyNYG4MMLUoXgZJQprnw5QtEp8eMBxMWmlJERWSDgM0SnBlomDurvdfUzSxwiipQXuGugZup0Y3SLhgBIBM%26sig%3DAOD64_2Kyr6wYIWKvtMijZ7ocrLKvrR4ew%26client%3Dca-pub-3379969116950199%26dbm_c%3DAKAmf-CgyRADIaZPxz-Ly_Ytpm7MGbSfL_Kdbgwd3jxE3gjK0eDADBfHmYGh3Sf2MiEzaOpVGUMvNqyPfiudW1rYW-nQWDK7KXH11fKBMpvYPKaeGlkNW_UI391iPHroNfWIx2V8ehseyVLdzzSSUFs1wWOzRZy3XbFodFYq0glfnWCj6q0cdVk%26cry%3D1%26dbm_d%3DAKAmf-A3MUZnMRd-blTsL0ilNr645KxYXyvzm59XOEQheS_SgRtrk4ZFK2B2A82kHxBf6XS9KbE1XHdVOS_uKUviLO2raBCu7NbddS6pPWOqjkysEJexb0b02Y_CvM3uQEnzYMPDjyah9CXJqmsbKe0GRgsdpl3CvALxcgAmrt8XoqTnZEANQI8uLycSC739icxXe6Gu5uaohP2yiyhU2E0-cGHpr8eqi_ar5xC7AlS6oJrwUAsMHERlABQQnfEbDF1nyXm23erRmZtzy5HjVfO6OH2O1thKoRLh-g5dmNKwlgiGq8iKbVpyakBRRAYPuSDNgVCdpQB8MmdFTmJ-Bi_wWOjxPy6jyuKgrRtaDxVJSCqKnVlxCB43VsGKy1YkCfMScv3MIOCqNZokSqrLfoX30HK39yy7LqvqSm-HV4GfNvf0lC5V66qbkFXjJyj1PKR76eHRG44986QEblv6alZyGs-kq1lUC4KgzYH4c0DcpcqEv4RYlNjM-sJKyQyj9Ewt-NlCbV8I4t_ST0gm7t6HhHRn9KdcJWq2AxehJW6CHPovSDHsiLg5jv8y06IzzAnEf34WHiEaBSyKJg0bV121IKw3N8b0nPQhrmlNeVUWXVD2aqk54NyQaBPPTuHHvoSb-Hacx79enxoFAm3jnbNbQZ8TnL5ikg%26adurl%3D
200 OK 4.2 kB URL HTTP/1.1 hal9000.redintelligence.net/zone/mq1e9wqsk7c5?subid=&gdpr=-1&gdpr_consent=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCACENywd-Y_OTFZmMmAfY-rugBMm5opxp3LDNztUP8C4QASDj4LwjYMOEgICYGMgBCakCNQR7uIpOsT6oAwGqBJACT9ADpxOPRIn7k64t4hu1i2Ls7DMg2ADrY6WMZLmu0TS_3LHJO23Y9NOkv3YHVDae_eVl17rNWbYom5OGGTH0Qz6c-NLnfBJ4ZSFY7p0jBQmn9bzcbEd7ogE065kXxd509uI6Fnc_3ciZIO4HQ6uUfxwtmlJ5AUtgpA7aZpPo29ct8Huync9HIGBM-VDqSppGPJhAsYpCmt9JcxcjWcM1K-JViCRvTi5TSFi6CSv0Qpb36w2bTurgqq4hCGslK8--b-VQd7MWRXkCgTIPg1JfJ25_sZEJyfCVyeUoSnBJy3blTOyHlIt3DAK5r7n5pahO_odMLv-El0X03uPP-IztMDvAXQdGYW2LISnlgO6GQeDABMG9lPzzA-AEA5AGAaAGTYAHrK31nwOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAf_nrECqAffn7EC2AcA0ggRCIDhgBAQARgdMgKqAjoCgECACgOYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSSwDq26N9sPvcK8VY41HlcyINoyNYG4MMLUoXgZJQprnw5QtEp8eMBxMWmlJERWSDgM0SnBlomDurvdfUzSxwiipQXuGugZup0Y3SLhgBIBM%26sig%3DAOD64_2Kyr6wYIWKvtMijZ7ocrLKvrR4ew%26client%3Dca-pub-3379969116950199%26dbm_c%3DAKAmf-CgyRADIaZPxz-Ly_Ytpm7MGbSfL_Kdbgwd3jxE3gjK0eDADBfHmYGh3Sf2MiEzaOpVGUMvNqyPfiudW1rYW-nQWDK7KXH11fKBMpvYPKaeGlkNW_UI391iPHroNfWIx2V8ehseyVLdzzSSUFs1wWOzRZy3XbFodFYq0glfnWCj6q0cdVk%26cry%3D1%26dbm_d%3DAKAmf-A3MUZnMRd-blTsL0ilNr645KxYXyvzm59XOEQheS_SgRtrk4ZFK2B2A82kHxBf6XS9KbE1XHdVOS_uKUviLO2raBCu7NbddS6pPWOqjkysEJexb0b02Y_CvM3uQEnzYMPDjyah9CXJqmsbKe0GRgsdpl3CvALxcgAmrt8XoqTnZEANQI8uLycSC739icxXe6Gu5uaohP2yiyhU2E0-cGHpr8eqi_ar5xC7AlS6oJrwUAsMHERlABQQnfEbDF1nyXm23erRmZtzy5HjVfO6OH2O1thKoRLh-g5dmNKwlgiGq8iKbVpyakBRRAYPuSDNgVCdpQB8MmdFTmJ-Bi_wWOjxPy6jyuKgrRtaDxVJSCqKnVlxCB43VsGKy1YkCfMScv3MIOCqNZokSqrLfoX30HK39yy7LqvqSm-HV4GfNvf0lC5V66qbkFXjJyj1PKR76eHRG44986QEblv6alZyGs-kq1lUC4KgzYH4c0DcpcqEv4RYlNjM-sJKyQyj9Ewt-NlCbV8I4t_ST0gm7t6HhHRn9KdcJWq2AxehJW6CHPovSDHsiLg5jv8y06IzzAnEf34WHiEaBSyKJg0bV121IKw3N8b0nPQhrmlNeVUWXVD2aqk54NyQaBPPTuHHvoSb-Hacx79enxoFAm3jnbNbQZ8TnL5ikg%26adurl%3D
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (1825), with CRLF line terminators
Hash 77f4373cb229381786c396f46ad7032b
cf7c884b72c4b8da78a5b073aaa9ecb6c4e56359
7e72ea0ad94963fd9121af60e97c7212230167b1dd2f24a0dd26b7259e609399
GET /zone/mq1e9wqsk7c5?subid=&gdpr=-1&gdpr_consent=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCACENywd-Y_OTFZmMmAfY-rugBMm5opxp3LDNztUP8C4QASDj4LwjYMOEgICYGMgBCakCNQR7uIpOsT6oAwGqBJACT9ADpxOPRIn7k64t4hu1i2Ls7DMg2ADrY6WMZLmu0TS_3LHJO23Y9NOkv3YHVDae_eVl17rNWbYom5OGGTH0Qz6c-NLnfBJ4ZSFY7p0jBQmn9bzcbEd7ogE065kXxd509uI6Fnc_3ciZIO4HQ6uUfxwtmlJ5AUtgpA7aZpPo29ct8Huync9HIGBM-VDqSppGPJhAsYpCmt9JcxcjWcM1K-JViCRvTi5TSFi6CSv0Qpb36w2bTurgqq4hCGslK8--b-VQd7MWRXkCgTIPg1JfJ25_sZEJyfCVyeUoSnBJy3blTOyHlIt3DAK5r7n5pahO_odMLv-El0X03uPP-IztMDvAXQdGYW2LISnlgO6GQeDABMG9lPzzA-AEA5AGAaAGTYAHrK31nwOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAf_nrECqAffn7EC2AcA0ggRCIDhgBAQARgdMgKqAjoCgECACgOYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSSwDq26N9sPvcK8VY41HlcyINoyNYG4MMLUoXgZJQprnw5QtEp8eMBxMWmlJERWSDgM0SnBlomDurvdfUzSxwiipQXuGugZup0Y3SLhgBIBM%26sig%3DAOD64_2Kyr6wYIWKvtMijZ7ocrLKvrR4ew%26client%3Dca-pub-3379969116950199%26dbm_c%3DAKAmf-CgyRADIaZPxz-Ly_Ytpm7MGbSfL_Kdbgwd3jxE3gjK0eDADBfHmYGh3Sf2MiEzaOpVGUMvNqyPfiudW1rYW-nQWDK7KXH11fKBMpvYPKaeGlkNW_UI391iPHroNfWIx2V8ehseyVLdzzSSUFs1wWOzRZy3XbFodFYq0glfnWCj6q0cdVk%26cry%3D1%26dbm_d%3DAKAmf-A3MUZnMRd-blTsL0ilNr645KxYXyvzm59XOEQheS_SgRtrk4ZFK2B2A82kHxBf6XS9KbE1XHdVOS_uKUviLO2raBCu7NbddS6pPWOqjkysEJexb0b02Y_CvM3uQEnzYMPDjyah9CXJqmsbKe0GRgsdpl3CvALxcgAmrt8XoqTnZEANQI8uLycSC739icxXe6Gu5uaohP2yiyhU2E0-cGHpr8eqi_ar5xC7AlS6oJrwUAsMHERlABQQnfEbDF1nyXm23erRmZtzy5HjVfO6OH2O1thKoRLh-g5dmNKwlgiGq8iKbVpyakBRRAYPuSDNgVCdpQB8MmdFTmJ-Bi_wWOjxPy6jyuKgrRtaDxVJSCqKnVlxCB43VsGKy1YkCfMScv3MIOCqNZokSqrLfoX30HK39yy7LqvqSm-HV4GfNvf0lC5V66qbkFXjJyj1PKR76eHRG44986QEblv6alZyGs-kq1lUC4KgzYH4c0DcpcqEv4RYlNjM-sJKyQyj9Ewt-NlCbV8I4t_ST0gm7t6HhHRn9KdcJWq2AxehJW6CHPovSDHsiLg5jv8y06IzzAnEf34WHiEaBSyKJg0bV121IKw3N8b0nPQhrmlNeVUWXVD2aqk54NyQaBPPTuHHvoSb-Hacx79enxoFAm3jnbNbQZ8TnL5ikg%26adurl%3D HTTP/1.1
Host: hal9000.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad787c420232a4fa81143468b01d0a30.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 11:45:16 GMT
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4220
Connection: close
Content-Type: text/html; charset=UTF-8
cdn.yourwebbars.com/sb/notifications/software/multi/browsers/ff/3/index.html
200 OK 12 kB URL HTTP/2 cdn.yourwebbars.com/sb/notifications/software/multi/browsers/ff/3/index.html
IP
File type HTML document text\012- HTML document, ASCII text
Hash 09b1379948ba64adac41659f6961199f
0d9481d67ddd86764e30d48078bf199f1e41e246
7fe780c1d12344c9d87d450aee9b27844ab882b8008498ee371ab2be2b18ddb3
GET /sb/notifications/software/multi/browsers/ff/3/index.html HTTP/1.1
Host: cdn.yourwebbars.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://blogmado.com
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 23 Nov 2022 11:45:16 GMT
content-type: text/html
last-modified: Thu, 08 Sep 2022 07:49:53 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u%2BUK0Alu%2FHPmicBWZCbkyDQmPOMk4x99xwCMgOLy7iaGFqQ%2BLMyTTvM84t4dxWTSPfSTcDf%2Bm8iF2Gy1upwuKfYUvLvT0%2FaSQ45BW2TMMl6V6ACePP7k%2BhZTQKYrGGDoEdC60Xk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e9a8570f45b51b-OSL
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e5bf97b0f8f82cd1712b34a118315c7e
8ebf659b5a09b932ed6ee219fd28803238f2816a
e64ddbc741840c4a933626710273fc41231d91a6a69b981ede401a4d6f59f7c5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E64DDBC741840C4A933626710273FC41231D91A6A69B981EDE401A4D6F59F7C5"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12836
Expires: Wed, 23 Nov 2022 15:19:12 GMT
Date: Wed, 23 Nov 2022 11:45:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e5bf97b0f8f82cd1712b34a118315c7e
8ebf659b5a09b932ed6ee219fd28803238f2816a
e64ddbc741840c4a933626710273fc41231d91a6a69b981ede401a4d6f59f7c5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E64DDBC741840C4A933626710273FC41231D91A6A69B981EDE401A4D6F59F7C5"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12836
Expires: Wed, 23 Nov 2022 15:19:12 GMT
Date: Wed, 23 Nov 2022 11:45:16 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 69036b01998fdb61310f2a30f4dfd2c3
af2ad3a4adc09b6f39e50337ec056bad1bc5d420
8d5426591968503b695aba5b1505000b83b96a12e781dc6bb445b240e9b51f5b
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "8D5426591968503B695ABA5B1505000B83B96A12E781DC6BB445B240E9B51F5B"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3901
Expires: Wed, 23 Nov 2022 12:50:17 GMT
Date: Wed, 23 Nov 2022 11:45:16 GMT
Connection: keep-alive
relativelyweptcurls.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2Fsb%2Fnotifications%2Fsoftware%2Fmulti%2Fbrowsers%2Fff%2F3%2Findex.html&l=1525&fd=703
200 OK 0 B URL HTTP/1.1 relativelyweptcurls.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2Fsb%2Fnotifications%2Fsoftware%2Fmulti%2Fbrowsers%2Fff%2F3%2Findex.html&l=1525&fd=703
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2Fsb%2Fnotifications%2Fsoftware%2Fmulti%2Fbrowsers%2Fff%2F3%2Findex.html&l=1525&fd=703 HTTP/1.1
Host: relativelyweptcurls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Cookie: u_pl=16650200; uid_id2=517e04f4-448d-4c49-8f65-b20d35887496:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec01ffd36dfbce3d569baf8d846cd7bc65=[3760951]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 23 Nov 2022 11:45:16 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
cdn.creative-bars1.com/sb/notifications/software/multi/browsers/ff/3/img/close.png
200 OK 6.0 kB URL HTTP/2 cdn.creative-bars1.com/sb/notifications/software/multi/browsers/ff/3/img/close.png
IP
File type PNG image data, 522 x 391, 8-bit/color RGBA, non-interlaced\012- data
Hash c489ce2c491a22ee37a55e26a92dfd73
2fa588ab09e94dd902e5bd24b48f98ad1949c9d6
1eed147c7d5de6291c25fbc5274830c12d5549262fb144271576d4e15966e5bd
GET /sb/notifications/software/multi/browsers/ff/3/img/close.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 11:45:16 GMT
content-type: image/png
content-length: 5982
last-modified: Thu, 08 Sep 2022 07:49:57 GMT
etag: "63199ea5-175e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 352161
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DSTq9Mi8aqsJvE2ypgcwzatztP4YY5zhjdYDo91v9SZILhw339cSDK99yzliH%2FiUcGkUbh4StTGUgbj3IDhtcHlMg%2FrCeIBcsSNqknDm43Ui%2BfGUZQGv%2FaPrGl71%2Bh%2FykVDNYG8%2FnRLq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e9a85c2c4b76f0-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/software/multi/browsers/ff/3/img/update-icon.png
200 OK 175 kB URL HTTP/2 cdn.creative-bars1.com/sb/notifications/software/multi/browsers/ff/3/img/update-icon.png
IP
File type PNG image data, 452 x 453, 8-bit/color RGBA, non-interlaced\012- data
Size 175 kB (174730 bytes)
Hash 85bc2f8a287afa33ac84c90178055d00
c98e7ebd06397a77a20607f55fe4ebf1b57ca334
85d20d101efc753f9b0619a33901e1689d1e0c11a46bf6d6d657c1393542cc30
GET /sb/notifications/software/multi/browsers/ff/3/img/update-icon.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 11:45:16 GMT
content-type: image/png
content-length: 174730
last-modified: Thu, 08 Sep 2022 07:49:58 GMT
etag: "63199ea6-2aa8a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 352161
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Nn7sVpUFF3jqU8a%2BxcPre1zL4wLiBCNaM%2FraVljrwvDrgALkiprk267VC0XY1OxXBz9t9xwBdvAQ8i5PGGr2yh64ibDbx3zrWwdmJB99XcPDD%2BOibdXklx2AYsXNRBuWEKLXIViXd5EK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e9a85c2c4e76f0-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/software/multi/browsers/ff/3/js/jquery.min.js
200 OK 40 kB URL HTTP/2 cdn.creative-bars1.com/sb/notifications/software/multi/browsers/ff/3/js/jquery.min.js
IP
File type ASCII text, with very long lines (32025), with CRLF line terminators
Hash 4273705a3db08fcc9af24c36b01e0558
16404843210594b12e5bb5ffd24347d81bf33e89
81db4d9d79f211366abde8addf3d05823c87586f40f925dc1e1e2a11cdfad821
GET /sb/notifications/software/multi/browsers/ff/3/js/jquery.min.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 11:45:16 GMT
content-type: application/javascript
last-modified: Thu, 08 Sep 2022 07:49:59 GMT
etag: W/"63199ea7-149a0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 352161
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b9620S3Aoxv5ce8jzaez5xziPpVaej1di%2FGGIdTkmzvPPhuvPzD%2Fx8DMzUsiUcP1l%2F3cb%2FZeTSvd%2F0PuX8zctksCik2aadKeQsofJaXWfcQ7RPpWBXdHd206YZ2rImg6E9CPPqYLHYK8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e9a85c2c5076f0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
px.netpub.media/iab?y=%2F112081842%2C22620349674%2Fblogmado.com_336x280_banner1_marco2&c=FR&g=0&s=complete&yy=e57d0178b8e46c2d872be9636dc62597&w=14f9494694a9078dc2f4ae3c92e41760&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&zz=24fac1c26125a39afd0aa5ac58135f3216b75e1533eebfa826bfb5a9838d817f&r=280&j=0&n=100&v=1.6.0&b=object&a=true&xx=ddd2f09014d68a254357be908a6d89fd&t=1669203915723&q=336&o=466&d=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&i=1&z=1c2b3d8f5084c3670b0ffbd768d4c149&x=netpub&e=0&aa=e35100fa0fd83af175d97a7addde33550875c3e52102a799311624a412bf988e&k=2&l=1268&p=918.5&h=0&m=898&f=dfp
200 OK 527 B URL HTTP/2 px.netpub.media/iab?y=%2F112081842%2C22620349674%2Fblogmado.com_336x280_banner1_marco2&c=FR&g=0&s=complete&yy=e57d0178b8e46c2d872be9636dc62597&w=14f9494694a9078dc2f4ae3c92e41760&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&zz=24fac1c26125a39afd0aa5ac58135f3216b75e1533eebfa826bfb5a9838d817f&r=280&j=0&n=100&v=1.6.0&b=object&a=true&xx=ddd2f09014d68a254357be908a6d89fd&t=1669203915723&q=336&o=466&d=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&i=1&z=1c2b3d8f5084c3670b0ffbd768d4c149&x=netpub&e=0&aa=e35100fa0fd83af175d97a7addde33550875c3e52102a799311624a412bf988e&k=2&l=1268&p=918.5&h=0&m=898&f=dfp
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 796a0c19265fe2975fd24963f13b9835
125d5b2a3a5b4c8dde4fb22834986db1f685de4b
fec0f5477c75409ba60b2f82aa90d349d555d91fbcd412a171a4cb1d40969cab
GET /iab?y=%2F112081842%2C22620349674%2Fblogmado.com_336x280_banner1_marco2&c=FR&g=0&s=complete&yy=e57d0178b8e46c2d872be9636dc62597&w=14f9494694a9078dc2f4ae3c92e41760&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&zz=24fac1c26125a39afd0aa5ac58135f3216b75e1533eebfa826bfb5a9838d817f&r=280&j=0&n=100&v=1.6.0&b=object&a=true&xx=ddd2f09014d68a254357be908a6d89fd&t=1669203915723&q=336&o=466&d=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&i=1&z=1c2b3d8f5084c3670b0ffbd768d4c149&x=netpub&e=0&aa=e35100fa0fd83af175d97a7addde33550875c3e52102a799311624a412bf988e&k=2&l=1268&p=918.5&h=0&m=898&f=dfp HTTP/1.1
Host: px.netpub.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 11:45:16 GMT
content-type: image/png
access-control-allow-origin: *
access-control-allow-headers: X-HTTPREQUEST
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0G8eKIRXDQhbAJwkEiFIjkcsea6X2rhCDOQ8v3PIyjiYsZgzXVdENjNsoGRca%2BHsRmBdYHGAcMMnshU%2FRGiln3FFlGh2df37Kc1EBlpelAekbO%2F4KIrV4O61FhTzWEE4tQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76e9a85c59350b3d-OSL
X-Firefox-Spdy: h2
hal900014.redintelligence.net/request.php?zone=mq1e9wqsk7c5&nw=20&renderingType=javascript&namespace=c3518b1743&subid=&uid=8eda539526cc7675&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=320x100&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCACENywd-Y_OTFZmMmAfY-rugBMm5opxp3LDNztUP8C4QASDj4LwjYMOEgICYGMgBCakCNQR7uIpOsT6oAwGqBJACT9ADpxOPRIn7k64t4hu1i2Ls7DMg2ADrY6WMZLmu0TS_3LHJO23Y9NOkv3YHVDae_eVl17rNWbYom5OGGTH0Qz6c-NLnfBJ4ZSFY7p0jBQmn9bzcbEd7ogE065kXxd509uI6Fnc_3ciZIO4HQ6uUfxwtmlJ5AUtgpA7aZpPo29ct8Huync9HIGBM-VDqSppGPJhAsYpCmt9JcxcjWcM1K-JViCRvTi5TSFi6CSv0Qpb36w2bTurgqq4hCGslK8--b-VQd7MWRXkCgTIPg1JfJ25_sZEJyfCVyeUoSnBJy3blTOyHlIt3DAK5r7n5pahO_odMLv-El0X03uPP-IztMDvAXQdGYW2LISnlgO6GQeDABMG9lPzzA-AEA5AGAaAGTYAHrK31nwOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAf_nrECqAffn7EC2AcA0ggRCIDhgBAQARgdMgKqAjoCgECACgOYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSSwDq26N9sPvcK8VY41HlcyINoyNYG4MMLUoXgZJQprnw5QtEp8eMBxMWmlJERWSDgM0SnBlomDurvdfUzSxwiipQXuGugZup0Y3SLhgBIBM%26sig%3DAOD64_2Kyr6wYIWKvtMijZ7ocrLKvrR4ew%26client%3Dca-pub-3379969116950199%26dbm_c%3DAKAmf-CgyRADIaZPxz-Ly_Ytpm7MGbSfL_Kdbgwd3jxE3gjK0eDADBfHmYGh3Sf2MiEzaOpVGUMvNqyPfiudW1rYW-nQWDK7KXH11fKBMpvYPKaeGlkNW_UI391iPHroNfWIx2V8ehseyVLdzzSSUFs1wWOzRZy3XbFodFYq0glfnWCj6q0cdVk%26cry%3D1%26dbm_d%3DAKAmf-A3MUZnMRd-blTsL0ilNr645KxYXyvzm59XOEQheS_SgRtrk4ZFK2B2A82kHxBf6XS9KbE1XHdVOS_uKUviLO2raBCu7NbddS6pPWOqjkysEJexb0b02Y_CvM3uQEnzYMPDjyah9CXJqmsbKe0GRgsdpl3CvALxcgAmrt8XoqTnZEANQI8uLycSC739icxXe6Gu5uaohP2yiyhU2E0-cGHpr8eqi_ar5xC7AlS6oJrwUAsMHERlABQQnfEbDF1nyXm23erRmZtzy5HjVfO6OH2O1thKoRLh-g5dmNKwlgiGq8iKbVpyakBRRAYPuSDNgVCdpQB8MmdFTmJ-Bi_wWOjxPy6jyuKgrRtaDxVJSCqKnVlxCB43VsGKy1YkCfMScv3MIOCqNZokSqrLfoX30HK39yy7LqvqSm-HV4GfNvf0lC5V66qbkFXjJyj1PKR76eHRG44986QEblv6alZyGs-kq1lUC4KgzYH4c0DcpcqEv4RYlNjM-sJKyQyj9Ewt-NlCbV8I4t_ST0gm7t6HhHRn9KdcJWq2AxehJW6CHPovSDHsiLg5jv8y06IzzAnEf34WHiEaBSyKJg0bV121IKw3N8b0nPQhrmlNeVUWXVD2aqk54NyQaBPPTuHHvoSb-Hacx79enxoFAm3jnbNbQZ8TnL5ikg%26adurl%3D&documentReferer=https%3A%2F%2Fblogmado.com%2F&ancestorOrigins=null&random=661640908336&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0
