kimkardashian-ring.blogspot.co.uk/2011/05/mortal-kombat-wallpaper-kung-lao.html
302 Moved Temporarily 221 B URL HTTP/1.1 kimkardashian-ring.blogspot.co.uk/2011/05/mortal-kombat-wallpaper-kung-lao.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 88bbc4abd50e11194bb654499595c475
a7878c13689f5faecbf9d68b19ece63e5f072056
6e8a8b32f1ccb90fdeb6fd386f8d7170b5da583126d729f7e9b05829c6d4c469
GET /2011/05/mortal-kombat-wallpaper-kung-lao.html HTTP/1.1
Host: kimkardashian-ring.blogspot.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Location: http://kimkardashian-ring.blogspot.com/2011/05/mortal-kombat-wallpaper-kung-lao.html
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Wed, 28 Dec 2022 05:53:21 GMT
Expires: Wed, 28 Dec 2022 05:53:21 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 221
Server: GSE
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cd2bda30513692aa11a672c6a599935d
a944c3aa26b461063194a4bb95ce427d23a32d03
d975d1eab40c9fe4986ae0675d79e4f982eb9c0e2f503ca72b3bdf0ec9e7dfdc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D975D1EAB40C9FE4986AE0675D79E4F982EB9C0E2F503CA72B3BDF0EC9E7DFDC"
Last-Modified: Tue, 27 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9331
Expires: Wed, 28 Dec 2022 08:28:52 GMT
Date: Wed, 28 Dec 2022 05:53:21 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 78f1f94544ef06b96bb43283f59d100f
fa2f1a3730a98c6fa5ebf976143fb6093a7298be
889af22ee304adea2e23491acbc89ebdcaf322e8c45af2bebf7520e3e9b0a6a9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "889AF22EE304ADEA2E23491ACBC89EBDCAF322E8C45AF2BEBF7520E3E9B0A6A9"
Last-Modified: Tue, 27 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11721
Expires: Wed, 28 Dec 2022 09:08:42 GMT
Date: Wed, 28 Dec 2022 05:53:21 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b2d59bdbb1ca6324590988ec031cf1fc
bfd4e25af37dcde4bac38d9b178c5ac8e50f8834
cef2180120ef42ff09d54577229c058d41d2c569d485f5a6dcfadc74bf8aa647
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CEF2180120EF42FF09D54577229C058D41D2C569D485F5A6DCFADC74BF8AA647"
Last-Modified: Mon, 26 Dec 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6686
Expires: Wed, 28 Dec 2022 07:44:47 GMT
Date: Wed, 28 Dec 2022 05:53:21 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Type, Content-Length, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 28 Dec 2022 05:46:45 GMT
content-type: application/json
age: 396
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: mOfYChnTi/cwCTCbxP6vgGg/jwOhQjEDBatZ5IPlxboS0uBUAKfG/v0dRDqBVJqRpjLAj9g6EtM=
x-amz-request-id: 7XSP0N1GS37W6CK0
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 28 Dec 2022 04:58:10 GMT
age: 3311
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 28 Dec 2022 05:53:21 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
kimkardashian-ring.blogspot.com/2011/05/mortal-kombat-wallpaper-kung-lao.html
200 OK 22 kB URL HTTP/1.1 kimkardashian-ring.blogspot.com/2011/05/mortal-kombat-wallpaper-kung-lao.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (21598)
Hash f614d311d6c102584bd22b3d677f2f3f
3ee9d42dfbdf9c476f25234de28f7dc96199c903
3414e907e7497251760eb915a39dcaff1d0d043a25e642cd5e7d80d89bae98e8
GET /2011/05/mortal-kombat-wallpaper-kung-lao.html HTTP/1.1
Host: kimkardashian-ring.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Wed, 28 Dec 2022 05:53:21 GMT
Date: Wed, 28 Dec 2022 05:53:21 GMT
Cache-Control: private, max-age=0
Last-Modified: Mon, 13 Dec 2021 08:02:28 GMT
ETag: W/"6032a83887dc148a7893284e66892470e9b949df84577d71c30262aa0c877d63"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 21534
Server: GSE
scripts.chitika.net/eminimalls/amm.js
301 Moved Permanently 167 B URL HTTP/1.1 scripts.chitika.net/eminimalls/amm.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /eminimalls/amm.js HTTP/1.1
Host: scripts.chitika.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Wed, 28 Dec 2022 05:53:22 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://scripts.chitika.net/eminimalls/amm.js
X-Cache: Redirect from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 3eavjzNf5DqUiBDStRL-i8ktZMD43YWEdwJ0eT1LQI1UbAsfy0b5wg==
kimkardashian-ring.blogspot.com/js/cookienotice.js
200 OK 2.0 kB URL HTTP/1.1 kimkardashian-ring.blogspot.com/js/cookienotice.js
IP
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
GET /js/cookienotice.js HTTP/1.1
Host: kimkardashian-ring.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/2011/05/mortal-kombat-wallpaper-kung-lao.html
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sun, 25 Dec 2022 07:42:17 GMT
Expires: Sun, 01 Jan 2023 07:42:17 GMT
Cache-Control: public, max-age=604800
Last-Modified: Sun, 25 Dec 2022 03:50:48 GMT
Content-Type: text/javascript
Age: 252665
ymads.com/banner.php?ad=t1rdrm&u=ahk845&w=728&h=90
301 Moved Permanently 178 B URL HTTP/1.1 ymads.com/banner.php?ad=t1rdrm&u=ahk845&w=728&h=90
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash bd2695f4b079c71dbddde3436286fb9c
733c05da132193d6cf1d8e242d12e2525c03bab4
2e04a18ff185ba5b16f762a0538339bc4049aceaef9738edd43af77d2ceb788b
GET /banner.php?ad=t1rdrm&u=ahk845&w=728&h=90 HTTP/1.1
Host: ymads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Wed, 28 Dec 2022 05:53:22 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Set-Cookie: AWSALB=zN7/k3+rJ0YBHRoxE5oXDjZ1WAyQFudorULz6CkFX24lQnNTuNAIbof7KKSyDoFqpoMzKr8AhOR1ZKPstvEf+N8hqOoG3lNWWqVZkPvNB/80ZwtmMTGq75sMsyOD; Expires=Wed, 04 Jan 2023 05:53:22 GMT; Path=/
AWSALBCORS=zN7/k3+rJ0YBHRoxE5oXDjZ1WAyQFudorULz6CkFX24lQnNTuNAIbof7KKSyDoFqpoMzKr8AhOR1ZKPstvEf+N8hqOoG3lNWWqVZkPvNB/80ZwtmMTGq75sMsyOD; Expires=Wed, 04 Jan 2023 05:53:22 GMT; Path=/; SameSite=None
Server: nginx/1.18.0 (Ubuntu)
Location: https://www.domainmarket.com/buynow/ymads.com
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b87a5442ae7b284807495b6a8f92caaf
33f69899b8fb961ef2625f929ce276f5047c7a7e
daa46fe994a0aadb3ab4cfccd1c2b6a3212a8bc0fd8e3fc90fddce014b25e2d1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 05:53:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c39c4b5c9c62e5d4f814cff7115821b2
1cd9d7c08510f158fbe57a9a8dec460bba23de0c
8fbb58638da5e583c0f9743cf7bc7abcbf47fd69660695b4376606f8389606c5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 05:53:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c39c4b5c9c62e5d4f814cff7115821b2
1cd9d7c08510f158fbe57a9a8dec460bba23de0c
