firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=259200
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 05 Oct 2022 15:47:18 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: FQG5OKU1jYYD9VkBPrZl-yZhXIG4FKZuoDe9gXKhPrsYqdFhiVUlHA==
Age: 39899
fims-de-sexe.blogspot.com.ee/
302 Moved Temporarily 181 B URL HTTP/1.1 fims-de-sexe.blogspot.com.ee/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 6863a57dd9d1050e17139b446cf23eff
1d30476828b1c98f94b7996b57e04f671b95896c
c26016abb4ccc72a8721d762f51744d66621475977b68e55b01a5e4e9d9331b2
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: fims-de-sexe.blogspot.com.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Location: http://fims-de-sexe.blogspot.com/
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Thu, 06 Oct 2022 02:52:17 GMT
Expires: Thu, 06 Oct 2022 02:52:17 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 181
Server: GSE
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash eabb7d9ffae717f7305d63c057755470
3b7f0baccfdbb8d9ffefa4a2215d4d6094be454a
ab48f17e54075e1ecf034278e82bcacd2e3689773186cc84fba9b79aac907294
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AB48F17E54075E1ECF034278E82BCACD2E3689773186CC84FBA9B79AAC907294"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4330
Expires: Thu, 06 Oct 2022 04:04:28 GMT
Date: Thu, 06 Oct 2022 02:52:18 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a1073a68ed38c8e3575e889224db944c
ee2a7a3e2da77a8540131f9ffaa0a20d4dd486bd
a9fb1f7ade7c8a79d2ee83e9b7215e66dc89ac733b11079297a8f4b9aceae1f5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A9FB1F7ADE7C8A79D2EE83E9B7215E66DC89AC733B11079297A8F4B9ACEAE1F5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4023
Expires: Thu, 06 Oct 2022 03:59:21 GMT
Date: Thu, 06 Oct 2022 02:52:18 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: +LGopU/zz+lSMMZvteiGC1v3MOK5qbClGtNy+fLbMfZj/gZAX16d5yASGtRWL7viiVMLb5RLwEc=
x-amz-request-id: TTEERSVHKPP6PG8B
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 06 Oct 2022 01:58:32 GMT
age: 3226
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 02:52:18 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
fims-de-sexe.blogspot.com/
200 OK 34 kB URL HTTP/1.1 fims-de-sexe.blogspot.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1535)
Hash c423429409856c42fa29a67c049553df
eae3b8c6d4c3a6569b9298fd004d2ff2d344724f
128f8e3109cb9dbacc777c17727033cf3e1f496c3142f26e2e6253551a1f3f18
GET / HTTP/1.1
Host: fims-de-sexe.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Thu, 06 Oct 2022 02:52:18 GMT
Date: Thu, 06 Oct 2022 02:52:18 GMT
Cache-Control: private, max-age=0
Last-Modified: Tue, 13 Sep 2022 14:45:05 GMT
ETag: W/"856229c77193a97570754211cc28485279b706fad7072f8aeaa22f6aa4f7e471"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 34520
Server: GSE
fims-de-sexe.blogspot.com/js/cookienotice.js
200 OK 2.0 kB URL HTTP/1.1 fims-de-sexe.blogspot.com/js/cookienotice.js
IP
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
GET /js/cookienotice.js HTTP/1.1
Host: fims-de-sexe.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 06 Oct 2022 02:46:19 GMT
Expires: Thu, 13 Oct 2022 02:46:19 GMT
Cache-Control: public, max-age=604800
Last-Modified: Wed, 05 Oct 2022 17:03:17 GMT
Content-Type: text/javascript
Age: 359
pgcool.erogggggg.com/?mode=1&tc1=blogger&tc2=fakebarr&pgid=4568&rebill=0&t=29&o=fakebarchat
200 OK 546 B URL HTTP/1.1 pgcool.erogggggg.com/?mode=1&tc1=blogger&tc2=fakebarr&pgid=4568&rebill=0&t=29&o=fakebarchat
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (546), with no line terminators
Hash e4826fa8b6524361083b56a06dfb5a06
9ef60cf6cc7bb98b2d461fbe0f19afe3232e7190
e7a93d7b36a4b626920bcf98dece6ad20fcd64b5df2ea8e0816865e1ee8f53ff
GET /?mode=1&tc1=blogger&tc2=fakebarr&pgid=4568&rebill=0&t=29&o=fakebarchat HTTP/1.1
Host: pgcool.erogggggg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
HTTP/1.1 200 OK
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 546
content-type: text/html; charset=utf-8
date: Thu, 06 Oct 2022 02:52:18 GMT
server: nginx
set-cookie: sid=e44f317c-4521-11ed-b44b-fdd35584e6bf; path=/; domain=.erogggggg.com; expires=Tue, 24 Oct 2090 06:06:25 GMT; max-age=2147483647; HttpOnly
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 36b1ec1ebfdbe3367fc1fde546d47281
a12333d6fdf5f29a25fcac13b21e4a4f45ca5ba6
c95cde94d5b12b299aecb89ed8b9a8ad30e46e4704a30ab8329742a396e00090
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 02:52:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 29305d430d4a98929d99f493c8fa0e09
37e64cc35bce4869f3573c565fdd177dc4e128c0
0557db8eed6f9f794247c44d8b7a8cd99caf6716cc48932ce3b3c1d907493869
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 02:52:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 36b1ec1ebfdbe3367fc1fde546d47281
a12333d6fdf5f29a25fcac13b21e4a4f45ca5ba6
c95cde94d5b12b299aecb89ed8b9a8ad30e46e4704a30ab8329742a396e00090
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 02:52:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 047374e90c9a1e02eb7294c0a9a316a2
3d043355314c0c408f547f1faafd3acd6d481f63
e01b0fb379931c35fd707f8cc75e2d6079f77fd5174c30b75934e130d68ed2a5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 02:52:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
regie.oopt.fr/js/invocation.js
200 OK 372 B URL HTTP/1.1 regie.oopt.fr/js/invocation.js
IP
File type ASCII text, with very long lines (357)
Hash d7e566aeb7f772da541ce3522478fb7d
026ba9964deb9bb3ffd0b7fa461308987fa2444f
6bb7dc598606e6e12a11bbae82fcc81e644cf1caf5f11082231924d26b55782d
GET /js/invocation.js HTTP/1.1
Host: regie.oopt.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
HTTP/1.1 200 OK
server: nginx
date: Thu, 06 Oct 2022 02:52:18 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 26 Feb 2020 11:55:22 GMT
transfer-encoding: chunked
vary: Accept-Encoding
etag: W/"5e565caa-289"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
pragma: public
content-encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 36b1ec1ebfdbe3367fc1fde546d47281
a12333d6fdf5f29a25fcac13b21e4a4f45ca5ba6
c95cde94d5b12b299aecb89ed8b9a8ad30e46e4704a30ab8329742a396e00090
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 02:52:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css
200 OK 7.8 kB URL HTTP/2 www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css
IP
File type ASCII text, with very long lines (35959)
Hash 5aa2d3297bdc86bc81322aedecbb5e79
1c0a3c007e41726e167e79b70ddea76198650884
feae1fac625d0f30b5f10fa00b62df1a5600cd2178062c427e55f289b29cc630
GET /static/v1/widgets/2975350028-css_bundle_v2.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 7776
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 16:35:40 GMT
expires: Thu, 05 Oct 2023 16:35:40 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 04 Oct 2022 18:55:46 GMT
content-type: text/css
age: 36998
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-BgGubK_eCn0/XXc20LX98DI/AAAAAAAAACM/vPKCOvrUQQIhOno46byAjSwUXQnvBOg-gCLcBGAs/s1600/23.jpg
200 OK 50 kB URL HTTP/2 1.bp.blogspot.com/-BgGubK_eCn0/XXc20LX98DI/AAAAAAAAACM/vPKCOvrUQQIhOno46byAjSwUXQnvBOg-gCLcBGAs/s1600/23.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 487x650, components 3\012- data
Hash bfb5b6077cf208fcbe48c4e2199e896a
6e3d1627a98433c289799e1f77ff6e5722990c17
9ff74076f8517038ac75e55944e5111c282cc798c9975a5783a182c9dfe03f9e
GET /-BgGubK_eCn0/XXc20LX98DI/AAAAAAAAACM/vPKCOvrUQQIhOno46byAjSwUXQnvBOg-gCLcBGAs/s1600/23.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="23.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 50430
x-xss-protection: 0
date: Thu, 06 Oct 2022 02:46:19 GMT
expires: Wed, 05 Oct 2022 11:47:03 GMT
cache-control: public, max-age=86400, no-transform
age: 359
etag: "v7b"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
4.bp.blogspot.com/-qxQut47uZwk/XPZyWGpmFEI/AAAAAAAAAOI/Jij3ArtHPOY9Qb5cpt3_E_vvN6sRL3jDgCLcBGAs/s1600/198.jpg
200 OK 27 kB URL HTTP/2 4.bp.blogspot.com/-qxQut47uZwk/XPZyWGpmFEI/AAAAAAAAAOI/Jij3ArtHPOY9Qb5cpt3_E_vvN6sRL3jDgCLcBGAs/s1600/198.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 500x375, components 3\012- data
Hash 284d176907e02cb0c7be5f24f633ace7
4480553e05480630cb72ab576778f2623c545731
48eb09eaabd92baed35f8d5af2f21c090f98c0d6abad9361ba5f92f31c67d008
GET /-qxQut47uZwk/XPZyWGpmFEI/AAAAAAAAAOI/Jij3ArtHPOY9Qb5cpt3_E_vvN6sRL3jDgCLcBGAs/s1600/198.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="198.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 27367
x-xss-protection: 0
date: Thu, 06 Oct 2022 02:46:19 GMT
expires: Wed, 05 Oct 2022 11:47:03 GMT
cache-control: public, max-age=86400, no-transform
age: 359
etag: "vf2"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-FDSVXI5yA64/XPZx9--9aWI/AAAAAAAAAJQ/D2MMLK-3ksIPHox7NVGFil_Qq5BSt_KbwCLcBGAs/s1600/120.jpg
200 OK 31 kB URL HTTP/2 1.bp.blogspot.com/-FDSVXI5yA64/XPZx9--9aWI/AAAAAAAAAJQ/D2MMLK-3ksIPHox7NVGFil_Qq5BSt_KbwCLcBGAs/s1600/120.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 500x462, components 3\012- data
Hash a7bf9a1d2ee45f141b5c30a6032b9193
0c97743fa55e4c5cb449ba48ee6a0465b6702a7a
4454f62251382b0ef55827cd7e59112e3ea95bd6af46eaa86eecb42cb2b2fee8
GET /-FDSVXI5yA64/XPZx9--9aWI/AAAAAAAAAJQ/D2MMLK-3ksIPHox7NVGFil_Qq5BSt_KbwCLcBGAs/s1600/120.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="120.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 30922
x-xss-protection: 0
date: Thu, 06 Oct 2022 02:46:19 GMT
expires: Wed, 05 Oct 2022 11:47:03 GMT
cache-control: public, max-age=86400, no-transform
age: 359
etag: "vf4"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
apis.google.com/js/platform.js
200 OK 20 kB URL HTTP/2 apis.google.com/js/platform.js
IP
File type ASCII text, with very long lines (1277)
Hash b5a31516be83fe4f962609045d824f88
939a49a9858bf23561279f9ca2d1941d3256c66f
edb661aa461800e97e3847608a8b2d81cfe345f69a6f84abaa001d8a60500328
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20361
date: Thu, 06 Oct 2022 02:52:18 GMT
expires: Thu, 06 Oct 2022 02:52:18 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "40c22a9ccbd70870"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/792789798-widgets.js
200 OK 57 kB URL HTTP/2 www.blogger.com/static/v1/widgets/792789798-widgets.js
IP
File type ASCII text, with very long lines (2221)
Hash 02e6bf311e18828a522b4d3a4079084f
a63cd373fa23b4fe11f938d57737e6bfa1ebe789
25d469843aa09be2473931d33aaa37b65ac371874bd98ca84ec780bead3e33e4
GET /static/v1/widgets/792789798-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56804
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 22:56:10 GMT
expires: Thu, 05 Oct 2023 22:56:10 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 04 Oct 2022 09:10:01 GMT
content-type: text/javascript
age: 14168
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-tipNoofVHEs/XXc26YwuV_I/AAAAAAAAADk/W3F01UmUtrUZJZq7-EEhQBlasoKPfglngCLcBGAs/s1600/43.jpg