302 Found 0 B URL HTTP/1.1 hal900014.redintelligence.net/request.php?zone=mq1e9wqsk7c5&nw=20&renderingType=javascript&namespace=c3518b1743&subid=&uid=8eda539526cc7675&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=320x100&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCACENywd-Y_OTFZmMmAfY-rugBMm5opxp3LDNztUP8C4QASDj4LwjYMOEgICYGMgBCakCNQR7uIpOsT6oAwGqBJACT9ADpxOPRIn7k64t4hu1i2Ls7DMg2ADrY6WMZLmu0TS_3LHJO23Y9NOkv3YHVDae_eVl17rNWbYom5OGGTH0Qz6c-NLnfBJ4ZSFY7p0jBQmn9bzcbEd7ogE065kXxd509uI6Fnc_3ciZIO4HQ6uUfxwtmlJ5AUtgpA7aZpPo29ct8Huync9HIGBM-VDqSppGPJhAsYpCmt9JcxcjWcM1K-JViCRvTi5TSFi6CSv0Qpb36w2bTurgqq4hCGslK8--b-VQd7MWRXkCgTIPg1JfJ25_sZEJyfCVyeUoSnBJy3blTOyHlIt3DAK5r7n5pahO_odMLv-El0X03uPP-IztMDvAXQdGYW2LISnlgO6GQeDABMG9lPzzA-AEA5AGAaAGTYAHrK31nwOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAf_nrECqAffn7EC2AcA0ggRCIDhgBAQARgdMgKqAjoCgECACgOYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSSwDq26N9sPvcK8VY41HlcyINoyNYG4MMLUoXgZJQprnw5QtEp8eMBxMWmlJERWSDgM0SnBlomDurvdfUzSxwiipQXuGugZup0Y3SLhgBIBM%26sig%3DAOD64_2Kyr6wYIWKvtMijZ7ocrLKvrR4ew%26client%3Dca-pub-3379969116950199%26dbm_c%3DAKAmf-CgyRADIaZPxz-Ly_Ytpm7MGbSfL_Kdbgwd3jxE3gjK0eDADBfHmYGh3Sf2MiEzaOpVGUMvNqyPfiudW1rYW-nQWDK7KXH11fKBMpvYPKaeGlkNW_UI391iPHroNfWIx2V8ehseyVLdzzSSUFs1wWOzRZy3XbFodFYq0glfnWCj6q0cdVk%26cry%3D1%26dbm_d%3DAKAmf-A3MUZnMRd-blTsL0ilNr645KxYXyvzm59XOEQheS_SgRtrk4ZFK2B2A82kHxBf6XS9KbE1XHdVOS_uKUviLO2raBCu7NbddS6pPWOqjkysEJexb0b02Y_CvM3uQEnzYMPDjyah9CXJqmsbKe0GRgsdpl3CvALxcgAmrt8XoqTnZEANQI8uLycSC739icxXe6Gu5uaohP2yiyhU2E0-cGHpr8eqi_ar5xC7AlS6oJrwUAsMHERlABQQnfEbDF1nyXm23erRmZtzy5HjVfO6OH2O1thKoRLh-g5dmNKwlgiGq8iKbVpyakBRRAYPuSDNgVCdpQB8MmdFTmJ-Bi_wWOjxPy6jyuKgrRtaDxVJSCqKnVlxCB43VsGKy1YkCfMScv3MIOCqNZokSqrLfoX30HK39yy7LqvqSm-HV4GfNvf0lC5V66qbkFXjJyj1PKR76eHRG44986QEblv6alZyGs-kq1lUC4KgzYH4c0DcpcqEv4RYlNjM-sJKyQyj9Ewt-NlCbV8I4t_ST0gm7t6HhHRn9KdcJWq2AxehJW6CHPovSDHsiLg5jv8y06IzzAnEf34WHiEaBSyKJg0bV121IKw3N8b0nPQhrmlNeVUWXVD2aqk54NyQaBPPTuHHvoSb-Hacx79enxoFAm3jnbNbQZ8TnL5ikg%26adurl%3D&documentReferer=https%3A%2F%2Fblogmado.com%2F&ancestorOrigins=null&random=661640908336&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /request.php?zone=mq1e9wqsk7c5&nw=20&renderingType=javascript&namespace=c3518b1743&subid=&uid=8eda539526cc7675&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=320x100&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCACENywd-Y_OTFZmMmAfY-rugBMm5opxp3LDNztUP8C4QASDj4LwjYMOEgICYGMgBCakCNQR7uIpOsT6oAwGqBJACT9ADpxOPRIn7k64t4hu1i2Ls7DMg2ADrY6WMZLmu0TS_3LHJO23Y9NOkv3YHVDae_eVl17rNWbYom5OGGTH0Qz6c-NLnfBJ4ZSFY7p0jBQmn9bzcbEd7ogE065kXxd509uI6Fnc_3ciZIO4HQ6uUfxwtmlJ5AUtgpA7aZpPo29ct8Huync9HIGBM-VDqSppGPJhAsYpCmt9JcxcjWcM1K-JViCRvTi5TSFi6CSv0Qpb36w2bTurgqq4hCGslK8--b-VQd7MWRXkCgTIPg1JfJ25_sZEJyfCVyeUoSnBJy3blTOyHlIt3DAK5r7n5pahO_odMLv-El0X03uPP-IztMDvAXQdGYW2LISnlgO6GQeDABMG9lPzzA-AEA5AGAaAGTYAHrK31nwOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAf_nrECqAffn7EC2AcA0ggRCIDhgBAQARgdMgKqAjoCgECACgOYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSSwDq26N9sPvcK8VY41HlcyINoyNYG4MMLUoXgZJQprnw5QtEp8eMBxMWmlJERWSDgM0SnBlomDurvdfUzSxwiipQXuGugZup0Y3SLhgBIBM%26sig%3DAOD64_2Kyr6wYIWKvtMijZ7ocrLKvrR4ew%26client%3Dca-pub-3379969116950199%26dbm_c%3DAKAmf-CgyRADIaZPxz-Ly_Ytpm7MGbSfL_Kdbgwd3jxE3gjK0eDADBfHmYGh3Sf2MiEzaOpVGUMvNqyPfiudW1rYW-nQWDK7KXH11fKBMpvYPKaeGlkNW_UI391iPHroNfWIx2V8ehseyVLdzzSSUFs1wWOzRZy3XbFodFYq0glfnWCj6q0cdVk%26cry%3D1%26dbm_d%3DAKAmf-A3MUZnMRd-blTsL0ilNr645KxYXyvzm59XOEQheS_SgRtrk4ZFK2B2A82kHxBf6XS9KbE1XHdVOS_uKUviLO2raBCu7NbddS6pPWOqjkysEJexb0b02Y_CvM3uQEnzYMPDjyah9CXJqmsbKe0GRgsdpl3CvALxcgAmrt8XoqTnZEANQI8uLycSC739icxXe6Gu5uaohP2yiyhU2E0-cGHpr8eqi_ar5xC7AlS6oJrwUAsMHERlABQQnfEbDF1nyXm23erRmZtzy5HjVfO6OH2O1thKoRLh-g5dmNKwlgiGq8iKbVpyakBRRAYPuSDNgVCdpQB8MmdFTmJ-Bi_wWOjxPy6jyuKgrRtaDxVJSCqKnVlxCB43VsGKy1YkCfMScv3MIOCqNZokSqrLfoX30HK39yy7LqvqSm-HV4GfNvf0lC5V66qbkFXjJyj1PKR76eHRG44986QEblv6alZyGs-kq1lUC4KgzYH4c0DcpcqEv4RYlNjM-sJKyQyj9Ewt-NlCbV8I4t_ST0gm7t6HhHRn9KdcJWq2AxehJW6CHPovSDHsiLg5jv8y06IzzAnEf34WHiEaBSyKJg0bV121IKw3N8b0nPQhrmlNeVUWXVD2aqk54NyQaBPPTuHHvoSb-Hacx79enxoFAm3jnbNbQZ8TnL5ikg%26adurl%3D&documentReferer=https%3A%2F%2Fblogmado.com%2F&ancestorOrigins=null&random=661640908336&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0 HTTP/1.1
Host: hal900014.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad787c420232a4fa81143468b01d0a30.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Wed, 23 Nov 2022 11:45:16 GMT
Server: Apache
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Expires: Wed, 23 Nov 2022 11:45:16 +0100
Pragma: no-cache
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: 8lcfmzhxc8d6_uid=1474f6b147a155bd; expires=Tue, 21-Feb-2023 11:45:16 GMT; Max-Age=7776000; path=/; domain=.redintelligence.net; secure; SameSite=None
Location: request.php?zone=mq1e9wqsk7c5&nw=20&renderingType=javascript&namespace=c3518b1743&subid=&uid=8eda539526cc7675&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=320x100&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCACENywd-Y_OTFZmMmAfY-rugBMm5opxp3LDNztUP8C4QASDj4LwjYMOEgICYGMgBCakCNQR7uIpOsT6oAwGqBJACT9ADpxOPRIn7k64t4hu1i2Ls7DMg2ADrY6WMZLmu0TS_3LHJO23Y9NOkv3YHVDae_eVl17rNWbYom5OGGTH0Qz6c-NLnfBJ4ZSFY7p0jBQmn9bzcbEd7ogE065kXxd509uI6Fnc_3ciZIO4HQ6uUfxwtmlJ5AUtgpA7aZpPo29ct8Huync9HIGBM-VDqSppGPJhAsYpCmt9JcxcjWcM1K-JViCRvTi5TSFi6CSv0Qpb36w2bTurgqq4hCGslK8--b-VQd7MWRXkCgTIPg1JfJ25_sZEJyfCVyeUoSnBJy3blTOyHlIt3DAK5r7n5pahO_odMLv-El0X03uPP-IztMDvAXQdGYW2LISnlgO6GQeDABMG9lPzzA-AEA5AGAaAGTYAHrK31nwOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAf_nrECqAffn7EC2AcA0ggRCIDhgBAQARgdMgKqAjoCgECACgOYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSSwDq26N9sPvcK8VY41HlcyINoyNYG4MMLUoXgZJQprnw5QtEp8eMBxMWmlJERWSDgM0SnBlomDurvdfUzSxwiipQXuGugZup0Y3SLhgBIBM%26sig%3DAOD64_2Kyr6wYIWKvtMijZ7ocrLKvrR4ew%26client%3Dca-pub-3379969116950199%26dbm_c%3DAKAmf-CgyRADIaZPxz-Ly_Ytpm7MGbSfL_Kdbgwd3jxE3gjK0eDADBfHmYGh3Sf2MiEzaOpVGUMvNqyPfiudW1rYW-nQWDK7KXH11fKBMpvYPKaeGlkNW_UI391iPHroNfWIx2V8ehseyVLdzzSSUFs1wWOzRZy3XbFodFYq0glfnWCj6q0cdVk%26cry%3D1%26dbm_d%3DAKAmf-A3MUZnMRd-blTsL0ilNr645KxYXyvzm59XOEQheS_SgRtrk4ZFK2B2A82kHxBf6XS9KbE1XHdVOS_uKUviLO2raBCu7NbddS6pPWOqjkysEJexb0b02Y_CvM3uQEnzYMPDjyah9CXJqmsbKe0GRgsdpl3CvALxcgAmrt8XoqTnZEANQI8uLycSC739icxXe6Gu5uaohP2yiyhU2E0-cGHpr8eqi_ar5xC7AlS6oJrwUAsMHERlABQQnfEbDF1nyXm23erRmZtzy5HjVfO6OH2O1thKoRLh-g5dmNKwlgiGq8iKbVpyakBRRAYPuSDNgVCdpQB8MmdFTmJ-Bi_wWOjxPy6jyuKgrRtaDxVJSCqKnVlxCB43VsGKy1YkCfMScv3MIOCqNZokSqrLfoX30HK39yy7LqvqSm-HV4GfNvf0lC5V66qbkFXjJyj1PKR76eHRG44986QEblv6alZyGs-kq1lUC4KgzYH4c0DcpcqEv4RYlNjM-sJKyQyj9Ewt-NlCbV8I4t_ST0gm7t6HhHRn9KdcJWq2AxehJW6CHPovSDHsiLg5jv8y06IzzAnEf34WHiEaBSyKJg0bV121IKw3N8b0nPQhrmlNeVUWXVD2aqk54NyQaBPPTuHHvoSb-Hacx79enxoFAm3jnbNbQZ8TnL5ikg%26adurl%3D&documentReferer=https%3A%2F%2Fblogmado.com%2F&ancestorOrigins=null&random=661640908336&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0&uidRedirect=1
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8
t.6sc.co/img.gif?event=imp&mcid=84882&cb=3451549296&pid=178373023&cid=28000197
200 OK 43 B URL HTTP/1.1 t.6sc.co/img.gif?event=imp&mcid=84882&cb=3451549296&pid=178373023&cid=28000197
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash f837aa60b6fe83458f790db60d529fc9
14af87ccec7f81bb28d53c84da2fd5a9d5925cda
dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b
GET /img.gif?event=imp&mcid=84882&cb=3451549296&pid=178373023&cid=28000197 HTTP/1.1
Host: t.6sc.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad787c420232a4fa81143468b01d0a30.safeframe.googlesyndication.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
Content-Type: image/gif
ETag: "615ccf16-2b"
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Last-Modified: Tue, 05 Oct 2021 22:17:58 GMT
Pragma: no-cache
Server: nginx/1.14.0 (Ubuntu)
X-Content-Type-Options: nosniff
Content-Length: 43
Date: Wed, 23 Nov 2022 11:45:16 GMT
Connection: keep-alive
Set-Cookie: 6suuid=261f1602c4510000cc077e6327010000a4fb1000; expires=Fri, 22-Nov-2024 11:45:16 GMT; path=/; domain=.6sc.co; SameSite=None; secure
Access-Control-Allow-Origin:
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET,POST
px.netpub.media/iab?y=%2F112081842%2C22620349674%2Fblogmado.com_336x280_banner1_marco2&c=FR&g=1&s=complete&yy=e57d0178b8e46c2d872be9636dc62597&w=14f9494694a9078dc2f4ae3c92e41760&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&zz=24fac1c26125a39afd0aa5ac58135f3216b75e1533eebfa826bfb5a9838d817f&r=280&j=0&n=100&v=1.6.0&b=object&a=true&xx=ddd2f09014d68a254357be908a6d89fd&t=1669203915724&q=336&o=466&d=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&i=1&z=1c2b3d8f5084c3670b0ffbd768d4c149&x=netpub&e=0&aa=e35100fa0fd83af175d97a7addde33550875c3e52102a799311624a412bf988e&k=2&l=1268&p=918.5&h=0&m=898&f=dfp
200 OK 15 kB URL HTTP/2 px.netpub.media/iab?y=%2F112081842%2C22620349674%2Fblogmado.com_336x280_banner1_marco2&c=FR&g=1&s=complete&yy=e57d0178b8e46c2d872be9636dc62597&w=14f9494694a9078dc2f4ae3c92e41760&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&zz=24fac1c26125a39afd0aa5ac58135f3216b75e1533eebfa826bfb5a9838d817f&r=280&j=0&n=100&v=1.6.0&b=object&a=true&xx=ddd2f09014d68a254357be908a6d89fd&t=1669203915724&q=336&o=466&d=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&i=1&z=1c2b3d8f5084c3670b0ffbd768d4c149&x=netpub&e=0&aa=e35100fa0fd83af175d97a7addde33550875c3e52102a799311624a412bf988e&k=2&l=1268&p=918.5&h=0&m=898&f=dfp
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 0ba1ad811591fecf8bef443c6adfa50e
894d4c865363808b25893c1451dfbcc4e82cdf6e
4f3a7d93e9ed2f4a0a9785716bccb40eb6c5b93af9a3da69e8eed63dbd9f8f3e
GET /iab?y=%2F112081842%2C22620349674%2Fblogmado.com_336x280_banner1_marco2&c=FR&g=1&s=complete&yy=e57d0178b8e46c2d872be9636dc62597&w=14f9494694a9078dc2f4ae3c92e41760&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&zz=24fac1c26125a39afd0aa5ac58135f3216b75e1533eebfa826bfb5a9838d817f&r=280&j=0&n=100&v=1.6.0&b=object&a=true&xx=ddd2f09014d68a254357be908a6d89fd&t=1669203915724&q=336&o=466&d=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&i=1&z=1c2b3d8f5084c3670b0ffbd768d4c149&x=netpub&e=0&aa=e35100fa0fd83af175d97a7addde33550875c3e52102a799311624a412bf988e&k=2&l=1268&p=918.5&h=0&m=898&f=dfp HTTP/1.1
Host: px.netpub.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 11:45:16 GMT
content-type: image/png
access-control-allow-origin: *
access-control-allow-headers: X-HTTPREQUEST
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wuNu863oV3aay9RD%2FlU%2B91hNlqSfnFpzTbN%2BUzkCIDTguWwf14djdlZ8CXQcu6c2WBv2yvdArw14ZvuvbT5x5CqpqbTYdpqum96pCdvFNc3HkFLCWuA8mnwFdNlLoxvNVg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76e9a85c69370b3d-OSL
X-Firefox-Spdy: h2
imasdk.googleapis.com/formats/outstream/versioned/prod2/outstream_web_client_20221114_RC00/outstream.min.css
200 OK 2.8 kB URL HTTP/2 imasdk.googleapis.com/formats/outstream/versioned/prod2/outstream_web_client_20221114_RC00/outstream.min.css
IP
File type ASCII text, with very long lines (14567), with no line terminators
Hash 0ea7c62c1ffefe2c0695008097779f30
30701f1fa6b52c2a2216b540f189d654c2a6c458
07686fcb89f2ba27df013c73b4ad2ebf0d28e3103fd0f835450606d0a832c941
GET /formats/outstream/versioned/prod2/outstream_web_client_20221114_RC00/outstream.min.css HTTP/1.1
Host: imasdk.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad787c420232a4fa81143468b01d0a30.safeframe.googlesyndication.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-doubleclick-instream-static"
report-to: {"group":"ads-doubleclick-instream-static","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-instream-static"}]}
timing-allow-origin: *
content-length: 2798
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 21 Nov 2022 15:09:05 GMT
expires: Tue, 21 Nov 2023 15:09:05 GMT
cache-control: public, max-age=31536000
age: 160571
last-modified: Mon, 14 Nov 2022 11:42:41 GMT
content-type: text/css
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
imasdk.googleapis.com/formats/outstream/versioned/prod2/outstream_web_client_20221114_RC00/outstream.min.js
200 OK 134 kB URL HTTP/2 imasdk.googleapis.com/formats/outstream/versioned/prod2/outstream_web_client_20221114_RC00/outstream.min.js
IP
File type ASCII text, with very long lines (2030)
Size 134 kB (134376 bytes)
Hash ce61a18d76e0c3ebed477f52db48cd26
e98faa5a9044daebef824da971d119d609d5e30c
714cc46f053b3cb2b580870303c801ba831daa8b262a8d38be7131d5b333ea15
GET /formats/outstream/versioned/prod2/outstream_web_client_20221114_RC00/outstream.min.js HTTP/1.1
Host: imasdk.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad787c420232a4fa81143468b01d0a30.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-doubleclick-instream-static"
report-to: {"group":"ads-doubleclick-instream-static","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-instream-static"}]}
timing-allow-origin: *
content-length: 134376
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 21 Nov 2022 15:09:05 GMT
expires: Tue, 21 Nov 2023 15:09:05 GMT
cache-control: public, max-age=31536000
age: 160571
last-modified: Mon, 14 Nov 2022 11:42:41 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
unseenreport.com/pxf.gif?uuid=517e04f4-448d-4c49-8f65-b20d35887496&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=7e1d8f1ae70c40a4c328807cbe5300ca&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=11
200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=517e04f4-448d-4c49-8f65-b20d35887496&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=7e1d8f1ae70c40a4c328807cbe5300ca&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=11
IP
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=517e04f4-448d-4c49-8f65-b20d35887496&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=7e1d8f1ae70c40a4c328807cbe5300ca&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=11 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Wed, 23 Nov 2022 11:45:16 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 49fff1bb65159a97e0bb1057c1292142
Strict-Transport-Security: max-age=0; includeSubdomains
unseenreport.com/pxf.gif?uuid=517e04f4-448d-4c49-8f65-b20d35887496&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=01ffd36dfbce3d569baf8d846cd7bc65&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=11
200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=517e04f4-448d-4c49-8f65-b20d35887496&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=01ffd36dfbce3d569baf8d846cd7bc65&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=11
IP
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=517e04f4-448d-4c49-8f65-b20d35887496&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=01ffd36dfbce3d569baf8d846cd7bc65&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=11 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Wed, 23 Nov 2022 11:45:16 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 8dd0067006d96398bcf916c996a1d442
Strict-Transport-Security: max-age=0; includeSubdomains
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0cad81444995839dd0adaf518298011a
97d2d4b41484082ff580dd136d4f3e4dc790846d
409e8883208535817ae29e119508475b362fe773214542a9a562923558c767e5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 11:45:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fstatic.netpub.media/static/14f9494694a9078dc2f4ae3c92e41760.min.js?1669203911795
301 Moved Permanently 8.8 kB URL HTTP/2 fstatic.netpub.media/static/14f9494694a9078dc2f4ae3c92e41760.min.js?1669203911795
IP
Hash 9bb3fd561207495bc397e59334029ecc
86e5f3936b25a0e5e2b11cd87f620b2e1423206b
e37b2da0c942af4f7b166a76292eb9a11784146d0b4d619a94872768f4dc94ba
GET /static/14f9494694a9078dc2f4ae3c92e41760.min.js?1669203911795 HTTP/1.1
Host: fstatic.netpub.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Wed, 23 Nov 2022 11:45:12 GMT
location: https://fstatic.netpub.media/r/14f9494694a9078dc2f4ae3c92e41760/service.js
cache-control: max-age=3600
expires: Wed, 23 Nov 2022 12:45:12 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jcNrgGYCmQX8wxCIrccuFhikt2Mw4Fj%2Bn%2FCkt9s5aK42dwcNVqoxivDslx8BLqgMJXujh%2Fthj9B4fScddwR2vhtrwuSzeP%2BoMf2cPCZzNxOilqlVdvfE05EsSuuEKKeJ32W3KmXE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e9a844cd860b3d-OSL
X-Firefox-Spdy: h2
googleads4.g.doubleclick.net/pcs/view?xai=AKAOjsvrAJegOZrA6rK_0XlQ2WqJ3xwiNchmkUXTmFBYD-R210K_4EN8nAIU-91T5EnlnRpEhZkXcowKIyntoqoMo1MeU4BF-eaMxSQ0nmhVndPwP4HzyrGjsn0G32WRRKYhnoePC1i_AfHk3vs4eto2jqZBtr-d66E5MFjQAz6PPu3WVGuKZoX48Z8bB8NYYl9SL62TTi6c4qt9upXTk0NSJ9QWrSDkbp7tFzBWBvWdheUPGDmVeUzvVumInFh2NhMWm6nJJUoUaRdd0Z0R6Ne9dSp4CXjcU_ype0N_AjCIw2IUqGIJC-useeKWvSxgT_eKiPKIqAhvNJoSTg_rGql5rDAVAmnkuzq8A7TD33QorXm1J304bcTpiONjGfVt15lpxKDYOw0qWqP_bchFA7Z8xiIahiAs5JG3oMLrgc77jv3CGjQNlaQQBC-gxE-6xjcK56ZHEI02yQMk7zDYa0F8srJt5_dDWe_QcTwq-AoxwQAhRPfEP5VjcZCJdkjsIa4qnpgRUh0ESJtsU-0UFKQPtfrGT0v5wgX2M3weubgs9lcx4rRwXGqmW1Ld_cLpUkpvk8c3OIiNkr9QM0BHKe94Z-058qp15GCz7hr8e6yJNlYyJwWx39Pvkg79Hxlicxjij0xuiBvk2GzKYP4ri6HTwHdBkEElUBrCx3d7rR5Uq31CbD2Aimw3tQKoZ_98AMA2nHXI_wrrRcPnpUHhzxuYIG3bjQMNTqj641Kb2OyHe5mE6RKrjAbKn-ZN3xuxdpyDsqWbDLq6gFIwnPWS9IlxeP4SqU3T7ctnb8wT_eY7EdqFG5_ZLz5L6V-pd8OUgwE5uQO2G08LfIl_f8m7m9-aa5_6FZn1o8pFbdfO7boJfruNJ4p7-DnC82MlqNtOZuk_eHBxoZO1XVIq5drkB111g2OzTYgv_u_4e1ddtESGF5HrweZThgioFE-RRNneRZe5ArAVYxOvZ0M4dbeFVfs3LCbUZqLzKC4-mzMF2CyJpVIV8P0wU4Mf9CWNsNUscTNtIUwhblhOR0XC-zIdl3IIg_yZOSi9Tt502sTPv8axKnct4vZBSVVObvdHWOGThZUfpbn2ntqowu6XK8qOkKU14OxsI9N-l9Gc2CbnxCxzqG0BeVwVpDsIGl3XnbV6x7FAwlhvmVrCq9XuR6THZ0i9i7XldN7kAWqiUsJ-sX-6xDIWj-svRtSowMXgI9SgvfH8dXNax3CC_ssDRDtTOPgHLcKJvCMsx4kkxGPLrLELDay1K_w&sai=AMfl-YRdeM9qo0pg6eIgASyE3NkZRiHEtLkYEV_KyKQ8c0LSM_LDBHAMOw7Uk7YyR5dPFtMkN1fP9_cwkzj1FpemQyyUsbD0pWdpfkhhdVbPHAQpfqi9D4D-82VfAHz0AWH1nlqALZfNvMlHTnbaCiEo0bGhVAsHtKYljrhvJo25I1JdnoEsd7xFNmEY5icXKAsRdWRlWSIGPbXz21xYUlOGqHYifdhM-yzB80SS9bGH9RgkI4e_hdYUTTZ-bfVQDYgy8VMI14WF_d42HY1tzA5BQU6ayZwDTXqmixuvXDZyYOoeyIQd&sig=Cg0ArKJSzDd8jy4FcW3zEAE&uach_m=[UACH]&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=1&cbvp=1&cstd=0&cisv=r20221110.41723&arae=0&ftch=1&adurl=