8fbb58638da5e583c0f9743cf7bc7abcbf47fd69660695b4376606f8389606c5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 05:53:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c39c4b5c9c62e5d4f814cff7115821b2
1cd9d7c08510f158fbe57a9a8dec460bba23de0c
8fbb58638da5e583c0f9743cf7bc7abcbf47fd69660695b4376606f8389606c5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 05:53:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
apis.google.com/js/platform.js
200 OK 21 kB URL HTTP/2 apis.google.com/js/platform.js
IP
File type ASCII text, with very long lines (1429)
Hash 1cc36f699291ba29dab9ec0f885b281b
d536f8bda7d333c21eae8e3d816d690402adb90c
6b20ce0ec6b6c57b33e8118f8d5d3c501ede61b8589ebab71d411b81d0fae994
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20933
date: Wed, 28 Dec 2022 05:53:22 GMT
expires: Wed, 28 Dec 2022 05:53:22 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "4fcbc207c89b8c6c"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.blogger.com/static/v1/jsbin/3469866930-comment_from_post_iframe.js
200 OK 6.6 kB URL HTTP/2 www.blogger.com/static/v1/jsbin/3469866930-comment_from_post_iframe.js
IP
File type ASCII text, with very long lines (1441)
Hash f60e5037324bf7fd2256c16929886f09
aae4b1aea3737e0268e3578dd1d0e7cfe6c6d66b
71846da8d45274b77549b110389ab3dbcb8ce042051b5c39547909c1c343dfde
GET /static/v1/jsbin/3469866930-comment_from_post_iframe.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6573
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 23 Dec 2022 13:33:13 GMT
expires: Sat, 23 Dec 2023 13:33:13 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 23 Dec 2022 04:54:51 GMT
content-type: text/javascript
age: 404409
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.comicbookmovie.com/images/users/uploads/12160/kung%2520lee.jpg
301 Moved Permanently 0 B URL HTTP/1.1 www.comicbookmovie.com/images/users/uploads/12160/kung%2520lee.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/users/uploads/12160/kung%2520lee.jpg HTTP/1.1
Host: www.comicbookmovie.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Wed, 28 Dec 2022 05:53:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 28 Dec 2022 06:53:22 GMT
Location: https://comicbookmovie.com/images/users/uploads/12160/kung%2520lee.jpg
Server-Timing: cf-q-config;dur=5.0000089686364e-06
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780809039faeb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Pragma, Alert, ETag, Content-Type, Last-Modified, Cache-Control, Expires, Content-Length, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 28 Dec 2022 05:08:08 GMT
age: 2714
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
200 OK 6.6 kB URL HTTP/2 www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
IP
File type ASCII text, with very long lines (30596)
Hash 6f46e6f68353c7911fe34f31faa1518f
ea4dbfa2f87c18e9c51c59a32dfa9afb9c2c3472
0be7e26374fcff6f423b88e5f2a05d1cfdcb56abb4a78fa125e391989782ae0f
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 24 Dec 2022 15:56:25 GMT
expires: Sun, 24 Dec 2023 15:56:25 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 24 Dec 2022 03:00:49 GMT
content-type: text/css
age: 309417
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
i230.photobucket.com/albums/ee181/eliaskeme/MORTIS%2520KOMBAT/1wallpaper02_06401.jpg
301 Moved Permanently 167 B URL HTTP/1.1 i230.photobucket.com/albums/ee181/eliaskeme/MORTIS%2520KOMBAT/1wallpaper02_06401.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/ee181/eliaskeme/MORTIS%2520KOMBAT/1wallpaper02_06401.jpg HTTP/1.1
Host: i230.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Wed, 28 Dec 2022 05:53:22 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i230.photobucket.com/albums/ee181/eliaskeme/MORTIS%2520KOMBAT/1wallpaper02_06401.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 9vjmNsm0OdlFGZ0Anvik5SBSLGImHNnsRUoIJQnPAtIFYpr1HmRmLQ==
Vary: Origin
www.blogger.com/static/v1/widgets/1197256859-widgets.js
200 OK 56 kB URL HTTP/2 www.blogger.com/static/v1/widgets/1197256859-widgets.js
IP
File type ASCII text, with very long lines (2221)
Hash 15d181d1185f956f34ef9d8cff4af838
41a3dfc3567601d72332b73abadda6031cdf593b
2c8823905cd520208804414a54a064a4f98e315a8b97cca381cfae0fe630b7e1
GET /static/v1/widgets/1197256859-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56470
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 25 Dec 2022 03:01:04 GMT
expires: Mon, 25 Dec 2023 03:01:04 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 24 Dec 2022 21:49:12 GMT
content-type: text/javascript
age: 269538
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
resources.blogblog.com/img/icon18_edit_allbkg.gif
200 OK 162 B URL HTTP/2 resources.blogblog.com/img/icon18_edit_allbkg.gif
IP
File type GIF image data, version 89a, 18 x 18\012- data
Hash c991641178ff05adf0d004298b5eafa9
d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
GET /img/icon18_edit_allbkg.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 162
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 24 Dec 2022 16:35:46 GMT
expires: Sat, 31 Dec 2022 16:35:46 GMT
cache-control: public, max-age=604800
last-modified: Sat, 24 Dec 2022 06:50:58 GMT
content-type: image/gif
age: 307056
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.x360magazine.com/wp-content/uploads/2010/10/945641466-00.jpg
301 MOVED PERMANENTLY 249 B URL HTTP/1.1 www.x360magazine.com/wp-content/uploads/2010/10/945641466-00.jpg
IP
ASN #20596 Future Publishing Ltd
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 393efa044f40b487dbc182b18cae3731
2b9e4ae5a977e5e69ecf0632274c7541f4914a3a
f7bc497e76165c2f278124559630b116e608c23fe2399f4d15332cfdf51b3b33
GET /wp-content/uploads/2010/10/945641466-00.jpg HTTP/1.1
Host: www.x360magazine.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
HTTP/1.1 301 MOVED PERMANENTLY
Server: gunicorn
Date: Wed, 28 Dec 2022 05:53:22 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 249
Location: http://www.gamesradar.com/xbox/
Cache-Control: max-age=3600
www.comicbookmovie.com/images/users/uploads/12160/ray%2520park.jpg
301 Moved Permanently 0 B URL HTTP/1.1 www.comicbookmovie.com/images/users/uploads/12160/ray%2520park.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/users/uploads/12160/ray%2520park.jpg HTTP/1.1