200 OK 38 kB URL HTTP/2 1.bp.blogspot.com/-tipNoofVHEs/XXc26YwuV_I/AAAAAAAAADk/W3F01UmUtrUZJZq7-EEhQBlasoKPfglngCLcBGAs/s1600/43.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 433x650, components 3\012- data
Hash b76f125dedd95eeb960ba420ecfb29a3
97677254867e09c2992aa0a6b36c4372eef61d3f
584233b5a7c2be6d1509e3ce27213805063cc9c05210d76c35d1e65a5a8b2a79
GET /-tipNoofVHEs/XXc26YwuV_I/AAAAAAAAADk/W3F01UmUtrUZJZq7-EEhQBlasoKPfglngCLcBGAs/s1600/43.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="43.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 38211
x-xss-protection: 0
date: Thu, 06 Oct 2022 02:46:19 GMT
expires: Wed, 05 Oct 2022 11:47:03 GMT
cache-control: public, max-age=86400, no-transform
age: 359
etag: "v7d"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
4.bp.blogspot.com/-zuMOnT0QLpU/XXc3G6sij2I/AAAAAAAAAGQ/NJqHWoXg-TkK80Z62FVylG7I5TWsrTvsACLcBGAs/s1600/82.jpg
200 OK 22 kB URL HTTP/2 4.bp.blogspot.com/-zuMOnT0QLpU/XXc3G6sij2I/AAAAAAAAAGQ/NJqHWoXg-TkK80Z62FVylG7I5TWsrTvsACLcBGAs/s1600/82.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 366x650, components 3\012- data
Hash 5bd09f028ba9cf35558cbcffc24a1c08
7b7cd70f75b1785753511563650bf19e8273834c
fc52dc0fb4cde4601f3fb70e0accb120efad95a2de44ccc8a62c06544f34e9b6
GET /-zuMOnT0QLpU/XXc3G6sij2I/AAAAAAAAAGQ/NJqHWoXg-TkK80Z62FVylG7I5TWsrTvsACLcBGAs/s1600/82.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="82.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 21943
x-xss-protection: 0
date: Thu, 06 Oct 2022 02:46:19 GMT
expires: Wed, 05 Oct 2022 11:47:03 GMT
cache-control: public, max-age=86400, no-transform
age: 359
etag: "v7d"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
2.bp.blogspot.com/-1a-6txN3DAM/XPZx4SIzS3I/AAAAAAAAAIY/r9e_qiIeN4Ik9IEk-iyN_Jn0yYr6dtO3ACLcBGAs/s1600/107.jpg
200 OK 23 kB URL HTTP/2 2.bp.blogspot.com/-1a-6txN3DAM/XPZx4SIzS3I/AAAAAAAAAIY/r9e_qiIeN4Ik9IEk-iyN_Jn0yYr6dtO3ACLcBGAs/s1600/107.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 500x375, components 3\012- data
Hash 6269cd8bf682879ace1b6d76554d49a9
28cfb73b8d3020ce16529323841b1b07025d000e
dface6f390e0f0776673daad3bd8c4c4fc6c0ddeaca188d9b8f5e956643fe8db
GET /-1a-6txN3DAM/XPZx4SIzS3I/AAAAAAAAAIY/r9e_qiIeN4Ik9IEk-iyN_Jn0yYr6dtO3ACLcBGAs/s1600/107.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="107.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 23199
x-xss-protection: 0
date: Thu, 06 Oct 2022 02:46:19 GMT
expires: Fri, 07 Oct 2022 02:46:19 GMT
cache-control: public, max-age=86400, no-transform
etag: "vee"
content-type: image/jpeg
age: 359
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
2.bp.blogspot.com/-AIPBicZeZmM/XXc31X6sbDI/AAAAAAAAAL0/wzfj57VUmxQxZ_2QZf64E8rJRKTeRqxjgCLcBGAs/s1600/163.jpg
200 OK 23 kB URL HTTP/2 2.bp.blogspot.com/-AIPBicZeZmM/XXc31X6sbDI/AAAAAAAAAL0/wzfj57VUmxQxZ_2QZf64E8rJRKTeRqxjgCLcBGAs/s1600/163.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 500x375, components 3\012- data
Hash fbe9a4feec40b87c667c80b809d0b988
5308d4ed5701f57f35cc684b54cc2080e2d58a10
af662df18c225fc838575761cae52bcc0068209bb14a7a54539e4912a8ae8e0b
GET /-AIPBicZeZmM/XXc31X6sbDI/AAAAAAAAAL0/wzfj57VUmxQxZ_2QZf64E8rJRKTeRqxjgCLcBGAs/s1600/163.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="163.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 23272
x-xss-protection: 0
date: Thu, 06 Oct 2022 02:46:19 GMT
expires: Wed, 05 Oct 2022 11:47:03 GMT
cache-control: public, max-age=86400, no-transform
age: 359
etag: "vf0"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
2.bp.blogspot.com/-i-vW_2y4MJA/XXc3IYNnUHI/AAAAAAAAAGk/HsDjuTAb0J0fu6Kz7O-8ZhKNT6_lYxYtACLcBGAs/s1600/87.jpg
200 OK 32 kB URL HTTP/2 2.bp.blogspot.com/-i-vW_2y4MJA/XXc3IYNnUHI/AAAAAAAAAGk/HsDjuTAb0J0fu6Kz7O-8ZhKNT6_lYxYtACLcBGAs/s1600/87.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 456x650, components 3\012- data
Hash cb89d7f1778f9907cbe897ca727c0849
b32315150e007e01ba08ad269442aa8d3f645377
69fa61bd591689329eafa5497240d7781f3100eb5aedda4ba64efc0208868a53
GET /-i-vW_2y4MJA/XXc3IYNnUHI/AAAAAAAAAGk/HsDjuTAb0J0fu6Kz7O-8ZhKNT6_lYxYtACLcBGAs/s1600/87.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="87.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 32119
x-xss-protection: 0
date: Thu, 06 Oct 2022 02:46:19 GMT
expires: Wed, 05 Oct 2022 11:47:02 GMT
cache-control: public, max-age=86400, no-transform
age: 359
etag: "v7d"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
4.bp.blogspot.com/-AfWOp39XkyA/XXc4BjQg6PI/AAAAAAAAAOc/NUz5wxgP5kw8GaPywdi1vPNN1uucSU8lgCLcBGAs/s1600/205.jpg
200 OK 33 kB URL HTTP/2 4.bp.blogspot.com/-AfWOp39XkyA/XXc4BjQg6PI/AAAAAAAAAOc/NUz5wxgP5kw8GaPywdi1vPNN1uucSU8lgCLcBGAs/s1600/205.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 500x375, components 3\012- data
Hash ed34556898ff024701a74238b3cd7e52
fab5e8f69664217acd634b8f344e94b4dfa4baa1
e7ff07c06ebca3b3b23bd4ce17842986c8fbfe049943c19ed1abecd8f9198f32
GET /-AfWOp39XkyA/XXc4BjQg6PI/AAAAAAAAAOc/NUz5wxgP5kw8GaPywdi1vPNN1uucSU8lgCLcBGAs/s1600/205.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="205.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 32635
x-xss-protection: 0
date: Thu, 06 Oct 2022 02:46:19 GMT
expires: Wed, 05 Oct 2022 11:47:03 GMT
cache-control: public, max-age=86400, no-transform
age: 359
etag: "vf2"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
2.bp.blogspot.com/-cnBNhVmh-0g/XXc3mWdeSHI/AAAAAAAAAIs/ypH2U6MXUFI24fY9B0xS7spaqLlHnrHFACLcBGAs/s1600/113.jpg
200 OK 26 kB URL HTTP/2 2.bp.blogspot.com/-cnBNhVmh-0g/XXc3mWdeSHI/AAAAAAAAAIs/ypH2U6MXUFI24fY9B0xS7spaqLlHnrHFACLcBGAs/s1600/113.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 487x650, components 3\012- data
Hash 696e62f310f60e6ba11584231324e1d7
7c0dd28ab391a7ee50c7e9e2bdcc5313be248d34
c7f4c70adfa350883e3ddcb58e8e33b61cd6922192386d603983a6462efaa19f
GET /-cnBNhVmh-0g/XXc3mWdeSHI/AAAAAAAAAIs/ypH2U6MXUFI24fY9B0xS7spaqLlHnrHFACLcBGAs/s1600/113.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="113.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 26102
x-xss-protection: 0
date: Thu, 06 Oct 2022 02:46:19 GMT
expires: Wed, 05 Oct 2022 11:47:03 GMT
cache-control: public, max-age=86400, no-transform
age: 359
etag: "vf0"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
2.bp.blogspot.com/-JQ8cFkNWFiM/XXc2-80LQTI/AAAAAAAAAEg/yZcjIxoebSUfSt2xybH1dU7kUi9-J1wUACLcBGAs/s1600/57.jpg
200 OK 28 kB URL HTTP/2 2.bp.blogspot.com/-JQ8cFkNWFiM/XXc2-80LQTI/AAAAAAAAAEg/yZcjIxoebSUfSt2xybH1dU7kUi9-J1wUACLcBGAs/s1600/57.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 500x375, components 3\012- data
Hash cee8f19ee1739b6c501da4c69ff6bc57
08f013430cde9430c97df1d748ab6dd19fb80f43
7eb6a085b112c3a43e257c09cd9914a5acad20434e486ae55cb4aa8e4d59ad40
GET /-JQ8cFkNWFiM/XXc2-80LQTI/AAAAAAAAAEg/yZcjIxoebSUfSt2xybH1dU7kUi9-J1wUACLcBGAs/s1600/57.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="57.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 27509
x-xss-protection: 0
date: Thu, 06 Oct 2022 02:46:19 GMT
expires: Fri, 07 Oct 2022 02:46:19 GMT
cache-control: public, max-age=86400, no-transform
etag: "v79"
content-type: image/jpeg
age: 359
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
4.bp.blogspot.com/-pRk9V3S6S0Q/XPZxWy3b_8I/AAAAAAAAAC0/P2P18EPBL6k89BhFn2Z6BC_n6es6y4tGgCLcBGAs/s1600/20.jpg
200 OK 31 kB URL HTTP/2 4.bp.blogspot.com/-pRk9V3S6S0Q/XPZxWy3b_8I/AAAAAAAAAC0/P2P18EPBL6k89BhFn2Z6BC_n6es6y4tGgCLcBGAs/s1600/20.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 432x650, components 3\012- data
Hash 2fc3841b9d9d0523c05d530606d5166b
04477965f93ab9bf03b20ba74694f34fa33f6d68
0b0b551986680b58dbc78563460074af2772b00fa70b2c6f9a566ae2f12cf158
GET /-pRk9V3S6S0Q/XPZxWy3b_8I/AAAAAAAAAC0/P2P18EPBL6k89BhFn2Z6BC_n6es6y4tGgCLcBGAs/s1600/20.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="20.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 31227
x-xss-protection: 0
date: Thu, 06 Oct 2022 02:46:19 GMT
expires: Wed, 05 Oct 2022 11:47:03 GMT
cache-control: public, max-age=86400, no-transform
age: 359
etag: "vf7"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
3.bp.blogspot.com/-vgRKe1LSYYQ/XXc242qrYQI/AAAAAAAAADQ/5-pzCaOCyPsXftrAdYnakVEkjL8APj2tACLcBGAs/s1600/39.jpg
200 OK 24 kB URL HTTP/2 3.bp.blogspot.com/-vgRKe1LSYYQ/XXc242qrYQI/AAAAAAAAADQ/5-pzCaOCyPsXftrAdYnakVEkjL8APj2tACLcBGAs/s1600/39.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 500x356, components 3\012- data
Hash 85e661fe10cd35f7cb3e7699b5bba47d
2df359607199a75c23b037da22f822e566aff62d
ef7081c51edcae05985a0a5a5aeb5f2473e53c715f25a7a826305a1879824836
GET /-vgRKe1LSYYQ/XXc242qrYQI/AAAAAAAAADQ/5-pzCaOCyPsXftrAdYnakVEkjL8APj2tACLcBGAs/s1600/39.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="39.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 23499
x-xss-protection: 0
date: Thu, 06 Oct 2022 02:46:19 GMT
expires: Fri, 07 Oct 2022 02:46:19 GMT
cache-control: public, max-age=86400, no-transform
etag: "v7e"
content-type: image/jpeg
age: 359
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
2.bp.blogspot.com/-lwFQIVUno0E/XPZyIoDCMqI/AAAAAAAAALc/tZqKdUDtr14iHvMFXUuH9_PWZiD72hVHACLcBGAs/s1600/155.jpg
200 OK 69 kB URL HTTP/2 2.bp.blogspot.com/-lwFQIVUno0E/XPZyIoDCMqI/AAAAAAAAALc/tZqKdUDtr14iHvMFXUuH9_PWZiD72hVHACLcBGAs/s1600/155.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 423x650, components 3\012- data
Hash 068e954a29ea2dd61263af9503a5a4fc
7931defc1220fef0e03ad3cfe14607044030e51f
388c25fbc500e67271fc515f76f16bd553c684f4b4c563a5f746182b406fbd5d
GET /-lwFQIVUno0E/XPZyIoDCMqI/AAAAAAAAALc/tZqKdUDtr14iHvMFXUuH9_PWZiD72hVHACLcBGAs/s1600/155.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="155.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 68563
x-xss-protection: 0
date: Thu, 06 Oct 2022 02:46:19 GMT
expires: Wed, 05 Oct 2022 11:47:03 GMT
cache-control: public, max-age=86400, no-transform
age: 359
etag: "vec"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
4.bp.blogspot.com/-0e_xxpSa6oo/XXc3J8dV3SI/AAAAAAAAAG8/TCVf3SQl0n05LqG7Js4BJLELAI6kwcrLgCLcBGAs/s1600/92.jpg
200 OK 39 kB URL HTTP/2 4.bp.blogspot.com/-0e_xxpSa6oo/XXc3J8dV3SI/AAAAAAAAAG8/TCVf3SQl0n05LqG7Js4BJLELAI6kwcrLgCLcBGAs/s1600/92.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 488x650, components 3\012- data
Hash f16925bbc7d69cb415401c1ddc08aedb
adaac97a5ee49913976d530483827ff482a5c91f
a45450e898f1d9e78ff0cdde512c0c9d3a2c49b053a53f786af0c78222de7655
GET /-0e_xxpSa6oo/XXc3J8dV3SI/AAAAAAAAAG8/TCVf3SQl0n05LqG7Js4BJLELAI6kwcrLgCLcBGAs/s1600/92.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="92.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 39404
x-xss-protection: 0
date: Thu, 06 Oct 2022 02:46:19 GMT
expires: Wed, 05 Oct 2022 11:47:03 GMT
cache-control: public, max-age=86400, no-transform
age: 359
etag: "v78"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
2.bp.blogspot.com/-UeUbsu7bl1w/XXc2wAeJp-I/AAAAAAAAABY/E-9ge__Mx5oybbwpiGyJ3oX7n2FBMtHPwCLcBGAs/s1600/11.jpg