200 OK 0 B URL HTTP/2 googleads4.g.doubleclick.net/pcs/view?xai=AKAOjsvrAJegOZrA6rK_0XlQ2WqJ3xwiNchmkUXTmFBYD-R210K_4EN8nAIU-91T5EnlnRpEhZkXcowKIyntoqoMo1MeU4BF-eaMxSQ0nmhVndPwP4HzyrGjsn0G32WRRKYhnoePC1i_AfHk3vs4eto2jqZBtr-d66E5MFjQAz6PPu3WVGuKZoX48Z8bB8NYYl9SL62TTi6c4qt9upXTk0NSJ9QWrSDkbp7tFzBWBvWdheUPGDmVeUzvVumInFh2NhMWm6nJJUoUaRdd0Z0R6Ne9dSp4CXjcU_ype0N_AjCIw2IUqGIJC-useeKWvSxgT_eKiPKIqAhvNJoSTg_rGql5rDAVAmnkuzq8A7TD33QorXm1J304bcTpiONjGfVt15lpxKDYOw0qWqP_bchFA7Z8xiIahiAs5JG3oMLrgc77jv3CGjQNlaQQBC-gxE-6xjcK56ZHEI02yQMk7zDYa0F8srJt5_dDWe_QcTwq-AoxwQAhRPfEP5VjcZCJdkjsIa4qnpgRUh0ESJtsU-0UFKQPtfrGT0v5wgX2M3weubgs9lcx4rRwXGqmW1Ld_cLpUkpvk8c3OIiNkr9QM0BHKe94Z-058qp15GCz7hr8e6yJNlYyJwWx39Pvkg79Hxlicxjij0xuiBvk2GzKYP4ri6HTwHdBkEElUBrCx3d7rR5Uq31CbD2Aimw3tQKoZ_98AMA2nHXI_wrrRcPnpUHhzxuYIG3bjQMNTqj641Kb2OyHe5mE6RKrjAbKn-ZN3xuxdpyDsqWbDLq6gFIwnPWS9IlxeP4SqU3T7ctnb8wT_eY7EdqFG5_ZLz5L6V-pd8OUgwE5uQO2G08LfIl_f8m7m9-aa5_6FZn1o8pFbdfO7boJfruNJ4p7-DnC82MlqNtOZuk_eHBxoZO1XVIq5drkB111g2OzTYgv_u_4e1ddtESGF5HrweZThgioFE-RRNneRZe5ArAVYxOvZ0M4dbeFVfs3LCbUZqLzKC4-mzMF2CyJpVIV8P0wU4Mf9CWNsNUscTNtIUwhblhOR0XC-zIdl3IIg_yZOSi9Tt502sTPv8axKnct4vZBSVVObvdHWOGThZUfpbn2ntqowu6XK8qOkKU14OxsI9N-l9Gc2CbnxCxzqG0BeVwVpDsIGl3XnbV6x7FAwlhvmVrCq9XuR6THZ0i9i7XldN7kAWqiUsJ-sX-6xDIWj-svRtSowMXgI9SgvfH8dXNax3CC_ssDRDtTOPgHLcKJvCMsx4kkxGPLrLELDay1K_w&sai=AMfl-YRdeM9qo0pg6eIgASyE3NkZRiHEtLkYEV_KyKQ8c0LSM_LDBHAMOw7Uk7YyR5dPFtMkN1fP9_cwkzj1FpemQyyUsbD0pWdpfkhhdVbPHAQpfqi9D4D-82VfAHz0AWH1nlqALZfNvMlHTnbaCiEo0bGhVAsHtKYljrhvJo25I1JdnoEsd7xFNmEY5icXKAsRdWRlWSIGPbXz21xYUlOGqHYifdhM-yzB80SS9bGH9RgkI4e_hdYUTTZ-bfVQDYgy8VMI14WF_d42HY1tzA5BQU6ayZwDTXqmixuvXDZyYOoeyIQd&sig=Cg0ArKJSzDd8jy4FcW3zEAE&uach_m=[UACH]&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=1&cbvp=1&cstd=0&cisv=r20221110.41723&arae=0&ftch=1&adurl=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pcs/view?xai=AKAOjsvrAJegOZrA6rK_0XlQ2WqJ3xwiNchmkUXTmFBYD-R210K_4EN8nAIU-91T5EnlnRpEhZkXcowKIyntoqoMo1MeU4BF-eaMxSQ0nmhVndPwP4HzyrGjsn0G32WRRKYhnoePC1i_AfHk3vs4eto2jqZBtr-d66E5MFjQAz6PPu3WVGuKZoX48Z8bB8NYYl9SL62TTi6c4qt9upXTk0NSJ9QWrSDkbp7tFzBWBvWdheUPGDmVeUzvVumInFh2NhMWm6nJJUoUaRdd0Z0R6Ne9dSp4CXjcU_ype0N_AjCIw2IUqGIJC-useeKWvSxgT_eKiPKIqAhvNJoSTg_rGql5rDAVAmnkuzq8A7TD33QorXm1J304bcTpiONjGfVt15lpxKDYOw0qWqP_bchFA7Z8xiIahiAs5JG3oMLrgc77jv3CGjQNlaQQBC-gxE-6xjcK56ZHEI02yQMk7zDYa0F8srJt5_dDWe_QcTwq-AoxwQAhRPfEP5VjcZCJdkjsIa4qnpgRUh0ESJtsU-0UFKQPtfrGT0v5wgX2M3weubgs9lcx4rRwXGqmW1Ld_cLpUkpvk8c3OIiNkr9QM0BHKe94Z-058qp15GCz7hr8e6yJNlYyJwWx39Pvkg79Hxlicxjij0xuiBvk2GzKYP4ri6HTwHdBkEElUBrCx3d7rR5Uq31CbD2Aimw3tQKoZ_98AMA2nHXI_wrrRcPnpUHhzxuYIG3bjQMNTqj641Kb2OyHe5mE6RKrjAbKn-ZN3xuxdpyDsqWbDLq6gFIwnPWS9IlxeP4SqU3T7ctnb8wT_eY7EdqFG5_ZLz5L6V-pd8OUgwE5uQO2G08LfIl_f8m7m9-aa5_6FZn1o8pFbdfO7boJfruNJ4p7-DnC82MlqNtOZuk_eHBxoZO1XVIq5drkB111g2OzTYgv_u_4e1ddtESGF5HrweZThgioFE-RRNneRZe5ArAVYxOvZ0M4dbeFVfs3LCbUZqLzKC4-mzMF2CyJpVIV8P0wU4Mf9CWNsNUscTNtIUwhblhOR0XC-zIdl3IIg_yZOSi9Tt502sTPv8axKnct4vZBSVVObvdHWOGThZUfpbn2ntqowu6XK8qOkKU14OxsI9N-l9Gc2CbnxCxzqG0BeVwVpDsIGl3XnbV6x7FAwlhvmVrCq9XuR6THZ0i9i7XldN7kAWqiUsJ-sX-6xDIWj-svRtSowMXgI9SgvfH8dXNax3CC_ssDRDtTOPgHLcKJvCMsx4kkxGPLrLELDay1K_w&sai=AMfl-YRdeM9qo0pg6eIgASyE3NkZRiHEtLkYEV_KyKQ8c0LSM_LDBHAMOw7Uk7YyR5dPFtMkN1fP9_cwkzj1FpemQyyUsbD0pWdpfkhhdVbPHAQpfqi9D4D-82VfAHz0AWH1nlqALZfNvMlHTnbaCiEo0bGhVAsHtKYljrhvJo25I1JdnoEsd7xFNmEY5icXKAsRdWRlWSIGPbXz21xYUlOGqHYifdhM-yzB80SS9bGH9RgkI4e_hdYUTTZ-bfVQDYgy8VMI14WF_d42HY1tzA5BQU6ayZwDTXqmixuvXDZyYOoeyIQd&sig=Cg0ArKJSzDd8jy4FcW3zEAE&uach_m=[UACH]&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=1&cbvp=1&cstd=0&cisv=r20221110.41723&arae=0&ftch=1&adurl= HTTP/1.1
Host: googleads4.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ad787c420232a4fa81143468b01d0a30.safeframe.googlesyndication.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
content-security-policy: script-src 'none'; object-src 'none'
cache-control: private
access-control-allow-origin: *
content-type: image/gif
x-content-type-options: nosniff
date: Wed, 23 Nov 2022 11:45:16 GMT
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 23-Nov-2022 12:00:16 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Wed, 23 Nov 2022 11:45:16 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0cad81444995839dd0adaf518298011a
97d2d4b41484082ff580dd136d4f3e4dc790846d
409e8883208535817ae29e119508475b362fe773214542a9a562923558c767e5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 11:45:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads4.g.doubleclick.net/pcs/view?xai=AKAOjsvrAJegOZrA6rK_0XlQ2WqJ3xwiNchmkUXTmFBYD-R210K_4EN8nAIU-91T5EnlnRpEhZkXcowKIyntoqoMo1MeU4BF-eaMxSQ0nmhVndPwP4HzyrGjsn0G32WRRKYhnoePC1i_AfHk3vs4eto2jqZBtr-d66E5MFjQAz6PPu3WVGuKZoX48Z8bB8NYYl9SL62TTi6c4qt9upXTk0NSJ9QWrSDkbp7tFzBWBvWdheUPGDmVeUzvVumInFh2NhMWm6nJJUoUaRdd0Z0R6Ne9dSp4CXjcU_ype0N_AjCIw2IUqGIJC-useeKWvSxgT_eKiPKIqAhvNJoSTg_rGql5rDAVAmnkuzq8A7TD33QorXm1J304bcTpiONjGfVt15lpxKDYOw0qWqP_bchFA7Z8xiIahiAs5JG3oMLrgc77jv3CGjQNlaQQBC-gxE-6xjcK56ZHEI02yQMk7zDYa0F8srJt5_dDWe_QcTwq-AoxwQAhRPfEP5VjcZCJdkjsIa4qnpgRUh0ESJtsU-0UFKQPtfrGT0v5wgX2M3weubgs9lcx4rRwXGqmW1Ld_cLpUkpvk8c3OIiNkr9QM0BHKe94Z-058qp15GCz7hr8e6yJNlYyJwWx39Pvkg79Hxlicxjij0xuiBvk2GzKYP4ri6HTwHdBkEElUBrCx3d7rR5Uq31CbD2Aimw3tQKoZ_98AMA2nHXI_wrrRcPnpUHhzxuYIG3bjQMNTqj641Kb2OyHe5mE6RKrjAbKn-ZN3xuxdpyDsqWbDLq6gFIwnPWS9IlxeP4SqU3T7ctnb8wT_eY7EdqFG5_ZLz5L6V-pd8OUgwE5uQO2G08LfIl_f8m7m9-aa5_6FZn1o8pFbdfO7boJfruNJ4p7-DnC82MlqNtOZuk_eHBxoZO1XVIq5drkB111g2OzTYgv_u_4e1ddtESGF5HrweZThgioFE-RRNneRZe5ArAVYxOvZ0M4dbeFVfs3LCbUZqLzKC4-mzMF2CyJpVIV8P0wU4Mf9CWNsNUscTNtIUwhblhOR0XC-zIdl3IIg_yZOSi9Tt502sTPv8axKnct4vZBSVVObvdHWOGThZUfpbn2ntqowu6XK8qOkKU14OxsI9N-l9Gc2CbnxCxzqG0BeVwVpDsIGl3XnbV6x7FAwlhvmVrCq9XuR6THZ0i9i7XldN7kAWqiUsJ-sX-6xDIWj-svRtSowMXgI9SgvfH8dXNax3CC_ssDRDtTOPgHLcKJvCMsx4kkxGPLrLELDay1K_w&sai=AMfl-YRdeM9qo0pg6eIgASyE3NkZRiHEtLkYEV_KyKQ8c0LSM_LDBHAMOw7Uk7YyR5dPFtMkN1fP9_cwkzj1FpemQyyUsbD0pWdpfkhhdVbPHAQpfqi9D4D-82VfAHz0AWH1nlqALZfNvMlHTnbaCiEo0bGhVAsHtKYljrhvJo25I1JdnoEsd7xFNmEY5icXKAsRdWRlWSIGPbXz21xYUlOGqHYifdhM-yzB80SS9bGH9RgkI4e_hdYUTTZ-bfVQDYgy8VMI14WF_d42HY1tzA5BQU6ayZwDTXqmixuvXDZyYOoeyIQd&sig=Cg0ArKJSzDd8jy4FcW3zEAE&uach_m=[UACH]&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=469&vt=11&dtpt=468&dett=2&cstd=0&cisv=r20221110.41723&arae=0&ftch=1&adurl=
200 OK 0 B URL HTTP/2 googleads4.g.doubleclick.net/pcs/view?xai=AKAOjsvrAJegOZrA6rK_0XlQ2WqJ3xwiNchmkUXTmFBYD-R210K_4EN8nAIU-91T5EnlnRpEhZkXcowKIyntoqoMo1MeU4BF-eaMxSQ0nmhVndPwP4HzyrGjsn0G32WRRKYhnoePC1i_AfHk3vs4eto2jqZBtr-d66E5MFjQAz6PPu3WVGuKZoX48Z8bB8NYYl9SL62TTi6c4qt9upXTk0NSJ9QWrSDkbp7tFzBWBvWdheUPGDmVeUzvVumInFh2NhMWm6nJJUoUaRdd0Z0R6Ne9dSp4CXjcU_ype0N_AjCIw2IUqGIJC-useeKWvSxgT_eKiPKIqAhvNJoSTg_rGql5rDAVAmnkuzq8A7TD33QorXm1J304bcTpiONjGfVt15lpxKDYOw0qWqP_bchFA7Z8xiIahiAs5JG3oMLrgc77jv3CGjQNlaQQBC-gxE-6xjcK56ZHEI02yQMk7zDYa0F8srJt5_dDWe_QcTwq-AoxwQAhRPfEP5VjcZCJdkjsIa4qnpgRUh0ESJtsU-0UFKQPtfrGT0v5wgX2M3weubgs9lcx4rRwXGqmW1Ld_cLpUkpvk8c3OIiNkr9QM0BHKe94Z-058qp15GCz7hr8e6yJNlYyJwWx39Pvkg79Hxlicxjij0xuiBvk2GzKYP4ri6HTwHdBkEElUBrCx3d7rR5Uq31CbD2Aimw3tQKoZ_98AMA2nHXI_wrrRcPnpUHhzxuYIG3bjQMNTqj641Kb2OyHe5mE6RKrjAbKn-ZN3xuxdpyDsqWbDLq6gFIwnPWS9IlxeP4SqU3T7ctnb8wT_eY7EdqFG5_ZLz5L6V-pd8OUgwE5uQO2G08LfIl_f8m7m9-aa5_6FZn1o8pFbdfO7boJfruNJ4p7-DnC82MlqNtOZuk_eHBxoZO1XVIq5drkB111g2OzTYgv_u_4e1ddtESGF5HrweZThgioFE-RRNneRZe5ArAVYxOvZ0M4dbeFVfs3LCbUZqLzKC4-mzMF2CyJpVIV8P0wU4Mf9CWNsNUscTNtIUwhblhOR0XC-zIdl3IIg_yZOSi9Tt502sTPv8axKnct4vZBSVVObvdHWOGThZUfpbn2ntqowu6XK8qOkKU14OxsI9N-l9Gc2CbnxCxzqG0BeVwVpDsIGl3XnbV6x7FAwlhvmVrCq9XuR6THZ0i9i7XldN7kAWqiUsJ-sX-6xDIWj-svRtSowMXgI9SgvfH8dXNax3CC_ssDRDtTOPgHLcKJvCMsx4kkxGPLrLELDay1K_w&sai=AMfl-YRdeM9qo0pg6eIgASyE3NkZRiHEtLkYEV_KyKQ8c0LSM_LDBHAMOw7Uk7YyR5dPFtMkN1fP9_cwkzj1FpemQyyUsbD0pWdpfkhhdVbPHAQpfqi9D4D-82VfAHz0AWH1nlqALZfNvMlHTnbaCiEo0bGhVAsHtKYljrhvJo25I1JdnoEsd7xFNmEY5icXKAsRdWRlWSIGPbXz21xYUlOGqHYifdhM-yzB80SS9bGH9RgkI4e_hdYUTTZ-bfVQDYgy8VMI14WF_d42HY1tzA5BQU6ayZwDTXqmixuvXDZyYOoeyIQd&sig=Cg0ArKJSzDd8jy4FcW3zEAE&uach_m=[UACH]&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=469&vt=11&dtpt=468&dett=2&cstd=0&cisv=r20221110.41723&arae=0&ftch=1&adurl=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pcs/view?xai=AKAOjsvrAJegOZrA6rK_0XlQ2WqJ3xwiNchmkUXTmFBYD-R210K_4EN8nAIU-91T5EnlnRpEhZkXcowKIyntoqoMo1MeU4BF-eaMxSQ0nmhVndPwP4HzyrGjsn0G32WRRKYhnoePC1i_AfHk3vs4eto2jqZBtr-d66E5MFjQAz6PPu3WVGuKZoX48Z8bB8NYYl9SL62TTi6c4qt9upXTk0NSJ9QWrSDkbp7tFzBWBvWdheUPGDmVeUzvVumInFh2NhMWm6nJJUoUaRdd0Z0R6Ne9dSp4CXjcU_ype0N_AjCIw2IUqGIJC-useeKWvSxgT_eKiPKIqAhvNJoSTg_rGql5rDAVAmnkuzq8A7TD33QorXm1J304bcTpiONjGfVt15lpxKDYOw0qWqP_bchFA7Z8xiIahiAs5JG3oMLrgc77jv3CGjQNlaQQBC-gxE-6xjcK56ZHEI02yQMk7zDYa0F8srJt5_dDWe_QcTwq-AoxwQAhRPfEP5VjcZCJdkjsIa4qnpgRUh0ESJtsU-0UFKQPtfrGT0v5wgX2M3weubgs9lcx4rRwXGqmW1Ld_cLpUkpvk8c3OIiNkr9QM0BHKe94Z-058qp15GCz7hr8e6yJNlYyJwWx39Pvkg79Hxlicxjij0xuiBvk2GzKYP4ri6HTwHdBkEElUBrCx3d7rR5Uq31CbD2Aimw3tQKoZ_98AMA2nHXI_wrrRcPnpUHhzxuYIG3bjQMNTqj641Kb2OyHe5mE6RKrjAbKn-ZN3xuxdpyDsqWbDLq6gFIwnPWS9IlxeP4SqU3T7ctnb8wT_eY7EdqFG5_ZLz5L6V-pd8OUgwE5uQO2G08LfIl_f8m7m9-aa5_6FZn1o8pFbdfO7boJfruNJ4p7-DnC82MlqNtOZuk_eHBxoZO1XVIq5drkB111g2OzTYgv_u_4e1ddtESGF5HrweZThgioFE-RRNneRZe5ArAVYxOvZ0M4dbeFVfs3LCbUZqLzKC4-mzMF2CyJpVIV8P0wU4Mf9CWNsNUscTNtIUwhblhOR0XC-zIdl3IIg_yZOSi9Tt502sTPv8axKnct4vZBSVVObvdHWOGThZUfpbn2ntqowu6XK8qOkKU14OxsI9N-l9Gc2CbnxCxzqG0BeVwVpDsIGl3XnbV6x7FAwlhvmVrCq9XuR6THZ0i9i7XldN7kAWqiUsJ-sX-6xDIWj-svRtSowMXgI9SgvfH8dXNax3CC_ssDRDtTOPgHLcKJvCMsx4kkxGPLrLELDay1K_w&sai=AMfl-YRdeM9qo0pg6eIgASyE3NkZRiHEtLkYEV_KyKQ8c0LSM_LDBHAMOw7Uk7YyR5dPFtMkN1fP9_cwkzj1FpemQyyUsbD0pWdpfkhhdVbPHAQpfqi9D4D-82VfAHz0AWH1nlqALZfNvMlHTnbaCiEo0bGhVAsHtKYljrhvJo25I1JdnoEsd7xFNmEY5icXKAsRdWRlWSIGPbXz21xYUlOGqHYifdhM-yzB80SS9bGH9RgkI4e_hdYUTTZ-bfVQDYgy8VMI14WF_d42HY1tzA5BQU6ayZwDTXqmixuvXDZyYOoeyIQd&sig=Cg0ArKJSzDd8jy4FcW3zEAE&uach_m=[UACH]&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=469&vt=11&dtpt=468&dett=2&cstd=0&cisv=r20221110.41723&arae=0&ftch=1&adurl= HTTP/1.1
Host: googleads4.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ad787c420232a4fa81143468b01d0a30.safeframe.googlesyndication.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
cache-control: private
access-control-allow-origin: *
content-type: image/gif
x-content-type-options: nosniff
date: Wed, 23 Nov 2022 11:45:16 GMT
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 23-Nov-2022 12:00:16 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Wed, 23 Nov 2022 11:45:16 GMT
X-Firefox-Spdy: h2
px.netpub.media/iab?l=1268&o=454&v=1.6.0&r=300&c=FR&d=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&z=1c2b3d8f5084c3670b0ffbd768d4c149&f=dfp&w=14f9494694a9078dc2f4ae3c92e41760&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&h=0&yy=441caf19b459c0357a9f96d60b566e6c&m=898&p=352.5&t=1669203915911&a=true&i=1&zz=59d79e37b1097c19ba46486ba269b28f8d8612026a33fd9c9b0af6ab13f3e616&aa=16321753645e64c2b00f56db2260b9b17a159c86dc773ec5601fd34eb1efc02e&e=0&b=static&g=0&s=complete&j=0&xx=9e7606b30d00152d42dd3bbb3c0fe4d2&k=6&y=%2F29636627%2C22620349674%2Fblogmado.com_fluid_7&n=100&q=360&x=netpub
200 OK 654 B URL HTTP/2 px.netpub.media/iab?l=1268&o=454&v=1.6.0&r=300&c=FR&d=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&z=1c2b3d8f5084c3670b0ffbd768d4c149&f=dfp&w=14f9494694a9078dc2f4ae3c92e41760&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&h=0&yy=441caf19b459c0357a9f96d60b566e6c&m=898&p=352.5&t=1669203915911&a=true&i=1&zz=59d79e37b1097c19ba46486ba269b28f8d8612026a33fd9c9b0af6ab13f3e616&aa=16321753645e64c2b00f56db2260b9b17a159c86dc773ec5601fd34eb1efc02e&e=0&b=static&g=0&s=complete&j=0&xx=9e7606b30d00152d42dd3bbb3c0fe4d2&k=6&y=%2F29636627%2C22620349674%2Fblogmado.com_fluid_7&n=100&q=360&x=netpub
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 2fb104f7d46202532dd77a551b2d607c
28513f59a2f4e078c2eb9d0f4397afafe8bd62be
fac5f80c8c230fce75bbc39f1932b683c0199111ae4c2696ef61785917260262
GET /iab?l=1268&o=454&v=1.6.0&r=300&c=FR&d=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&z=1c2b3d8f5084c3670b0ffbd768d4c149&f=dfp&w=14f9494694a9078dc2f4ae3c92e41760&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&h=0&yy=441caf19b459c0357a9f96d60b566e6c&m=898&p=352.5&t=1669203915911&a=true&i=1&zz=59d79e37b1097c19ba46486ba269b28f8d8612026a33fd9c9b0af6ab13f3e616&aa=16321753645e64c2b00f56db2260b9b17a159c86dc773ec5601fd34eb1efc02e&e=0&b=static&g=0&s=complete&j=0&xx=9e7606b30d00152d42dd3bbb3c0fe4d2&k=6&y=%2F29636627%2C22620349674%2Fblogmado.com_fluid_7&n=100&q=360&x=netpub HTTP/1.1
Host: px.netpub.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 11:45:16 GMT
content-type: image/png
access-control-allow-origin: *
access-control-allow-headers: X-HTTPREQUEST
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QiPEKag3QuegbXD3zHD56s2lxG5knru3ygcf%2F%2BYH5gSYCWhHdTqwEaAVcg4p8U35KVSBVuIgRG4Fd0yyagilkE9Ut8KNOlZHoTC8CsmChUQSm9i0qu4L9VaYG%2BHJEfwhbw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76e9a85dbb3a0b3d-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bee0a099a21772da71c596c5b745bb9d
22be418b1fe68af30e2e4dd2910fb0be33faa616
f8503cdd70e7c089bb46e16d80a961489176119e8ca5cf13020764cc7cfe6a20
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 11:45:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bee0a099a21772da71c596c5b745bb9d
22be418b1fe68af30e2e4dd2910fb0be33faa616
f8503cdd70e7c089bb46e16d80a961489176119e8ca5cf13020764cc7cfe6a20
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 11:45:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
hal900014.redintelligence.net/request.php?zone=mq1e9wqsk7c5&nw=20&renderingType=javascript&namespace=c3518b1743&subid=&uid=8eda539526cc7675&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=320x100&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCACENywd-Y_OTFZmMmAfY-rugBMm5opxp3LDNztUP8C4QASDj4LwjYMOEgICYGMgBCakCNQR7uIpOsT6oAwGqBJACT9ADpxOPRIn7k64t4hu1i2Ls7DMg2ADrY6WMZLmu0TS_3LHJO23Y9NOkv3YHVDae_eVl17rNWbYom5OGGTH0Qz6c-NLnfBJ4ZSFY7p0jBQmn9bzcbEd7ogE065kXxd509uI6Fnc_3ciZIO4HQ6uUfxwtmlJ5AUtgpA7aZpPo29ct8Huync9HIGBM-VDqSppGPJhAsYpCmt9JcxcjWcM1K-JViCRvTi5TSFi6CSv0Qpb36w2bTurgqq4hCGslK8--b-VQd7MWRXkCgTIPg1JfJ25_sZEJyfCVyeUoSnBJy3blTOyHlIt3DAK5r7n5pahO_odMLv-El0X03uPP-IztMDvAXQdGYW2LISnlgO6GQeDABMG9lPzzA-AEA5AGAaAGTYAHrK31nwOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAf_nrECqAffn7EC2AcA0ggRCIDhgBAQARgdMgKqAjoCgECACgOYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSSwDq26N9sPvcK8VY41HlcyINoyNYG4MMLUoXgZJQprnw5QtEp8eMBxMWmlJERWSDgM0SnBlomDurvdfUzSxwiipQXuGugZup0Y3SLhgBIBM%26sig%3DAOD64_2Kyr6wYIWKvtMijZ7ocrLKvrR4ew%26client%3Dca-pub-3379969116950199%26dbm_c%3DAKAmf-CgyRADIaZPxz-Ly_Ytpm7MGbSfL_Kdbgwd3jxE3gjK0eDADBfHmYGh3Sf2MiEzaOpVGUMvNqyPfiudW1rYW-nQWDK7KXH11fKBMpvYPKaeGlkNW_UI391iPHroNfWIx2V8ehseyVLdzzSSUFs1wWOzRZy3XbFodFYq0glfnWCj6q0cdVk%26cry%3D1%26dbm_d%3DAKAmf-A3MUZnMRd-blTsL0ilNr645KxYXyvzm59XOEQheS_SgRtrk4ZFK2B2A82kHxBf6XS9KbE1XHdVOS_uKUviLO2raBCu7NbddS6pPWOqjkysEJexb0b02Y_CvM3uQEnzYMPDjyah9CXJqmsbKe0GRgsdpl3CvALxcgAmrt8XoqTnZEANQI8uLycSC739icxXe6Gu5uaohP2yiyhU2E0-cGHpr8eqi_ar5xC7AlS6oJrwUAsMHERlABQQnfEbDF1nyXm23erRmZtzy5HjVfO6OH2O1thKoRLh-g5dmNKwlgiGq8iKbVpyakBRRAYPuSDNgVCdpQB8MmdFTmJ-Bi_wWOjxPy6jyuKgrRtaDxVJSCqKnVlxCB43VsGKy1YkCfMScv3MIOCqNZokSqrLfoX30HK39yy7LqvqSm-HV4GfNvf0lC5V66qbkFXjJyj1PKR76eHRG44986QEblv6alZyGs-kq1lUC4KgzYH4c0DcpcqEv4RYlNjM-sJKyQyj9Ewt-NlCbV8I4t_ST0gm7t6HhHRn9KdcJWq2AxehJW6CHPovSDHsiLg5jv8y06IzzAnEf34WHiEaBSyKJg0bV121IKw3N8b0nPQhrmlNeVUWXVD2aqk54NyQaBPPTuHHvoSb-Hacx79enxoFAm3jnbNbQZ8TnL5ikg%26adurl%3D&documentReferer=https%3A%2F%2Fblogmado.com%2F&ancestorOrigins=null&random=661640908336&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0&uidRedirect=1