Host: www.comicbookmovie.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Wed, 28 Dec 2022 05:53:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 28 Dec 2022 06:53:22 GMT
Location: https://comicbookmovie.com/images/users/uploads/12160/ray%2520park.jpg
Server-Timing: cf-q-config;dur=6.9999950937927e-06
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78080903bff5b527-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
static.desktopnexus.com/thumbnails/662825-bigthumbnail.jpg
301 Moved Permanently 0 B URL HTTP/1.1 static.desktopnexus.com/thumbnails/662825-bigthumbnail.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /thumbnails/662825-bigthumbnail.jpg HTTP/1.1
Host: static.desktopnexus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Wed, 28 Dec 2022 05:53:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 28 Dec 2022 06:53:22 GMT
Location: https://static.desktopnexus.com/thumbnails/662825-bigthumbnail.jpg
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AL6YcLuWkGCgp%2BZZs6FTttry8cIe1vN31PE9%2BQO40IH5xgtWr7o8Zusvi70IxzJDpKJHTXHV1IhH%2BkJnzoTz2Lgrws5LTwpiHa9JgFHbC0s6nsmlgRNEiiX7EdLzdo488MxocgyHoC5q"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78080903b8e80b4d-OSL
alt-svc: h2=":443"; ma=60
blogtwitternews.com/wp-content/uploads/2011/05/Mortal-Kombat-9-Fatalities-1-Scorpion-Liu-Kang-Kung-Lao-Sub-Zero-Sindel.jpg
403 Forbidden 1.0 kB URL HTTP/1.1 blogtwitternews.com/wp-content/uploads/2011/05/Mortal-Kombat-9-Fatalities-1-Scorpion-Liu-Kang-Kung-Lao-Sub-Zero-Sindel.jpg
IP
File type XML 1.0 document text\012- XHTML document text (version 1.0)\012- broken XHTML document text (version 1.0)\012- HTML document text\012- XML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 52d5e411e92e68689befb42e3cf094ee
86a161bca896f98b63b049a2070f4d174e60a476
3367630a90abb1281a3d942f90e9c56e8e75378e50820d3c4b37134c13f17417
GET /wp-content/uploads/2011/05/Mortal-Kombat-9-Fatalities-1-Scorpion-Liu-Kang-Kung-Lao-Sub-Zero-Sindel.jpg HTTP/1.1
Host: blogtwitternews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
HTTP/1.1 403 Forbidden
date: Wed, 28 Dec 2022 05:53:22 GMT
accept-ranges: bytes
transfer-encoding: chunked
content-type: text/html; charset=utf-8
content-language: en
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c39c4b5c9c62e5d4f814cff7115821b2
1cd9d7c08510f158fbe57a9a8dec460bba23de0c
8fbb58638da5e583c0f9743cf7bc7abcbf47fd69660695b4376606f8389606c5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 05:53:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.ydLROSGdlBE.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_OUY4V-VcsLuRVnUuYVO758FydkA/cb=gapi.loaded_0?le=scs
200 OK 58 kB URL HTTP/2 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.ydLROSGdlBE.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_OUY4V-VcsLuRVnUuYVO758FydkA/cb=gapi.loaded_0?le=scs
IP
File type ASCII text, with very long lines (580)
Hash 3e7852e3ac3d1921ddb7302c569bdb8f
85e8bdb23ef407fb3770ec0a9588d85c725930d3
20cd515349665d62191e0c15ea1b9f3b5c4e35d36313d1e7fdc8af83b9663a78
GET /_/scs/abc-static/_/js/k=gapi.lb.en.ydLROSGdlBE.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_OUY4V-VcsLuRVnUuYVO758FydkA/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 57931
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 24 Dec 2022 16:18:07 GMT
expires: Sun, 24 Dec 2023 16:18:07 GMT
cache-control: public, max-age=31536000
age: 308115
last-modified: Tue, 06 Dec 2022 15:21:53 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.x360magazine.com/wp-content/uploads/2010/10/1168776396-00.jpg
301 MOVED PERMANENTLY 249 B URL HTTP/1.1 www.x360magazine.com/wp-content/uploads/2010/10/1168776396-00.jpg
IP
ASN #20596 Future Publishing Ltd
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 393efa044f40b487dbc182b18cae3731
2b9e4ae5a977e5e69ecf0632274c7541f4914a3a
f7bc497e76165c2f278124559630b116e608c23fe2399f4d15332cfdf51b3b33
GET /wp-content/uploads/2010/10/1168776396-00.jpg HTTP/1.1
Host: www.x360magazine.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
HTTP/1.1 301 MOVED PERMANENTLY
Server: gunicorn
Date: Wed, 28 Dec 2022 05:53:22 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 249
Location: http://www.gamesradar.com/xbox/
Cache-Control: max-age=3600
fenixware.net/fab/images/chars/story/kunglao.jpg
200 OK 2.6 kB URL HTTP/1.1 fenixware.net/fab/images/chars/story/kunglao.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2551), with no line terminators
Hash 41f66bb0ac50f2d851236170e7c71341
59bcec216302151922219b51be8ad8ab6d0b8384
ec99cca58b612ce268e6ada818dfcec0acc22dd1bbe372487be9abbdd07ce073
GET /fab/images/chars/story/kunglao.jpg HTTP/1.1
Host: fenixware.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 28 Dec 2022 05:53:22 GMT
Content-Type: text/html
Content-Length: 2551
Last-Modified: Tue, 06 Dec 2022 22:15:21 GMT
ETag: "638fbef9-9f7"
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_LZmeI4iDhXIeFpY8oIEVtTunbOnpVra5yErfCQP2wtrBX53yYj8EOLDJ2a6eIqwgUjDP20VZ5me97TAzN5gSCA
Cache-Control: no-cache
X-Content-Type-Options: nosniff
Set-Cookie: caf_ipaddr=91.90.42.154;Path=/;Max-Age=86400;
country=NO;Path=/;Max-Age=86400;
city="";Path=/;Max-Age=86400;
expiry_partner=;Path=/;Max-Age=86400;
Accept-Ranges: bytes
Via: 1.1 google
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
200 OK 47 B URL HTTP/1.1 pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP
Hash 7f5f2be159837d73b72a4b37616bce44
c93d7f25b530b05c26440d3352213b683d03dcc3
ccecd185ac16ba0a538840f37701053fbb861f7fbbdd86039c7415fcd924d1f2
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Server: cafe
Content-Length: 47
X-XSS-Protection: 0
Date: Tue, 27 Dec 2022 10:14:43 GMT
Expires: Tue, 10 Jan 2023 10:14:43 GMT
Cache-Control: public, max-age=1209600
Age: 70719
ETag: 13036835877489095579
Content-Type: text/javascript; charset=UTF-8
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 1fd89bccf6d451f0ee10ab7849eba526
5fb64f42652c8f2a4a84f0d5486143d246140558
a513859741223c46b4a0cf8a2bba97469f334bb9bc9613a21995d5a8933e2ba3
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=150548
Date: Wed, 28 Dec 2022 05:53:22 GMT
Etag: "63ab82e6-1d7"
Expires: Thu, 29 Dec 2022 23:42:30 GMT
Last-Modified: Tue, 27 Dec 2022 23:42:30 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: LV-zQt-to03c7edygRYbXnUK9rxu3sdmH0OwoO2AJC_cPxvudURUlw==
www.trmk.org/images/mksm/artwork/21.jpg