200 OK 35 kB URL HTTP/2 2.bp.blogspot.com/-UeUbsu7bl1w/XXc2wAeJp-I/AAAAAAAAABY/E-9ge__Mx5oybbwpiGyJ3oX7n2FBMtHPwCLcBGAs/s1600/11.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 422x650, components 3\012- data
Hash b2a23227eb4c852c5df8ab263324ad2a
6bd13c108b68f06bb68a34b5090a633b318235d6
f9d7a8600acb0b7df1aac5e5c7d16b9d11727c2830c23e2c7fafe6ab2eb0d455
GET /-UeUbsu7bl1w/XXc2wAeJp-I/AAAAAAAAABY/E-9ge__Mx5oybbwpiGyJ3oX7n2FBMtHPwCLcBGAs/s1600/11.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="11.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 35334
x-xss-protection: 0
date: Thu, 06 Oct 2022 02:46:19 GMT
expires: Fri, 07 Oct 2022 02:46:19 GMT
cache-control: public, max-age=86400, no-transform
etag: "v7c"
content-type: image/jpeg
age: 359
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
3.bp.blogspot.com/-huBQWdpLm_k/XXc3BNH3A-I/AAAAAAAAAE8/gOQin2arZ2Qn9AX0linbyDT_TxLZS1WOQCLcBGAs/s1600/63.jpg
200 OK 42 kB URL HTTP/2 3.bp.blogspot.com/-huBQWdpLm_k/XXc3BNH3A-I/AAAAAAAAAE8/gOQin2arZ2Qn9AX0linbyDT_TxLZS1WOQCLcBGAs/s1600/63.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 476x650, components 3\012- data
Hash 21d45a4e3b18c1fa45b82f8d751f8758
230ab5ac3ea76ce0694bc14a22f33e51a35bc790
ced0871b1708606ec3f391429b1a617ca5be29bf52de09b63305d985250f64df
GET /-huBQWdpLm_k/XXc3BNH3A-I/AAAAAAAAAE8/gOQin2arZ2Qn9AX0linbyDT_TxLZS1WOQCLcBGAs/s1600/63.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="63.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 41804
x-xss-protection: 0
date: Thu, 06 Oct 2022 02:46:19 GMT
expires: Fri, 07 Oct 2022 02:46:19 GMT
cache-control: public, max-age=86400, no-transform
etag: "v7b"
content-type: image/jpeg
age: 359
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
4.bp.blogspot.com/-FTGbnlZoC28/XPZxpDEq1GI/AAAAAAAAAGk/U8BKl-Po-LMJa8jTWsHhv_Z8fjL_9VnrwCLcBGAs/s1600/75.jpg
200 OK 34 kB URL HTTP/2 4.bp.blogspot.com/-FTGbnlZoC28/XPZxpDEq1GI/AAAAAAAAAGk/U8BKl-Po-LMJa8jTWsHhv_Z8fjL_9VnrwCLcBGAs/s1600/75.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 487x650, components 3\012- data
Hash 1a119fe708c065f68ba801599f7e8844
85950350ffbbcf3bd969a685af4f0cc2d9a8fe02
e294a50af2c2123b7901d87bbdf64e90ebe49ad38f244a6d4858055ba033db04
GET /-FTGbnlZoC28/XPZxpDEq1GI/AAAAAAAAAGk/U8BKl-Po-LMJa8jTWsHhv_Z8fjL_9VnrwCLcBGAs/s1600/75.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="75.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 34466
x-xss-protection: 0
date: Thu, 06 Oct 2022 02:46:19 GMT
expires: Fri, 07 Oct 2022 02:46:19 GMT
cache-control: public, max-age=86400, no-transform
etag: "vf7"
content-type: image/jpeg
age: 359
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
3.bp.blogspot.com/-uhRSdMWG3nQ/XXc3F9f3SuI/AAAAAAAAAGA/6GnF85ACbDcAW7zhA_P5YKlgidFeeZfzgCLcBGAs/s1600/79.jpg
200 OK 39 kB URL HTTP/2 3.bp.blogspot.com/-uhRSdMWG3nQ/XXc3F9f3SuI/AAAAAAAAAGA/6GnF85ACbDcAW7zhA_P5YKlgidFeeZfzgCLcBGAs/s1600/79.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 452x650, components 3\012- data
Hash cc8c5b9fa96025ba1ae18644f58137eb
5b7e2ec2bf6ded6b3dcbf7a5e2c2d026b1bb5edf
f56f0b27cb4286836f48fa4b7014341af92065f0cb7db237af9f1e99758b933c
GET /-uhRSdMWG3nQ/XXc3F9f3SuI/AAAAAAAAAGA/6GnF85ACbDcAW7zhA_P5YKlgidFeeZfzgCLcBGAs/s1600/79.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="79.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 39245
x-xss-protection: 0
date: Thu, 06 Oct 2022 02:46:19 GMT
expires: Wed, 05 Oct 2022 11:47:03 GMT
cache-control: public, max-age=86400, no-transform
age: 359
etag: "v79"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.z9QjrzsHcOc.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/cb=gapi.loaded_0?le=scs
200 OK 58 kB URL HTTP/2 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.z9QjrzsHcOc.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/cb=gapi.loaded_0?le=scs
IP
File type ASCII text, with very long lines (580)
Hash d70fcc84d705c565b31a5835c0938d5b
d28e5dc9fcc6239d67986df3205468072023d2d7
1d558c94793446aa6a7832dde0c39ed7d9c77fd963ffb738c460e4f7369a7f4e
GET /_/scs/abc-static/_/js/k=gapi.lb.en.z9QjrzsHcOc.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 57995
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 02 Oct 2022 07:25:42 GMT
expires: Mon, 02 Oct 2023 07:25:42 GMT
cache-control: public, max-age=31536000
age: 329196
last-modified: Sat, 30 Jul 2022 15:17:53 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 29305d430d4a98929d99f493c8fa0e09
37e64cc35bce4869f3573c565fdd177dc4e128c0
0557db8eed6f9f794247c44d8b7a8cd99caf6716cc48932ce3b3c1d907493869
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 02:52:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
4.bp.blogspot.com/-xSK1GLHNxXA/WHWlkUcMBaI/AAAAAAAAAGU/hX0vXT7QT24u6jdhNXVqHCFm4jTfQluLwCLcB/w72-h72-p-k-no-nu/84.jpg
200 OK 3.6 kB URL HTTP/2 4.bp.blogspot.com/-xSK1GLHNxXA/WHWlkUcMBaI/AAAAAAAAAGU/hX0vXT7QT24u6jdhNXVqHCFm4jTfQluLwCLcB/w72-h72-p-k-no-nu/84.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 10fbdbba09e90f303ea054c10c1b4d62
61ac6a15b107383c687a6de5f862f1fb5f8df722
4bc696023ae8cfd7a4846bcc192a2a6588dd39b623055f9c9fa46ef65dc5998e
GET /-xSK1GLHNxXA/WHWlkUcMBaI/AAAAAAAAAGU/hX0vXT7QT24u6jdhNXVqHCFm4jTfQluLwCLcB/w72-h72-p-k-no-nu/84.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="84.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 3576
x-xss-protection: 0
date: Thu, 06 Oct 2022 02:46:19 GMT
expires: Fri, 07 Oct 2022 02:46:19 GMT
cache-control: public, max-age=86400, no-transform
etag: "v6d"
content-type: image/jpeg
age: 359
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-2eop64TuS9M/W_d91R6atwI/AAAAAAAAAHA/B2SoXtWWI0QfxGIXKKBUxzfDkcyliUJOACPcBGAYYCw/s1600/7.jpg
200 OK 196 kB URL HTTP/2 1.bp.blogspot.com/-2eop64TuS9M/W_d91R6atwI/AAAAAAAAAHA/B2SoXtWWI0QfxGIXKKBUxzfDkcyliUJOACPcBGAYYCw/s1600/7.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Google], progressive, precision 8, 800x559, components 3\012- data
Size 196 kB (196402 bytes)
Hash 537314a20f0ee8a81da13e2c94769176
20b2bfaf33edb49800707a4c7a1fa0ff3a9f835d
d79fc59a21f81d28247c2d084773200209a718379d8f3037e6073ba1a3f6259d
GET /-2eop64TuS9M/W_d91R6atwI/AAAAAAAAAHA/B2SoXtWWI0QfxGIXKKBUxzfDkcyliUJOACPcBGAYYCw/s1600/7.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="7.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 196402
x-xss-protection: 0
date: Thu, 06 Oct 2022 00:29:31 GMT
expires: Thu, 06 Oct 2022 19:06:25 GMT
cache-control: public, max-age=86400, no-transform
age: 8567
etag: "v78"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 36b1ec1ebfdbe3367fc1fde546d47281
a12333d6fdf5f29a25fcac13b21e4a4f45ca5ba6
c95cde94d5b12b299aecb89ed8b9a8ad30e46e4704a30ab8329742a396e00090
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 02:52:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
3.bp.blogspot.com/-IgtceE-d2tg/XXc3kr1cMwI/AAAAAAAAAIU/qaD2FS3ljYABKPc4wtQIfnUZVeQNGYbDQCLcBGAs/s1600/107.jpg
200 OK 22 kB URL HTTP/2 3.bp.blogspot.com/-IgtceE-d2tg/XXc3kr1cMwI/AAAAAAAAAIU/qaD2FS3ljYABKPc4wtQIfnUZVeQNGYbDQCLcBGAs/s1600/107.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 500x375, components 3\012- data
Hash 3d7a5742a373f8d4a9896ff4a30cdd54
3b917a2e42538b9fed161506e0d9f81a9aad5637
9007feb972708600e6109a98d2248cddb0cde144aa87e9945b217ba02d409ce9
GET /-IgtceE-d2tg/XXc3kr1cMwI/AAAAAAAAAIU/qaD2FS3ljYABKPc4wtQIfnUZVeQNGYbDQCLcBGAs/s1600/107.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="107.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 22365
x-xss-protection: 0
date: Thu, 06 Oct 2022 02:46:19 GMT
expires: Wed, 05 Oct 2022 11:47:03 GMT
cache-control: public, max-age=86400, no-transform
age: 359
etag: "vf1"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.blogger.com/img/share_buttons_20_3.png
200 OK 5.1 kB URL HTTP/2 www.blogger.com/img/share_buttons_20_3.png
IP
File type PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash ad9999106d5f550920b586e8e1704e5a
93fd02c51166402a41f96509cd0ca3fb917877dd
3829a5b2ade7cfc416c80b8f3df71e49e68672875f025d525223978f5cee3fd3
GET /img/share_buttons_20_3.png HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 5080
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 20:46:12 GMT
expires: Wed, 12 Oct 2022 20:46:12 GMT
cache-control: public, max-age=604800
last-modified: Wed, 05 Oct 2022 00:52:39 GMT
content-type: image/png
age: 21966
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
4.bp.blogspot.com/-nkYNQ1dc4Mk/XXc3E7QjBEI/AAAAAAAAAFw/Zq2QEspspDszHi1DWqsscBA3QnAi2I55QCLcBGAs/s1600/75.jpg
200 OK 34 kB URL HTTP/2 4.bp.blogspot.com/-nkYNQ1dc4Mk/XXc3E7QjBEI/AAAAAAAAAFw/Zq2QEspspDszHi1DWqsscBA3QnAi2I55QCLcBGAs/s1600/75.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 487x650, components 3\012- data
Hash 8d4736569b8f5ce3d05795604f6b3756
425f96c622654496dd970ceaa918a59b3685e81a
58233395344131068393f55c90c4c1a9c3f81f83666bf229688371ff3aea0cf4
GET /-nkYNQ1dc4Mk/XXc3E7QjBEI/AAAAAAAAAFw/Zq2QEspspDszHi1DWqsscBA3QnAi2I55QCLcBGAs/s1600/75.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="75.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 33878
x-xss-protection: 0
date: Thu, 06 Oct 2022 02:46:19 GMT
expires: Fri, 07 Oct 2022 02:46:19 GMT
cache-control: public, max-age=86400, no-transform
etag: "v78"
content-type: image/jpeg
age: 359
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
4.bp.blogspot.com/-H3KVN5R5L7c/WJvhB9I9k8I/AAAAAAAAAUQ/VPfSSdI-ScEX1zci9283hdyrlsBffHBwgCLcB/w72-h72-p-k-no-nu/581_1000.jpg
200 OK 3.3 kB URL HTTP/2 4.bp.blogspot.com/-H3KVN5R5L7c/WJvhB9I9k8I/AAAAAAAAAUQ/VPfSSdI-ScEX1zci9283hdyrlsBffHBwgCLcB/w72-h72-p-k-no-nu/581_1000.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 5dffd8e0f4f1830053373d4dc6e0a1c2
abea87a319a012b0436fb4ca139bbff79e0f922e
41625074f0ae00e75c5ac7ee7f8d1de6cc584742eb822127820999998a96df13
GET /-H3KVN5R5L7c/WJvhB9I9k8I/AAAAAAAAAUQ/VPfSSdI-ScEX1zci9283hdyrlsBffHBwgCLcB/w72-h72-p-k-no-nu/581_1000.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="581_1000.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 3328
x-xss-protection: 0
date: Thu, 06 Oct 2022 02:46:19 GMT
expires: Fri, 07 Oct 2022 02:46:19 GMT
cache-control: public, max-age=86400, no-transform
etag: "v159"
content-type: image/jpeg
age: 359
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
4.bp.blogspot.com/-VQK_UNbYbWM/XXc3y-fisrI/AAAAAAAAALQ/5inuvj1fiKApRPd4ZarFxyTaRgEqT_VQACLcBGAs/s1600/154.jpg
200 OK 28 kB URL HTTP/2 4.bp.blogspot.com/-VQK_UNbYbWM/XXc3y-fisrI/AAAAAAAAALQ/5inuvj1fiKApRPd4ZarFxyTaRgEqT_VQACLcBGAs/s1600/154.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 500x375, components 3\012- data
Hash 8178a955e67af4d075457b5baaf69fe1
cb0317c7f0922f4c89aec9769240f1e43585f538
227f4bdf836fc2afb8b2f51219dfde6e51a59c4a02b7e059b02c293dec45f05b
GET /-VQK_UNbYbWM/XXc3y-fisrI/AAAAAAAAALQ/5inuvj1fiKApRPd4ZarFxyTaRgEqT_VQACLcBGAs/s1600/154.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="154.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 27566
x-xss-protection: 0
date: Thu, 06 Oct 2022 02:46:19 GMT
expires: Fri, 07 Oct 2022 02:46:19 GMT