200 OK 513 B URL HTTP/1.1 hal900014.redintelligence.net/request.php?zone=mq1e9wqsk7c5&nw=20&renderingType=javascript&namespace=c3518b1743&subid=&uid=8eda539526cc7675&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=320x100&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCACENywd-Y_OTFZmMmAfY-rugBMm5opxp3LDNztUP8C4QASDj4LwjYMOEgICYGMgBCakCNQR7uIpOsT6oAwGqBJACT9ADpxOPRIn7k64t4hu1i2Ls7DMg2ADrY6WMZLmu0TS_3LHJO23Y9NOkv3YHVDae_eVl17rNWbYom5OGGTH0Qz6c-NLnfBJ4ZSFY7p0jBQmn9bzcbEd7ogE065kXxd509uI6Fnc_3ciZIO4HQ6uUfxwtmlJ5AUtgpA7aZpPo29ct8Huync9HIGBM-VDqSppGPJhAsYpCmt9JcxcjWcM1K-JViCRvTi5TSFi6CSv0Qpb36w2bTurgqq4hCGslK8--b-VQd7MWRXkCgTIPg1JfJ25_sZEJyfCVyeUoSnBJy3blTOyHlIt3DAK5r7n5pahO_odMLv-El0X03uPP-IztMDvAXQdGYW2LISnlgO6GQeDABMG9lPzzA-AEA5AGAaAGTYAHrK31nwOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAf_nrECqAffn7EC2AcA0ggRCIDhgBAQARgdMgKqAjoCgECACgOYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSSwDq26N9sPvcK8VY41HlcyINoyNYG4MMLUoXgZJQprnw5QtEp8eMBxMWmlJERWSDgM0SnBlomDurvdfUzSxwiipQXuGugZup0Y3SLhgBIBM%26sig%3DAOD64_2Kyr6wYIWKvtMijZ7ocrLKvrR4ew%26client%3Dca-pub-3379969116950199%26dbm_c%3DAKAmf-CgyRADIaZPxz-Ly_Ytpm7MGbSfL_Kdbgwd3jxE3gjK0eDADBfHmYGh3Sf2MiEzaOpVGUMvNqyPfiudW1rYW-nQWDK7KXH11fKBMpvYPKaeGlkNW_UI391iPHroNfWIx2V8ehseyVLdzzSSUFs1wWOzRZy3XbFodFYq0glfnWCj6q0cdVk%26cry%3D1%26dbm_d%3DAKAmf-A3MUZnMRd-blTsL0ilNr645KxYXyvzm59XOEQheS_SgRtrk4ZFK2B2A82kHxBf6XS9KbE1XHdVOS_uKUviLO2raBCu7NbddS6pPWOqjkysEJexb0b02Y_CvM3uQEnzYMPDjyah9CXJqmsbKe0GRgsdpl3CvALxcgAmrt8XoqTnZEANQI8uLycSC739icxXe6Gu5uaohP2yiyhU2E0-cGHpr8eqi_ar5xC7AlS6oJrwUAsMHERlABQQnfEbDF1nyXm23erRmZtzy5HjVfO6OH2O1thKoRLh-g5dmNKwlgiGq8iKbVpyakBRRAYPuSDNgVCdpQB8MmdFTmJ-Bi_wWOjxPy6jyuKgrRtaDxVJSCqKnVlxCB43VsGKy1YkCfMScv3MIOCqNZokSqrLfoX30HK39yy7LqvqSm-HV4GfNvf0lC5V66qbkFXjJyj1PKR76eHRG44986QEblv6alZyGs-kq1lUC4KgzYH4c0DcpcqEv4RYlNjM-sJKyQyj9Ewt-NlCbV8I4t_ST0gm7t6HhHRn9KdcJWq2AxehJW6CHPovSDHsiLg5jv8y06IzzAnEf34WHiEaBSyKJg0bV121IKw3N8b0nPQhrmlNeVUWXVD2aqk54NyQaBPPTuHHvoSb-Hacx79enxoFAm3jnbNbQZ8TnL5ikg%26adurl%3D&documentReferer=https%3A%2F%2Fblogmado.com%2F&ancestorOrigins=null&random=661640908336&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0&uidRedirect=1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with CRLF line terminators
Hash 1bbbb0a73506c7d7352ce49b6cd89112
f924edc02ca21754895c3209940cfd0b44cbe943
d351eda4cff98b1b25f93e341361fb2c7cb9b25649d6b36916e17da13e109f58
GET /request.php?zone=mq1e9wqsk7c5&nw=20&renderingType=javascript&namespace=c3518b1743&subid=&uid=8eda539526cc7675&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=320x100&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCACENywd-Y_OTFZmMmAfY-rugBMm5opxp3LDNztUP8C4QASDj4LwjYMOEgICYGMgBCakCNQR7uIpOsT6oAwGqBJACT9ADpxOPRIn7k64t4hu1i2Ls7DMg2ADrY6WMZLmu0TS_3LHJO23Y9NOkv3YHVDae_eVl17rNWbYom5OGGTH0Qz6c-NLnfBJ4ZSFY7p0jBQmn9bzcbEd7ogE065kXxd509uI6Fnc_3ciZIO4HQ6uUfxwtmlJ5AUtgpA7aZpPo29ct8Huync9HIGBM-VDqSppGPJhAsYpCmt9JcxcjWcM1K-JViCRvTi5TSFi6CSv0Qpb36w2bTurgqq4hCGslK8--b-VQd7MWRXkCgTIPg1JfJ25_sZEJyfCVyeUoSnBJy3blTOyHlIt3DAK5r7n5pahO_odMLv-El0X03uPP-IztMDvAXQdGYW2LISnlgO6GQeDABMG9lPzzA-AEA5AGAaAGTYAHrK31nwOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAf_nrECqAffn7EC2AcA0ggRCIDhgBAQARgdMgKqAjoCgECACgOYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSSwDq26N9sPvcK8VY41HlcyINoyNYG4MMLUoXgZJQprnw5QtEp8eMBxMWmlJERWSDgM0SnBlomDurvdfUzSxwiipQXuGugZup0Y3SLhgBIBM%26sig%3DAOD64_2Kyr6wYIWKvtMijZ7ocrLKvrR4ew%26client%3Dca-pub-3379969116950199%26dbm_c%3DAKAmf-CgyRADIaZPxz-Ly_Ytpm7MGbSfL_Kdbgwd3jxE3gjK0eDADBfHmYGh3Sf2MiEzaOpVGUMvNqyPfiudW1rYW-nQWDK7KXH11fKBMpvYPKaeGlkNW_UI391iPHroNfWIx2V8ehseyVLdzzSSUFs1wWOzRZy3XbFodFYq0glfnWCj6q0cdVk%26cry%3D1%26dbm_d%3DAKAmf-A3MUZnMRd-blTsL0ilNr645KxYXyvzm59XOEQheS_SgRtrk4ZFK2B2A82kHxBf6XS9KbE1XHdVOS_uKUviLO2raBCu7NbddS6pPWOqjkysEJexb0b02Y_CvM3uQEnzYMPDjyah9CXJqmsbKe0GRgsdpl3CvALxcgAmrt8XoqTnZEANQI8uLycSC739icxXe6Gu5uaohP2yiyhU2E0-cGHpr8eqi_ar5xC7AlS6oJrwUAsMHERlABQQnfEbDF1nyXm23erRmZtzy5HjVfO6OH2O1thKoRLh-g5dmNKwlgiGq8iKbVpyakBRRAYPuSDNgVCdpQB8MmdFTmJ-Bi_wWOjxPy6jyuKgrRtaDxVJSCqKnVlxCB43VsGKy1YkCfMScv3MIOCqNZokSqrLfoX30HK39yy7LqvqSm-HV4GfNvf0lC5V66qbkFXjJyj1PKR76eHRG44986QEblv6alZyGs-kq1lUC4KgzYH4c0DcpcqEv4RYlNjM-sJKyQyj9Ewt-NlCbV8I4t_ST0gm7t6HhHRn9KdcJWq2AxehJW6CHPovSDHsiLg5jv8y06IzzAnEf34WHiEaBSyKJg0bV121IKw3N8b0nPQhrmlNeVUWXVD2aqk54NyQaBPPTuHHvoSb-Hacx79enxoFAm3jnbNbQZ8TnL5ikg%26adurl%3D&documentReferer=https%3A%2F%2Fblogmado.com%2F&ancestorOrigins=null&random=661640908336&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0&uidRedirect=1 HTTP/1.1
Host: hal900014.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ad787c420232a4fa81143468b01d0a30.safeframe.googlesyndication.com/
Connection: keep-alive
Cookie: 8lcfmzhxc8d6_uid=1474f6b147a155bd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 11:45:16 GMT
Server: Apache
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Expires: Wed, 23 Nov 2022 11:45:16 +0100
Pragma: no-cache
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: 8lcfmzhxc8d6_uid=1474f6b147a155bd; expires=Tue, 21-Feb-2023 11:45:16 GMT; Max-Age=7776000; path=/; domain=.redintelligence.net; secure; SameSite=None
X-NEORY-SubId: 56120500064288404439916012152014
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 513
Connection: close
Content-Type: application/x-javascript; charset=utf-8
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bee0a099a21772da71c596c5b745bb9d
22be418b1fe68af30e2e4dd2910fb0be33faa616
f8503cdd70e7c089bb46e16d80a961489176119e8ca5cf13020764cc7cfe6a20
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 11:45:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bee0a099a21772da71c596c5b745bb9d
22be418b1fe68af30e2e4dd2910fb0be33faa616
f8503cdd70e7c089bb46e16d80a961489176119e8ca5cf13020764cc7cfe6a20
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 11:45:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.ampproject.org/rtv/012211060024000/amp4ads-v0.mjs
200 OK 62 kB URL HTTP/2 cdn.ampproject.org/rtv/012211060024000/amp4ads-v0.mjs
IP
File type Unicode text, UTF-8 text, with very long lines (65008)
Hash 190bcb4c44fd9e0e93baa80c9b2535b8
97bda56ddc8d6a00d19e1747d63325051f3fd144
b7677f820f06329e357561f570729fe4110af4ac5fb741b97567e20a0f533301
GET /rtv/012211060024000/amp4ads-v0.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 61592
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 21 Nov 2022 18:08:54 GMT
expires: Tue, 21 Nov 2023 18:08:54 GMT
cache-control: public, max-age=31536000
age: 149782
etag: "a2fca7132416d151"
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.ampproject.org/rtv/012211060024000/v0/amp-analytics-0.1.mjs
200 OK 29 kB URL HTTP/2 cdn.ampproject.org/rtv/012211060024000/v0/amp-analytics-0.1.mjs
IP
File type ASCII text, with very long lines (65534)
Hash c88b4e73b12307e42222d337bdd646a2
621233bf4e777b2d44b1bc143187111aca2fe718
ef6935537cd5a603b79bc98d4274b70ee5608955792523fc58e818c8ddbb7b48
GET /rtv/012211060024000/v0/amp-analytics-0.1.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://blogmado.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 28809
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 21 Nov 2022 18:08:54 GMT
expires: Tue, 21 Nov 2023 18:08:54 GMT
cache-control: public, max-age=31536000
age: 149782
etag: "dd6615029de85e23"
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
relativelyweptcurls.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fsoftware%2Fmulti%2Fbrowsers%2Fff%2F3%2Fcss%2Fmagic.css&l=45250&fd=367
200 OK 0 B URL HTTP/1.1 relativelyweptcurls.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fsoftware%2Fmulti%2Fbrowsers%2Fff%2F3%2Fcss%2Fmagic.css&l=45250&fd=367
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fsoftware%2Fmulti%2Fbrowsers%2Fff%2F3%2Fcss%2Fmagic.css&l=45250&fd=367 HTTP/1.1
Host: relativelyweptcurls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Cookie: u_pl=16650200; uid_id2=517e04f4-448d-4c49-8f65-b20d35887496:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec01ffd36dfbce3d569baf8d846cd7bc65=[3760951]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 23 Nov 2022 11:45:16 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
cdn.ampproject.org/rtv/012211060024000/v0/amp-ad-exit-0.1.mjs
200 OK 5.2 kB URL HTTP/2 cdn.ampproject.org/rtv/012211060024000/v0/amp-ad-exit-0.1.mjs
IP
File type ASCII text, with very long lines (14697)
Hash ae1a9f090984c448deb0629cc2304ee3
e601825ccec746695f370ed68fa33325152e0d9f
6a947bfcdeea64faa6c795caea11ee09dbe00f5d4003b7b9d47e4945c05ac1e4
GET /rtv/012211060024000/v0/amp-ad-exit-0.1.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://blogmado.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 5218
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 21 Nov 2022 18:08:54 GMT
expires: Tue, 21 Nov 2023 18:08:54 GMT
cache-control: public, max-age=31536000
age: 149782
etag: "abd4378f71571d78"
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.ampproject.org/rtv/012211060024000/v0/amp-fit-text-0.1.mjs
200 OK 1.9 kB URL HTTP/2 cdn.ampproject.org/rtv/012211060024000/v0/amp-fit-text-0.1.mjs
IP
File type ASCII text, with very long lines (5046)
Hash 669c8592ef8f63e7404e45dd6ca56b71
3f6753966361bb86594193009c9097612c361064
d174ae2c0722ab8d4bf736f0200dc5b15d288f9500a706bb161b64f5a3b74f01
GET /rtv/012211060024000/v0/amp-fit-text-0.1.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://blogmado.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 1913
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 21 Nov 2022 18:08:54 GMT
expires: Tue, 21 Nov 2023 18:08:54 GMT
cache-control: public, max-age=31536000
age: 149782
etag: "403438c4d550ee88"
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/software/multi/browsers/ff/3/css/style.css
200 OK 14 kB URL HTTP/2 cdn.creative-bars1.com/sb/notifications/software/multi/browsers/ff/3/css/style.css
IP
Hash 80cb71bcadce8fc786f2844ed40c3429
54b42a19e08c4e46c42ed62dbcd218611a1a8d2e
57aafe3799b683c0493bd6b6086a68285ece43e0c66bee51c0e76f07e077527a
GET /sb/notifications/software/multi/browsers/ff/3/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://blogmado.com
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 23 Nov 2022 11:45:16 GMT
content-type: text/css
last-modified: Thu, 08 Sep 2022 07:49:56 GMT
etag: W/"63199ea4-e97"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e1GX4DOdpTFs9fiu8K41NgOGBIR6qFv0lIwHZ0%2BjeAIJvh%2BA642A1T2xUmceFlENM4p5jZ9g33TZDjxxCGHFf0JBjLfKU7Zb9HzysH8SqrOJsRVc5STgwh1N5%2F0vzw1qnQTKZqkc0NtU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e9a85c0c3176f0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bee0a099a21772da71c596c5b745bb9d
22be418b1fe68af30e2e4dd2910fb0be33faa616
f8503cdd70e7c089bb46e16d80a961489176119e8ca5cf13020764cc7cfe6a20
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 11:45:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
relativelyweptcurls.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fsoftware%2Fmulti%2Fbrowsers%2Fff%2F3%2Fjs%2Fscript.js&l=8814&fd=302
200 OK 0 B URL HTTP/1.1 relativelyweptcurls.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fsoftware%2Fmulti%2Fbrowsers%2Fff%2F3%2Fjs%2Fscript.js&l=8814&fd=302
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fsoftware%2Fmulti%2Fbrowsers%2Fff%2F3%2Fjs%2Fscript.js&l=8814&fd=302 HTTP/1.1
Host: relativelyweptcurls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Cookie: u_pl=16650200; uid_id2=517e04f4-448d-4c49-8f65-b20d35887496:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec01ffd36dfbce3d569baf8d846cd7bc65=[3760951]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 23 Nov 2022 11:45:16 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
bid.g.doubleclick.net/dbm/vast?dbm_c=AKAmf-AXO58qVwJaZqHvQXo5s9091ULkfr3SkSuoO5WWgr_bt2aKJwzdv0yQCatA6APQPHK7TNrPaxZHLlnJBS4zeDkkJlNUNA&cry=1&dbm_d=AKAmf-CMnTs0w6_jXHDouThuCyEQx_mreTEAsOwCBNWmAhu1g7LFHy7gpW82TshO6U5vBR4515AazwAiDm3Pto-_5KLuG5bsX8mUHVfuDFBoCNyZMvp5RZyG9efYgvg5pc0ND5vxTNxqXNDui_Ae4mASbtYBvFBk7k9dKXcSYE-LId6wCjaq2dKrVseVLWaNJLfjXoHi9sX-R1LAyFYhGeOjplFpfK90LmQcgRXXbf41IowsRQP-fKbBMX1jDRBcQbzlkvngdsuWIakDBbScdYjdNzNlI1jhaKepJyNgsGylgI0SBoWgOlgLHBV0DZSFqYeWe-MxhRFw9zxkQURo90eJ-4rvsn0WZIU7EPCVuxyqj5hqrgDpEk1eXtI22J7R3AjkdZyqXAaJxRtOdOqT642vk69a_XqfIfu3MdMm-lM-UZvL4n2Xq_L4Xf-iEDXwUfD8ChW4KsBYX42X56GdG_YtSoNB2Z66q1Dqaf9bh_h1PHLhHjKgKffs-CSNRJ_jALDvL_zASX8IE-lfSsINweHk4INDTSoDAOLkNGk4svh51CRiz9Q9rV1lEVRE1cyZ8oySFXRRB-PsGVMcCFedkw3bufg-BTbgmOO2NeX9yT6X5NmYQbR2Uo0MUld2twHnvzLJPsjDlmVOhS645BLmiYD_WlicyUfWSSgb1QzkVwABXmpAFJcZlfMSXgUxBcnk-VZxNnqc6tiGmi0tRwYjPKyX3GhoDoBN_A5b91JFPcarlcZ9e74HukpFgtj7RWTJqr1ymbXa0u0CUBcbkt3N1Ub93G8Wdf7AZjB_zebToEr-9Zl0VkImGMaCQb6akpFGaCVglmZCamTcjrKQcvL6_izvrVdxq1Yt0eFICNnfVL1Jqwkx6nFAYalTOmaQ-LeuWye30YFtNpBGkFPd8O60p7hVproj5vG9aXaB8q4Q8T2pIGNFirIqGZ60yY5_o4gZD6B2NuLeK4DhijyEV-pzg4nAtoU9dKDucLRAPsBlRAZWI1SjzWf1gZIaQPziG4KZ8cPwmINyFySXXw93TZkEsxGABq1lBti_1LNrVUPAF6Kn_BRZEr8RZvZ4WjddrUcwTwz3ZpdTUwQns3RUPgs93YRPrFKN0D2OCIfR4s7UDtUUv9tstz68sM7MMW5Z9akVFRNSYZXg7E6OzCR5HGfZs32Q6GonYK7TPrRhZzodFfNnBEK9dRhQvlPYlUwuAZChiMPMg7VVpxfON3ish0T2RyHFZQAFsP6NNnGhjuV6udjxg-4xJrp9jy0hNUm6eJmHwFkAsmJD_4CxJPLX5xcMTbtc7vJ_-do5WM8hu7nkfyMALcKIXsZb5Q-t2wgovvaB3r7e44BSiVeAMMbdHHK-Vv2miqh8a84FjWhD-iLwpXI9_PNArCPvApm3auMcsaILIQftwfqiz04h_-oFyZ43oYMkRv1LwPtGD65tRKzgH9agjLqUb0NkqjkMq4z2ErtsIFxI5Bh7sOQpFSgtQLCiCwCzHH2_xyEXstl63PokIyPTLEPnVcWEfGdicGmH8KpmQF2W4jTtg-XwwbSBmGvyfFp4sX5C3kjjq9eV7m6enS6UV--z5TVkjXfsmxjjg4s36zx-HsmQfKBZpFFu0eK0hx4e_LpEEvYaRaXCV9jhMKvA4Ik56n3sqUSpbGZ6Gr5d8D9YrNEK74oG2Sum6xE6yD0Pzu2cmXkrRO8jz_rw4xK6qpRCRvxxPTzP8OXa0O2Q97_uOOjtJvzQ1zZ_UKMXEy89zgj5iyOwd_v5MmJT-eozn8bcDC4EF7_fTiqnzXeH4qXvoppK4iJAtLN1XaQbjYxI5zOy482UMIO0pP4CKLrfsdQ7wWx13SjWInCRrTK8yYPbZbr8JF6Z8-deZA2nHrdB3mGG4NfOobVszIKoKy45OrhcC0k3clu_YW0GcN6zPeHskmosN0Cr3Ju-kPbiUZ3sNTX6fvXqXF4NYpMgk5Q1oU2wQ8n6VlAhMdtL_dU-t1yBRNLenwtwYvGPWT0gUhoDPF8jN11gNI3j-xF2aN-YLsDvH72mOwC6D0j7tHfN29owQ_c_Tsi430LXhtEJ2xg49x8tubDRGKQXNuoSSMQja3EpJtWQSoBzaBpoIu3LMwdrsHNav_5KwBCewzeYwxm6th_1Au5mNomrJfHFUlK16wx6_XdzVXhTqENIglBqlBnX_NlMX26FpPXGz9I__Z7jnXp8a1CROiNnd_VnmsM3MD9kfMSYVF1DNo9iUkW6fPzxeEcq48YX0M0Z1hf2qnaj9T1MKf3N8ytggN-_P7USZlvDC_WTy2JMkk623g3BXtoFDBG9Sf_lRqhd9MUbJTnswjIon63HbeitBXeTOCqx7CGER7y7kLtZPT9Y8PIG-3MVkg4izCqq-oUYU8P3AhinnFOJPOjM7tr-vha7S9EHns6LEL9NMjOlInM5Ufbca7mPMANvSxwlpejFmplQUDwc2Km2NbpaBrm_oaPgMpz3qd2267_aJekDAi6MDLrvOqsPDB1rUh21PuAB8Yq8WTVSzxPX-AQcOEHMNr3tu5ZiD36U_BXU26-m68hR_NmbFQEmM7AU0oiqQJEx76vIMHorsDIyBvEXPINWI5oYg_Aj3v63bYYGMilCHUx8cOAHbBPHh0jK9H_zLgRd8ZsOxByQFeT67tKNmHwTzDInAzEwSvnQmBIfyd_Qvfh_v4iwkazSJ6iX07FOq0NLkmQXZietoaHUMUPjeVvPCkk0mG4geiEMfvmqvzq-q9ZQUqg-_B-wsMQBf3UM_QaWi4pRJ8Yxa8YUHDsgCnh4UxuNLgYcSOSWybl205Qr3UgzYDYzDNpNcPNGgHpm0f8zIyuTcgmwXVyCgW5TOxfjx_Ha-yz5rva5wBVLNzhlFG0SooJMaxP93dvd9bMZkzlGluWWx0HsINy1drA4IzgSgbmD4WZDuXa3WTd0smL3zhAssoERU7BZxtrmPYubaxy4azRVc6XR5LhLIq_wXvkDHF3yKltTk6JnWe4cSWQh2aSoEXSRrAG5lJi7fipE0HewOdTwq4RLudYN8Uc0D1Km2sis9FmpP6jePUFLjhKOs2lt7NyWvsYz0UKvn150DL326YYqWtGKkL3ov1cSuRZrjs_8Rb6_SIilCDZaM9kP7-tgEEKabLhyODxEDjKfpmc2OiJfolFzzPGu_z8jyVSDf9s-GK9OhGf3LqdoDi5oU5SOb9108fxxmBpZfO1KeIkrbEe3uoxNVl-8nceIjvidmd3OE7Wo-mK-PeSZweizc1skkSrdaBhhDHUm3w3nvr8RCHDfAqf5fM5nprco5VHTYh1Yym-SfXM__6IGGcNAvAn4yuTBQ0ncW59IFWlINoME20xuq1QkZjL3_NRx2qMYlDn1TKXeKdba226WCTtr3AeKcZouEs1DZGPsVSAy&cid=CAQSSwDq26N9BuIFI4wBIBhNEcR9ZwMgTaE_awqEDIOUYxz3RwwTorUHfUYMCPyyK483ISP9jnZkvN_LUZGnc2uCN3gNk7zyEd1-OJ8YThgBIBM&sdkv=h.0.0.0&osd=2&frm=2&vis=1&sdr=1