301 Moved Permanently 255 B URL HTTP/1.1 www.trmk.org/images/mksm/artwork/21.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash d9964b0e6c4fa6a019581d3fc8f5ba34
82da8fbe7ada993c0312e1ecff670af8a0651179
ac55e878a4326c7ec660962aaab358bc7cce40023fe97fcb03d6b1c06b2eb2d1
GET /images/mksm/artwork/21.jpg HTTP/1.1
Host: www.trmk.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Wed, 28 Dec 2022 05:53:22 GMT
Server: Apache
Location: https://www.trmk.org/images/mksm/artwork/21.jpg
Content-Length: 255
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
www.ontoplist.com/images/ontoplist1.jpg?id=4de4c75617d7e
200 OK 1.5 kB URL HTTP/1.1 www.ontoplist.com/images/ontoplist1.jpg?id=4de4c75617d7e
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 80x15, components 3\012- data
Hash dda3230a0cf65ec41104a213e3e3c7a2
85042dff76d2da1e1b51eac2c05af39bd6538cff
470c5ba103d8363cf816859c235e05f55c7c081616bff2b5def64d915a91fcf6
GET /images/ontoplist1.jpg?id=4de4c75617d7e HTTP/1.1
Host: www.ontoplist.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
HTTP/1.1 200 OK
Date: Wed, 28 Dec 2022 05:53:22 GMT
Server: Apache/2.4.54 (Debian)
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 20 Aug 2019 06:56:34 GMT
ETag: "5ab-59086f5002c80"
Accept-Ranges: bytes
Content-Length: 1451
Cache-Control: max-age=2592000
Expires: Fri, 27 Jan 2023 05:53:22 GMT
Referrer-Policy: no-referrer-when-downgrade
Keep-Alive: timeout=5, max=100
Content-Type: image/jpeg
www.auto-ping.com/iping.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD2AD0BC1854A7AD421A02FC8C1
301 Moved Permanently 178 B URL HTTP/1.1 www.auto-ping.com/iping.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD2AD0BC1854A7AD421A02FC8C1
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash bd2695f4b079c71dbddde3436286fb9c
733c05da132193d6cf1d8e242d12e2525c03bab4
2e04a18ff185ba5b16f762a0538339bc4049aceaef9738edd43af77d2ceb788b
GET /iping.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD2AD0BC1854A7AD421A02FC8C1 HTTP/1.1
Host: www.auto-ping.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 28 Dec 2022 05:53:22 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: https://www.auto-ping.com/iping.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD2AD0BC1854A7AD421A02FC8C1
scripts.chitika.net/eminimalls/amm.js
200 OK 0 B URL HTTP/2 scripts.chitika.net/eminimalls/amm.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /eminimalls/amm.js HTTP/1.1
Host: scripts.chitika.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://kimkardashian-ring.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 0
last-modified: Fri, 19 Apr 2019 16:37:52 GMT
server: AmazonS3
date: Tue, 27 Dec 2022 06:01:31 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: deHghlJlR1wALhc6Hugewexb-KCl4t_OvrJADlUk940NrPEI23_hIw==
age: 85912
X-Firefox-Spdy: h2
www.blogger.com/dyn-css/authorization.css?targetBlogID=1250069118049223412&zx=6476019a-70c2-4b77-ac32-c8910d9d4a57
200 OK 21 B URL HTTP/2 www.blogger.com/dyn-css/authorization.css?targetBlogID=1250069118049223412&zx=6476019a-70c2-4b77-ac32-c8910d9d4a57
IP
File type very short file (no magic)
Hash a62e4d501434033d5d177e67d3aafdd0
34f7300c9ed47334cf10826d57af785321e3138b
b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522
GET /dyn-css/authorization.css?targetBlogID=1250069118049223412&zx=6476019a-70c2-4b77-ac32-c8910d9d4a57 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 28 Dec 2022 05:53:22 GMT
last-modified: Wed, 28 Dec 2022 05:53:22 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
my.blueadvertise.com/__adserver/opt.js
404 Not Found 196 B URL HTTP/1.1 my.blueadvertise.com/__adserver/opt.js
IP
ASN #133618 Trellian Pty. Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
Analyzer Verdict Alert fortinet Malware
GET /__adserver/opt.js HTTP/1.1
Host: my.blueadvertise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
HTTP/1.1 404 Not Found
date: Wed, 28 Dec 2022 05:53:22 GMT
server: Apache/2.4.38 (Debian)
content-length: 196
content-type: text/html; charset=iso-8859-1
connection: close
www.blogtopsites.com/v_109185.gif
200 OK 191 B URL HTTP/1.1 www.blogtopsites.com/v_109185.gif
IP
File type GIF image data, version 89a, 80 x 15\012- data
Hash 19bb69a8950f3b90b30c141ae71e9c3e
807a52b47f51b67f2509f60d5cd9261590f8de2e
a75abed05d0cef36b8611ebfbf35f71ca7ff0a61fbdaf1d83c7decca3149a4be
GET /v_109185.gif HTTP/1.1
Host: www.blogtopsites.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
HTTP/1.1 200 OK
Date: Wed, 28 Dec 2022 05:53:22 GMT
Content-Type: image/gif
Content-Length: 191
Connection: keep-alive
Server: Apache
www.gamesradar.com/xbox/
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /xbox/ HTTP/1.1
Host: www.gamesradar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://kimkardashian-ring.blogspot.com/
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 0
Server: Varnish
Retry-After: 0
Location: https://www.gamesradar.com/xbox/
Accept-Ranges: bytes
Date: Wed, 28 Dec 2022 05:53:22 GMT
Via: 1.1 varnish
X-Served-By: cache-bma1674-BMA
X-Cache-Hits: 0
X-Timer: S1672206803.719968,VS0,VE0
Strict-Transport-Security: max-age=300
Set-Cookie: FTR_Country_Code=(null); path=/; domain=www.gamesradar.com
FTR_Cache_Status=HIT-SYNTH; path=/; domain=www.gamesradar.com
x-cache: HIT-SYNTH
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0ae0707aeabde36523941c20a68b5254
f882332bd8b3c0147af8ca8788be4a290d155766
537eefee073333371ff318be540498d3923603b79e282d6dd706cea5670caa8c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 05:53:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c39c4b5c9c62e5d4f814cff7115821b2
1cd9d7c08510f158fbe57a9a8dec460bba23de0c
8fbb58638da5e583c0f9743cf7bc7abcbf47fd69660695b4376606f8389606c5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 05:53:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
images.wikia.com/mk/images/1/13/KungLaoMK9render.jpg
404 Not Found 346 B URL HTTP/1.1 images.wikia.com/mk/images/1/13/KungLaoMK9render.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 200x114, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 11ffc8674675d77e290dadf834c9fc04
81f479d7506e7761ccdd791b78af426f45debe00
d73e11c3dc87c0e51852e1e087b0de8de0d629083f02ca982fd5b8a3bc3270c8
GET /mk/images/1/13/KungLaoMK9render.jpg HTTP/1.1
Host: images.wikia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
HTTP/1.1 404 Not Found
Connection: keep-alive
Content-Length: 346