cache-control: public, max-age=86400, no-transform
etag: "vec"
content-type: image/jpeg
age: 359
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
3.bp.blogspot.com/-lMHqdErgpVY/XXc3LyN__AI/AAAAAAAAAHU/j53VNVv18okNC3bHCwLywqLdCfHWW7tMQCLcBGAs/s1600/98.jpg
200 OK 36 kB URL HTTP/2 3.bp.blogspot.com/-lMHqdErgpVY/XXc3LyN__AI/AAAAAAAAAHU/j53VNVv18okNC3bHCwLywqLdCfHWW7tMQCLcBGAs/s1600/98.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 454x650, components 3\012- data
Hash 3abc120b351be7878bcabcaf6053d030
2e1a98c8786bc421cde137268cb10d42216a4cd4
844e54de06b2286fccad2752c96033d037297b9402427bf34d0a9e2a055764c6
GET /-lMHqdErgpVY/XXc3LyN__AI/AAAAAAAAAHU/j53VNVv18okNC3bHCwLywqLdCfHWW7tMQCLcBGAs/s1600/98.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="98.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 35604
x-xss-protection: 0
date: Thu, 06 Oct 2022 02:46:20 GMT
expires: Wed, 05 Oct 2022 11:47:03 GMT
cache-control: public, max-age=86400, no-transform
age: 358
etag: "v7d"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 36b1ec1ebfdbe3367fc1fde546d47281
a12333d6fdf5f29a25fcac13b21e4a4f45ca5ba6
c95cde94d5b12b299aecb89ed8b9a8ad30e46e4704a30ab8329742a396e00090
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 02:52:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f9371f81e2eeeead7fe351a49f3b1c40
ae23d6c6c57dd7cf568c3a74594c377b7bb7df43
03c4ba0faa3199d061d1bb37df5d48ba6d81f77a83e243922075efc4d4acf456
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 02:52:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
4.bp.blogspot.com/-_i-WGhvxSOo/XXc34cq0YXI/AAAAAAAAAMY/STlslNRxTTAgjpXqJ58PtXCpqF9jPfhKwCLcBGAs/s1600/172.jpg
200 OK 47 kB URL HTTP/2 4.bp.blogspot.com/-_i-WGhvxSOo/XXc34cq0YXI/AAAAAAAAAMY/STlslNRxTTAgjpXqJ58PtXCpqF9jPfhKwCLcBGAs/s1600/172.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 487x650, components 3\012- data
Hash 882af1c53064961109be0a7b8076259a
4dc8e3a38ca8719ec3861f5cba928c8ea7dbd7f1
05af3d50a8cb200aed002fba2589f6c82b06ccce2549073fd7e0861ad945aa79
GET /-_i-WGhvxSOo/XXc34cq0YXI/AAAAAAAAAMY/STlslNRxTTAgjpXqJ58PtXCpqF9jPfhKwCLcBGAs/s1600/172.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="172.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 47242
x-xss-protection: 0
date: Thu, 06 Oct 2022 02:46:19 GMT
expires: Fri, 07 Oct 2022 02:46:19 GMT
cache-control: public, max-age=86400, no-transform
etag: "vf0"
content-type: image/jpeg
age: 359
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
3.bp.blogspot.com/-_rTFYdLKTXM/XPZyRFFidPI/AAAAAAAAANM/Wb0qru2sreAYgwfX-I5LzEQxWoOSADh6gCLcBGAs/s1600/183.jpg
200 OK 30 kB URL HTTP/2 3.bp.blogspot.com/-_rTFYdLKTXM/XPZyRFFidPI/AAAAAAAAANM/Wb0qru2sreAYgwfX-I5LzEQxWoOSADh6gCLcBGAs/s1600/183.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 500x459, components 3\012- data
Hash 5fe8af1f56d87a1e205e006e604498fe
17d1622725ab072a7651ed575006ec4dace51f9a
3c7dfb7601fe45ca7ba7491309e5f457cc4cf1cd2a80e3a7384e06e0d402556f
GET /-_rTFYdLKTXM/XPZyRFFidPI/AAAAAAAAANM/Wb0qru2sreAYgwfX-I5LzEQxWoOSADh6gCLcBGAs/s1600/183.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="183.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 29678
x-xss-protection: 0
date: Thu, 06 Oct 2022 02:46:19 GMT
expires: Wed, 05 Oct 2022 11:47:03 GMT
cache-control: public, max-age=86400, no-transform
age: 359
etag: "vef"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
3.bp.blogspot.com/-BOO3-8R--T8/XXc3HquOYhI/AAAAAAAAAGc/cJ0aGHK9evMKWWaFM6dGppbQEmIa-mgJQCLcBGAs/s1600/85.jpg
200 OK 54 kB URL HTTP/2 3.bp.blogspot.com/-BOO3-8R--T8/XXc3HquOYhI/AAAAAAAAAGc/cJ0aGHK9evMKWWaFM6dGppbQEmIa-mgJQCLcBGAs/s1600/85.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 500x486, components 3\012- data
Hash 3525c8127f40d5871be80c8b51b22389
47f0097974ca26882d3b8a70d07edb52c76d6652
255ac1d4c2e8708a070ccf9321f35ff40abac1eba96464ae348b9ce2b8a890fd
GET /-BOO3-8R--T8/XXc3HquOYhI/AAAAAAAAAGc/cJ0aGHK9evMKWWaFM6dGppbQEmIa-mgJQCLcBGAs/s1600/85.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="85.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 54271
x-xss-protection: 0
date: Thu, 06 Oct 2022 02:46:19 GMT
expires: Fri, 07 Oct 2022 02:46:19 GMT
cache-control: public, max-age=86400, no-transform
etag: "v78"
content-type: image/jpeg
age: 359
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
200 OK 67 B URL HTTP/1.1 pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP
Hash 9bbc3ca32ec951a484589ce0e6b4db73
753d6f6183b33b2dee5dde2208fca91c17f5bb13
b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 08:27:21 GMT
Expires: Wed, 19 Oct 2022 08:27:21 GMT
Cache-Control: public, max-age=1209600
ETag: 13036835877489095579
Content-Type: text/javascript; charset=UTF-8
Age: 66297
www.blogblog.com/1kt/awesomeinc/tabs_gradient_light.png
200 OK 182 B URL HTTP/1.1 www.blogblog.com/1kt/awesomeinc/tabs_gradient_light.png
IP
File type PNG image data, 20 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash a3c2c1c288eca66ee27f75ea41dcd96f
77dbd443ccabca3cfb43a48a2ccb44f752f5a77a
5e516df49b160c3efcb1ea09dd4c5f5b7c99a23a18a2a882acc379179bdbaacd
GET /1kt/awesomeinc/tabs_gradient_light.png HTTP/1.1
Host: www.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 182
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 01 Oct 2022 12:47:46 GMT
Expires: Sat, 08 Oct 2022 12:47:46 GMT
Cache-Control: public, max-age=604800
Last-Modified: Fri, 30 Sep 2022 16:51:37 GMT
Content-Type: image/png
Age: 396272
3.bp.blogspot.com/-wyI-MOPyNSI/XPZxc11qs1I/AAAAAAAAAEE/mZTzh-nyC4Ejs4CZXCZtV2AI4zBSNTqUACLcBGAs/s1600/39.jpg
200 OK 24 kB URL HTTP/2 3.bp.blogspot.com/-wyI-MOPyNSI/XPZxc11qs1I/AAAAAAAAAEE/mZTzh-nyC4Ejs4CZXCZtV2AI4zBSNTqUACLcBGAs/s1600/39.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 500x356, components 3\012- data
Hash b8f2c5c6f552759c01a87f6a389ecc31
125a62a47cf0dc9b8e3b6bf60a9751af9d910f67
5e41a5d0993d0ba1bbf6a8f4e8fa1441336eda53184915d66f3acac30901a689
GET /-wyI-MOPyNSI/XPZxc11qs1I/AAAAAAAAAEE/mZTzh-nyC4Ejs4CZXCZtV2AI4zBSNTqUACLcBGAs/s1600/39.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="39.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 24115
x-xss-protection: 0
date: Thu, 06 Oct 2022 02:46:19 GMT
expires: Fri, 07 Oct 2022 02:46:19 GMT
cache-control: public, max-age=86400, no-transform
etag: "vf1"
content-type: image/jpeg
age: 359
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
3.bp.blogspot.com/-gG4sDTi0qgw/VsahJ-RMpYI/AAAAAAAAACo/M6LBIrqDHic/w72-h72-p-k-no-nu/636_1000.jpg
404 Not Found 1.7 kB URL HTTP/2 3.bp.blogspot.com/-gG4sDTi0qgw/VsahJ-RMpYI/AAAAAAAAACo/M6LBIrqDHic/w72-h72-p-k-no-nu/636_1000.jpg
IP
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-gG4sDTi0qgw/VsahJ-RMpYI/AAAAAAAAACo/M6LBIrqDHic/w72-h72-p-k-no-nu/636_1000.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/png
x-content-type-options: nosniff
date: Thu, 06 Oct 2022 02:52:18 GMT
server: fife
content-length: 1742
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
media.rencontreshard.com/new/thumbbanner/helper.js
200 OK 8.7 kB URL HTTP/1.1 media.rencontreshard.com/new/thumbbanner/helper.js
IP
Hash 07b4c9ca936100ad7a52f8cbcee0795e
f830ca378022c4e534414c9a1fa14481608d7c76
5701aabde0400c61205a4e0a4c6efa7933a6ab7ebd812b170589147b8aa4845a
GET /new/thumbbanner/helper.js HTTP/1.1
Host: media.rencontreshard.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
HTTP/1.1 200 OK
server: nginx
date: Thu, 06 Oct 2022 02:52:18 GMT
content-type: application/javascript; charset=utf-8
content-length: 8654
last-modified: Wed, 31 Oct 2012 09:20:28 GMT
etag: "5090ed5c-21ce"
x-server: rsa-static2
accept-ranges: bytes
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Pragma, Content-Length, Backoff, Last-Modified, Cache-Control, Content-Type, Retry-After, ETag, Expires, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Date: Thu, 06 Oct 2022 02:29:41 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Thu, 06 Oct 2022 02:56:32 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: nqY-LGYrusTDjfh_LrP6aJPslLxZGIzcYgvsYlrCcBcHsDJw_YmOJQ==
Age: 1357
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7f7643aa92d132b52b91514b74134251
5d833cfbf68cada99e8462ae71e3b57958f6a0a8
caf0e6890154864d5bee1e6a77e6fba5a632bf606e805119cf9d25aca01a42e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CAF0E6890154864D5BEE1E6A77E6FBA5A632BF606E805119CF9D25ACA01A42E7"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19960
Expires: Thu, 06 Oct 2022 08:24:58 GMT
Date: Thu, 06 Oct 2022 02:52:18 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f397312842461ffa18a0a072ebd02ca3
bb91f78ca7ded888294dc8dff9d862c84178b5da
ff8aa1d73bcc45bcfc2053cfdeb50d56e6d72c7af18056edaabe40985057c6a3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FF8AA1D73BCC45BCFC2053CFDEB50D56E6D72C7AF18056EDAABE40985057C6A3"
Last-Modified: Thu, 06 Oct 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21193
Expires: Thu, 06 Oct 2022 08:45:31 GMT
Date: Thu, 06 Oct 2022 02:52:18 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f397312842461ffa18a0a072ebd02ca3
bb91f78ca7ded888294dc8dff9d862c84178b5da
ff8aa1d73bcc45bcfc2053cfdeb50d56e6d72c7af18056edaabe40985057c6a3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FF8AA1D73BCC45BCFC2053CFDEB50D56E6D72C7AF18056EDAABE40985057C6A3"
Last-Modified: Thu, 06 Oct 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21193
Expires: Thu, 06 Oct 2022 08:45:31 GMT
Date: Thu, 06 Oct 2022 02:52:18 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f397312842461ffa18a0a072ebd02ca3
bb91f78ca7ded888294dc8dff9d862c84178b5da
ff8aa1d73bcc45bcfc2053cfdeb50d56e6d72c7af18056edaabe40985057c6a3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FF8AA1D73BCC45BCFC2053CFDEB50D56E6D72C7AF18056EDAABE40985057C6A3"
Last-Modified: Thu, 06 Oct 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21193
Expires: Thu, 06 Oct 2022 08:45:31 GMT
Date: Thu, 06 Oct 2022 02:52:18 GMT
Connection: keep-alive
pub.sv2.biz/geo_location.php
301 Moved Permanently 178 B URL HTTP/1.1 pub.sv2.biz/geo_location.php
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /geo_location.php HTTP/1.1
Host: pub.sv2.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
HTTP/1.1 301 Moved Permanently
server: nginx
date: Thu, 06 Oct 2022 02:52:19 GMT
content-type: text/html
content-length: 178
location: https://geoip.securitetotale.com/geo_location.php
x-server: rsa-static2
pub.sv2.biz/geo_location_array.php
301 Moved Permanently 178 B URL HTTP/1.1 pub.sv2.biz/geo_location_array.php
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /geo_location_array.php HTTP/1.1
Host: pub.sv2.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
HTTP/1.1 301 Moved Permanently
server: nginx
date: Thu, 06 Oct 2022 02:52:19 GMT
content-type: text/html
content-length: 178
location: https://geoip.securitetotale.com/geo_location_array.php
x-server: rsa-static2
media.yesmessenger.com/browserDetect.js
200 OK 2.3 kB URL HTTP/1.1 media.yesmessenger.com/browserDetect.js
IP
Hash 3700c412d9973f04e7ed9280787969eb