200 OK 18 kB URL HTTP/2 bid.g.doubleclick.net/dbm/vast?dbm_c=AKAmf-AXO58qVwJaZqHvQXo5s9091ULkfr3SkSuoO5WWgr_bt2aKJwzdv0yQCatA6APQPHK7TNrPaxZHLlnJBS4zeDkkJlNUNA&cry=1&dbm_d=AKAmf-CMnTs0w6_jXHDouThuCyEQx_mreTEAsOwCBNWmAhu1g7LFHy7gpW82TshO6U5vBR4515AazwAiDm3Pto-_5KLuG5bsX8mUHVfuDFBoCNyZMvp5RZyG9efYgvg5pc0ND5vxTNxqXNDui_Ae4mASbtYBvFBk7k9dKXcSYE-LId6wCjaq2dKrVseVLWaNJLfjXoHi9sX-R1LAyFYhGeOjplFpfK90LmQcgRXXbf41IowsRQP-fKbBMX1jDRBcQbzlkvngdsuWIakDBbScdYjdNzNlI1jhaKepJyNgsGylgI0SBoWgOlgLHBV0DZSFqYeWe-MxhRFw9zxkQURo90eJ-4rvsn0WZIU7EPCVuxyqj5hqrgDpEk1eXtI22J7R3AjkdZyqXAaJxRtOdOqT642vk69a_XqfIfu3MdMm-lM-UZvL4n2Xq_L4Xf-iEDXwUfD8ChW4KsBYX42X56GdG_YtSoNB2Z66q1Dqaf9bh_h1PHLhHjKgKffs-CSNRJ_jALDvL_zASX8IE-lfSsINweHk4INDTSoDAOLkNGk4svh51CRiz9Q9rV1lEVRE1cyZ8oySFXRRB-PsGVMcCFedkw3bufg-BTbgmOO2NeX9yT6X5NmYQbR2Uo0MUld2twHnvzLJPsjDlmVOhS645BLmiYD_WlicyUfWSSgb1QzkVwABXmpAFJcZlfMSXgUxBcnk-VZxNnqc6tiGmi0tRwYjPKyX3GhoDoBN_A5b91JFPcarlcZ9e74HukpFgtj7RWTJqr1ymbXa0u0CUBcbkt3N1Ub93G8Wdf7AZjB_zebToEr-9Zl0VkImGMaCQb6akpFGaCVglmZCamTcjrKQcvL6_izvrVdxq1Yt0eFICNnfVL1Jqwkx6nFAYalTOmaQ-LeuWye30YFtNpBGkFPd8O60p7hVproj5vG9aXaB8q4Q8T2pIGNFirIqGZ60yY5_o4gZD6B2NuLeK4DhijyEV-pzg4nAtoU9dKDucLRAPsBlRAZWI1SjzWf1gZIaQPziG4KZ8cPwmINyFySXXw93TZkEsxGABq1lBti_1LNrVUPAF6Kn_BRZEr8RZvZ4WjddrUcwTwz3ZpdTUwQns3RUPgs93YRPrFKN0D2OCIfR4s7UDtUUv9tstz68sM7MMW5Z9akVFRNSYZXg7E6OzCR5HGfZs32Q6GonYK7TPrRhZzodFfNnBEK9dRhQvlPYlUwuAZChiMPMg7VVpxfON3ish0T2RyHFZQAFsP6NNnGhjuV6udjxg-4xJrp9jy0hNUm6eJmHwFkAsmJD_4CxJPLX5xcMTbtc7vJ_-do5WM8hu7nkfyMALcKIXsZb5Q-t2wgovvaB3r7e44BSiVeAMMbdHHK-Vv2miqh8a84FjWhD-iLwpXI9_PNArCPvApm3auMcsaILIQftwfqiz04h_-oFyZ43oYMkRv1LwPtGD65tRKzgH9agjLqUb0NkqjkMq4z2ErtsIFxI5Bh7sOQpFSgtQLCiCwCzHH2_xyEXstl63PokIyPTLEPnVcWEfGdicGmH8KpmQF2W4jTtg-XwwbSBmGvyfFp4sX5C3kjjq9eV7m6enS6UV--z5TVkjXfsmxjjg4s36zx-HsmQfKBZpFFu0eK0hx4e_LpEEvYaRaXCV9jhMKvA4Ik56n3sqUSpbGZ6Gr5d8D9YrNEK74oG2Sum6xE6yD0Pzu2cmXkrRO8jz_rw4xK6qpRCRvxxPTzP8OXa0O2Q97_uOOjtJvzQ1zZ_UKMXEy89zgj5iyOwd_v5MmJT-eozn8bcDC4EF7_fTiqnzXeH4qXvoppK4iJAtLN1XaQbjYxI5zOy482UMIO0pP4CKLrfsdQ7wWx13SjWInCRrTK8yYPbZbr8JF6Z8-deZA2nHrdB3mGG4NfOobVszIKoKy45OrhcC0k3clu_YW0GcN6zPeHskmosN0Cr3Ju-kPbiUZ3sNTX6fvXqXF4NYpMgk5Q1oU2wQ8n6VlAhMdtL_dU-t1yBRNLenwtwYvGPWT0gUhoDPF8jN11gNI3j-xF2aN-YLsDvH72mOwC6D0j7tHfN29owQ_c_Tsi430LXhtEJ2xg49x8tubDRGKQXNuoSSMQja3EpJtWQSoBzaBpoIu3LMwdrsHNav_5KwBCewzeYwxm6th_1Au5mNomrJfHFUlK16wx6_XdzVXhTqENIglBqlBnX_NlMX26FpPXGz9I__Z7jnXp8a1CROiNnd_VnmsM3MD9kfMSYVF1DNo9iUkW6fPzxeEcq48YX0M0Z1hf2qnaj9T1MKf3N8ytggN-_P7USZlvDC_WTy2JMkk623g3BXtoFDBG9Sf_lRqhd9MUbJTnswjIon63HbeitBXeTOCqx7CGER7y7kLtZPT9Y8PIG-3MVkg4izCqq-oUYU8P3AhinnFOJPOjM7tr-vha7S9EHns6LEL9NMjOlInM5Ufbca7mPMANvSxwlpejFmplQUDwc2Km2NbpaBrm_oaPgMpz3qd2267_aJekDAi6MDLrvOqsPDB1rUh21PuAB8Yq8WTVSzxPX-AQcOEHMNr3tu5ZiD36U_BXU26-m68hR_NmbFQEmM7AU0oiqQJEx76vIMHorsDIyBvEXPINWI5oYg_Aj3v63bYYGMilCHUx8cOAHbBPHh0jK9H_zLgRd8ZsOxByQFeT67tKNmHwTzDInAzEwSvnQmBIfyd_Qvfh_v4iwkazSJ6iX07FOq0NLkmQXZietoaHUMUPjeVvPCkk0mG4geiEMfvmqvzq-q9ZQUqg-_B-wsMQBf3UM_QaWi4pRJ8Yxa8YUHDsgCnh4UxuNLgYcSOSWybl205Qr3UgzYDYzDNpNcPNGgHpm0f8zIyuTcgmwXVyCgW5TOxfjx_Ha-yz5rva5wBVLNzhlFG0SooJMaxP93dvd9bMZkzlGluWWx0HsINy1drA4IzgSgbmD4WZDuXa3WTd0smL3zhAssoERU7BZxtrmPYubaxy4azRVc6XR5LhLIq_wXvkDHF3yKltTk6JnWe4cSWQh2aSoEXSRrAG5lJi7fipE0HewOdTwq4RLudYN8Uc0D1Km2sis9FmpP6jePUFLjhKOs2lt7NyWvsYz0UKvn150DL326YYqWtGKkL3ov1cSuRZrjs_8Rb6_SIilCDZaM9kP7-tgEEKabLhyODxEDjKfpmc2OiJfolFzzPGu_z8jyVSDf9s-GK9OhGf3LqdoDi5oU5SOb9108fxxmBpZfO1KeIkrbEe3uoxNVl-8nceIjvidmd3OE7Wo-mK-PeSZweizc1skkSrdaBhhDHUm3w3nvr8RCHDfAqf5fM5nprco5VHTYh1Yym-SfXM__6IGGcNAvAn4yuTBQ0ncW59IFWlINoME20xuq1QkZjL3_NRx2qMYlDn1TKXeKdba226WCTtr3AeKcZouEs1DZGPsVSAy&cid=CAQSSwDq26N9BuIFI4wBIBhNEcR9ZwMgTaE_awqEDIOUYxz3RwwTorUHfUYMCPyyK483ISP9jnZkvN_LUZGnc2uCN3gNk7zyEd1-OJ8YThgBIBM&sdkv=h.0.0.0&osd=2&frm=2&vis=1&sdr=1
IP
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (16358)
Hash 14cde3b703a7855a444bb2aa14d9298a
682ac26cc739e20fbaad377724bc03f1b153086c
f8f3c79a0056bdd99892588ff1af175d14ba320caed0b2bf2c3ef75d9a75bfb3
GET /dbm/vast?dbm_c=AKAmf-AXO58qVwJaZqHvQXo5s9091ULkfr3SkSuoO5WWgr_bt2aKJwzdv0yQCatA6APQPHK7TNrPaxZHLlnJBS4zeDkkJlNUNA&cry=1&dbm_d=AKAmf-CMnTs0w6_jXHDouThuCyEQx_mreTEAsOwCBNWmAhu1g7LFHy7gpW82TshO6U5vBR4515AazwAiDm3Pto-_5KLuG5bsX8mUHVfuDFBoCNyZMvp5RZyG9efYgvg5pc0ND5vxTNxqXNDui_Ae4mASbtYBvFBk7k9dKXcSYE-LId6wCjaq2dKrVseVLWaNJLfjXoHi9sX-R1LAyFYhGeOjplFpfK90LmQcgRXXbf41IowsRQP-fKbBMX1jDRBcQbzlkvngdsuWIakDBbScdYjdNzNlI1jhaKepJyNgsGylgI0SBoWgOlgLHBV0DZSFqYeWe-MxhRFw9zxkQURo90eJ-4rvsn0WZIU7EPCVuxyqj5hqrgDpEk1eXtI22J7R3AjkdZyqXAaJxRtOdOqT642vk69a_XqfIfu3MdMm-lM-UZvL4n2Xq_L4Xf-iEDXwUfD8ChW4KsBYX42X56GdG_YtSoNB2Z66q1Dqaf9bh_h1PHLhHjKgKffs-CSNRJ_jALDvL_zASX8IE-lfSsINweHk4INDTSoDAOLkNGk4svh51CRiz9Q9rV1lEVRE1cyZ8oySFXRRB-PsGVMcCFedkw3bufg-BTbgmOO2NeX9yT6X5NmYQbR2Uo0MUld2twHnvzLJPsjDlmVOhS645BLmiYD_WlicyUfWSSgb1QzkVwABXmpAFJcZlfMSXgUxBcnk-VZxNnqc6tiGmi0tRwYjPKyX3GhoDoBN_A5b91JFPcarlcZ9e74HukpFgtj7RWTJqr1ymbXa0u0CUBcbkt3N1Ub93G8Wdf7AZjB_zebToEr-9Zl0VkImGMaCQb6akpFGaCVglmZCamTcjrKQcvL6_izvrVdxq1Yt0eFICNnfVL1Jqwkx6nFAYalTOmaQ-LeuWye30YFtNpBGkFPd8O60p7hVproj5vG9aXaB8q4Q8T2pIGNFirIqGZ60yY5_o4gZD6B2NuLeK4DhijyEV-pzg4nAtoU9dKDucLRAPsBlRAZWI1SjzWf1gZIaQPziG4KZ8cPwmINyFySXXw93TZkEsxGABq1lBti_1LNrVUPAF6Kn_BRZEr8RZvZ4WjddrUcwTwz3ZpdTUwQns3RUPgs93YRPrFKN0D2OCIfR4s7UDtUUv9tstz68sM7MMW5Z9akVFRNSYZXg7E6OzCR5HGfZs32Q6GonYK7TPrRhZzodFfNnBEK9dRhQvlPYlUwuAZChiMPMg7VVpxfON3ish0T2RyHFZQAFsP6NNnGhjuV6udjxg-4xJrp9jy0hNUm6eJmHwFkAsmJD_4CxJPLX5xcMTbtc7vJ_-do5WM8hu7nkfyMALcKIXsZb5Q-t2wgovvaB3r7e44BSiVeAMMbdHHK-Vv2miqh8a84FjWhD-iLwpXI9_PNArCPvApm3auMcsaILIQftwfqiz04h_-oFyZ43oYMkRv1LwPtGD65tRKzgH9agjLqUb0NkqjkMq4z2ErtsIFxI5Bh7sOQpFSgtQLCiCwCzHH2_xyEXstl63PokIyPTLEPnVcWEfGdicGmH8KpmQF2W4jTtg-XwwbSBmGvyfFp4sX5C3kjjq9eV7m6enS6UV--z5TVkjXfsmxjjg4s36zx-HsmQfKBZpFFu0eK0hx4e_LpEEvYaRaXCV9jhMKvA4Ik56n3sqUSpbGZ6Gr5d8D9YrNEK74oG2Sum6xE6yD0Pzu2cmXkrRO8jz_rw4xK6qpRCRvxxPTzP8OXa0O2Q97_uOOjtJvzQ1zZ_UKMXEy89zgj5iyOwd_v5MmJT-eozn8bcDC4EF7_fTiqnzXeH4qXvoppK4iJAtLN1XaQbjYxI5zOy482UMIO0pP4CKLrfsdQ7wWx13SjWInCRrTK8yYPbZbr8JF6Z8-deZA2nHrdB3mGG4NfOobVszIKoKy45OrhcC0k3clu_YW0GcN6zPeHskmosN0Cr3Ju-kPbiUZ3sNTX6fvXqXF4NYpMgk5Q1oU2wQ8n6VlAhMdtL_dU-t1yBRNLenwtwYvGPWT0gUhoDPF8jN11gNI3j-xF2aN-YLsDvH72mOwC6D0j7tHfN29owQ_c_Tsi430LXhtEJ2xg49x8tubDRGKQXNuoSSMQja3EpJtWQSoBzaBpoIu3LMwdrsHNav_5KwBCewzeYwxm6th_1Au5mNomrJfHFUlK16wx6_XdzVXhTqENIglBqlBnX_NlMX26FpPXGz9I__Z7jnXp8a1CROiNnd_VnmsM3MD9kfMSYVF1DNo9iUkW6fPzxeEcq48YX0M0Z1hf2qnaj9T1MKf3N8ytggN-_P7USZlvDC_WTy2JMkk623g3BXtoFDBG9Sf_lRqhd9MUbJTnswjIon63HbeitBXeTOCqx7CGER7y7kLtZPT9Y8PIG-3MVkg4izCqq-oUYU8P3AhinnFOJPOjM7tr-vha7S9EHns6LEL9NMjOlInM5Ufbca7mPMANvSxwlpejFmplQUDwc2Km2NbpaBrm_oaPgMpz3qd2267_aJekDAi6MDLrvOqsPDB1rUh21PuAB8Yq8WTVSzxPX-AQcOEHMNr3tu5ZiD36U_BXU26-m68hR_NmbFQEmM7AU0oiqQJEx76vIMHorsDIyBvEXPINWI5oYg_Aj3v63bYYGMilCHUx8cOAHbBPHh0jK9H_zLgRd8ZsOxByQFeT67tKNmHwTzDInAzEwSvnQmBIfyd_Qvfh_v4iwkazSJ6iX07FOq0NLkmQXZietoaHUMUPjeVvPCkk0mG4geiEMfvmqvzq-q9ZQUqg-_B-wsMQBf3UM_QaWi4pRJ8Yxa8YUHDsgCnh4UxuNLgYcSOSWybl205Qr3UgzYDYzDNpNcPNGgHpm0f8zIyuTcgmwXVyCgW5TOxfjx_Ha-yz5rva5wBVLNzhlFG0SooJMaxP93dvd9bMZkzlGluWWx0HsINy1drA4IzgSgbmD4WZDuXa3WTd0smL3zhAssoERU7BZxtrmPYubaxy4azRVc6XR5LhLIq_wXvkDHF3yKltTk6JnWe4cSWQh2aSoEXSRrAG5lJi7fipE0HewOdTwq4RLudYN8Uc0D1Km2sis9FmpP6jePUFLjhKOs2lt7NyWvsYz0UKvn150DL326YYqWtGKkL3ov1cSuRZrjs_8Rb6_SIilCDZaM9kP7-tgEEKabLhyODxEDjKfpmc2OiJfolFzzPGu_z8jyVSDf9s-GK9OhGf3LqdoDi5oU5SOb9108fxxmBpZfO1KeIkrbEe3uoxNVl-8nceIjvidmd3OE7Wo-mK-PeSZweizc1skkSrdaBhhDHUm3w3nvr8RCHDfAqf5fM5nprco5VHTYh1Yym-SfXM__6IGGcNAvAn4yuTBQ0ncW59IFWlINoME20xuq1QkZjL3_NRx2qMYlDn1TKXeKdba226WCTtr3AeKcZouEs1DZGPsVSAy&cid=CAQSSwDq26N9BuIFI4wBIBhNEcR9ZwMgTaE_awqEDIOUYxz3RwwTorUHfUYMCPyyK483ISP9jnZkvN_LUZGnc2uCN3gNk7zyEd1-OJ8YThgBIBM&sdkv=h.0.0.0&osd=2&frm=2&vis=1&sdr=1 HTTP/1.1
Host: bid.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ad787c420232a4fa81143468b01d0a30.safeframe.googlesyndication.com
Connection: keep-alive
Referer: https://ad787c420232a4fa81143468b01d0a30.safeframe.googlesyndication.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 23 Nov 2022 11:45:16 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
access-control-allow-credentials: true
access-control-allow-origin: https://ad787c420232a4fa81143468b01d0a30.safeframe.googlesyndication.com
content-type: text/xml; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 17753
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 23-Nov-2022 12:00:16 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash b2a8f717e3036b7b642f29df87f1897c
4b56cecf0750837da86f0a1d8829a57ce81e3773
7af8ee79e77ecf5b12a3e7fa49b82823e86db2cbbb9592a29a8f236e3c00e98b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=170590
Date: Wed, 23 Nov 2022 11:45:17 GMT
Etag: "637df0cc-1d7"
Expires: Fri, 25 Nov 2022 11:08:27 GMT
Last-Modified: Wed, 23 Nov 2022 10:07:08 GMT
Server: ECS (bsa/EB1C)
X-Cache: Miss from cloudfront
Via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ZI5NqV6mvgh8ZMODUcyfczK9eGVyyeftOesWOlG2QbUmvzMwKb_lPg==
Age: 3679
unified.adsafeprotected.com/v2/1221335/66496187?mon=66496191&omidPartner=[OMIDPARTNER]&apiframeworks=[APIFRAMEWORKS]&bundleId=INSERTMACROHERE&ias_xappb=INSERTMACROHERE&blockedAdTracking=${DC_BLOCKED_AD}&redirectedRetries=${DC_REDIRECT_RETRIES}&originalVast=https://bid.g.doubleclick.net/dbm/vast?dbm_c=AKAmf-AXO58qVwJaZqHvQXo5s9091ULkfr3SkSuoO5WWgr_bt2aKJwzdv0yQCatA6APQPHK7TNrPaxZHLlnJBS4zeDkkJlNUNA&cry=1&dbm_d=AKAmf-CMnTs0w6_jXHDouThuCyEQx_mreTEAsOwCBNWmAhu1g7LFHy7gpW82TshO6U5vBR4515AazwAiDm3Pto-_5KLuG5bsX8mUHVfuDFBoCNyZMvp5RZyG9efYgvg5pc0ND5vxTNxqXNDui_Ae4mASbtYBvFBk7k9dKXcSYE-LId6wCjaq2dKrVseVLWaNJLfjXoHi9sX-R1LAyFYhGeOjplFpfK90LmQcgRXXbf41IowsRQP-fKbBMX1jDRBcQbzlkvngdsuWIakDBbScdYjdNzNlI1jhaKepJyNgsGylgI0SBoWgOlgLHBV0DZSFqYeWe-MxhRFw9zxkQURo90eJ-4rvsn0WZIU7EPCVuxyqj5hqrgDpEk1eXtI22J7R3AjkdZyqXAaJxRtOdOqT642vk69a_XqfIfu3MdMm-lM-UZvL4n2Xq_L4Xf-iEDXwUfD8ChW4KsBYX42X56GdG_YtSoNB2Z66q1Dqaf9bh_h1PHLhHjKgKffs-CSNRJ_jALDvL_zASX8IE-lfSsINweHk4INDTSoDAOLkNGk4svh51CRiz9Q9rV1lEVRE1cyZ8oySFXRRB-PsGVMcCFedkw3bufg-BTbgmOO2NeX9yT6X5NmYQbR2Uo0MUld2twHnvzLJPsjDlmVOhS645BLmiYD_WlicyUfWSSgb1QzkVwABXmpAFJcZlfMSXgUxBcnk-VZxNnqc6tiGmi0tRwYjPKyX3GhoDoBN_A5b91JFPcarlcZ9e74HukpFgtj7RWTJqr1ymbXa0u0CUBcbkt3N1Ub93G8Wdf7AZjB_zebToEr-9Zl0VkImGMaCQb6akpFGaCVglmZCamTcjrKQcvL6_izvrVdxq1Yt0eFICNnfVL1Jqwkx6nFAYalTOmaQ-LeuWye30YFtNpBGkFPd8O60p7hVproj5vG9aXaB8q4Q8T2pIGNFirIqGZ60yY5_o4gZD6B2NuLeK4DhijyEV-pzg4nAtoU9dKDucLRAPsBlRAZWI1SjzWf1gZIaQPziG4KZ8cPwmINyFySXXw93TZkEsxGABq1lBti_1LNrVUPAF6Kn_BRZEr8RZvZ4WjddrUcwTwz3ZpdTUwQns3RUPgs93YRPrFKN0D2OCIfR4s7UDtUUv9tstz68sM7MMW5Z9akVFRNSYZXg7E6OzCR5HGfZs32Q6GonYK7TPrRhZzodFfNnBEK9dRhQvlPYlUwuAZChiMPMg7VVpxfON3ish0T2RyHFZQAFsP6NNnGhjuV6udjxg-4xJrp9jy0hNUm6eJmHwFkAsmJD_4CxJPLX5xcMTbtc7vJ_-do5WM8hu7nkfyMALcKIXsZb5Q-t2wgovvaB3r7e44BSiVeAMMbdHHK-Vv2miqh8a84FjWhD-iLwpXI9_PNArCPvApm3auMcsaILIQftwfqiz04h_-oFyZ43oYMkRv1LwPtGD65tRKzgH9agjLqUb0NkqjkMq4z2ErtsIFxI5Bh7sOQpFSgtQLCiCwCzHH2_xyEXstl63PokIyPTLEPnVcWEfGdicGmH8KpmQF2W4jTtg-XwwbSBmGvyfFp4sX5C3kjjq9eV7m6enS6UV--z5TVkjXfsmxjjg4s36zx-HsmQfKBZpFFu0eK0hx4e_LpEEvYaRaXCV9jhMKvA4Ik56n3sqUSpbGZ6Gr5d8D9YrNEK74oG2Sum6xE6yD0Pzu2cmXkrRO8jz_rw4xK6qpRCRvxxPTzP8OXa0O2Q97_uOOjtJvzQ1zZ_UKMXEy89zgj5iyOwd_v5MmJT-eozn8bcDC4EF7_fTiqnzXeH4qXvoppK4iJAtLN1XaQbjYxI5zOy482UMIO0pP4CKLrfsdQ7wWx13SjWInCRrTK8yYPbZbr8JF6Z8-deZA2nHrdB3mGG4NfOobVszIKoKy45OrhcC0k3clu_YW0GcN6zPeHskmosN0Cr3Ju-kPbiUZ3sNTX6fvXqXF4NYpMgk5Q1oU2wQ8n6VlAhMdtL_dU-t1yBRNLenwtwYvGPWT0gUhoDPF8jN11gNI3j-xF2aN-YLsDvH72mOwC6D0j7tHfN29owQ_c_Tsi430LXhtEJ2xg49x8tubDRGKQXNuoSSMQja3EpJtWQSoBzaBpoIu3LMwdrsHNav_5KwBCewzeYwxm6th_1Au5mNomrJfHFUlK16wx6_XdzVXhTqENIglBqlBnX_NlMX26FpPXGz9I__Z7jnXp8a1CROiNnd_VnmsM3MD9kfMSYVF1DNo9iUkW6fPzxeEcq48YX0M0Z1hf2qnaj9T1MKf3N8ytggN-_P7USZlvDC_WTy2JMkk623g3BXtoFDBG9Sf_lRqhd9MUbJTnswjIon63HbeitBXeTOCqx7CGER7y7kLtZPT9Y8PIG-3MVkg4izCqq-oUYU8P3AhinnFOJPOjM7tr-vha7S9EHns6LEL9NMjOlInM5Ufbca7mPMANvSxwlpejFmplQUDwc2Km2NbpaBrm_oaPgMpz3qd2267_aJekDAi6MDLrvOqsPDB1rUh21PuAB8Yq8WTVSzxPX-AQcOEHMNr3tu5ZiD36U_BXU26-m68hR_NmbFQEmM7AU0oiqQJEx76vIMHorsDIyBvEXPINWI5oYg_Aj3v63bYYGMilCHUx8cOAHbBPHh0jK9H_zLgRd8ZsOxByQFeT67tKNmHwTzDInAzEwSvnQmBIfyd_Qvfh_v4iwkazSJ6iX07FOq0NLkmQXZietoaHUMUPjeVvPCkk0mG4geiEMfvmqvzq-q9ZQUqg-_B-wsMQBf3UM_QaWi4pRJ8Yxa8YUHDsgCnh4UxuNLgYcSOSWybl205Qr3UgzYDYzDNpNcPNGgHpm0f8zIyuTcgmwXVyCgW5TOxfjx_Ha-yz5rva5wBVLNzhlFG0SooJMaxP93dvd9bMZkzlGluWWx0HsINy1drA4IzgSgbmD4WZDuXa3WTd0smL3zhAssoERU7BZxtrmPYubaxy4azRVc6XR5LhLIq_wXvkDHF3yKltTk6JnWe4cSWQh2aSoEXSRrAG5lJi7fipE0HewOdTwq4RLudYN8Uc0D1Km2sis9FmpP6jePUFLjhKOs2lt7NyWvsYz0UKvn150DL326YYqWtGKkL3ov1cSuRZrjs_8Rb6_SIilCDZaM9kP7-tgEEKabLhyODxEDjKfpmc2OiJfolFzzPGu_z8jyVSDf9s-GK9OhGf3LqdoDi5oU5SOb9108fxxmBpZfO1KeIkrbEe3uoxNVl-8nceIjvidmd3OE7Wo-mK-PeSZweizc1skkSrdaBhhDHUm3w3nvr8RCHDfAqf5fM5nprco5VHTYh1Yym-SfXM__6IGGcNAvAn4yuTBQ0ncW59IFWlINoME20xuq1QkZjL3_NRx2qMYlDn1TKXeKdba226WCTtr3AeKcZouEs1DZGPsVSAy&cid=CAQSSwDq26N9BuIFI4wBIBhNEcR9ZwMgTaE_awqEDIOUYxz3RwwTorUHfUYMCPyyK483ISP9jnZkvN_LUZGnc2uCN3gNk7zyEd1-OJ8YThgBIBM&sdkv=h.0.0.0&osd=2&frm=2&vis=1&sdr=1&ves=dGltZXN0YW1wOiAxNjY5MjAzOTE2OTczCg&vpaid=0
200 OK 4.2 kB URL HTTP/1.1 unified.adsafeprotected.com/v2/1221335/66496187?mon=66496191&omidPartner=[OMIDPARTNER]&apiframeworks=[APIFRAMEWORKS]&bundleId=INSERTMACROHERE&ias_xappb=INSERTMACROHERE&blockedAdTracking=${DC_BLOCKED_AD}&redirectedRetries=${DC_REDIRECT_RETRIES}&originalVast=https://bid.g.doubleclick.net/dbm/vast?dbm_c=AKAmf-AXO58qVwJaZqHvQXo5s9091ULkfr3SkSuoO5WWgr_bt2aKJwzdv0yQCatA6APQPHK7TNrPaxZHLlnJBS4zeDkkJlNUNA&cry=1&dbm_d=AKAmf-CMnTs0w6_jXHDouThuCyEQx_mreTEAsOwCBNWmAhu1g7LFHy7gpW82TshO6U5vBR4515AazwAiDm3Pto-_5KLuG5bsX8mUHVfuDFBoCNyZMvp5RZyG9efYgvg5pc0ND5vxTNxqXNDui_Ae4mASbtYBvFBk7k9dKXcSYE-LId6wCjaq2dKrVseVLWaNJLfjXoHi9sX-R1LAyFYhGeOjplFpfK90LmQcgRXXbf41IowsRQP-fKbBMX1jDRBcQbzlkvngdsuWIakDBbScdYjdNzNlI1jhaKepJyNgsGylgI0SBoWgOlgLHBV0DZSFqYeWe-MxhRFw9zxkQURo90eJ-4rvsn0WZIU7EPCVuxyqj5hqrgDpEk1eXtI22J7R3AjkdZyqXAaJxRtOdOqT642vk69a_XqfIfu3MdMm-lM-UZvL4n2Xq_L4Xf-iEDXwUfD8ChW4KsBYX42X56GdG_YtSoNB2Z66q1Dqaf9bh_h1PHLhHjKgKffs-CSNRJ_jALDvL_zASX8IE-lfSsINweHk4INDTSoDAOLkNGk4svh51CRiz9Q9rV1lEVRE1cyZ8oySFXRRB-PsGVMcCFedkw3bufg-BTbgmOO2NeX9yT6X5NmYQbR2Uo0MUld2twHnvzLJPsjDlmVOhS645BLmiYD_WlicyUfWSSgb1QzkVwABXmpAFJcZlfMSXgUxBcnk-VZxNnqc6tiGmi0tRwYjPKyX3GhoDoBN_A5b91JFPcarlcZ9e74HukpFgtj7RWTJqr1ymbXa0u0CUBcbkt3N1Ub93G8Wdf7AZjB_zebToEr-9Zl0VkImGMaCQb6akpFGaCVglmZCamTcjrKQcvL6_izvrVdxq1Yt0eFICNnfVL1Jqwkx6nFAYalTOmaQ-LeuWye30YFtNpBGkFPd8O60p7hVproj5vG9aXaB8q4Q8T2pIGNFirIqGZ60yY5_o4gZD6B2NuLeK4DhijyEV-pzg4nAtoU9dKDucLRAPsBlRAZWI1SjzWf1gZIaQPziG4KZ8cPwmINyFySXXw93TZkEsxGABq1lBti_1LNrVUPAF6Kn_BRZEr8RZvZ4WjddrUcwTwz3ZpdTUwQns3RUPgs93YRPrFKN0D2OCIfR4s7UDtUUv9tstz68sM7MMW5Z9akVFRNSYZXg7E6OzCR5HGfZs32Q6GonYK7TPrRhZzodFfNnBEK9dRhQvlPYlUwuAZChiMPMg7VVpxfON3ish0T2RyHFZQAFsP6NNnGhjuV6udjxg-4xJrp9jy0hNUm6eJmHwFkAsmJD_4CxJPLX5xcMTbtc7vJ_-do5WM8hu7nkfyMALcKIXsZb5Q-t2wgovvaB3r7e44BSiVeAMMbdHHK-Vv2miqh8a84FjWhD-iLwpXI9_PNArCPvApm3auMcsaILIQftwfqiz04h_-oFyZ43oYMkRv1LwPtGD65tRKzgH9agjLqUb0NkqjkMq4z2ErtsIFxI5Bh7sOQpFSgtQLCiCwCzHH2_xyEXstl63PokIyPTLEPnVcWEfGdicGmH8KpmQF2W4jTtg-XwwbSBmGvyfFp4sX5C3kjjq9eV7m6enS6UV--z5TVkjXfsmxjjg4s36zx-HsmQfKBZpFFu0eK0hx4e_LpEEvYaRaXCV9jhMKvA4Ik56n3sqUSpbGZ6Gr5d8D9YrNEK74oG2Sum6xE6yD0Pzu2cmXkrRO8jz_rw4xK6qpRCRvxxPTzP8OXa0O2Q97_uOOjtJvzQ1zZ_UKMXEy89zgj5iyOwd_v5MmJT-eozn8bcDC4EF7_fTiqnzXeH4qXvoppK4iJAtLN1XaQbjYxI5zOy482UMIO0pP4CKLrfsdQ7wWx13SjWInCRrTK8yYPbZbr8JF6Z8-deZA2nHrdB3mGG4NfOobVszIKoKy45OrhcC0k3clu_YW0GcN6zPeHskmosN0Cr3Ju-kPbiUZ3sNTX6fvXqXF4NYpMgk5Q1oU2wQ8n6VlAhMdtL_dU-t1yBRNLenwtwYvGPWT0gUhoDPF8jN11gNI3j-xF2aN-YLsDvH72mOwC6D0j7tHfN29owQ_c_Tsi430LXhtEJ2xg49x8tubDRGKQXNuoSSMQja3EpJtWQSoBzaBpoIu3LMwdrsHNav_5KwBCewzeYwxm6th_1Au5mNomrJfHFUlK16wx6_XdzVXhTqENIglBqlBnX_NlMX26FpPXGz9I__Z7jnXp8a1CROiNnd_VnmsM3MD9kfMSYVF1DNo9iUkW6fPzxeEcq48YX0M0Z1hf2qnaj9T1MKf3N8ytggN-_P7USZlvDC_WTy2JMkk623g3BXtoFDBG9Sf_lRqhd9MUbJTnswjIon63HbeitBXeTOCqx7CGER7y7kLtZPT9Y8PIG-3MVkg4izCqq-oUYU8P3AhinnFOJPOjM7tr-vha7S9EHns6LEL9NMjOlInM5Ufbca7mPMANvSxwlpejFmplQUDwc2Km2NbpaBrm_oaPgMpz3qd2267_aJekDAi6MDLrvOqsPDB1rUh21PuAB8Yq8WTVSzxPX-AQcOEHMNr3tu5ZiD36U_BXU26-m68hR_NmbFQEmM7AU0oiqQJEx76vIMHorsDIyBvEXPINWI5oYg_Aj3v63bYYGMilCHUx8cOAHbBPHh0jK9H_zLgRd8ZsOxByQFeT67tKNmHwTzDInAzEwSvnQmBIfyd_Qvfh_v4iwkazSJ6iX07FOq0NLkmQXZietoaHUMUPjeVvPCkk0mG4geiEMfvmqvzq-q9ZQUqg-_B-wsMQBf3UM_QaWi4pRJ8Yxa8YUHDsgCnh4UxuNLgYcSOSWybl205Qr3UgzYDYzDNpNcPNGgHpm0f8zIyuTcgmwXVyCgW5TOxfjx_Ha-yz5rva5wBVLNzhlFG0SooJMaxP93dvd9bMZkzlGluWWx0HsINy1drA4IzgSgbmD4WZDuXa3WTd0smL3zhAssoERU7BZxtrmPYubaxy4azRVc6XR5LhLIq_wXvkDHF3yKltTk6JnWe4cSWQh2aSoEXSRrAG5lJi7fipE0HewOdTwq4RLudYN8Uc0D1Km2sis9FmpP6jePUFLjhKOs2lt7NyWvsYz0UKvn150DL326YYqWtGKkL3ov1cSuRZrjs_8Rb6_SIilCDZaM9kP7-tgEEKabLhyODxEDjKfpmc2OiJfolFzzPGu_z8jyVSDf9s-GK9OhGf3LqdoDi5oU5SOb9108fxxmBpZfO1KeIkrbEe3uoxNVl-8nceIjvidmd3OE7Wo-mK-PeSZweizc1skkSrdaBhhDHUm3w3nvr8RCHDfAqf5fM5nprco5VHTYh1Yym-SfXM__6IGGcNAvAn4yuTBQ0ncW59IFWlINoME20xuq1QkZjL3_NRx2qMYlDn1TKXeKdba226WCTtr3AeKcZouEs1DZGPsVSAy&cid=CAQSSwDq26N9BuIFI4wBIBhNEcR9ZwMgTaE_awqEDIOUYxz3RwwTorUHfUYMCPyyK483ISP9jnZkvN_LUZGnc2uCN3gNk7zyEd1-OJ8YThgBIBM&sdkv=h.0.0.0&osd=2&frm=2&vis=1&sdr=1&ves=dGltZXN0YW1wOiAxNjY5MjAzOTE2OTczCg&vpaid=0
IP
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (8648)
Hash 8d309aff4c9aeb1c42b5829888f07a7f
26b2b05b2d927bd07eb781696d1a57edaf4e20e7
64608c0b8dd08a87ee68abf222beabfb084c0ba00ccafcffbb340ed2042e460d