content-disposition: inline; filename="broken-image.webp"; filename*=UTF-8''broken-image.webp
content-type: image/webp
etag: CMTuhPC4wfUCEAE=
x-thumbnailer: Thumblr
access-control-allow-origin: *
access-control-allow-headers: Range
cache-control: public, max-age=3600
x-envoy-upstream-service-time: 70
server: envoy
X-Cacheable: YES
Accept-Ranges: bytes
Date: Wed, 28 Dec 2022 05:53:22 GMT
Age: 0
X-Served-By: thumblr-9849d746f-647mh, cache-wk-sjc11421-SJC, cache-bma1633-BMA
X-Cache: ORIGIN, MISS, MISS
X-Cache-Hits: ORIGIN, 0, 0
X-Timer: S1672206803.525692,VS0,VE253
Vary: Accept
www.blogflare.com/flare_19497.gif
404 Not Found 1.2 kB URL HTTP/1.1 www.blogflare.com/flare_19497.gif
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (355)
Hash 08e5a80fca354d5575ad4aa64edd5975
756ecdadec87ec2f172c22ac84dbe0a9d23470aa
89231128b350ce5bbe1d240ebaf72dcf0b1351f50357c2c0cc5bb1a2db788204
GET /flare_19497.gif HTTP/1.1
Host: www.blogflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
HTTP/1.1 404 Not Found
Date: Wed, 28 Dec 2022 05:53:22 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Mon, 26 Jul 2021 12:39:01 GMT
vary: Accept-Encoding
platform: hostinger
x-turbo-charged-by: LiteSpeed
Cache-Control: max-age=7200
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iQuYGvegQ3XsiPQVC4Z3uiHJAtddwOdVNSsznBnqK%2BZSv2Uhz6yQQ30zkoQ3J2w%2BGt2%2F8rlG32d8ZRTcv8bBbj6epV1LaajvUPK0HjRb22NWDgrTAjoJ2LYhXX5%2Feuehhm2UPA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78080903bed0b517-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
images.travelpod.co.uk/users/mishko/1.1276523477.vilagora.jpg
301 Moved Permanently 0 B URL HTTP/1.1 images.travelpod.co.uk/users/mishko/1.1276523477.vilagora.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /users/mishko/1.1276523477.vilagora.jpg HTTP/1.1
Host: images.travelpod.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Wed, 28 Dec 2022 05:53:22 GMT
Location: http://www.travelpod.com
Content-Length: 0
www.besthitsnow.com/b1.php?id=billymoon
200 OK 499 B URL HTTP/1.1 www.besthitsnow.com/b1.php?id=billymoon
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (499), with no line terminators
Hash 75e297dabf5a3310a6557ac3f809aaa7
e8df40d8b904532e069215568c4b3c7b675ca6ee
7b24265b5188f7e2f3d02341d7b127d0954b01ce99972a48a41b5abbd8b82354
GET /b1.php?id=billymoon HTTP/1.1
Host: www.besthitsnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 499
content-type: text/html; charset=utf-8
date: Wed, 28 Dec 2022 05:53:22 GMT
server: nginx
set-cookie: sid=f03dcf0a-8673-11ed-bf6b-760ad671faf6; path=/; domain=.besthitsnow.com; expires=Mon, 15 Jan 2091 09:07:29 GMT; max-age=2147483647; HttpOnly
www.domainmarket.com/buynow/ymads.com
200 OK 16 kB URL HTTP/2 www.domainmarket.com/buynow/ymads.com
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (785)
Hash abecdf198e33a80ca343e19c2e70d428
50ed4c046aca9ee51dd9538ebabc5994257083ed
d8bfaa5f9fe202646b080f38df075f1a4759274f5d6dea311a0b6fd41cc0970c
GET /buynow/ymads.com HTTP/1.1
Host: www.domainmarket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://kimkardashian-ring.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Dec 2022 05:53:22 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=172800
access-control-allow-origin: *
access-control-allow-methods: GET
last-modified: Tue, 27 Dec 2022 18:53:11 GMT
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QlzJd1wWbpFtAOHBJB9LWsNfAncpdQh%2FhiyWQ%2BATZVm7%2F%2F2S8yafnSJsV2JUqOXQOQBJnFdmGGrZFG57jSsRTQ4gRgyt0m6LhUWhrtqYbitNZPZq1VCAK1DdcKsFE%2F7sVwD6aE5y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 780809040cc3fac0-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 1d2dcfcef2576ebe2da464bd597d149b
234d134c78f531ab9037a593b39ad14cbec841e9
646aebdad153ade0ef837eca2b80d60bddf1b17b05f1d572ba33df5eeb7d2b6b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1290
Cache-Control: max-age=95682
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 05:53:22 GMT
Etag: "63aaa78a-117"
Expires: Thu, 29 Dec 2022 08:28:04 GMT
Last-Modified: Tue, 27 Dec 2022 08:06:34 GMT
Server: ECS (amb/6BAD)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 471 B IP
Hash 60b8396db0bbfa5f2ae7e34c9d04ebcc
50b6c68aa2b2a459315a9989f5d3e326e8ad5539
c10a1e0f984b121958a5cfa3b45b746db85d33c9073fcacb019d9bb27ef3b073
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2400
Cache-Control: max-age=100412
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 05:53:22 GMT
Etag: "63aab5ae-1d7"
Expires: Thu, 29 Dec 2022 09:46:54 GMT
Last-Modified: Tue, 27 Dec 2022 09:06:54 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
www.blogflare.com/world.png
404 Not Found 1.2 kB URL HTTP/1.1 www.blogflare.com/world.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (355)
Hash 5a9a86353e366fea689b0a49979b2aa3
a2e9127999a3e51d4f409e745e76f768c6bb2f5e
a5acf0eec92083a70c022d399660f4164736d7c1d4e08294c8061ab528f79dd0
GET /world.png HTTP/1.1
Host: www.blogflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
HTTP/1.1 404 Not Found
Date: Wed, 28 Dec 2022 05:53:22 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Mon, 26 Jul 2021 12:39:01 GMT
vary: Accept-Encoding
platform: hostinger
x-turbo-charged-by: LiteSpeed
Cache-Control: max-age=7200
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fr%2FyrXRhD1cNOPT%2FiwRWLoqaXj104YV6LSA7kl6j5OYEJjX%2FM2Oe7KxzhzAuwSEQ6F4t5F1S5g%2B1FGeFv6uuYeBBzHAxxMZcRi2%2F7F6cWZimZLEYNzacPDNLLX8VLb8flDtobw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78080903b807b4ed-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
i230.photobucket.com/albums/ee181/eliaskeme/MORTIS%2520KOMBAT/1wallpaper02_06401.jpg
404 Not Found 7.1 kB URL HTTP/2 i230.photobucket.com/albums/ee181/eliaskeme/MORTIS%2520KOMBAT/1wallpaper02_06401.jpg
IP
File type PNG image data, 160 x 120, 8-bit/color RGB, non-interlaced\012- data
Hash 49e3fff8262f861c9be74931c8c33d34
a25ea738da2c2737c9eec1fdd76c5c21923f021e
f472388ee6d7eb09b86275ac4a198d40acf2b2083b342ad40838d57d01bb9c50
GET /albums/ee181/eliaskeme/MORTIS%2520KOMBAT/1wallpaper02_06401.jpg HTTP/1.1
Host: i230.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://kimkardashian-ring.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
content-type: image/png
content-length: 7092
last-modified: Fri, 20 Dec 2019 23:09:15 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Dec 2022 05:13:33 GMT
etag: "49e3fff8262f861c9be74931c8c33d34"