410922a76f75e9355b29993b88eaded258d415a2
5172b2f38a5e5c59832f010649193b5069688c6cfbd9639ce0da3472d4f83308
GET /browserDetect.js HTTP/1.1
Host: media.yesmessenger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
HTTP/1.1 200 OK
server: nginx
date: Thu, 06 Oct 2022 02:52:19 GMT
content-type: application/javascript; charset=utf-8
content-length: 2303
last-modified: Thu, 07 Aug 2008 12:24:42 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
pragma: public
accept-ranges: bytes
www.rencontreshard.com/generateThumbs.php?size=200x200;200x200;200x200&count=50;15;0&niche=femmes;couples;hommes&merge=0&shuffle=1&callback=&geo=0
200 OK 24 B URL HTTP/1.1 www.rencontreshard.com/generateThumbs.php?size=200x200;200x200;200x200&count=50;15;0&niche=femmes;couples;hommes&merge=0&shuffle=1&callback=&geo=0
IP
File type ASCII text, with no line terminators
Hash 361a064c5b3f9dcc39ffab9ea58b6308
8082d4e05ef0b9604a99aed5a620131ff16f6b98
07a01276c5e5100f7d6b9823c2e40d2dd04d706a909ed25da3ba0bb86025b349
GET /generateThumbs.php?size=200x200;200x200;200x200&count=50;15;0&niche=femmes;couples;hommes&merge=0&shuffle=1&callback=&geo=0 HTTP/1.1
Host: www.rencontreshard.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
HTTP/1.1 200 OK
server: nginx
date: Thu, 06 Oct 2022 02:52:19 GMT
content-type: application/x-javascript; charset: UTF-8
transfer-encoding: chunked
x-server: php6-1
connection: close
jygotubvpyguak.com/cp/ifb/index.php?size=160x600&nichev=21&snp=1&dsclr=false&comfrom=864277&cf0=pc2&cf2=blogger&cfsa2=168x600&brand=xcams&promo=xcams&cf1=
200 OK 2.4 kB URL HTTP/2 jygotubvpyguak.com/cp/ifb/index.php?size=160x600&nichev=21&snp=1&dsclr=false&comfrom=864277&cf0=pc2&cf2=blogger&cfsa2=168x600&brand=xcams&promo=xcams&cf1=
IP
ASN #212882 dnx network sarl
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (5460), with CRLF, LF line terminators
Hash efc3cdf16d72173c6542674ac13dd567
8e0c508c476d688a92563b18aaeb1719981eeee2
897f77773bbfc355d26e7732b10ce10df4fb73d85a5953e0f40a0ccd2e9266b4
GET /cp/ifb/index.php?size=160x600&nichev=21&snp=1&dsclr=false&comfrom=864277&cf0=pc2&cf2=blogger&cfsa2=168x600&brand=xcams&promo=xcams&cf1= HTTP/1.1
Host: jygotubvpyguak.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 02:52:19 GMT
content-type: text/html; charset=UTF-8
content-length: 2434
vary: Accept-Encoding
content-encoding: gzip
server: TurboProxy
x-forwarded-proto: https
X-Firefox-Spdy: h2
media.rencontreshard.com/new/thumbbanner/real.js
200 OK 29 kB URL HTTP/1.1 media.rencontreshard.com/new/thumbbanner/real.js
IP
File type exported SGML document, ISO-8859 text, with very long lines (1247)
Hash fdde0c50656d6f47f07f8150afd65f93
2ee908871fa78a2cf72f616f14091ffdf9042161
deb02c1f9a7233ead91026b6526a42336ddaad6136917995e8f3540f3f79e0e4
GET /new/thumbbanner/real.js HTTP/1.1
Host: media.rencontreshard.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
HTTP/1.1 200 OK
server: nginx
date: Thu, 06 Oct 2022 02:52:19 GMT
content-type: application/javascript; charset=utf-8
content-length: 29023
last-modified: Fri, 20 Sep 2013 06:44:59 GMT
etag: "523beeeb-715f"
x-server: rsa-static2
accept-ranges: bytes
acces.123plaisir.com/?mode=1&pg_b_format=3&tc1=blogger&tc2=468x60&pgid=4568&o=b
200 OK 3.8 kB URL HTTP/1.1 acces.123plaisir.com/?mode=1&pg_b_format=3&tc1=blogger&tc2=468x60&pgid=4568&o=b
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1331)
Hash b07b8d74af7b33e52dd0c29c40efbce2
78415236558cc52bd799560a1ea7c46891ae6f42
c6718f5838ad50db727c71e19f81bee35765e2e00295fea8483b02b309af823b
GET /?mode=1&pg_b_format=3&tc1=blogger&tc2=468x60&pgid=4568&o=b HTTP/1.1
Host: acces.123plaisir.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
server: nginx
date: Thu, 06 Oct 2022 02:52:19 GMT
content-type: text/html; charset=utf-8
transfer-encoding: chunked
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
x-server: php6-5
content-encoding: gzip
ocsp.digicert.com/
200 OK 471 B IP
Hash 1561c6be7c89d1357a80d12de47b6e74
9a705277922ecca583c867af58b3efce099f83bd
e33dc034dbf4b3b627cd3c1af2d942e2ca5704ec9a4aad5c46ad39eb070e82ab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4374
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 02:52:19 GMT
Last-Modified: Thu, 06 Oct 2022 01:39:25 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
media.rencontreshard.com/new/thumbbanner/jquery-1.3.2.js
200 OK 3.8 kB URL HTTP/1.1 media.rencontreshard.com/new/thumbbanner/jquery-1.3.2.js
IP
File type gzip compressed data, from Unix\012- data
Hash b07b8d74af7b33e52dd0c29c40efbce2
78415236558cc52bd799560a1ea7c46891ae6f42
c6718f5838ad50db727c71e19f81bee35765e2e00295fea8483b02b309af823b
GET /new/thumbbanner/jquery-1.3.2.js HTTP/1.1
Host: media.rencontreshard.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
HTTP/1.1 200 OK
server: nginx
date: Thu, 06 Oct 2022 02:52:18 GMT
content-type: application/javascript; charset=utf-8
content-length: 120763
last-modified: Thu, 12 Mar 2009 08:37:49 GMT
etag: "49b8c9dd-1d7bb"
x-server: rsa-static2
accept-ranges: bytes
acces.123plaisir.com/?mode=1&pg_b_format=3&tc1=blogger&tc2=468x60&pgid=4568&o=b
200 OK 3.8 kB URL HTTP/1.1 acces.123plaisir.com/?mode=1&pg_b_format=3&tc1=blogger&tc2=468x60&pgid=4568&o=b
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1331)
Hash b07b8d74af7b33e52dd0c29c40efbce2
78415236558cc52bd799560a1ea7c46891ae6f42
c6718f5838ad50db727c71e19f81bee35765e2e00295fea8483b02b309af823b
GET /?mode=1&pg_b_format=3&tc1=blogger&tc2=468x60&pgid=4568&o=b HTTP/1.1
Host: acces.123plaisir.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
server: nginx
date: Thu, 06 Oct 2022 02:52:19 GMT
content-type: text/html; charset=utf-8
transfer-encoding: chunked
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
x-server: php6-10
content-encoding: gzip
acces.123plaisir.com/?mode=1&pg_b_format=3&tc1=blogger&tc2=468x60&pgid=4568&o=b
200 OK 3.8 kB URL HTTP/1.1 acces.123plaisir.com/?mode=1&pg_b_format=3&tc1=blogger&tc2=468x60&pgid=4568&o=b
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1331)
Hash eb8126bbd584b0cebe6be7f062199732
7882b9bf7f1408fa4ac478259bde2dc2ff19779f
d57275a7746f8d11228e6b0a775bfef81610425d78ed396ff569c72b86749bd2
GET /?mode=1&pg_b_format=3&tc1=blogger&tc2=468x60&pgid=4568&o=b HTTP/1.1
Host: acces.123plaisir.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
server: nginx
date: Thu, 06 Oct 2022 02:52:19 GMT
content-type: text/html; charset=utf-8
transfer-encoding: chunked
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
x-server: php6-2
content-encoding: gzip
www.blogger.com/dyn-css/authorization.css?targetBlogID=4084010601378558351&zx=d14b19b9-0c8f-4d76-8442-cf5c0faf08fa
200 OK 21 B URL HTTP/2 www.blogger.com/dyn-css/authorization.css?targetBlogID=4084010601378558351&zx=d14b19b9-0c8f-4d76-8442-cf5c0faf08fa
IP
File type very short file (no magic)
Hash a62e4d501434033d5d177e67d3aafdd0
34f7300c9ed47334cf10826d57af785321e3138b
b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522
GET /dyn-css/authorization.css?targetBlogID=4084010601378558351&zx=d14b19b9-0c8f-4d76-8442-cf5c0faf08fa HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 06 Oct 2022 02:52:19 GMT
last-modified: Thu, 06 Oct 2022 02:52:19 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d56b5cc77c544d1df8b89ae9131a5d23
e4a7e47598162f8eeafd070ff8ea2315f9f1ca21
5bb462c08669908c2dcd96ae4a04e64ea192073614ae55c03c6184db96ede7bf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5BB462C08669908C2DCD96AE4A04E64EA192073614AE55C03C6184DB96EDE7BF"
Last-Modified: Wed, 05 Oct 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18008
Expires: Thu, 06 Oct 2022 07:52:27 GMT
Date: Thu, 06 Oct 2022 02:52:19 GMT
Connection: keep-alive
1.bp.blogspot.com/-EEWZ9Mk_Mls/XXc3Fol7ItI/AAAAAAAAAF8/7VEGTzVsaJ4tUk3tFQhgsi3Nq7QGho18gCLcBGAs/s1600/78.jpg
200 OK 503 B URL HTTP/2 1.bp.blogspot.com/-EEWZ9Mk_Mls/XXc3Fol7ItI/AAAAAAAAAF8/7VEGTzVsaJ4tUk3tFQhgsi3Nq7QGho18gCLcBGAs/s1600/78.jpg
IP
Hash d56b5cc77c544d1df8b89ae9131a5d23
e4a7e47598162f8eeafd070ff8ea2315f9f1ca21
5bb462c08669908c2dcd96ae4a04e64ea192073614ae55c03c6184db96ede7bf
GET /-EEWZ9Mk_Mls/XXc3Fol7ItI/AAAAAAAAAF8/7VEGTzVsaJ4tUk3tFQhgsi3Nq7QGho18gCLcBGAs/s1600/78.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="78.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 33671
x-xss-protection: 0
date: Thu, 06 Oct 2022 02:46:19 GMT
expires: Wed, 05 Oct 2022 11:47:03 GMT
cache-control: public, max-age=86400, no-transform
age: 359
etag: "v77"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jygotubvpyguak.com/assets/cp/js/ifb/script.js
200 OK 1.2 kB URL HTTP/2 jygotubvpyguak.com/assets/cp/js/ifb/script.js
IP
ASN #212882 dnx network sarl
Hash bbc87c824bd6b03ad704c5f87dbcfff7
971d33fc16972dc350cb0c80eaced7783e9ca6dc
cb3266a25510bf59f9cc7b8bed7e3dda313bda981871cd32882319ccbb1981f5
GET /assets/cp/js/ifb/script.js HTTP/1.1
Host: jygotubvpyguak.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jygotubvpyguak.com/cp/ifb/index.php?size=160x600&nichev=21&snp=1&dsclr=false&comfrom=864277&cf0=pc2&cf2=blogger&cfsa2=168x600&brand=xcams&promo=xcams&cf1=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 02:52:19 GMT
content-type: application/javascript
content-length: 1174
last-modified: Fri, 13 May 2022 07:57:57 GMT
etag: "112f-5dee00855275c-gzip"
vary: Accept-Encoding
content-encoding: gzip
server: TurboProxy
accept-ranges: bytes
X-Firefox-Spdy: h2
jygotubvpyguak.com/assets/cp/img/ifb/xcams_white.svg
200 OK 4.9 kB URL HTTP/2 jygotubvpyguak.com/assets/cp/img/ifb/xcams_white.svg
IP
ASN #212882 dnx network sarl
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash c38ae4e7d17a42ef99f9a0fca484efa6
ea543a6801e522e0ddf0d97c21164abaf97dde71
ebda51b65bfe7f285a1843c0908708cf783a904d165a09d15ee00a65e7697b4b
GET /assets/cp/img/ifb/xcams_white.svg HTTP/1.1
Host: jygotubvpyguak.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jygotubvpyguak.com/cp/ifb/index.php?size=160x600&nichev=21&snp=1&dsclr=false&comfrom=864277&cf0=pc2&cf2=blogger&cfsa2=168x600&brand=xcams&promo=xcams&cf1=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 02:52:19 GMT
content-type: image/svg+xml
content-length: 4900
last-modified: Fri, 13 May 2022 07:57:57 GMT
etag: "1324-5dee008518d78"
server: TurboProxy
accept-ranges: bytes
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery/1.9.0/jquery.min.js
200 OK 30 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/1.9.0/jquery.min.js
IP
File type ASCII text, with very long lines (32132)
Hash be187cb120122bfe6ff2d21f7ff7a3ef
07fee86aa440ca076f5ebc34a1d3177e497aa7d4
24cc821add16c2460cbaedb740e439ab2561a2499347c9f5cfb60215cb6c48b3
GET /ajax/libs/jquery/1.9.0/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jygotubvpyguak.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 02:52:19 GMT
content-type: application/javascript; charset=utf-8
content-length: 29505
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-16b8c"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 10465178