GET /v2/1221335/66496187?mon=66496191&omidPartner=[OMIDPARTNER]&apiframeworks=[APIFRAMEWORKS]&bundleId=INSERTMACROHERE&ias_xappb=INSERTMACROHERE&blockedAdTracking=${DC_BLOCKED_AD}&redirectedRetries=${DC_REDIRECT_RETRIES}&originalVast=https://bid.g.doubleclick.net/dbm/vast?dbm_c=AKAmf-AXO58qVwJaZqHvQXo5s9091ULkfr3SkSuoO5WWgr_bt2aKJwzdv0yQCatA6APQPHK7TNrPaxZHLlnJBS4zeDkkJlNUNA&cry=1&dbm_d=AKAmf-CMnTs0w6_jXHDouThuCyEQx_mreTEAsOwCBNWmAhu1g7LFHy7gpW82TshO6U5vBR4515AazwAiDm3Pto-_5KLuG5bsX8mUHVfuDFBoCNyZMvp5RZyG9efYgvg5pc0ND5vxTNxqXNDui_Ae4mASbtYBvFBk7k9dKXcSYE-LId6wCjaq2dKrVseVLWaNJLfjXoHi9sX-R1LAyFYhGeOjplFpfK90LmQcgRXXbf41IowsRQP-fKbBMX1jDRBcQbzlkvngdsuWIakDBbScdYjdNzNlI1jhaKepJyNgsGylgI0SBoWgOlgLHBV0DZSFqYeWe-MxhRFw9zxkQURo90eJ-4rvsn0WZIU7EPCVuxyqj5hqrgDpEk1eXtI22J7R3AjkdZyqXAaJxRtOdOqT642vk69a_XqfIfu3MdMm-lM-UZvL4n2Xq_L4Xf-iEDXwUfD8ChW4KsBYX42X56GdG_YtSoNB2Z66q1Dqaf9bh_h1PHLhHjKgKffs-CSNRJ_jALDvL_zASX8IE-lfSsINweHk4INDTSoDAOLkNGk4svh51CRiz9Q9rV1lEVRE1cyZ8oySFXRRB-PsGVMcCFedkw3bufg-BTbgmOO2NeX9yT6X5NmYQbR2Uo0MUld2twHnvzLJPsjDlmVOhS645BLmiYD_WlicyUfWSSgb1QzkVwABXmpAFJcZlfMSXgUxBcnk-VZxNnqc6tiGmi0tRwYjPKyX3GhoDoBN_A5b91JFPcarlcZ9e74HukpFgtj7RWTJqr1ymbXa0u0CUBcbkt3N1Ub93G8Wdf7AZjB_zebToEr-9Zl0VkImGMaCQb6akpFGaCVglmZCamTcjrKQcvL6_izvrVdxq1Yt0eFICNnfVL1Jqwkx6nFAYalTOmaQ-LeuWye30YFtNpBGkFPd8O60p7hVproj5vG9aXaB8q4Q8T2pIGNFirIqGZ60yY5_o4gZD6B2NuLeK4DhijyEV-pzg4nAtoU9dKDucLRAPsBlRAZWI1SjzWf1gZIaQPziG4KZ8cPwmINyFySXXw93TZkEsxGABq1lBti_1LNrVUPAF6Kn_BRZEr8RZvZ4WjddrUcwTwz3ZpdTUwQns3RUPgs93YRPrFKN0D2OCIfR4s7UDtUUv9tstz68sM7MMW5Z9akVFRNSYZXg7E6OzCR5HGfZs32Q6GonYK7TPrRhZzodFfNnBEK9dRhQvlPYlUwuAZChiMPMg7VVpxfON3ish0T2RyHFZQAFsP6NNnGhjuV6udjxg-4xJrp9jy0hNUm6eJmHwFkAsmJD_4CxJPLX5xcMTbtc7vJ_-do5WM8hu7nkfyMALcKIXsZb5Q-t2wgovvaB3r7e44BSiVeAMMbdHHK-Vv2miqh8a84FjWhD-iLwpXI9_PNArCPvApm3auMcsaILIQftwfqiz04h_-oFyZ43oYMkRv1LwPtGD65tRKzgH9agjLqUb0NkqjkMq4z2ErtsIFxI5Bh7sOQpFSgtQLCiCwCzHH2_xyEXstl63PokIyPTLEPnVcWEfGdicGmH8KpmQF2W4jTtg-XwwbSBmGvyfFp4sX5C3kjjq9eV7m6enS6UV--z5TVkjXfsmxjjg4s36zx-HsmQfKBZpFFu0eK0hx4e_LpEEvYaRaXCV9jhMKvA4Ik56n3sqUSpbGZ6Gr5d8D9YrNEK74oG2Sum6xE6yD0Pzu2cmXkrRO8jz_rw4xK6qpRCRvxxPTzP8OXa0O2Q97_uOOjtJvzQ1zZ_UKMXEy89zgj5iyOwd_v5MmJT-eozn8bcDC4EF7_fTiqnzXeH4qXvoppK4iJAtLN1XaQbjYxI5zOy482UMIO0pP4CKLrfsdQ7wWx13SjWInCRrTK8yYPbZbr8JF6Z8-deZA2nHrdB3mGG4NfOobVszIKoKy45OrhcC0k3clu_YW0GcN6zPeHskmosN0Cr3Ju-kPbiUZ3sNTX6fvXqXF4NYpMgk5Q1oU2wQ8n6VlAhMdtL_dU-t1yBRNLenwtwYvGPWT0gUhoDPF8jN11gNI3j-xF2aN-YLsDvH72mOwC6D0j7tHfN29owQ_c_Tsi430LXhtEJ2xg49x8tubDRGKQXNuoSSMQja3EpJtWQSoBzaBpoIu3LMwdrsHNav_5KwBCewzeYwxm6th_1Au5mNomrJfHFUlK16wx6_XdzVXhTqENIglBqlBnX_NlMX26FpPXGz9I__Z7jnXp8a1CROiNnd_VnmsM3MD9kfMSYVF1DNo9iUkW6fPzxeEcq48YX0M0Z1hf2qnaj9T1MKf3N8ytggN-_P7USZlvDC_WTy2JMkk623g3BXtoFDBG9Sf_lRqhd9MUbJTnswjIon63HbeitBXeTOCqx7CGER7y7kLtZPT9Y8PIG-3MVkg4izCqq-oUYU8P3AhinnFOJPOjM7tr-vha7S9EHns6LEL9NMjOlInM5Ufbca7mPMANvSxwlpejFmplQUDwc2Km2NbpaBrm_oaPgMpz3qd2267_aJekDAi6MDLrvOqsPDB1rUh21PuAB8Yq8WTVSzxPX-AQcOEHMNr3tu5ZiD36U_BXU26-m68hR_NmbFQEmM7AU0oiqQJEx76vIMHorsDIyBvEXPINWI5oYg_Aj3v63bYYGMilCHUx8cOAHbBPHh0jK9H_zLgRd8ZsOxByQFeT67tKNmHwTzDInAzEwSvnQmBIfyd_Qvfh_v4iwkazSJ6iX07FOq0NLkmQXZietoaHUMUPjeVvPCkk0mG4geiEMfvmqvzq-q9ZQUqg-_B-wsMQBf3UM_QaWi4pRJ8Yxa8YUHDsgCnh4UxuNLgYcSOSWybl205Qr3UgzYDYzDNpNcPNGgHpm0f8zIyuTcgmwXVyCgW5TOxfjx_Ha-yz5rva5wBVLNzhlFG0SooJMaxP93dvd9bMZkzlGluWWx0HsINy1drA4IzgSgbmD4WZDuXa3WTd0smL3zhAssoERU7BZxtrmPYubaxy4azRVc6XR5LhLIq_wXvkDHF3yKltTk6JnWe4cSWQh2aSoEXSRrAG5lJi7fipE0HewOdTwq4RLudYN8Uc0D1Km2sis9FmpP6jePUFLjhKOs2lt7NyWvsYz0UKvn150DL326YYqWtGKkL3ov1cSuRZrjs_8Rb6_SIilCDZaM9kP7-tgEEKabLhyODxEDjKfpmc2OiJfolFzzPGu_z8jyVSDf9s-GK9OhGf3LqdoDi5oU5SOb9108fxxmBpZfO1KeIkrbEe3uoxNVl-8nceIjvidmd3OE7Wo-mK-PeSZweizc1skkSrdaBhhDHUm3w3nvr8RCHDfAqf5fM5nprco5VHTYh1Yym-SfXM__6IGGcNAvAn4yuTBQ0ncW59IFWlINoME20xuq1QkZjL3_NRx2qMYlDn1TKXeKdba226WCTtr3AeKcZouEs1DZGPsVSAy&cid=CAQSSwDq26N9BuIFI4wBIBhNEcR9ZwMgTaE_awqEDIOUYxz3RwwTorUHfUYMCPyyK483ISP9jnZkvN_LUZGnc2uCN3gNk7zyEd1-OJ8YThgBIBM&sdkv=h.0.0.0&osd=2&frm=2&vis=1&sdr=1&ves=dGltZXN0YW1wOiAxNjY5MjAzOTE2OTczCg&vpaid=0 HTTP/1.1
Host: unified.adsafeprotected.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ad787c420232a4fa81143468b01d0a30.safeframe.googlesyndication.com
Connection: keep-alive
Referer: https://ad787c420232a4fa81143468b01d0a30.safeframe.googlesyndication.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://ad787c420232a4fa81143468b01d0a30.safeframe.googlesyndication.com
Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate
Content-Encoding: gzip
Content-Type: text/xml; charset=UTF-8
Date: Wed, 23 Nov 2022 11:45:17 GMT
Request-Id: cdv0fj8jgl37lthcrrk0
Vary: Origin
Content-Length: 4207
Connection: keep-alive
px.netpub.media/iab?xx=f89e668722348d1b1d1ea79f6e599d31&y=%2F29636627%2C22620349674%2Fblogmado.com_fluid_5&a=true&b=request&l=1268&p=2239&t=1669203916860&d=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&c=FR&yy=93128458af866be388b4299e2276aa3f&zz=f62094a009d46877f4bd22c49ae8fbe52d3f83bf20dfcb1f20f09a838380a9c1&w=14f9494694a9078dc2f4ae3c92e41760&r=250&j=0&q=300&k=4&g=0&f=dfp&n=100&z=1c2b3d8f5084c3670b0ffbd768d4c149&v=1.6.0&o=827.5&i=1&aa=b1e5de914bcdceaf98f0e26138691c8f990cc19304a01bed82f5a95dc8fa3663&s=complete&m=898&x=netpub&h=0&e=0&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0
200 OK 182 B URL HTTP/2 px.netpub.media/iab?xx=f89e668722348d1b1d1ea79f6e599d31&y=%2F29636627%2C22620349674%2Fblogmado.com_fluid_5&a=true&b=request&l=1268&p=2239&t=1669203916860&d=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&c=FR&yy=93128458af866be388b4299e2276aa3f&zz=f62094a009d46877f4bd22c49ae8fbe52d3f83bf20dfcb1f20f09a838380a9c1&w=14f9494694a9078dc2f4ae3c92e41760&r=250&j=0&q=300&k=4&g=0&f=dfp&n=100&z=1c2b3d8f5084c3670b0ffbd768d4c149&v=1.6.0&o=827.5&i=1&aa=b1e5de914bcdceaf98f0e26138691c8f990cc19304a01bed82f5a95dc8fa3663&s=complete&m=898&x=netpub&h=0&e=0&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 68afddc5fc6dff20732a10e111220622
eff6f5a1bc6cea1bdcb4b62b02d5c345a638c811
e2d9f74c1dc050a2bcd7d6b7a8803b1ec8387e4e4c3b85978742dc182d0b5383
GET /iab?xx=f89e668722348d1b1d1ea79f6e599d31&y=%2F29636627%2C22620349674%2Fblogmado.com_fluid_5&a=true&b=request&l=1268&p=2239&t=1669203916860&d=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&c=FR&yy=93128458af866be388b4299e2276aa3f&zz=f62094a009d46877f4bd22c49ae8fbe52d3f83bf20dfcb1f20f09a838380a9c1&w=14f9494694a9078dc2f4ae3c92e41760&r=250&j=0&q=300&k=4&g=0&f=dfp&n=100&z=1c2b3d8f5084c3670b0ffbd768d4c149&v=1.6.0&o=827.5&i=1&aa=b1e5de914bcdceaf98f0e26138691c8f990cc19304a01bed82f5a95dc8fa3663&s=complete&m=898&x=netpub&h=0&e=0&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0 HTTP/1.1
Host: px.netpub.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 11:45:17 GMT
content-type: image/png
access-control-allow-origin: *
access-control-allow-headers: X-HTTPREQUEST
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZneYEcyAb6cvSruG72u4USQD5lWDIiR3OeMhdX4BKxDdzqJtqDXMMuq1XSA0%2FwcTUuZOxt4ht4yDM9Rj3feYwZ5p6sz4TGOYPX2RkHk9nEZaRKnJ2yFzhRQ6aRHw%2FaQgMg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76e9a86369c20b3d-OSL
X-Firefox-Spdy: h2
relativelyweptcurls.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSQYgcRRStTlYEPUjEiwdlDh4UsrPd090zPeYQjDESTLIhiQS8VVdVz5Zb3dVUdU%2FP7kEWA5KDwogHPfa%2B2c1ijGIuXkSUWS9hQMgo6B5cz96ESG6KzOzA4j%2FU%2F7%2FeP7z3%2Fv9guzwkLkp6cPWy3pRK0ZWw6TZevikzrivbuHKj4blN90zjpszawZnGYPaY%2FqueGzbdVxpvCrauV1qu57qe6zUuSCMSPViZo5D5va7X7LrNoNX0wgAD8%2F%2Felg4sdcD7h%2BRZSD59Yu3BfUg2RpZ%2BfV7Y9ULnp99IS0ULbdDne29n65muMqTHZWIcJNneYhraTgn57AR0trdQAN3fmSlALKfE%2BdVDnO0taCLu7x4xjRVEhpg%2Fjao%2FhlBjSDoG07cg%2BUMCMI4rq8jSO1e0qejGEUpn6JQsPX4EWU3J0u%2FPIUu%2FOqfkoHFdq7KQOrMYJDXkYAzZGyMv91FsOpDVPljxPiT%2Fiaw8voQs3Vm1SkPyg5dCryPcIAmWgyDiywELustR0g6X45bL%2FTCKOkG3PbdIyjFkMoYSQ1B7EqV1UEoHZeKgzB2k%2FKBBw27iup0kTnw%2FChhjvs9YGLV5yP0gSlyUbKZhiCIfgqkhmNlCbrawLocw5Q%2BwazUsd2ALgj6vUQmCyhJUlKCSBFVBUPXrXa5sy9Z3uLJl7C1ya5H9eqSL3jbd1UVPZGQ7PySn5sb9%2B8xvWBcHDddLEu63eRIz4fOw3Y1pEvEoaDPeiVk7hJU1pD0Bah1szrb45WnkckrIt38jpvuwah9MngItXwCtRp2WC7o2CiIXm9ndIhXUZE2mU3BdIy%2BWUGw42%2BqQPD9n0WUdCDY5e%2Fjn4Jd%2FHn0DZmrkpsa78keCnro9uqYrsnNNV5bcX80LmcpNOlvt9YIWYunuW2Kj0oZfPG%2BHn7%2FGZsCsvHdD2OISzbjMepZ8cU5yLswFbZgg3120N0V8tbRr50qTlfmlq69fuJjmRlgrdTYGlQ87n4DJKXnq8tb8aF%2F88AGkGcOUNdJyQhYBqffB8i3YfHL2049W%2FzjD34HVBEYdz8S5g6qsR6YVH38qSaDEcU%2FjGlYcWxCLyfd%2FHWHb9jZ6xgEtbiFLa%2FRNjb6qQdUQtjw5KnIzOfuzPw%2FEyhnFyjg7sTLq4yNrrTxohF4gojjqMM5jwbjXafmR77otzoNOV3hdFHbK3nty8h8AAAD%2F%2FwEAAP%2F%2FDv1IAIwEAAA%3D
200 OK 7 B URL HTTP/1.1 relativelyweptcurls.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSQYgcRRStTlYEPUjEiwdlDh4UsrPd090zPeYQjDESTLIhiQS8VVdVz5Zb3dVUdU%2FP7kEWA5KDwogHPfa%2B2c1ijGIuXkSUWS9hQMgo6B5cz96ESG6KzOzA4j%2FU%2F7%2FeP7z3%2Fv9guzwkLkp6cPWy3pRK0ZWw6TZevikzrivbuHKj4blN90zjpszawZnGYPaY%2FqueGzbdVxpvCrauV1qu57qe6zUuSCMSPViZo5D5va7X7LrNoNX0wgAD8%2F%2Felg4sdcD7h%2BRZSD59Yu3BfUg2RpZ%2BfV7Y9ULnp99IS0ULbdDne29n65muMqTHZWIcJNneYhraTgn57AR0trdQAN3fmSlALKfE%2BdVDnO0taCLu7x4xjRVEhpg%2Fjao%2FhlBjSDoG07cg%2BUMCMI4rq8jSO1e0qejGEUpn6JQsPX4EWU3J0u%2FPIUu%2FOqfkoHFdq7KQOrMYJDXkYAzZGyMv91FsOpDVPljxPiT%2Fiaw8voQs3Vm1SkPyg5dCryPcIAmWgyDiywELustR0g6X45bL%2FTCKOkG3PbdIyjFkMoYSQ1B7EqV1UEoHZeKgzB2k%2FKBBw27iup0kTnw%2FChhjvs9YGLV5yP0gSlyUbKZhiCIfgqkhmNlCbrawLocw5Q%2BwazUsd2ALgj6vUQmCyhJUlKCSBFVBUPXrXa5sy9Z3uLJl7C1ya5H9eqSL3jbd1UVPZGQ7PySn5sb9%2B8xvWBcHDddLEu63eRIz4fOw3Y1pEvEoaDPeiVk7hJU1pD0Bah1szrb45WnkckrIt38jpvuwah9MngItXwCtRp2WC7o2CiIXm9ndIhXUZE2mU3BdIy%2BWUGw42%2BqQPD9n0WUdCDY5e%2Fjn4Jd%2FHn0DZmrkpsa78keCnro9uqYrsnNNV5bcX80LmcpNOlvt9YIWYunuW2Kj0oZfPG%2BHn7%2FGZsCsvHdD2OISzbjMepZ8cU5yLswFbZgg3120N0V8tbRr50qTlfmlq69fuJjmRlgrdTYGlQ87n4DJKXnq8tb8aF%2F88AGkGcOUNdJyQhYBqffB8i3YfHL2049W%2FzjD34HVBEYdz8S5g6qsR6YVH38qSaDEcU%2FjGlYcWxCLyfd%2FHWHb9jZ6xgEtbiFLa%2FRNjb6qQdUQtjw5KnIzOfuzPw%2FEyhnFyjg7sTLq4yNrrTxohF4gojjqMM5jwbjXafmR77otzoNOV3hdFHbK3nty8h8AAAD%2F%2FwEAAP%2F%2FDv1IAIwEAAA%3D
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSQYgcRRStTlYEPUjEiwdlDh4UsrPd090zPeYQjDESTLIhiQS8VVdVz5Zb3dVUdU%2FP7kEWA5KDwogHPfa%2B2c1ijGIuXkSUWS9hQMgo6B5cz96ESG6KzOzA4j%2FU%2F7%2FeP7z3%2Fv9guzwkLkp6cPWy3pRK0ZWw6TZevikzrivbuHKj4blN90zjpszawZnGYPaY%2FqueGzbdVxpvCrauV1qu57qe6zUuSCMSPViZo5D5va7X7LrNoNX0wgAD8%2F%2Felg4sdcD7h%2BRZSD59Yu3BfUg2RpZ%2BfV7Y9ULnp99IS0ULbdDne29n65muMqTHZWIcJNneYhraTgn57AR0trdQAN3fmSlALKfE%2BdVDnO0taCLu7x4xjRVEhpg%2Fjao%2FhlBjSDoG07cg%2BUMCMI4rq8jSO1e0qejGEUpn6JQsPX4EWU3J0u%2FPIUu%2FOqfkoHFdq7KQOrMYJDXkYAzZGyMv91FsOpDVPljxPiT%2Fiaw8voQs3Vm1SkPyg5dCryPcIAmWgyDiywELustR0g6X45bL%2FTCKOkG3PbdIyjFkMoYSQ1B7EqV1UEoHZeKgzB2k%2FKBBw27iup0kTnw%2FChhjvs9YGLV5yP0gSlyUbKZhiCIfgqkhmNlCbrawLocw5Q%2BwazUsd2ALgj6vUQmCyhJUlKCSBFVBUPXrXa5sy9Z3uLJl7C1ya5H9eqSL3jbd1UVPZGQ7PySn5sb9%2B8xvWBcHDddLEu63eRIz4fOw3Y1pEvEoaDPeiVk7hJU1pD0Bah1szrb45WnkckrIt38jpvuwah9MngItXwCtRp2WC7o2CiIXm9ndIhXUZE2mU3BdIy%2BWUGw42%2BqQPD9n0WUdCDY5e%2Fjn4Jd%2FHn0DZmrkpsa78keCnro9uqYrsnNNV5bcX80LmcpNOlvt9YIWYunuW2Kj0oZfPG%2BHn7%2FGZsCsvHdD2OISzbjMepZ8cU5yLswFbZgg3120N0V8tbRr50qTlfmlq69fuJjmRlgrdTYGlQ87n4DJKXnq8tb8aF%2F88AGkGcOUNdJyQhYBqffB8i3YfHL2049W%2FzjD34HVBEYdz8S5g6qsR6YVH38qSaDEcU%2FjGlYcWxCLyfd%2FHWHb9jZ6xgEtbiFLa%2FRNjb6qQdUQtjw5KnIzOfuzPw%2FEyhnFyjg7sTLq4yNrrTxohF4gojjqMM5jwbjXafmR77otzoNOV3hdFHbK3nty8h8AAAD%2F%2FwEAAP%2F%2FDv1IAIwEAAA%3D HTTP/1.1
Host: relativelyweptcurls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Cookie: u_pl=16650200; uid_id2=517e04f4-448d-4c49-8f65-b20d35887496:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec01ffd36dfbce3d569baf8d846cd7bc65=[3760951]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 23 Nov 2022 11:45:17 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d4dc3833f3f62c0b33821e7f00419d16
Strict-Transport-Security: max-age=0; includeSubdomains
relativelyweptcurls.com/pixel/sbs?c=1
200 OK 0 B URL HTTP/1.1 relativelyweptcurls.com/pixel/sbs?c=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: relativelyweptcurls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Cookie: u_pl=16650200; uid_id2=517e04f4-448d-4c49-8f65-b20d35887496:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec01ffd36dfbce3d569baf8d846cd7bc65=[3760951]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 23 Nov 2022 11:45:17 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
px.netpub.media/iab?xx=f89e668722348d1b1d1ea79f6e599d31&y=%2F29636627%2C22620349674%2Fblogmado.com_fluid_5&a=true&b=request&l=1268&p=2239&t=1669203916861&d=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&c=FR&yy=93128458af866be388b4299e2276aa3f&zz=f62094a009d46877f4bd22c49ae8fbe52d3f83bf20dfcb1f20f09a838380a9c1&w=14f9494694a9078dc2f4ae3c92e41760&r=250&j=0&q=300&k=4&g=1&f=dfp&n=100&z=1c2b3d8f5084c3670b0ffbd768d4c149&v=1.6.0&o=827.5&i=1&aa=b1e5de914bcdceaf98f0e26138691c8f990cc19304a01bed82f5a95dc8fa3663&s=complete&m=898&x=netpub&h=0&e=0&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0
200 OK 182 B URL HTTP/2 px.netpub.media/iab?xx=f89e668722348d1b1d1ea79f6e599d31&y=%2F29636627%2C22620349674%2Fblogmado.com_fluid_5&a=true&b=request&l=1268&p=2239&t=1669203916861&d=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&c=FR&yy=93128458af866be388b4299e2276aa3f&zz=f62094a009d46877f4bd22c49ae8fbe52d3f83bf20dfcb1f20f09a838380a9c1&w=14f9494694a9078dc2f4ae3c92e41760&r=250&j=0&q=300&k=4&g=1&f=dfp&n=100&z=1c2b3d8f5084c3670b0ffbd768d4c149&v=1.6.0&o=827.5&i=1&aa=b1e5de914bcdceaf98f0e26138691c8f990cc19304a01bed82f5a95dc8fa3663&s=complete&m=898&x=netpub&h=0&e=0&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 68afddc5fc6dff20732a10e111220622
eff6f5a1bc6cea1bdcb4b62b02d5c345a638c811
e2d9f74c1dc050a2bcd7d6b7a8803b1ec8387e4e4c3b85978742dc182d0b5383
GET /iab?xx=f89e668722348d1b1d1ea79f6e599d31&y=%2F29636627%2C22620349674%2Fblogmado.com_fluid_5&a=true&b=request&l=1268&p=2239&t=1669203916861&d=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&c=FR&yy=93128458af866be388b4299e2276aa3f&zz=f62094a009d46877f4bd22c49ae8fbe52d3f83bf20dfcb1f20f09a838380a9c1&w=14f9494694a9078dc2f4ae3c92e41760&r=250&j=0&q=300&k=4&g=1&f=dfp&n=100&z=1c2b3d8f5084c3670b0ffbd768d4c149&v=1.6.0&o=827.5&i=1&aa=b1e5de914bcdceaf98f0e26138691c8f990cc19304a01bed82f5a95dc8fa3663&s=complete&m=898&x=netpub&h=0&e=0&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0 HTTP/1.1
Host: px.netpub.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 11:45:17 GMT
content-type: image/png
access-control-allow-origin: *
access-control-allow-headers: X-HTTPREQUEST
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X9CINLVCGaLCUWS4u7%2FIc0AdWQ36LkTX%2BQ6aFOfCvFG08nXs%2BJr1Nug2tQM5AZdklkyK9o98%2FFf1UmuuRHkDyr7k2JhzXQYnNkxyud081efhwr9D%2FlVSpMXUlgVQ66NU4g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76e9a86369c40b3d-OSL
X-Firefox-Spdy: h2
s0.2mdn.net/simgad/6380875514095845875
200 OK 16 kB URL HTTP/2 s0.2mdn.net/simgad/6380875514095845875
IP
File type gzip compressed data, max compression\012- data
Hash 6866bd46b7cd8de41e510bcadb27b113
fe7b04688617bbb2ce655195353b1df71aeb3f80
7540bfbd446da5d8e94e40d69850e0224d6285362c2f6b3b07445effe45beab5
GET /simgad/6380875514095845875 HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad787c420232a4fa81143468b01d0a30.safeframe.googlesyndication.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 67422
x-content-type-options: nosniff
x-dns-prefetch-control: off
server: sffe
x-xss-protection: 0
date: Thu, 17 Nov 2022 08:30:39 GMT
expires: Fri, 17 Nov 2023 08:30:39 GMT
cache-control: public, max-age=31536000
age: 530077
last-modified: Tue, 20 Sep 2022 14:44:49 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjstu2DKA4_6IPBETomTA4jckx7rv8xLTeMbY0I7B5-lli6ciKwJhO36A6Dmgj4JquUUylTEoYzrtyzeg4cFIkjbqMeztlYQbC4OwFadx1SiIQp0Ls_GP3Q18bk4kDBAY3OUNtBHQIg&sai=AMfl-YR9JcqJyAfUdgd6w7yxp9oHepwUIO3zuSXZkIHP2ye7Wh9WvHCitKkYji5VIb1a-jmIy0dY2jzgi4QZaoahM5hFn8M5TXqrYUBNDQJYXx5SMZ3Nrm0oIvxA7gp5et_O2miKbghOL7hG09drRME&sig=Cg0ArKJSzOB6LmHt71GnEAE&cid=CAQSSwDq26N9Pj7mM7jUaf0y0Ywvyyj_WS-4r_YPuqpHf1F9LBdwfZk1EmqZ6n85vj42Q_zVHoJHI5yFLOo2yOPhaCu1woRsb2tV0WEhJhgBIBM&id=lidar2&mcvt=1247&p=91,414,181,1142&mtos=1247,1247,1247,1247,1247&tos=1247,0,0,0,0&v=20221110&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=20&adk=3595159431&rs=4&la=0&cr=0&vs=4&r=v&rst=1669203915438&rpt=587&isd=0&lsd=0&met=ie&wmsd=0&pbe=0
200 OK 42 B URL HTTP/2 pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjstu2DKA4_6IPBETomTA4jckx7rv8xLTeMbY0I7B5-lli6ciKwJhO36A6Dmgj4JquUUylTEoYzrtyzeg4cFIkjbqMeztlYQbC4OwFadx1SiIQp0Ls_GP3Q18bk4kDBAY3OUNtBHQIg&sai=AMfl-YR9JcqJyAfUdgd6w7yxp9oHepwUIO3zuSXZkIHP2ye7Wh9WvHCitKkYji5VIb1a-jmIy0dY2jzgi4QZaoahM5hFn8M5TXqrYUBNDQJYXx5SMZ3Nrm0oIvxA7gp5et_O2miKbghOL7hG09drRME&sig=Cg0ArKJSzOB6LmHt71GnEAE&cid=CAQSSwDq26N9Pj7mM7jUaf0y0Ywvyyj_WS-4r_YPuqpHf1F9LBdwfZk1EmqZ6n85vj42Q_zVHoJHI5yFLOo2yOPhaCu1woRsb2tV0WEhJhgBIBM&id=lidar2&mcvt=1247&p=91,414,181,1142&mtos=1247,1247,1247,1247,1247&tos=1247,0,0,0,0&v=20221110&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=20&adk=3595159431&rs=4&la=0&cr=0&vs=4&r=v&rst=1669203915438&rpt=587&isd=0&lsd=0&met=ie&wmsd=0&pbe=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pcs/activeview?xai=AKAOjstu2DKA4_6IPBETomTA4jckx7rv8xLTeMbY0I7B5-lli6ciKwJhO36A6Dmgj4JquUUylTEoYzrtyzeg4cFIkjbqMeztlYQbC4OwFadx1SiIQp0Ls_GP3Q18bk4kDBAY3OUNtBHQIg&sai=AMfl-YR9JcqJyAfUdgd6w7yxp9oHepwUIO3zuSXZkIHP2ye7Wh9WvHCitKkYji5VIb1a-jmIy0dY2jzgi4QZaoahM5hFn8M5TXqrYUBNDQJYXx5SMZ3Nrm0oIvxA7gp5et_O2miKbghOL7hG09drRME&sig=Cg0ArKJSzOB6LmHt71GnEAE&cid=CAQSSwDq26N9Pj7mM7jUaf0y0Ywvyyj_WS-4r_YPuqpHf1F9LBdwfZk1EmqZ6n85vj42Q_zVHoJHI5yFLOo2yOPhaCu1woRsb2tV0WEhJhgBIBM&id=lidar2&mcvt=1247&p=91,414,181,1142&mtos=1247,1247,1247,1247,1247&tos=1247,0,0,0,0&v=20221110&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=20&adk=3595159431&rs=4&la=0&cr=0&vs=4&r=v&rst=1669203915438&rpt=587&isd=0&lsd=0&met=ie&wmsd=0&pbe=0 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ad787c420232a4fa81143468b01d0a30.safeframe.googlesyndication.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: image/gif