x-cache: Error from cloudfront
via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: RykGo0MEe-4FuGp58iwhzH2zVQNCpihxjJncIp3sPI4BvY182xpffA==
age: 3148
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fb054dd9c7388322da678a6e9faf55e6
d4272a9370940547fd97a5fb956eaec55d25c83c
95e6254550db6ed48c5acdc309002072f39f60fa73d5b79ae3b57109d3adf5ed
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "95E6254550DB6ED48C5ACDC309002072F39F60FA73D5B79AE3B57109D3ADF5ED"
Last-Modified: Tue, 27 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12717
Expires: Wed, 28 Dec 2022 09:25:19 GMT
Date: Wed, 28 Dec 2022 05:53:22 GMT
Connection: keep-alive
www.gamesradar.com/xbox/
200 OK 84 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (7148)
Hash 9f62999b9cf91bdc38af365d2f9e5e96
e813c4b7124636464b553c72c4181a8969b81f95
e5698c9309cc58917e11aa0288aa92d7a6fc93c68c757229e25be800cef713bd
GET /xbox/ HTTP/1.1
Host: www.gamesradar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://kimkardashian-ring.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
expires: Wed, 28 Dec 2022 05:01:51 GMT
last-modified: Wed, 28 Dec 2022 04:46:51 GMT
xkey: gamesradar-platform-responsive, gamesradar-region-US, gamesradar-listing-xbox, gamesradar-listing-xbox-one, gamesradar-listing-xbox360, gamesradar-listing-xbox-360, gamesradar-version-592318, gamesradar-server-phpfpm-5b56bb58cd-gv2k2
content-encoding: gzip
x-ftr-cache-status: MISS
x-age: 20
cache-control: max-age=60,public
x-ftr-request-id: 05ad429a-8de1-49a6-877b-cb3523d3367a, 00000000000000000000FFFF9D344529:8DFA_00000000000000000000FFFFB9711932:01BB_63ABCA51_11A468D:C1584
x-ftr-balancer: vanilla-mochi-http-haproxy-prod-1
x-ftr-backend: varnish-leopard
x-ftr-backend-server: vanilla-leopard-http-cache-prod-01
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 28 Dec 2022 05:53:22 GMT
age: 3989
x-served-by: cache-lon420095-LON, cache-bma1637-BMA
x-cache-hits: 5, 3
x-timer: S1672206803.905329,VS0,VE0
vary: Accept-Encoding
x-resp-is-stale: true
x-country-code: GB
x-country-code-real: NO
strict-transport-security: max-age=300
set-cookie: FTR_Country_Code=NO; path=/; domain=www.gamesradar.com
FTR_Cache_Status=HIT-STALE; path=/; domain=www.gamesradar.com
x-cache: HIT-STALE
content-length: 83670
X-Firefox-Spdy: h2
www.auto-ping.com/iping.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD2AD0BC1854A7AD421A02FC8C1
301 Moved Permanently 178 B URL HTTP/2 www.auto-ping.com/iping.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD2AD0BC1854A7AD421A02FC8C1
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash bd2695f4b079c71dbddde3436286fb9c
733c05da132193d6cf1d8e242d12e2525c03bab4
2e04a18ff185ba5b16f762a0538339bc4049aceaef9738edd43af77d2ceb788b
GET /iping.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD2AD0BC1854A7AD421A02FC8C1 HTTP/1.1
Host: www.auto-ping.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://kimkardashian-ring.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx/1.18.0 (Ubuntu)
date: Wed, 28 Dec 2022 05:53:22 GMT
content-type: text/html
content-length: 178
location: https://auto-ping.com/iping.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD2AD0BC1854A7AD421A02FC8C1
X-Firefox-Spdy: h2
www.trafficrevenue.net/loadad.js?username=billymoon
410 Gone 116 B URL HTTP/1.1 www.trafficrevenue.net/loadad.js?username=billymoon
IP
File type HTML document text\012- HTML document, ASCII text
Hash 7e37c232569e05596774eb66fd89525d
eed21e3ca5f77ee2888166f1f93cca980256c4ed
7c6af88410ff1468360df55dafbef8744266f8fdd16fe8f3e309a717b73f3d75
GET /loadad.js?username=billymoon HTTP/1.1
Host: www.trafficrevenue.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
HTTP/1.1 410 Gone
Server: openresty
Date: Wed, 28 Dec 2022 05:53:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
ocsp.digicert.com/
200 OK 279 B IP
Hash bb4bd31a7b88170f3a7594a6ac08f82e
24db6aeee59d58c76455e0e284b0501671a8ecab
1c5d065579f6a4412d3512b1f0e3ed60c2177aef853f336d4ea8f4550956517c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=134727
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 05:53:22 GMT
Etag: "63ab4519-117"
Expires: Thu, 29 Dec 2022 19:18:49 GMT
Last-Modified: Tue, 27 Dec 2022 19:18:49 GMT
Server: nginx
Content-Length: 279
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: kp2U+0Foq2GBPH1YLndVuw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: h/MuYd/e1axOi1sLRJLBmoU5nks=
my.blueadvertise.com/__adserver/opt.js
404 Not Found 196 B URL HTTP/1.1 my.blueadvertise.com/__adserver/opt.js
IP
ASN #133618 Trellian Pty. Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
Analyzer Verdict Alert fortinet Malware
GET /__adserver/opt.js HTTP/1.1
Host: my.blueadvertise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
HTTP/1.1 404 Not Found
date: Wed, 28 Dec 2022 05:53:23 GMT
server: Apache/2.4.38 (Debian)
content-length: 196
content-type: text/html; charset=iso-8859-1
connection: close
www.777seo.com/seo.php?username=billymoon
302 Found 0 B URL HTTP/1.1 www.777seo.com/seo.php?username=billymoon
IP
ASN #133618 Trellian Pty. Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET /seo.php?username=billymoon HTTP/1.1
Host: www.777seo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
date: Wed, 28 Dec 2022 05:53:23 GMT
server: Apache/2.4.38 (Debian)
set-cookie: __tad=1672206803.3047528; expires=Sat, 25-Dec-2032 05:53:23 GMT; Max-Age=315360000
location: http://ww38.777seo.com/seo.php?username=billymoon&subid1=20221228-1653-233b-9e9b-94064a11547e
content-length: 0
content-type: text/html; charset=UTF-8
connection: close
www.trmk.org/images/mksm/artwork/21.jpg
302 Found 222 B URL HTTP/2 www.trmk.org/images/mksm/artwork/21.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 28f6a12540a541934dd9158fba57d3e1
9504707365f5852aa6305ba16655ebeabc64bded
71f510f6299cd032febfe5469d44a1f32571d40c247f4706dea244839b8b2922
GET /images/mksm/artwork/21.jpg HTTP/1.1
Host: www.trmk.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://kimkardashian-ring.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 28 Dec 2022 05:53:23 GMT
server: Apache
location: https://www.trmk.org/shared/linkus.jpg
cache-control: max-age=600
expires: Wed, 28 Dec 2022 06:03:23 GMT
content-length: 222
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
blogtwitternews.com/wp-content/uploads/2011/05/Mortal-Kombat-9-Fatalities-1-Scorpion-Liu-Kang-Kung-Lao-Sub-Zero-Sindel.jpg