expires: Tue, 26 Sep 2023 02:52:19 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0JVnkFAv5hiBsw41slKyPB9M3i8xtqq1Ai28W3IYv0M2s0Z2EjQi3y0Jcx6kODerIJQMQkYK48gGS5IO%2BZip0KElDz3zbgFz%2BsRHJbjSMK0wBw8XXqIZdk4jijPCkuBwPPjRcbGZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 755b19ac5e29b4f1-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
acces.123plaisir.com/?mode=1&pg_b_format=3&tc1=blogger&tc2=468x60&pgid=4568&o=b
200 OK 3.8 kB URL HTTP/1.1 acces.123plaisir.com/?mode=1&pg_b_format=3&tc1=blogger&tc2=468x60&pgid=4568&o=b
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1331)
Hash 669e327029cae217fd490fc26452c2b2
d1a7a785abeb2d57833e8718caedcefcaa3ac1dd
667841064ae59e959437c922359e6077b8d8fb0551739ffb315234a0aa05e034
GET /?mode=1&pg_b_format=3&tc1=blogger&tc2=468x60&pgid=4568&o=b HTTP/1.1
Host: acces.123plaisir.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
server: nginx
date: Thu, 06 Oct 2022 02:52:19 GMT
content-type: text/html; charset=utf-8
transfer-encoding: chunked
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
x-server: php6-4
content-encoding: gzip
kenwheeler.github.io/slick/slick/slick.js
200 OK 15 kB URL HTTP/2 kenwheeler.github.io/slick/slick/slick.js
IP
Hash 10289e9c01015384bc6428767628cd3a
ee64277b89f18c2208472d3f7ac01737c5a81906
96a567ad35f88b7b21361423ae462f15c0bfaeec077d08d98fcc864ebc66886a
GET /slick/slick/slick.js HTTP/1.1
Host: kenwheeler.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jygotubvpyguak.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: GitHub.com
content-type: application/javascript; charset=utf-8
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 02 Jul 2018 12:58:42 GMT
access-control-allow-origin: *
etag: W/"5b3a2182-14929"
expires: Wed, 14 Sep 2022 00:23:56 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: HIT
x-github-request-id: 0801:4760:8F2B12:BC37BD:63211F0C
accept-ranges: bytes
date: Thu, 06 Oct 2022 02:52:19 GMT
via: 1.1 varnish
age: 3
x-served-by: cache-bma1627-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1665024739.264904,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: 044856f359944bc5aee469e4fa5bf220df9bc267
content-length: 14786
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b0e8a79f3e381ab34a44278947ac7c7e
70d01e6fdc8565c661b6ae8c5a043ddf2da16530
885a8c234fca85e6f6bb3e8fcab6672b9a9742b5d3f74681b17a330fa295d549
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 02:52:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
geoip.securitetotale.com/geo_location.php
200 OK 68 B URL HTTP/1.1 geoip.securitetotale.com/geo_location.php
IP
File type ASCII text, with no line terminators
Hash 46c65dee63b214d4ffa13004af336d5f
28d64c6ea3c3fd5864ca3cf4372801db58b68ae0
ea3c7f9ce326a2b1d2bc01e4798c8a94e06f3aacf525be0675f08d25c2f09490
GET /geo_location.php HTTP/1.1
Host: geoip.securitetotale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://fims-de-sexe.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
server: nginx
date: Thu, 06 Oct 2022 02:52:19 GMT
content-type: text/javascript; charset=utf-8
content-length: 68
cache-control: private, must-revalidate, max-age=60
x-server: php6-6
jygotubvpyguak.com/cp/ifb/css/d5bff41a737f2676c13015baa75ad905.php?bg=490349&tc=ffffff&bc=0d0a12&btc=ffffff&bhc=0d0a12&bhtc=ffffff&otc=ffffff&ntc=ffffff&nc=cecece&nhc=989898&ac=000000&brand=xcams&promo=xcams
200 OK 649 B URL HTTP/2 jygotubvpyguak.com/cp/ifb/css/d5bff41a737f2676c13015baa75ad905.php?bg=490349&tc=ffffff&bc=0d0a12&btc=ffffff&bhc=0d0a12&bhtc=ffffff&otc=ffffff&ntc=ffffff&nc=cecece&nhc=989898&ac=000000&brand=xcams&promo=xcams
IP
ASN #212882 dnx network sarl
Hash 9dc0e23f7adb3bbf886ecc751625d58d
3293deaf2d6e33df4eb53daedd61ff6720940171
ba7ed1da57484fe9ef21e93976847b6b5ea7bbd69abef570e8d6745a4b4db1c0
GET /cp/ifb/css/d5bff41a737f2676c13015baa75ad905.php?bg=490349&tc=ffffff&bc=0d0a12&btc=ffffff&bhc=0d0a12&bhtc=ffffff&otc=ffffff&ntc=ffffff&nc=cecece&nhc=989898&ac=000000&brand=xcams&promo=xcams HTTP/1.1
Host: jygotubvpyguak.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jygotubvpyguak.com/cp/ifb/index.php?size=160x600&nichev=21&snp=1&dsclr=false&comfrom=864277&cf0=pc2&cf2=blogger&cfsa2=168x600&brand=xcams&promo=xcams&cf1=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 02:52:19 GMT
content-type: text/css; charset=UTF-8
content-length: 649
vary: Accept-Encoding
content-encoding: gzip
server: TurboProxy
x-forwarded-proto: https
X-Firefox-Spdy: h2
geoip.securitetotale.com/geo_location_array.php
200 OK 197 B URL HTTP/1.1 geoip.securitetotale.com/geo_location_array.php
IP
Hash 6ddf6195e7550cfdfdcc66028d1e5508
efc53a4b5af063d93a842ea9d6b613a7d2873109
05e9b1e80e8dba3325c454f38e76fc311c68b8f24670cea21d6c7ef29cf2bced
GET /geo_location_array.php HTTP/1.1
Host: geoip.securitetotale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://fims-de-sexe.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
server: nginx
date: Thu, 06 Oct 2022 02:52:19 GMT
content-type: text/javascript; charset=utf-8
content-length: 197
cache-control: private, must-revalidate, max-age=60
x-server: php6-9
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ef394b55c9744b80c290bb4e3224ac9c
ba72f970175b6e9009d3828afebd187cad339e87
de0828dc9dd21ffd0a6e54375f7c1e1957937dfd9e8bf8265e5c74897c297e35
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DE0828DC9DD21FFD0A6E54375F7C1E1957937DFD9E8BF8265E5C74897C297E35"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15626
Expires: Thu, 06 Oct 2022 07:12:45 GMT
Date: Thu, 06 Oct 2022 02:52:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ef394b55c9744b80c290bb4e3224ac9c
ba72f970175b6e9009d3828afebd187cad339e87
de0828dc9dd21ffd0a6e54375f7c1e1957937dfd9e8bf8265e5c74897c297e35
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DE0828DC9DD21FFD0A6E54375F7C1E1957937DFD9E8BF8265E5C74897C297E35"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15626
Expires: Thu, 06 Oct 2022 07:12:45 GMT
Date: Thu, 06 Oct 2022 02:52:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ef394b55c9744b80c290bb4e3224ac9c
ba72f970175b6e9009d3828afebd187cad339e87
de0828dc9dd21ffd0a6e54375f7c1e1957937dfd9e8bf8265e5c74897c297e35
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DE0828DC9DD21FFD0A6E54375F7C1E1957937DFD9E8BF8265E5C74897C297E35"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15626
Expires: Thu, 06 Oct 2022 07:12:45 GMT
Date: Thu, 06 Oct 2022 02:52:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ef394b55c9744b80c290bb4e3224ac9c
ba72f970175b6e9009d3828afebd187cad339e87
de0828dc9dd21ffd0a6e54375f7c1e1957937dfd9e8bf8265e5c74897c297e35
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DE0828DC9DD21FFD0A6E54375F7C1E1957937DFD9E8BF8265E5C74897C297E35"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15626
Expires: Thu, 06 Oct 2022 07:12:45 GMT
Date: Thu, 06 Oct 2022 02:52:19 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 8jReaABVcmo6wWt1VA0AOQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: /9DTMVztX/AUEWYNUIGvxCycUEk=
www.dnxcloud.com/snapshots/c157912_webcam_260x195.jpg
200 OK 11 kB URL HTTP/2 www.dnxcloud.com/snapshots/c157912_webcam_260x195.jpg
IP
ASN #212882 dnx network sarl
File type JPEG image data, baseline, precision 8, 260x195, components 3\012- data
Hash 52228f97bb74b2ddebcab44f822d194e
84c2642ff30545904b060fda7a0bf65361318176
8ae7a272350d5c215b776cf9b80869e81219c807f5fbc6815b01d233eb162ac5
GET /snapshots/c157912_webcam_260x195.jpg HTTP/1.1
Host: www.dnxcloud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jygotubvpyguak.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 02:52:19 GMT
content-type: image/jpeg
content-length: 11182
last-modified: Thu, 06 Oct 2022 02:05:40 GMT
etag: "2bae-5ea54214d8f92"
server: AdvancedTurboProxy
x-forwarded-proto: https
cache-control: max-age=10
expires: Thu, 06 Oct 2022 02:52:29 GMT
x-snapshot-cache: Y
accept-ranges: bytes
X-Firefox-Spdy: h2
www.dnxcloud.com/snapshots/c165706_webcam_260x195.jpg
200 OK 11 kB URL HTTP/2 www.dnxcloud.com/snapshots/c165706_webcam_260x195.jpg
IP
ASN #212882 dnx network sarl
File type JPEG image data, baseline, precision 8, 260x195, components 3\012- data
Hash 59e149b86e2b872a503c9e9b7b5023d6
6f720cdfa473128b6ee0315a9329492cdc87dde9
b4c467e961e3d7803217973099303e221e23e4c4d30de9440cf096021528457b
GET /snapshots/c165706_webcam_260x195.jpg HTTP/1.1
Host: www.dnxcloud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jygotubvpyguak.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 02:52:19 GMT
content-type: image/jpeg
content-length: 10681
last-modified: Thu, 06 Oct 2022 02:37:48 GMT
etag: "29b9-5ea5494398888"
server: AdvancedTurboProxy
x-forwarded-proto: https
cache-control: max-age=10
expires: Thu, 06 Oct 2022 02:52:29 GMT
x-snapshot-cache: Y
accept-ranges: bytes
X-Firefox-Spdy: h2
www.dnxcloud.com/snapshots/c32112_webcam_260x195.jpg
200 OK 7.8 kB URL HTTP/2 www.dnxcloud.com/snapshots/c32112_webcam_260x195.jpg
IP
ASN #212882 dnx network sarl
File type JPEG image data, baseline, precision 8, 260x195, components 3\012- data
Hash b42e60e0ea187831e9690b61c9319ef6
a4b7ac1dd38b5be1ea9e68ac3c5b07699cfd2316
441c09454e60dc2110a33ea526d44bf8fc18748f338cb2150f9e9588587d1c5d
GET /snapshots/c32112_webcam_260x195.jpg HTTP/1.1
Host: www.dnxcloud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jygotubvpyguak.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 02:52:19 GMT
content-type: image/jpeg
content-length: 7785
last-modified: Thu, 06 Oct 2022 02:28:53 GMT
etag: "1e69-5ea5474578f01"
server: AdvancedTurboProxy
x-forwarded-proto: https
cache-control: max-age=10
expires: Thu, 06 Oct 2022 02:52:29 GMT
x-snapshot-cache: Y
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b0e8a79f3e381ab34a44278947ac7c7e
70d01e6fdc8565c661b6ae8c5a043ddf2da16530
885a8c234fca85e6f6bb3e8fcab6672b9a9742b5d3f74681b17a330fa295d549
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 02:52:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.dnxcloud.com/snapshots/c178888_webcam_260x195.jpg
200 OK 10 kB URL HTTP/2 www.dnxcloud.com/snapshots/c178888_webcam_260x195.jpg
IP
ASN #212882 dnx network sarl
File type JPEG image data, baseline, precision 8, 260x195, components 3\012- data
Hash af1a4ebfad87f8997a8b00bb5b58006c
6a02303a4d96b08cf93cf8e3a57b51d8d73377d7
da5a58c663b26fbaf189bbd94fcef05260101297ae06fadf9e66b69f8bf4f0bc
GET /snapshots/c178888_webcam_260x195.jpg HTTP/1.1
Host: www.dnxcloud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jygotubvpyguak.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 02:52:19 GMT
content-type: image/jpeg
content-length: 10374
last-modified: Thu, 06 Oct 2022 02:15:17 GMT
etag: "2886-5ea5443b09cc2"
server: AdvancedTurboProxy
x-forwarded-proto: https
cache-control: max-age=10
expires: Thu, 06 Oct 2022 02:52:29 GMT
x-snapshot-cache: Y
accept-ranges: bytes
X-Firefox-Spdy: h2
www.dnxcloud.com/snapshots/c173859_webcam_260x195.jpg
200 OK 8.9 kB URL HTTP/2 www.dnxcloud.com/snapshots/c173859_webcam_260x195.jpg
IP