date: Wed, 23 Nov 2022 11:45:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
csi.gstatic.com/csi?v=2&s=osv&puid=1~latkwwmf&c=2944295743905&slotId=1472147871952.5&qqid=CKC-yZOdxPsCFVbysgodNJkDog&fb=outstream-lima&sei=44729911%2C44730425%2C44730426%2C44752538%2C75259414%2C420706098&nsei=44714510%2C72811302%2C75259405%2C75259407%2C75259408%2C318491509%2C447279544&bi=outstream
204 No Content 0 B URL HTTP/2 csi.gstatic.com/csi?v=2&s=osv&puid=1~latkwwmf&c=2944295743905&slotId=1472147871952.5&qqid=CKC-yZOdxPsCFVbysgodNJkDog&fb=outstream-lima&sei=44729911%2C44730425%2C44730426%2C44752538%2C75259414%2C420706098&nsei=44714510%2C72811302%2C75259405%2C75259407%2C75259408%2C318491509%2C447279544&bi=outstream
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /csi?v=2&s=osv&puid=1~latkwwmf&c=2944295743905&slotId=1472147871952.5&qqid=CKC-yZOdxPsCFVbysgodNJkDog&fb=outstream-lima&sei=44729911%2C44730425%2C44730426%2C44752538%2C75259414%2C420706098&nsei=44714510%2C72811302%2C75259405%2C75259407%2C75259408%2C318491509%2C447279544&bi=outstream HTTP/1.1
Host: csi.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ad787c420232a4fa81143468b01d0a30.safeframe.googlesyndication.com
Connection: keep-alive
Referer: https://ad787c420232a4fa81143468b01d0a30.safeframe.googlesyndication.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: *
date: Wed, 23 Nov 2022 11:45:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Wed, 21 Jan 2004 19:51:30 GMT
content-type: image/gif
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
csi.gstatic.com/csi?v=2&s=osv&puid=2~latkwwna&c=2944295743905&slotId=1472147871952.5&qqid=CKC-yZOdxPsCFVbysgodNJkDog&fb=outstream-lima&gpm_i=9&gpm_c=9&gpm_a=0&ulv=1&cll=0&vast_v=2.0&vmfc=13&vhc=0&msm=1&aits=0%2C18%2C22%2C37%2C692%2C59%2C342%2C343%2C344%2C345%2C346%2C347&webm=0&vp9=0&vamt=video%2Fmp4%2Cvideo%2Fmp4%2Cvideo%2Fmp4%2Cvideo%2Fmp4%2Cvideo%2Fmp4%2Cvideo%2Fmp4%2Cvideo%2Fmp4%2Cvideo%2Fmp4%2Cvideo%2Fmp4&hvmf=false
204 No Content 0 B URL HTTP/2 csi.gstatic.com/csi?v=2&s=osv&puid=2~latkwwna&c=2944295743905&slotId=1472147871952.5&qqid=CKC-yZOdxPsCFVbysgodNJkDog&fb=outstream-lima&gpm_i=9&gpm_c=9&gpm_a=0&ulv=1&cll=0&vast_v=2.0&vmfc=13&vhc=0&msm=1&aits=0%2C18%2C22%2C37%2C692%2C59%2C342%2C343%2C344%2C345%2C346%2C347&webm=0&vp9=0&vamt=video%2Fmp4%2Cvideo%2Fmp4%2Cvideo%2Fmp4%2Cvideo%2Fmp4%2Cvideo%2Fmp4%2Cvideo%2Fmp4%2Cvideo%2Fmp4%2Cvideo%2Fmp4%2Cvideo%2Fmp4&hvmf=false
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /csi?v=2&s=osv&puid=2~latkwwna&c=2944295743905&slotId=1472147871952.5&qqid=CKC-yZOdxPsCFVbysgodNJkDog&fb=outstream-lima&gpm_i=9&gpm_c=9&gpm_a=0&ulv=1&cll=0&vast_v=2.0&vmfc=13&vhc=0&msm=1&aits=0%2C18%2C22%2C37%2C692%2C59%2C342%2C343%2C344%2C345%2C346%2C347&webm=0&vp9=0&vamt=video%2Fmp4%2Cvideo%2Fmp4%2Cvideo%2Fmp4%2Cvideo%2Fmp4%2Cvideo%2Fmp4%2Cvideo%2Fmp4%2Cvideo%2Fmp4%2Cvideo%2Fmp4%2Cvideo%2Fmp4&hvmf=false HTTP/1.1
Host: csi.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ad787c420232a4fa81143468b01d0a30.safeframe.googlesyndication.com
Connection: keep-alive
Referer: https://ad787c420232a4fa81143468b01d0a30.safeframe.googlesyndication.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: *
date: Wed, 23 Nov 2022 11:45:18 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Wed, 21 Jan 2004 19:51:30 GMT
content-type: image/gif
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
hal900014.redintelligence.net/request_content.php?s=56120500064288404439916012152014&a=feb10037
200 OK 1.5 kB URL HTTP/1.1 hal900014.redintelligence.net/request_content.php?s=56120500064288404439916012152014&a=feb10037
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 26e18b317707f6f156aec8052b073ac9
55973a2004ba014a165bc94cf741226338085301
beb58f084bff38e7fcfa95a5ecc288dad2e47cd9e2cd91bee5c34ce395f0886f
GET /request_content.php?s=56120500064288404439916012152014&a=feb10037 HTTP/1.1
Host: hal900014.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad787c420232a4fa81143468b01d0a30.safeframe.googlesyndication.com/
Cookie: 8lcfmzhxc8d6_uid=1474f6b147a155bd
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 11:45:18 GMT
Server: Apache
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Expires: Wed, 23 Nov 2022 11:45:18 +0100
Pragma: no-cache
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1496
Connection: close
Content-Type: text/html; charset=utf-8
hal900014.redintelligence.net/viewability?s=56120500064288404439916012152014&a=fc563e81&vb=m
200 OK 0 B URL HTTP/1.1 hal900014.redintelligence.net/viewability?s=56120500064288404439916012152014&a=fc563e81&vb=m
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /viewability?s=56120500064288404439916012152014&a=fc563e81&vb=m HTTP/1.1
Host: hal900014.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hal900014.redintelligence.net/request_content.php?s=56120500064288404439916012152014&a=feb10037
Cookie: 8lcfmzhxc8d6_uid=1474f6b147a155bd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 11:45:18 GMT
Server: Apache
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8
pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvHUMs2tUCzV_dAc1BcfxIRkl1YcDzB9-Q8CE1VuFkcCsvGBeKEQjR3jSOXD46WWnZWbOTGuoRnShCHzFmsHXK9aRsJY46XeXKydNLDqpfX6Pdi-PekzsXAsTXt3_TwWvXRN43Qaw&sai=AMfl-YRejK3pWdLgEcoCYPkD0vucQxB9utQuLrMuyFYce5RCdIBvFMJINIR6ix3v7E5MCxtefgAWQQ3BhI9kT6r_2QQprTWVdLED6rq3oLKsYV2vo2A3I5TgG4aCCL3Xj6OWKDxA857yF13Xxnc1PJV3&sig=Cg0ArKJSzD7FVIa-e1QqEAE&cid=CAQSTADq26N9j2Kd_fOuwvRkd4-uNy5kR4NghgeHry9KMdQWdOV6p73Q1L_RYIx6HiU9ejpVMeFRATjiqaU_9iMogUXDwDKuTDLr8CvyCtUYASAT&id=lidar2&mcvt=1147&p=287,270,377,998&mtos=1147,1147,1147,1147,1147&tos=1147,0,0,0,0&v=20221110&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=20&adk=3669010224&rs=4&la=0&cr=0&vs=4&r=v&rst=1669203915988&rpt=1264&isd=0&lsd=0&met=ie&wmsd=0&pbe=0
200 OK 42 B URL HTTP/2 pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvHUMs2tUCzV_dAc1BcfxIRkl1YcDzB9-Q8CE1VuFkcCsvGBeKEQjR3jSOXD46WWnZWbOTGuoRnShCHzFmsHXK9aRsJY46XeXKydNLDqpfX6Pdi-PekzsXAsTXt3_TwWvXRN43Qaw&sai=AMfl-YRejK3pWdLgEcoCYPkD0vucQxB9utQuLrMuyFYce5RCdIBvFMJINIR6ix3v7E5MCxtefgAWQQ3BhI9kT6r_2QQprTWVdLED6rq3oLKsYV2vo2A3I5TgG4aCCL3Xj6OWKDxA857yF13Xxnc1PJV3&sig=Cg0ArKJSzD7FVIa-e1QqEAE&cid=CAQSTADq26N9j2Kd_fOuwvRkd4-uNy5kR4NghgeHry9KMdQWdOV6p73Q1L_RYIx6HiU9ejpVMeFRATjiqaU_9iMogUXDwDKuTDLr8CvyCtUYASAT&id=lidar2&mcvt=1147&p=287,270,377,998&mtos=1147,1147,1147,1147,1147&tos=1147,0,0,0,0&v=20221110&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=20&adk=3669010224&rs=4&la=0&cr=0&vs=4&r=v&rst=1669203915988&rpt=1264&isd=0&lsd=0&met=ie&wmsd=0&pbe=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pcs/activeview?xai=AKAOjsvHUMs2tUCzV_dAc1BcfxIRkl1YcDzB9-Q8CE1VuFkcCsvGBeKEQjR3jSOXD46WWnZWbOTGuoRnShCHzFmsHXK9aRsJY46XeXKydNLDqpfX6Pdi-PekzsXAsTXt3_TwWvXRN43Qaw&sai=AMfl-YRejK3pWdLgEcoCYPkD0vucQxB9utQuLrMuyFYce5RCdIBvFMJINIR6ix3v7E5MCxtefgAWQQ3BhI9kT6r_2QQprTWVdLED6rq3oLKsYV2vo2A3I5TgG4aCCL3Xj6OWKDxA857yF13Xxnc1PJV3&sig=Cg0ArKJSzD7FVIa-e1QqEAE&cid=CAQSTADq26N9j2Kd_fOuwvRkd4-uNy5kR4NghgeHry9KMdQWdOV6p73Q1L_RYIx6HiU9ejpVMeFRATjiqaU_9iMogUXDwDKuTDLr8CvyCtUYASAT&id=lidar2&mcvt=1147&p=287,270,377,998&mtos=1147,1147,1147,1147,1147&tos=1147,0,0,0,0&v=20221110&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=20&adk=3669010224&rs=4&la=0&cr=0&vs=4&r=v&rst=1669203915988&rpt=1264&isd=0&lsd=0&met=ie&wmsd=0&pbe=0 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ad787c420232a4fa81143468b01d0a30.safeframe.googlesyndication.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: image/gif
date: Wed, 23 Nov 2022 11:45:18 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.contentspread.net/24i/content/soberfb/EN/S-320x100.gif
200 OK 18 kB URL HTTP/1.1 cdn.contentspread.net/24i/content/soberfb/EN/S-320x100.gif
IP
ASN #24961 myLoc managed IT AG
File type GIF image data, version 89a, 320 x 100\012- data
Hash afb8ed32f3069f5403c977242d3d06af
421b67b8ba0338f23361fc079a4ca2aed54c8d15
c933b803d23dd223840fcc4e13acde710b267913775e9d49f64a88d3d26f45ff
GET /24i/content/soberfb/EN/S-320x100.gif HTTP/1.1
Host: cdn.contentspread.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hal900014.redintelligence.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 23 Nov 2022 11:45:18 GMT
Content-Type: image/gif
Content-Length: 18086
Last-Modified: Mon, 23 Jul 2018 15:20:14 GMT
Connection: close
ETag: "5b55f22e-46a6"
Accept-Ranges: bytes
fstatic.netpub.media/static/14f9494694a9078dc2f4ae3c92e41760.min.js?1669203912540
301 Moved Permanently 0 B URL HTTP/2 fstatic.netpub.media/static/14f9494694a9078dc2f4ae3c92e41760.min.js?1669203912540
IP
GET /static/14f9494694a9078dc2f4ae3c92e41760.min.js?1669203912540 HTTP/1.1
Host: fstatic.netpub.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Wed, 23 Nov 2022 11:45:13 GMT
location: https://fstatic.netpub.media/r/14f9494694a9078dc2f4ae3c92e41760/service.js
cache-control: max-age=3600
expires: Wed, 23 Nov 2022 12:45:13 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SOIiMjfshUuhm9EdYUltLBTlct8vEtsQerZxhHfPt6zaCmIJAhUfgtuCFsNsM0cJ4K%2BJPfi7PKVZso8QDlZBM8xBV5rvbf%2FEWzn5G5cHiVBarfRb6rZgCZn4hO%2B7hsVeYdOHwauG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e9a84869b30b3d-OSL
X-Firefox-Spdy: h2
adserve.mahimeta.com/networks/?domain=blogmado.com&pathname=%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&query=¤tPage=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&size=Responsive&placement=inline&adId=mMTag_Responsive_86548769&screenWidth=1280&screenHeight=939&keywordViolation=false&blockedKeywords=&autoBlock=false&timezone=0&currTime=11:45&desktop=336x280&tablet=336x280&mobile=336x280&time_exceeded=false&page_categories=&thin_content_count=100
200 OK 0 B URL HTTP/2 adserve.mahimeta.com/networks/?domain=blogmado.com&pathname=%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&query=¤tPage=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&size=Responsive&placement=inline&adId=mMTag_Responsive_86548769&screenWidth=1280&screenHeight=939&keywordViolation=false&blockedKeywords=&autoBlock=false&timezone=0&currTime=11:45&desktop=336x280&tablet=336x280&mobile=336x280&time_exceeded=false&page_categories=&thin_content_count=100
IP
POST /networks/?domain=blogmado.com&pathname=%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&query=¤tPage=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&size=Responsive&placement=inline&adId=mMTag_Responsive_86548769&screenWidth=1280&screenHeight=939&keywordViolation=false&blockedKeywords=&autoBlock=false&timezone=0&currTime=11:45&desktop=336x280&tablet=336x280&mobile=336x280&time_exceeded=false&page_categories=&thin_content_count=100 HTTP/1.1
Host: adserve.mahimeta.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 5948
Origin: https://blogmado.com
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 23 Nov 2022 11:45:13 GMT
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, X-CSRF-Token
cache-control: no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UDmcJAD0wTpfar1VuJpdJc3lXz%2Br7bGZWHdMKmCsqK2oAKIu7FMKuoeyrHq6uuBcdNn6wVf2qCwrtLAp9ZhsnPICuuUkXhB3Avxogc6VqTTX6ahKkqzX6a9VzXnrlouCh1TqxHtxXQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76e9a84a2bf31c0a-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
px.netpub.media/iab?z=1c2b3d8f5084c3670b0ffbd768d4c149&c=FR&q=250&aa=ec6845b2374fe7d3f9270552f1a05ded3b1a68221597e4d3e2e90babf21bde23&b=embed&d=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&k=4&y=%2F112081842%2C22620349674%2Fblogmado.com_300x250_banner2_marco2&g=0&l=1268&x=netpub&xx=f89e668722348d1b1d1ea79f6e599d31&w=14f9494694a9078dc2f4ae3c92e41760&yy=234f3fd5f395a12d9a72baaa86622449&a=true&f=dfp&p=1524.5&s=complete&h=0&n=100&t=1669203915201&v=1.6.0&m=898&e=0&j=0&o=852.5&r=250&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&zz=77413f43f2a9c12117925ea79667dff531356ccf86f94cb9e7d38ea10e5f43f7&i=1
200 OK 0 B URL HTTP/2 px.netpub.media/iab?z=1c2b3d8f5084c3670b0ffbd768d4c149&c=FR&q=250&aa=ec6845b2374fe7d3f9270552f1a05ded3b1a68221597e4d3e2e90babf21bde23&b=embed&d=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&k=4&y=%2F112081842%2C22620349674%2Fblogmado.com_300x250_banner2_marco2&g=0&l=1268&x=netpub&xx=f89e668722348d1b1d1ea79f6e599d31&w=14f9494694a9078dc2f4ae3c92e41760&yy=234f3fd5f395a12d9a72baaa86622449&a=true&f=dfp&p=1524.5&s=complete&h=0&n=100&t=1669203915201&v=1.6.0&m=898&e=0&j=0&o=852.5&r=250&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&zz=77413f43f2a9c12117925ea79667dff531356ccf86f94cb9e7d38ea10e5f43f7&i=1
IP
GET /iab?z=1c2b3d8f5084c3670b0ffbd768d4c149&c=FR&q=250&aa=ec6845b2374fe7d3f9270552f1a05ded3b1a68221597e4d3e2e90babf21bde23&b=embed&d=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&k=4&y=%2F112081842%2C22620349674%2Fblogmado.com_300x250_banner2_marco2&g=0&l=1268&x=netpub&xx=f89e668722348d1b1d1ea79f6e599d31&w=14f9494694a9078dc2f4ae3c92e41760&yy=234f3fd5f395a12d9a72baaa86622449&a=true&f=dfp&p=1524.5&s=complete&h=0&n=100&t=1669203915201&v=1.6.0&m=898&e=0&j=0&o=852.5&r=250&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&zz=77413f43f2a9c12117925ea79667dff531356ccf86f94cb9e7d38ea10e5f43f7&i=1 HTTP/1.1
Host: px.netpub.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 11:45:15 GMT
content-type: image/png
access-control-allow-origin: *
access-control-allow-headers: X-HTTPREQUEST
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sBPmnzYIGZgK2xfROMZVyBVQ%2FURdT0YfWnZLoNmUl8qDSsHnOjkaXp5GjTuUUm1yG32UHodKvBdODNCHADrB9dENkgmMxS55r29BEa%2BYFPxBDFmcBUdsB3j18LNxyRfYLw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76e9a8592d510b3d-OSL
X-Firefox-Spdy: h2
px.netpub.media/iab?l=1268&o=454&v=1.6.0&r=300&c=FR&d=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&z=1c2b3d8f5084c3670b0ffbd768d4c149&f=dfp&w=14f9494694a9078dc2f4ae3c92e41760&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&h=0&yy=441caf19b459c0357a9f96d60b566e6c&m=898&p=352.5&t=1669203915912&a=true&i=1&zz=59d79e37b1097c19ba46486ba269b28f8d8612026a33fd9c9b0af6ab13f3e616&aa=16321753645e64c2b00f56db2260b9b17a159c86dc773ec5601fd34eb1efc02e&e=0&b=static&g=1&s=complete&j=0&xx=9e7606b30d00152d42dd3bbb3c0fe4d2&k=6&y=%2F29636627%2C22620349674%2Fblogmado.com_fluid_7&n=100&q=360&x=netpub
200 OK 0 B URL HTTP/2 px.netpub.media/iab?l=1268&o=454&v=1.6.0&r=300&c=FR&d=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&z=1c2b3d8f5084c3670b0ffbd768d4c149&f=dfp&w=14f9494694a9078dc2f4ae3c92e41760&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&h=0&yy=441caf19b459c0357a9f96d60b566e6c&m=898&p=352.5&t=1669203915912&a=true&i=1&zz=59d79e37b1097c19ba46486ba269b28f8d8612026a33fd9c9b0af6ab13f3e616&aa=16321753645e64c2b00f56db2260b9b17a159c86dc773ec5601fd34eb1efc02e&e=0&b=static&g=1&s=complete&j=0&xx=9e7606b30d00152d42dd3bbb3c0fe4d2&k=6&y=%2F29636627%2C22620349674%2Fblogmado.com_fluid_7&n=100&q=360&x=netpub
IP
GET /iab?l=1268&o=454&v=1.6.0&r=300&c=FR&d=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&z=1c2b3d8f5084c3670b0ffbd768d4c149&f=dfp&w=14f9494694a9078dc2f4ae3c92e41760&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&h=0&yy=441caf19b459c0357a9f96d60b566e6c&m=898&p=352.5&t=1669203915912&a=true&i=1&zz=59d79e37b1097c19ba46486ba269b28f8d8612026a33fd9c9b0af6ab13f3e616&aa=16321753645e64c2b00f56db2260b9b17a159c86dc773ec5601fd34eb1efc02e&e=0&b=static&g=1&s=complete&j=0&xx=9e7606b30d00152d42dd3bbb3c0fe4d2&k=6&y=%2F29636627%2C22620349674%2Fblogmado.com_fluid_7&n=100&q=360&x=netpub HTTP/1.1
Host: px.netpub.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 11:45:16 GMT
content-type: image/png
access-control-allow-origin: *
access-control-allow-headers: X-HTTPREQUEST
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kc8O93yhJn%2F0Hon2Y%2FMJvIinT7F1dmL6Gyv43Qvu5%2BSpTe0Gw8dvcpFfgMjui6uDdYqixVxhFWj9AatGEOMqhMnYwkuNpQ4W3dZI%2FiR%2BABJNlhhF%2B4SLya76OmBpMUc1rA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76e9a85dcb3e0b3d-OSL
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Droid+Sans%3Aregular%2C700
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Droid+Sans%3Aregular%2C700
IP
GET /css?family=Droid+Sans%3Aregular%2C700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 23 Nov 2022 11:45:12 GMT
date: Wed, 23 Nov 2022 11:45:12 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
c.adsco.re/
200 OK 0 B IP
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 23 Nov 2022 11:45:13 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Sat, 24 Dec 2022 11:45:13 GMT
etag: W/"n/ARilLrRVDeZNVpaPOsXg=="
cf-cache-status: HIT
age: 329163
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e9a84b3955b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fstatic.netpub.media/static/14f9494694a9078dc2f4ae3c92e41760.min.js?1669203911794