403 Forbidden 1.0 kB URL HTTP/1.1 blogtwitternews.com/wp-content/uploads/2011/05/Mortal-Kombat-9-Fatalities-1-Scorpion-Liu-Kang-Kung-Lao-Sub-Zero-Sindel.jpg
IP
File type XML 1.0 document text\012- XHTML document text (version 1.0)\012- broken XHTML document text (version 1.0)\012- HTML document text\012- XML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 52d5e411e92e68689befb42e3cf094ee
86a161bca896f98b63b049a2070f4d174e60a476
3367630a90abb1281a3d942f90e9c56e8e75378e50820d3c4b37134c13f17417
GET /wp-content/uploads/2011/05/Mortal-Kombat-9-Fatalities-1-Scorpion-Liu-Kang-Kung-Lao-Sub-Zero-Sindel.jpg HTTP/1.1
Host: blogtwitternews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
HTTP/1.1 403 Forbidden
date: Wed, 28 Dec 2022 05:53:23 GMT
accept-ranges: bytes
transfer-encoding: chunked
content-type: text/html; charset=utf-8
content-language: en
www.gamesradar.com/xbox/
200 OK 84 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (7148)
Hash 9f62999b9cf91bdc38af365d2f9e5e96
e813c4b7124636464b553c72c4181a8969b81f95
e5698c9309cc58917e11aa0288aa92d7a6fc93c68c757229e25be800cef713bd
GET /xbox/ HTTP/1.1
Host: www.gamesradar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://kimkardashian-ring.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
expires: Wed, 28 Dec 2022 05:01:51 GMT
last-modified: Wed, 28 Dec 2022 04:46:51 GMT
xkey: gamesradar-platform-responsive, gamesradar-region-US, gamesradar-listing-xbox, gamesradar-listing-xbox-one, gamesradar-listing-xbox360, gamesradar-listing-xbox-360, gamesradar-version-592318, gamesradar-server-phpfpm-5b56bb58cd-gv2k2
content-encoding: gzip
x-ftr-cache-status: MISS
x-age: 20
cache-control: max-age=60,public
x-ftr-request-id: 05ad429a-8de1-49a6-877b-cb3523d3367a, 00000000000000000000FFFF9D344529:8DFA_00000000000000000000FFFFB9711932:01BB_63ABCA51_11A468D:C1584
x-ftr-balancer: vanilla-mochi-http-haproxy-prod-1
x-ftr-backend: varnish-leopard
x-ftr-backend-server: vanilla-leopard-http-cache-prod-01
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 28 Dec 2022 05:53:23 GMT
age: 3989
x-served-by: cache-lon420095-LON, cache-bma1637-BMA
x-cache-hits: 5, 5
x-timer: S1672206803.257212,VS0,VE0
vary: Accept-Encoding
x-resp-is-stale: true
x-country-code: GB
x-country-code-real: NO
strict-transport-security: max-age=300
set-cookie: FTR_Country_Code=NO; path=/; domain=www.gamesradar.com
FTR_Cache_Status=HIT-STALE; path=/; domain=www.gamesradar.com
x-cache: HIT-STALE
content-length: 83670
X-Firefox-Spdy: h2
www.gamesradar.com/xbox/
200 OK 84 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (7148)
Hash 9f62999b9cf91bdc38af365d2f9e5e96
e813c4b7124636464b553c72c4181a8969b81f95
e5698c9309cc58917e11aa0288aa92d7a6fc93c68c757229e25be800cef713bd
GET /xbox/ HTTP/1.1
Host: www.gamesradar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://kimkardashian-ring.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
expires: Wed, 28 Dec 2022 05:01:51 GMT
last-modified: Wed, 28 Dec 2022 04:46:51 GMT
xkey: gamesradar-platform-responsive, gamesradar-region-US, gamesradar-listing-xbox, gamesradar-listing-xbox-one, gamesradar-listing-xbox360, gamesradar-listing-xbox-360, gamesradar-version-592318, gamesradar-server-phpfpm-5b56bb58cd-gv2k2
content-encoding: gzip
x-ftr-cache-status: MISS
x-age: 20
cache-control: max-age=60,public
x-ftr-request-id: 05ad429a-8de1-49a6-877b-cb3523d3367a, 00000000000000000000FFFF9D344529:8DFA_00000000000000000000FFFFB9711932:01BB_63ABCA51_11A468D:C1584
x-ftr-balancer: vanilla-mochi-http-haproxy-prod-1
x-ftr-backend: varnish-leopard
x-ftr-backend-server: vanilla-leopard-http-cache-prod-01
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 28 Dec 2022 05:53:23 GMT
age: 3989
x-served-by: cache-lon420095-LON, cache-bma1637-BMA
x-cache-hits: 5, 7
x-timer: S1672206803.259280,VS0,VE0
vary: Accept-Encoding
x-resp-is-stale: true
x-country-code: GB
x-country-code-real: NO
strict-transport-security: max-age=300
set-cookie: FTR_Country_Code=NO; path=/; domain=www.gamesradar.com
FTR_Cache_Status=HIT-STALE; path=/; domain=www.gamesradar.com
x-cache: HIT-STALE
content-length: 83670
X-Firefox-Spdy: h2
www.blogflare.com/world.png
404 Not Found 1.2 kB URL HTTP/1.1 www.blogflare.com/world.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (355)
Hash 5a1b07435f47ee438dad1ee1da346e8e
7a83361dc406889493d4cc437e0de768dd9aea97
5b7c2ff8419245986bb641b9f069f80b39909f13776f355fb18d6c0c9638038f
GET /world.png HTTP/1.1
Host: www.blogflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
HTTP/1.1 404 Not Found
Date: Wed, 28 Dec 2022 05:53:23 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Mon, 26 Jul 2021 12:39:01 GMT
vary: Accept-Encoding
platform: hostinger
x-turbo-charged-by: LiteSpeed
Cache-Control: max-age=7200
CF-Cache-Status: HIT
Age: 1
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uPoHih%2F7pI8HLau%2BYyWRYINidCrKN3%2FWbXqxcf1UHPr2Jcq4ZiQ2u6MmEpJ4Anm%2BV5XgOi3Lfk5i9wz7BAgI3SZLHlYY6WcnevZPm%2FdyhBO7rFQscNz5gHW%2FVSmVt4eGgMe53Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 780809089a1db4ed-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.blogflare.com/flare_19497.gif
404 Not Found 1.2 kB URL HTTP/1.1 www.blogflare.com/flare_19497.gif
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (355)
Hash 43f35d3fc2d62fa5cb60cf1c7fccd4b6
149e85a2e345880545639e03b1b42a7692de17e8
df238d3d04286fcc602b413697df7a1e0550365248376cf516c727007597ad25
GET /flare_19497.gif HTTP/1.1
Host: www.blogflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
HTTP/1.1 404 Not Found
Date: Wed, 28 Dec 2022 05:53:23 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Mon, 26 Jul 2021 12:39:01 GMT
vary: Accept-Encoding
platform: hostinger
x-turbo-charged-by: LiteSpeed
Cache-Control: max-age=7200
CF-Cache-Status: HIT
Age: 1
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UA%2FNLTaHAQ5Ayfcpc8JcOZwCh5no6G0zjqmhB6GnUV08YNvxJfJfJ%2FKokaRtMk3foqpv%2BWU18ILIVLNnm6wA8fquzbfWQe6G2z8KEnFg4NL%2Fu9KpVv0eJcNJopPkXFjbdE7tFA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78080908994cb517-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.besthitsnow.com/b1.php?ch=1&id=billymoon&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY3MjIxNDAwMiwiaWF0IjoxNjcyMjA2ODAyLCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc3FkdWVocTJldmNkMzR1bjgwdTBmOGEiLCJuYmYiOjE2NzIyMDY4MDIsInRzIjoxNjcyMjA2ODAyODM2NjYwfQ.RrVHJuuCiRbTUU5L42xHNEZEoouTVL0cUvusg6R76WA&sid=f03dcf0a-8673-11ed-bf6b-760ad671faf6