ASN #212882 dnx network sarl
File type JPEG image data, baseline, precision 8, 260x195, components 3\012- data
Hash 2486b03a574050dab882ca631a2331a5
b684e39aa5e72f5f4bbe83ac58d7749e2fdca4f9
3aa67958c9b250bbb755066da51f3ac9abd2822d031237df4b5f26f1cac56fd0
GET /snapshots/c173859_webcam_260x195.jpg HTTP/1.1
Host: www.dnxcloud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jygotubvpyguak.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 02:52:19 GMT
content-type: image/jpeg
content-length: 8903
last-modified: Thu, 06 Oct 2022 02:46:02 GMT
etag: W/"22c7-5ea54b1a43171"
server: AdvancedTurboProxy
x-forwarded-proto: https
cache-control: max-age=10
expires: Thu, 06 Oct 2022 02:52:29 GMT
x-snapshot-cache: Y
accept-ranges: bytes
X-Firefox-Spdy: h2
acces.123plaisir.com/article/image.php?file=https%3A//roule.les-meilleurs-plans.com/49b41f8de7bc6da44e7e1db3eaf0da12.gif
200 OK 6.1 kB URL HTTP/1.1 acces.123plaisir.com/article/image.php?file=https%3A//roule.les-meilleurs-plans.com/49b41f8de7bc6da44e7e1db3eaf0da12.gif
IP
File type GIF image data, version 89a, 468 x 60\012- data
Hash 49b41f8de7bc6da44e7e1db3eaf0da12
7d0e6c6956a033342f82299772f301c68b6f522f
04941261992ab9e422b675b65577344784cc9910fdaabcf9dd519beebe330949
GET /article/image.php?file=https%3A//roule.les-meilleurs-plans.com/49b41f8de7bc6da44e7e1db3eaf0da12.gif HTTP/1.1
Host: acces.123plaisir.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://acces.123plaisir.com/?mode=1&pg_b_format=3&tc1=blogger&tc2=468x60&pgid=4568&o=b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
server: nginx
date: Thu, 06 Oct 2022 02:52:19 GMT
content-type: image/gif
transfer-encoding: chunked
x-server: php6-5
acces.123plaisir.com/cft/view.php?token=0e7f547cb888918817e8ea38c435c339&_t=1665024739376
200 OK 42 B URL HTTP/1.1 acces.123plaisir.com/cft/view.php?token=0e7f547cb888918817e8ea38c435c339&_t=1665024739376
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9b5e8704c89f018cff215cb5ed3e0128
2a9fa3661b326c503e492b89cdd9130d12ead03d
b2c78c910f5ea29e3a9d223dabc203c055c8708b1fe7d83788b490638126db4d
GET /cft/view.php?token=0e7f547cb888918817e8ea38c435c339&_t=1665024739376 HTTP/1.1
Host: acces.123plaisir.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://acces.123plaisir.com/?mode=1&pg_b_format=3&tc1=blogger&tc2=468x60&pgid=4568&o=b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
server: nginx
date: Thu, 06 Oct 2022 02:52:19 GMT
content-type: image/gif
content-length: 42
expires: Mon, 26 Jul 1997 05:00:00 GMT
last-modified: Thu, 06 Oct 2022 02:52:19 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-time-process: 0.0001
x-server: php6-4
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e5b8b31f2645656fb906fcc4404aaa78
41e7788343f1f36857d457e39c44146a69d4d280
78ccc2cb08ebe51e3fa940c9264528e409a99939a70321b4cebdb577da7e1b56
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "78CCC2CB08EBE51E3FA940C9264528E409A99939A70321B4CEBDB577DA7E1B56"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18883
Expires: Thu, 06 Oct 2022 08:07:02 GMT
Date: Thu, 06 Oct 2022 02:52:19 GMT
Connection: keep-alive
statsroule.direction-x.com/track.php?v&i=847-2341-1-5205
200 OK 20 B URL HTTP/1.1 statsroule.direction-x.com/track.php?v&i=847-2341-1-5205
IP
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /track.php?v&i=847-2341-1-5205 HTTP/1.1
Host: statsroule.direction-x.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://acces.123plaisir.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
server: nginx
date: Thu, 06 Oct 2022 02:52:19 GMT
content-type: text/html; charset=ISO-8859-1
transfer-encoding: chunked
vary: Accept-Encoding
x-server: php6-9
content-encoding: gzip
acces.123plaisir.com/article/image.php?file=https%3A//roule.les-meilleurs-plans.com/597c393c11769eb333b06980e6efe9c3.gif
200 OK 9.5 kB URL HTTP/1.1 acces.123plaisir.com/article/image.php?file=https%3A//roule.les-meilleurs-plans.com/597c393c11769eb333b06980e6efe9c3.gif
IP
File type GIF image data, version 89a, 468 x 60\012- data
Hash 597c393c11769eb333b06980e6efe9c3
054eee0aa70589d5a2e6d03aae547188cc9f7814
011405bdb33cd5d21af64d6be1c690f95491be4895c7113daf6cefd4484e37c8
GET /article/image.php?file=https%3A//roule.les-meilleurs-plans.com/597c393c11769eb333b06980e6efe9c3.gif HTTP/1.1
Host: acces.123plaisir.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://acces.123plaisir.com/?mode=1&pg_b_format=3&tc1=blogger&tc2=468x60&pgid=4568&o=b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
server: nginx
date: Thu, 06 Oct 2022 02:52:19 GMT
content-type: image/gif
transfer-encoding: chunked
x-server: php6-3
acces.123plaisir.com/cft/view.php?token=0e7f547cb888918817e8ea38c435c339&_t=1665024739459
200 OK 42 B URL HTTP/1.1 acces.123plaisir.com/cft/view.php?token=0e7f547cb888918817e8ea38c435c339&_t=1665024739459
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9b5e8704c89f018cff215cb5ed3e0128
2a9fa3661b326c503e492b89cdd9130d12ead03d
b2c78c910f5ea29e3a9d223dabc203c055c8708b1fe7d83788b490638126db4d
GET /cft/view.php?token=0e7f547cb888918817e8ea38c435c339&_t=1665024739459 HTTP/1.1
Host: acces.123plaisir.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://acces.123plaisir.com/?mode=1&pg_b_format=3&tc1=blogger&tc2=468x60&pgid=4568&o=b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
server: nginx
date: Thu, 06 Oct 2022 02:52:19 GMT
content-type: image/gif
content-length: 42
expires: Mon, 26 Jul 1997 05:00:00 GMT
last-modified: Thu, 06 Oct 2022 02:52:19 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-time-process: 0.0001
x-server: php6-7
statsroule.direction-x.com/track.php?v&i=847-2341-1-5206
200 OK 20 B URL HTTP/1.1 statsroule.direction-x.com/track.php?v&i=847-2341-1-5206
IP
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /track.php?v&i=847-2341-1-5206 HTTP/1.1
Host: statsroule.direction-x.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://acces.123plaisir.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
server: nginx
date: Thu, 06 Oct 2022 02:52:19 GMT
content-type: text/html; charset=ISO-8859-1
transfer-encoding: chunked
vary: Accept-Encoding
x-server: php6-5
content-encoding: gzip
acces.123plaisir.com/article/image.php?file=https%3A//roule.lewebfacilement.com/9fa80f7df7802154324d315224b678db.gif
200 OK 5.8 kB URL HTTP/1.1 acces.123plaisir.com/article/image.php?file=https%3A//roule.lewebfacilement.com/9fa80f7df7802154324d315224b678db.gif
IP
File type GIF image data, version 89a, 468 x 60\012- data
Hash 9fa80f7df7802154324d315224b678db
12dcd6b50beedf62a2851b7fd88f8c5e43a838c9
a18e0082e73df4353c01342b642932d1d1f2657268e9ca28dee37fcd88311179
GET /article/image.php?file=https%3A//roule.lewebfacilement.com/9fa80f7df7802154324d315224b678db.gif HTTP/1.1
Host: acces.123plaisir.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://acces.123plaisir.com/?mode=1&pg_b_format=3&tc1=blogger&tc2=468x60&pgid=4568&o=b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
server: nginx
date: Thu, 06 Oct 2022 02:52:19 GMT
content-type: image/gif
transfer-encoding: chunked
x-server: php6-2
acces.123plaisir.com/cft/view.php?token=0e7f547cb888918817e8ea38c435c339&_t=1665024739469
200 OK 42 B URL HTTP/1.1 acces.123plaisir.com/cft/view.php?token=0e7f547cb888918817e8ea38c435c339&_t=1665024739469
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9b5e8704c89f018cff215cb5ed3e0128
2a9fa3661b326c503e492b89cdd9130d12ead03d
b2c78c910f5ea29e3a9d223dabc203c055c8708b1fe7d83788b490638126db4d
GET /cft/view.php?token=0e7f547cb888918817e8ea38c435c339&_t=1665024739469 HTTP/1.1
Host: acces.123plaisir.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://acces.123plaisir.com/?mode=1&pg_b_format=3&tc1=blogger&tc2=468x60&pgid=4568&o=b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
server: nginx
date: Thu, 06 Oct 2022 02:52:19 GMT
content-type: image/gif
content-length: 42
expires: Mon, 26 Jul 1997 05:00:00 GMT
last-modified: Thu, 06 Oct 2022 02:52:19 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-time-process: 0.0001
x-server: php6-6
regie.oopt.fr/js/request.js
200 OK 4.6 kB URL HTTP/1.1 regie.oopt.fr/js/request.js
IP
File type Algol 68 source text\012- Pascal source, ASCII text, with very long lines (1888)
Hash 56f170a2e67c9be3c5ec31dd5cba3bd1
522d68e27d39dd42941ecb8b2031577783c146e5
51cc85ae117f2ff9e4ca2bafee35d7ca60aadf17dd0bb971cb8f1a9fe436a5d1
GET /js/request.js HTTP/1.1
Host: regie.oopt.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
HTTP/1.1 200 OK
server: nginx
date: Thu, 06 Oct 2022 02:52:19 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 26 Feb 2020 11:55:22 GMT
transfer-encoding: chunked
vary: Accept-Encoding
etag: W/"5e565caa-3fb7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
pragma: public
content-encoding: gzip
statsroule.direction-x.com/track.php?v&i=847-2341-1-5956
200 OK 20 B URL HTTP/1.1 statsroule.direction-x.com/track.php?v&i=847-2341-1-5956
IP
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /track.php?v&i=847-2341-1-5956 HTTP/1.1
Host: statsroule.direction-x.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://acces.123plaisir.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
server: nginx
date: Thu, 06 Oct 2022 02:52:19 GMT
content-type: text/html; charset=ISO-8859-1
transfer-encoding: chunked
vary: Accept-Encoding
x-server: php6-7
content-encoding: gzip
acces.123plaisir.com/article/image.php?file=https%3A//roule.super-plans.com/49b41f8de7bc6da44e7e1db3eaf0da12.gif
200 OK 6.1 kB URL HTTP/1.1 acces.123plaisir.com/article/image.php?file=https%3A//roule.super-plans.com/49b41f8de7bc6da44e7e1db3eaf0da12.gif
IP
File type GIF image data, version 89a, 468 x 60\012- data
Hash 49b41f8de7bc6da44e7e1db3eaf0da12
7d0e6c6956a033342f82299772f301c68b6f522f
04941261992ab9e422b675b65577344784cc9910fdaabcf9dd519beebe330949
GET /article/image.php?file=https%3A//roule.super-plans.com/49b41f8de7bc6da44e7e1db3eaf0da12.gif HTTP/1.1
Host: acces.123plaisir.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://acces.123plaisir.com/?mode=1&pg_b_format=3&tc1=blogger&tc2=468x60&pgid=4568&o=b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
server: nginx
date: Thu, 06 Oct 2022 02:52:19 GMT
content-type: image/gif
transfer-encoding: chunked
x-server: php6-1
acces.123plaisir.com/cft/view.php?token=0e7f547cb888918817e8ea38c435c339&_t=1665024739508
200 OK 42 B URL HTTP/1.1 acces.123plaisir.com/cft/view.php?token=0e7f547cb888918817e8ea38c435c339&_t=1665024739508
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9b5e8704c89f018cff215cb5ed3e0128
2a9fa3661b326c503e492b89cdd9130d12ead03d
b2c78c910f5ea29e3a9d223dabc203c055c8708b1fe7d83788b490638126db4d
GET /cft/view.php?token=0e7f547cb888918817e8ea38c435c339&_t=1665024739508 HTTP/1.1
Host: acces.123plaisir.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://acces.123plaisir.com/?mode=1&pg_b_format=3&tc1=blogger&tc2=468x60&pgid=4568&o=b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
server: nginx
date: Thu, 06 Oct 2022 02:52:19 GMT