301 Moved Permanently 0 B URL HTTP/2 fstatic.netpub.media/static/14f9494694a9078dc2f4ae3c92e41760.min.js?1669203911794
IP
GET /static/14f9494694a9078dc2f4ae3c92e41760.min.js?1669203911794 HTTP/1.1
Host: fstatic.netpub.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Wed, 23 Nov 2022 11:45:12 GMT
location: https://fstatic.netpub.media/r/14f9494694a9078dc2f4ae3c92e41760/service.js
cache-control: max-age=3600
expires: Wed, 23 Nov 2022 12:45:12 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nFnzn%2FCKbwnwsODjBh%2FoIGpTgV4yHAZuzmflavVS4K0BlSfgyYZunqTxdNRtmzoyhm9CRBrvjL7HuqxcC4adAHOffRCYs5fJSEZknvbVJLdxtVnFphzz4ElfQT7Y%2FLGsZMozdDAK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e9a844cd8c0b3d-OSL
X-Firefox-Spdy: h2
fstatic.netpub.media/r/14f9494694a9078dc2f4ae3c92e41760/service.js
302 Found 0 B URL HTTP/2 fstatic.netpub.media/r/14f9494694a9078dc2f4ae3c92e41760/service.js
IP
GET /r/14f9494694a9078dc2f4ae3c92e41760/service.js HTTP/1.1
Host: fstatic.netpub.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://blogmado.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Wed, 23 Nov 2022 11:45:13 GMT
content-type: text/html; charset=iso-8859-1
location: https://fstatic.netpub.media/r/14f9494694a9078dc2f4ae3c92e41760/450e059b.js?npr=c1a3b9540f4290a1a965ead6c5f2ea5c
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=efq8bv04zheCi28rstUeeCpSzMInXpne9p4651uY1%2BBJnAbdv5F6R4o6HYKyg3l7HHcR2DX%2BjnRgcVFWV92fYp5bXZScw%2F%2Fe8THz2MhZ6TAgnvUej95jqglSYRTRO7Kx8ntETRF8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76e9a8497ac00b3d-OSL
X-Firefox-Spdy: h2
tmearn.com/9id1J2D
301 Moved Permanently 0 B IP
GET /9id1J2D HTTP/1.1
Host: tmearn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
date: Wed, 23 Nov 2022 11:45:11 GMT
content-type: text/html; charset=UTF-8
location: https://blogmado.com/9id1J2D
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ged%2B3WQVnDRugWa%2BCHhCHw6aU0998qsxUAjQLYf%2FbJk7DI1trG5KtJpPdEbSHvxfCY8We2M%2F%2BxXgdT3yxpPwqDfifRF1DmGxurSwrnVh7LlCQPLOiRthZJAKCcUC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76e9a83dbf21b50c-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
blogmado.com/9id1J2D
302 Found 0 B IP
GET /9id1J2D HTTP/1.1
Host: blogmado.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Wed, 23 Nov 2022 11:45:11 GMT
content-type: text/html; charset=UTF-8
location: https://blogmado.com/2022/06/22/insurance-policies-have-several-features-that-distinguish-them-from-other-insurance/
link: <https://blogmado.com/wp-json/>; rel="https://api.w.org/"
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
set-cookie: PHPSESSID=ec96d7ff8ff479a283204a2bc315a893; path=/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=d%2BkEJW%2FfGiz8xgmhgieAT2K2ezlRdWd5OsQI2vMIXhpxeXsz%2BptUabxKC%2Bk45VGcV80MHH1LRCksVtMrs5vyRqI%2BBDlr6cBNdjNWrMkxTFmdNiq0qAkoE%2BZlifJkUMQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76e9a83f49d3b505-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fstatic.netpub.media/static/14f9494694a9078dc2f4ae3c92e41760.min.js?1669203911796
301 Moved Permanently 0 B URL HTTP/2 fstatic.netpub.media/static/14f9494694a9078dc2f4ae3c92e41760.min.js?1669203911796
IP
GET /static/14f9494694a9078dc2f4ae3c92e41760.min.js?1669203911796 HTTP/1.1
Host: fstatic.netpub.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Wed, 23 Nov 2022 11:45:12 GMT
location: https://fstatic.netpub.media/r/14f9494694a9078dc2f4ae3c92e41760/service.js
cache-control: max-age=3600
expires: Wed, 23 Nov 2022 12:45:12 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kLQ09MhKEMXEjm3VOyKLTzl7RmNBpmNTdV%2F0y7Za8t3%2B4RMt%2BcFY4uMA8AtMt8KLg%2FeAZdrSJ%2B1ehGHbXBkGcjCIqd28D7l1FKhqdK7D8iA616GHZRSWSUyZ9yTMCCs2oVtA3NMF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e9a844dd8d0b3d-OSL
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/software/multi/browsers/ff/3/js/script.js
200 OK 0 B URL HTTP/2 cdn.creative-bars1.com/sb/notifications/software/multi/browsers/ff/3/js/script.js
IP
GET /sb/notifications/software/multi/browsers/ff/3/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://blogmado.com
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 11:45:16 GMT
content-type: application/javascript
last-modified: Thu, 08 Sep 2022 07:49:59 GMT
etag: W/"63199ea7-2ae2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3WCPZwbbmLBRJ8S2KgOw%2BqNAOj20Au9LphFKM3yH6Co61ZCODydNu2gVTr6ZYFIxSr9gQ6RJ%2BBZ5UBa6x8Fk6a7h8VQM8T8HvUfCXElKDH%2BPKbCz8FdBMSUCrxe4Pc8vsLzmO%2FU9hQu4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e9a85cdd5076f0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
adserve2.mahimeta.com/ip/
200 OK 0 B URL HTTP/2 adserve2.mahimeta.com/ip/
IP
GET /ip/ HTTP/1.1
Host: adserve2.mahimeta.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://blogmado.com
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 23 Nov 2022 11:45:13 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, X-CSRF-Token
cache-control: no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qi5y9XdKkWXe8P00lC4LmdTVFDEPIDKI1AhtrLmOZdU7aTY%2FRfQ9urh8dLdyWN0odSdjz5uxHxbCgTiO1Kdd%2FBbXOkS5kvm4ea2KaamDcgRwi2fSKJmFyO4uB5zzQDySz7qrtrBUXR4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76e9a84a3bfe1c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
adserve2.mahimeta.com/networks/time/?domain=blogmado.com&pathname=%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&query=¤tPage=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&screenWidth=1280&screenHeight=939&landed=true&ping=false
200 OK 0 B URL HTTP/2 adserve2.mahimeta.com/networks/time/?domain=blogmado.com&pathname=%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&query=¤tPage=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&screenWidth=1280&screenHeight=939&landed=true&ping=false
IP
POST /networks/time/?domain=blogmado.com&pathname=%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&query=¤tPage=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&screenWidth=1280&screenHeight=939&landed=true&ping=false HTTP/1.1
Host: adserve2.mahimeta.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 5948
Origin: https://blogmado.com
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 23 Nov 2022 11:45:13 GMT
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, X-CSRF-Token
cache-control: no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PqPxDY5L27OLjGopH5ltmXb55PSjCG62C6XvZVNbslEN5VuBe2SwUpt1%2FBrcyEWYDKe8BULdBqi3SuTtB1CWas39FuTpp8rF%2FdZERWe7qZu0aVLe0CJ0M%2FY1G5HPs3dPLVGQAnt5JJs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76e9a84a2bf61c0a-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
blogmado.com/2022/06/22/insurance-policies-have-several-features-that-distinguish-them-from-other-insurance/
200 OK 0 B URL HTTP/2 blogmado.com/2022/06/22/insurance-policies-have-several-features-that-distinguish-them-from-other-insurance/
IP
GET /2022/06/22/insurance-policies-have-several-features-that-distinguish-them-from-other-insurance/ HTTP/1.1
Host: blogmado.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: PHPSESSID=ec96d7ff8ff479a283204a2bc315a893
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 11:45:11 GMT
content-type: text/html; charset=UTF-8
x-pingback: https://blogmado.com/xmlrpc.php
link: <https://blogmado.com/wp-json/>; rel="https://api.w.org/", <https://blogmado.com/wp-json/wp/v2/posts/28>; rel="alternate"; type="application/json", <https://blogmado.com/?p=28>; rel=shortlink
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Er5aLzRpH21al2t%2BpioETBVsDjRGTdzAG9L5d0JNEM0uQAcjNXnDYQDAB8XnNShW%2BvElgK0QAW2XHvO3fK77e2l59SFnvKoYbWBeIBfFqc%2FJgeNx4akqYKqMFyT%2FtpU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76e9a8407beab505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
mahimeta.com/networks/tag.js?cache=1669203912
200 OK 0 B URL HTTP/2 mahimeta.com/networks/tag.js?cache=1669203912
IP
GET /networks/tag.js?cache=1669203912 HTTP/1.1
Host: mahimeta.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 23 Nov 2022 11:45:12 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Fri, 26 Aug 2022 12:40:56 GMT
etag: W/"6308bf58-271a6"
expires: Fri, 23 Dec 2022 11:45:12 GMT
cache-control: public, max-age=2592000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=omUDXJ1hyNEQ%2B5hNAWYzPSEiiKCteJ3zqMVD0pPbASNe4HTAD27ssE7FDYTv9FnNbGarXg3wHy8tW0qN38maMNrft2y5jMkg1b0PdHMZ5DMg3BnQn7vRjS%2FR8943M7A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e9a8448c65b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fstatic.netpub.media/r/14f9494694a9078dc2f4ae3c92e41760/service.js
302 Found 0 B URL HTTP/2 fstatic.netpub.media/r/14f9494694a9078dc2f4ae3c92e41760/service.js
IP
GET /r/14f9494694a9078dc2f4ae3c92e41760/service.js HTTP/1.1
Host: fstatic.netpub.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://blogmado.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Wed, 23 Nov 2022 11:45:12 GMT
content-type: text/html; charset=iso-8859-1
location: https://fstatic.netpub.media/r/14f9494694a9078dc2f4ae3c92e41760/450e059b.js?npr=c1a3b9540f4290a1a965ead6c5f2ea5c
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sBl%2FDUbL%2F3Qt67z9h0j%2FibIBQzTePWZmCtvGf9qd1c8KV%2FT8Qm4nHTE4I4buT%2FWRWwK3lobCIzdqqWErhQ%2FyBi54573aRFCCTVTPo4jU8oCUyojwfDIYehqmJ%2Ba5bdryjju%2BkUBj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76e9a8458ea40b3d-OSL
X-Firefox-Spdy: h2
px.netpub.media/iab?z=1c2b3d8f5084c3670b0ffbd768d4c149&c=FR&q=250&aa=ec6845b2374fe7d3f9270552f1a05ded3b1a68221597e4d3e2e90babf21bde23&b=embed&d=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&k=4&y=%2F112081842%2C22620349674%2Fblogmado.com_300x250_banner2_marco2&g=1&l=1268&x=netpub&xx=f89e668722348d1b1d1ea79f6e599d31&w=14f9494694a9078dc2f4ae3c92e41760&yy=234f3fd5f395a12d9a72baaa86622449&a=true&f=dfp&p=1524.5&s=complete&h=0&n=100&t=1669203915202&v=1.6.0&m=898&e=1&j=1&o=852.5&r=250&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&zz=77413f43f2a9c12117925ea79667dff531356ccf86f94cb9e7d38ea10e5f43f7&i=1
200 OK 0 B URL HTTP/2 px.netpub.media/iab?z=1c2b3d8f5084c3670b0ffbd768d4c149&c=FR&q=250&aa=ec6845b2374fe7d3f9270552f1a05ded3b1a68221597e4d3e2e90babf21bde23&b=embed&d=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&k=4&y=%2F112081842%2C22620349674%2Fblogmado.com_300x250_banner2_marco2&g=1&l=1268&x=netpub&xx=f89e668722348d1b1d1ea79f6e599d31&w=14f9494694a9078dc2f4ae3c92e41760&yy=234f3fd5f395a12d9a72baaa86622449&a=true&f=dfp&p=1524.5&s=complete&h=0&n=100&t=1669203915202&v=1.6.0&m=898&e=1&j=1&o=852.5&r=250&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&zz=77413f43f2a9c12117925ea79667dff531356ccf86f94cb9e7d38ea10e5f43f7&i=1
IP
GET /iab?z=1c2b3d8f5084c3670b0ffbd768d4c149&c=FR&q=250&aa=ec6845b2374fe7d3f9270552f1a05ded3b1a68221597e4d3e2e90babf21bde23&b=embed&d=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&k=4&y=%2F112081842%2C22620349674%2Fblogmado.com_300x250_banner2_marco2&g=1&l=1268&x=netpub&xx=f89e668722348d1b1d1ea79f6e599d31&w=14f9494694a9078dc2f4ae3c92e41760&yy=234f3fd5f395a12d9a72baaa86622449&a=true&f=dfp&p=1524.5&s=complete&h=0&n=100&t=1669203915202&v=1.6.0&m=898&e=1&j=1&o=852.5&r=250&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&zz=77413f43f2a9c12117925ea79667dff531356ccf86f94cb9e7d38ea10e5f43f7&i=1 HTTP/1.1
Host: px.netpub.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 11:45:15 GMT
content-type: image/png
access-control-allow-origin: *
access-control-allow-headers: X-HTTPREQUEST
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=66%2Fn%2Fg0vWFijHSZ0mLzO2Tsz54wcUj4ShhN5o7xzZgeJaotT%2BMtePgqFhxyeOq1mwfuISa1xS2qFwY18VYY6%2Bl0QT4yqeah%2BJsS%2BQlVw0vlCgjN1so4yL%2Bv85wDI4Kb3yQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76e9a8592d520b3d-OSL
X-Firefox-Spdy: h2
px.netpub.media/iab?g=0&m=898&l=1268&h=0&b=string&z=1c2b3d8f5084c3670b0ffbd768d4c149&r=90&w=14f9494694a9078dc2f4ae3c92e41760&v=1.6.0&y=%2F112081842%2C22620349674%2Fblogmado.com_728x90_banner1_marco2&n=100&e=0&zz=4f77504282e29ecfe43ad0ca4eeada5a87b59c0d71f560cf7f770249af716ab8&a=true&p=287&aa=fa22b249cd650d670071fea21d2096f040c2a5b15e969792c89bc8a1b136bef1&xx=4a54823cf5abfe9f0e9d3cdf405aacc7&j=0&k=3&x=netpub&f=dfp&i=1&t=1669203915994&s=complete&c=FR&q=728&d=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&yy=1664726d9fa4060b660f7b682c21cd9e&o=270&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0
200 OK 0 B URL HTTP/2 px.netpub.media/iab?g=0&m=898&l=1268&h=0&b=string&z=1c2b3d8f5084c3670b0ffbd768d4c149&r=90&w=14f9494694a9078dc2f4ae3c92e41760&v=1.6.0&y=%2F112081842%2C22620349674%2Fblogmado.com_728x90_banner1_marco2&n=100&e=0&zz=4f77504282e29ecfe43ad0ca4eeada5a87b59c0d71f560cf7f770249af716ab8&a=true&p=287&aa=fa22b249cd650d670071fea21d2096f040c2a5b15e969792c89bc8a1b136bef1&xx=4a54823cf5abfe9f0e9d3cdf405aacc7&j=0&k=3&x=netpub&f=dfp&i=1&t=1669203915994&s=complete&c=FR&q=728&d=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&yy=1664726d9fa4060b660f7b682c21cd9e&o=270&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0
IP
GET /iab?g=0&m=898&l=1268&h=0&b=string&z=1c2b3d8f5084c3670b0ffbd768d4c149&r=90&w=14f9494694a9078dc2f4ae3c92e41760&v=1.6.0&y=%2F112081842%2C22620349674%2Fblogmado.com_728x90_banner1_marco2&n=100&e=0&zz=4f77504282e29ecfe43ad0ca4eeada5a87b59c0d71f560cf7f770249af716ab8&a=true&p=287&aa=fa22b249cd650d670071fea21d2096f040c2a5b15e969792c89bc8a1b136bef1&xx=4a54823cf5abfe9f0e9d3cdf405aacc7&j=0&k=3&x=netpub&f=dfp&i=1&t=1669203915994&s=complete&c=FR&q=728&d=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&yy=1664726d9fa4060b660f7b682c21cd9e&o=270&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0 HTTP/1.1
Host: px.netpub.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 11:45:16 GMT
content-type: image/png
access-control-allow-origin: *
access-control-allow-headers: X-HTTPREQUEST
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M939TFoch%2FjSDcDUWiZRsTwzjxSo0ROgVNUqU9o24%2F2nwJ9qXr5YIe6xIS6Ga9mxADfwLa%2BoV%2FbMQP4%2B0C2i4OMOP5Fs4s%2B5bC%2F4Oplw7jJX3H9zAlFA6625AhQ%2Fohl4lQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76e9a85e2bab0b3d-OSL
X-Firefox-Spdy: h2
px.netpub.media/iab?g=1&m=898&l=1268&h=0&b=string&z=1c2b3d8f5084c3670b0ffbd768d4c149&r=90&w=14f9494694a9078dc2f4ae3c92e41760&v=1.6.0&y=%2F112081842%2C22620349674%2Fblogmado.com_728x90_banner1_marco2&n=100&e=0&zz=4f77504282e29ecfe43ad0ca4eeada5a87b59c0d71f560cf7f770249af716ab8&a=true&p=287&aa=fa22b249cd650d670071fea21d2096f040c2a5b15e969792c89bc8a1b136bef1&xx=4a54823cf5abfe9f0e9d3cdf405aacc7&j=0&k=3&x=netpub&f=dfp&i=1&t=1669203915995&s=complete&c=FR&q=728&d=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&yy=1664726d9fa4060b660f7b682c21cd9e&o=270&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0
200 OK 0 B URL HTTP/2 px.netpub.media/iab?g=1&m=898&l=1268&h=0&b=string&z=1c2b3d8f5084c3670b0ffbd768d4c149&r=90&w=14f9494694a9078dc2f4ae3c92e41760&v=1.6.0&y=%2F112081842%2C22620349674%2Fblogmado.com_728x90_banner1_marco2&n=100&e=0&zz=4f77504282e29ecfe43ad0ca4eeada5a87b59c0d71f560cf7f770249af716ab8&a=true&p=287&aa=fa22b249cd650d670071fea21d2096f040c2a5b15e969792c89bc8a1b136bef1&xx=4a54823cf5abfe9f0e9d3cdf405aacc7&j=0&k=3&x=netpub&f=dfp&i=1&t=1669203915995&s=complete&c=FR&q=728&d=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&yy=1664726d9fa4060b660f7b682c21cd9e&o=270&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0
IP
GET /iab?g=1&m=898&l=1268&h=0&b=string&z=1c2b3d8f5084c3670b0ffbd768d4c149&r=90&w=14f9494694a9078dc2f4ae3c92e41760&v=1.6.0&y=%2F112081842%2C22620349674%2Fblogmado.com_728x90_banner1_marco2&n=100&e=0&zz=4f77504282e29ecfe43ad0ca4eeada5a87b59c0d71f560cf7f770249af716ab8&a=true&p=287&aa=fa22b249cd650d670071fea21d2096f040c2a5b15e969792c89bc8a1b136bef1&xx=4a54823cf5abfe9f0e9d3cdf405aacc7&j=0&k=3&x=netpub&f=dfp&i=1&t=1669203915995&s=complete&c=FR&q=728&d=https%3A%2F%2Fblogmado.com%2F2022%2F06%2F22%2Finsurance-policies-have-several-features-that-distinguish-them-from-other-insurance%2F&yy=1664726d9fa4060b660f7b682c21cd9e&o=270&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0 HTTP/1.1
Host: px.netpub.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blogmado.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 11:45:16 GMT
content-type: image/png
access-control-allow-origin: *
access-control-allow-headers: X-HTTPREQUEST
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jyz5CN3HWJz8G4wjCPuK8FRMO9DLKqu4uSN7E%2BwFH4OuDIwRgttj0IeC8zMRlf58OfpCcmOtHSSZVIFFc8Pb%2BGS5W26xQ4K6Pe%2FdGbeES81PBVDLmdswcEw51AUWJTvyUQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76e9a85e3bae0b3d-OSL
X-Firefox-Spdy: h2
172.67.137.133
104.17.167.186
23.109.87.129
23.36.76.226
52.28.211.11
93.184.220.29
185.200.116.90
23.61.214.147
34.255.255.64