content-type: image/gif
content-length: 42
expires: Mon, 26 Jul 1997 05:00:00 GMT
last-modified: Thu, 06 Oct 2022 02:52:19 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-time-process: 0.0001
x-server: php6-8
acces.123plaisir.com/cft/view.php?token=0e7f547cb888918817e8ea38c435c339&_t=1665024739493
200 OK 42 B URL HTTP/1.1 acces.123plaisir.com/cft/view.php?token=0e7f547cb888918817e8ea38c435c339&_t=1665024739493
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9b5e8704c89f018cff215cb5ed3e0128
2a9fa3661b326c503e492b89cdd9130d12ead03d
b2c78c910f5ea29e3a9d223dabc203c055c8708b1fe7d83788b490638126db4d
GET /cft/view.php?token=0e7f547cb888918817e8ea38c435c339&_t=1665024739493 HTTP/1.1
Host: acces.123plaisir.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://acces.123plaisir.com/?mode=1&pg_b_format=3&tc1=blogger&tc2=468x60&pgid=4568&o=b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
server: nginx
date: Thu, 06 Oct 2022 02:52:19 GMT
content-type: image/gif
content-length: 42
expires: Mon, 26 Jul 1997 05:00:00 GMT
last-modified: Thu, 06 Oct 2022 02:52:19 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-time-process: 0.0001
x-server: php6-6
regie.oopt.fr/css/complement.css
200 OK 47 B URL HTTP/1.1 regie.oopt.fr/css/complement.css
IP
File type ASCII text, with no line terminators
Hash 96c70ab037f312a17c14483d9b8b0eb8
b9b158a76462b92c092d7c77f1db88254b293472
b2f97a1c15b45995a94b7f6cd75f69633ac3e8d3f3802f63bdbba275ac38bfee
GET /css/complement.css HTTP/1.1
Host: regie.oopt.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
HTTP/1.1 200 OK
server: nginx
date: Thu, 06 Oct 2022 02:52:19 GMT
content-type: text/css
last-modified: Wed, 26 Feb 2020 11:55:20 GMT
transfer-encoding: chunked
vary: Accept-Encoding
etag: W/"5e565ca8-1b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
pragma: public
content-encoding: gzip
fims-de-sexe.blogspot.com/favicon.ico
200 OK 466 B URL HTTP/1.1 fims-de-sexe.blogspot.com/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 673cd0dca26ec5714408b9aa9b1641df
d81c5745cf6d06f50ca1fd3aa23f331e876c2f58
4dc698cf3ae0cb1235935b339b37167dc9eb1d9fede00ccd1cb24d3787d20095
GET /favicon.ico HTTP/1.1
Host: fims-de-sexe.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fims-de-sexe.blogspot.com/
Cookie: TestTC=1
HTTP/1.1 200 OK
Content-Type: image/x-icon
Expires: Thu, 06 Oct 2022 02:52:19 GMT
Date: Thu, 06 Oct 2022 02:52:19 GMT
Cache-Control: private, max-age=86400
Last-Modified: Tue, 13 Sep 2022 14:45:05 GMT
ETag: W/"856229c77193a97570754211cc28485279b706fad7072f8aeaa22f6aa4f7e471"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 466
Server: GSE
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 55331c1dc7e7ebbf456220986278469d
d69a62ee47b03fde68db666512417dda2ae5ad13
a09c835aa140c7b4220194e940f54de09ca3b7ea470feb7c4c5be574643086d5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3784
Expires: Thu, 06 Oct 2022 03:55:24 GMT
Date: Thu, 06 Oct 2022 02:52:20 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 55331c1dc7e7ebbf456220986278469d
d69a62ee47b03fde68db666512417dda2ae5ad13
a09c835aa140c7b4220194e940f54de09ca3b7ea470feb7c4c5be574643086d5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3784
Expires: Thu, 06 Oct 2022 03:55:24 GMT
Date: Thu, 06 Oct 2022 02:52:20 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 55331c1dc7e7ebbf456220986278469d
d69a62ee47b03fde68db666512417dda2ae5ad13
a09c835aa140c7b4220194e940f54de09ca3b7ea470feb7c4c5be574643086d5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3784
Expires: Thu, 06 Oct 2022 03:55:24 GMT
Date: Thu, 06 Oct 2022 02:52:20 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 55331c1dc7e7ebbf456220986278469d
d69a62ee47b03fde68db666512417dda2ae5ad13
a09c835aa140c7b4220194e940f54de09ca3b7ea470feb7c4c5be574643086d5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3784
Expires: Thu, 06 Oct 2022 03:55:24 GMT
Date: Thu, 06 Oct 2022 02:52:20 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7fac259b-7a22-4aa2-ba3f-682cb749091c.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7fac259b-7a22-4aa2-ba3f-682cb749091c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2277f8f2d93b4bc3b05d348343177892
531d9e4ec9078cd2d7376a19fcb287084af36c82
62907648de4a2ed390232a71ab7dce49f1e9c3363cde6a2f30ecae10ab67f93a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7fac259b-7a22-4aa2-ba3f-682cb749091c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11080
x-amzn-requestid: 8fa4d19d-87a5-46c5-96c5-4aec793daad9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjO7xE5eoAMFQLw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df84b-5c422c7a168c014f57559037;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:34:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: TlEKsCdhNhlKmA2Yhz8FarEUG18gQZMKGRD6SnzCnUMiKyGS9-UeOQ==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 73b60e9a9fd08eae9e034cedba707280.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:38:04 GMT
etag: "531d9e4ec9078cd2d7376a19fcb287084af36c82"
content-type: image/jpeg
age: 18856
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F913c841b-40a5-4fa4-bc55-0e9d1369640e.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F913c841b-40a5-4fa4-bc55-0e9d1369640e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a508ac9cd743bec987b2a24454418265
8c7ecefe6908387e2128dc849a6ba857991ba0ab
afb2c2b51f2ce445ada599068901551beee594b15c152ed7551ab7a8835dde6d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F913c841b-40a5-4fa4-bc55-0e9d1369640e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10809
x-amzn-requestid: db4d1d2a-05b8-403e-a7ca-8b8a6a0a4087
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjQb-HrTIAMFtNg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633dfab2-74f184406a48e42c0ecc4ec9;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:44:18 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: tv80OXQUu13gDuuFESnEnXMuFdNBmGc1y592euL7QnfZW5PwJym9-g==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 de8fc80b494d3d381f7e006918dcc588.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:53:39 GMT
age: 17921
etag: "8c7ecefe6908387e2128dc849a6ba857991ba0ab"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ca20164-9b52-49c5-9e63-1fc0ae719f45.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ca20164-9b52-49c5-9e63-1fc0ae719f45.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4fc2ddd86450d64d3fb659ab4e78be58
bbe71936b78a8c34d03ab87948dc840b35c6948f
84a760397a5912bd05f61bc8a953c13a88a677e2d17fbbf74bdf7d7ff4d3942f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ca20164-9b52-49c5-9e63-1fc0ae719f45.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10158
x-amzn-requestid: def1fc7e-8008-466f-9271-20fa1ab0fa5a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZaqZCH7doAMFcPQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a8aa0-7fd2fb1249366f2277d719d6;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 07:09:20 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: szhtD9f4RuQaDKXe7LElSR0yOKo9cYa1i2YMeG3eSpBXP8ePcdzQig==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 07:29:32 GMT
age: 69768
etag: "bbe71936b78a8c34d03ab87948dc840b35c6948f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb35f200a-4b30-4eca-b738-7597a7594fb0.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb35f200a-4b30-4eca-b738-7597a7594fb0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash af17f003b33d854fd024dcd3980fea27
1282572af57f7d04cae3f736a9b9fcb378efdf70
5e0112558b9196f1025a354f4b69fb02321d9a345c2d302e523001a56b51cc31
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb35f200a-4b30-4eca-b738-7597a7594fb0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12156
x-amzn-requestid: 0640ef42-f082-43cb-9fbb-ba509f7ec1ec
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZXYcIFhmIAMFeVw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63393ab3-2fbc1cf648993ee1346ec9b2;Sampled=0
x-amzn-remapped-date: Sun, 02 Oct 2022 07:16:03 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: LZZWZlT3DnlbEyrOaNR-emsGas3uCB6VaQYdTQ76-W0XL7_Yq3BAJw==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 09:27:45 GMT
age: 62675
etag: "1282572af57f7d04cae3f736a9b9fcb378efdf70"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73af78d1-5736-4820-b1cd-2746dc2b907b.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73af78d1-5736-4820-b1cd-2746dc2b907b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 746e3c38e01d58e6fa0728798221a830
b19dd1d42995ea4242505b152e77835442341581
c524a2e7e29690030b7402077f711e643674c8f42de071214f3909b447fb1e3b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73af78d1-5736-4820-b1cd-2746dc2b907b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6933
x-amzn-requestid: aa50b0cd-e931-49a9-bce3-00366738aea6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjPtNGKPoAMF6UA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df987-77a4f8306103dcdf3de7d1fd;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:39:19 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: J6TTFpH3OGVu4hTFbLlatmlwGGOiEshSdr4xUCdCKog4kUAA5TyBSQ==
via: 1.1 deaaf0548506de20925615eb51a7ea7e.cloudfront.net (CloudFront), 1.1 34c44cb7892e57a3b6c51812bcf68ee4.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 22:10:54 GMT
age: 16886
etag: "b19dd1d42995ea4242505b152e77835442341581"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb1f9d9-58f2-4af5-b299-6a59b5768aba.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb1f9d9-58f2-4af5-b299-6a59b5768aba.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2d101e6535dfc8ea8c193d3e97c07e1d
d839f3aa41455d818da9a794b0688b1144b3a03a
d73e79f203ef50354e078de30fcb52d298e14ad53924e0387ab586a9cb4376a2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb1f9d9-58f2-4af5-b299-6a59b5768aba.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8651
x-amzn-requestid: 8bbdbc11-92fe-4cdf-8469-1c1ffac9e65b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjPLIGG0IAMFehw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df8ad-132ee26478d791850dd14462;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:35:41 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: KBuHj1vlNgk4oflp8uIxuxuPoWh7B7O0SWrMrNP-lAhnp2m53ttPMw==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 e77661e211afe9242e85e573f12d5534.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 22:01:22 GMT
age: 17458
etag: "d839f3aa41455d818da9a794b0688b1144b3a03a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:600,300,700
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:600,300,700
IP
GET /css?family=Open+Sans:600,300,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jygotubvpyguak.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 06 Oct 2022 02:52:19 GMT
date: Thu, 06 Oct 2022 02:52:19 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
142.250.74.161
163.172.244.92
93.184.220.29
91.237.218.86
81.171.28.44
104.17.24.14
23.36.76.226