302 Found 11 B URL HTTP/1.1 www.besthitsnow.com/b1.php?ch=1&id=billymoon&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY3MjIxNDAwMiwiaWF0IjoxNjcyMjA2ODAyLCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc3FkdWVocTJldmNkMzR1bjgwdTBmOGEiLCJuYmYiOjE2NzIyMDY4MDIsInRzIjoxNjcyMjA2ODAyODM2NjYwfQ.RrVHJuuCiRbTUU5L42xHNEZEoouTVL0cUvusg6R76WA&sid=f03dcf0a-8673-11ed-bf6b-760ad671faf6
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with no line terminators
Hash 32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
GET /b1.php?ch=1&id=billymoon&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY3MjIxNDAwMiwiaWF0IjoxNjcyMjA2ODAyLCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc3FkdWVocTJldmNkMzR1bjgwdTBmOGEiLCJuYmYiOjE2NzIyMDY4MDIsInRzIjoxNjcyMjA2ODAyODM2NjYwfQ.RrVHJuuCiRbTUU5L42xHNEZEoouTVL0cUvusg6R76WA&sid=f03dcf0a-8673-11ed-bf6b-760ad671faf6 HTTP/1.1
Host: www.besthitsnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.besthitsnow.com/b1.php?id=billymoon
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Wed, 28 Dec 2022 05:53:23 GMT
location: https://r.lnk8j7.com/link/br-js-fraud/pQgb3mexsY2mX3s2DJ2jCr?u=http%3A%2F%2Fbesthitsnow.com&campaign_id=k9SEaoiiwt8PiqaSSUJ7J9
server: nginx
set-cookie: sid=f03dcf0a-8673-11ed-bf6b-760ad671faf6; path=/; domain=.besthitsnow.com; expires=Mon, 15 Jan 2091 09:07:30 GMT; max-age=2147483647; HttpOnly
www.blogger.com/img/logo-16.png
200 OK 279 B URL HTTP/1.1 www.blogger.com/img/logo-16.png
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 5ffecab6c722bb0adc3fce8d83b27993
0e59b05d3da526e82bb4f5d47c5d94e2a318dafb
cca664ca16fde285160e80eae6ba4501c27b1dd1ce09aec1e84caa74b5baff53
GET /img/logo-16.png HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 279
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 24 Dec 2022 16:24:03 GMT
Expires: Sat, 31 Dec 2022 16:24:03 GMT
Cache-Control: public, max-age=604800
Last-Modified: Sat, 24 Dec 2022 07:49:45 GMT
Content-Type: image/png
Age: 307760
static.desktopnexus.com/thumbnails/662825-bigthumbnail.jpg
404 Not Found 282 B URL HTTP/2 static.desktopnexus.com/thumbnails/662825-bigthumbnail.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 43a7ecf78321ec61a6d8e19afe0851a1
b23104c316a35dcb7e36451e8dc28da61ba0660d
ef0893408afdc63361906c4ba42fbe303ed5a46c6d15fe454f0cd68226db51f4
GET /thumbnails/662825-bigthumbnail.jpg HTTP/1.1
Host: static.desktopnexus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://kimkardashian-ring.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
date: Wed, 28 Dec 2022 05:53:23 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ee2u%2FARJkxEowo6KJxZVJu%2Byam0svu%2Fus0PiPNJbKusjMgSRpGNdIi8OAQbc52iPnYQwD9zkDhyfKAxtPDIAX4tZcuYb4HmX01yi3kLwrsiNIhjVHf1Af%2BzoNHMQgs7YSaE1oURgA%2Bk9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 780809084e900b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
fenixware.net/fab/images/chars/story/kunglao.jpg
304 Not Modified 0 B URL HTTP/1.1 fenixware.net/fab/images/chars/story/kunglao.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fab/images/chars/story/kunglao.jpg HTTP/1.1
Host: fenixware.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
If-Modified-Since: Tue, 06 Dec 2022 22:15:21 GMT
If-None-Match: "638fbef9-9f7"
HTTP/1.1 304 Not Modified
Server: openresty
Date: Wed, 28 Dec 2022 05:53:23 GMT
Last-Modified: Tue, 06 Dec 2022 22:15:21 GMT
ETag: "638fbef9-9f7"
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_LZmeI4iDhXIeFpY8oIEVtTunbOnpVra5yErfCQP2wtrBX53yYj8EOLDJ2a6eIqwgUjDP20VZ5me97TAzN5gSCA
Cache-Control: no-cache
X-Content-Type-Options: nosniff
Set-Cookie: caf_ipaddr=91.90.42.154;Path=/;Max-Age=86400;
country=NO;Path=/;Max-Age=86400;
city="";Path=/;Max-Age=86400;
expiry_partner=;Path=/;Max-Age=86400;
Via: 1.1 google
www.trmk.org/shared/linkus.jpg
200 OK 3.6 kB URL HTTP/2 www.trmk.org/shared/linkus.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 200x100, components 3\012- data
Hash a0e1c1fa392f99fb3319720da75d52e9
0e1f8baf49dd60fa002c058892bc32f10ea7f8fd
3dcb23eaa889a3a69aa16855bf5bb39aea87c761b4cbfe18ed51b8f97e715122
GET /shared/linkus.jpg HTTP/1.1
Host: www.trmk.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://kimkardashian-ring.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 28 Dec 2022 05:53:23 GMT
server: Apache
last-modified: Mon, 27 May 2002 17:38:40 GMT
etag: "e30-3a1fa40220800"
accept-ranges: bytes
content-length: 3632
cache-control: max-age=2592000
expires: Fri, 27 Jan 2023 05:53:23 GMT
vary: User-Agent
content-type: image/jpeg
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash bb4bd31a7b88170f3a7594a6ac08f82e
24db6aeee59d58c76455e0e284b0501671a8ecab
1c5d065579f6a4412d3512b1f0e3ed60c2177aef853f336d4ea8f4550956517c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1
Cache-Control: max-age=134727
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 05:53:23 GMT
Etag: "63ab4519-117"
Expires: Thu, 29 Dec 2022 19:18:50 GMT
Last-Modified: Tue, 27 Dec 2022 19:18:49 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 279
www.mojodojo.co.za/wp-content/uploads/2011/04/Scorpion-Kung-Lao-466x262.jpg
301 Moved Permanently 0 B URL HTTP/1.1 www.mojodojo.co.za/wp-content/uploads/2011/04/Scorpion-Kung-Lao-466x262.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/uploads/2011/04/Scorpion-Kung-Lao-466x262.jpg HTTP/1.1
Host: www.mojodojo.co.za
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Wed, 28 Dec 2022 05:53:22 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Redirect-By: WordPress
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: http://mojodojo.co.za/wp-content/uploads/2011/04/Scorpion-Kung-Lao-466x262.jpg
Content-Length: 0
Keep-Alive: timeout=5, max=100
Content-Type: text/html; charset=UTF-8
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9d739c783ef8e3f6b39bbf2b549ab516
b5b9c1de4e7ea462989e02190a4b642cde5e0d9a
ef88850c1c1854bc04372def58a18797a99156833826e1fde527a79603676b67
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 05:53:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
images2.fanpop.com/images/forum/1000/1018_1251843487144_full.jpg
200 OK 222 kB URL HTTP/1.1 images2.fanpop.com/images/forum/1000/1018_1251843487144_full.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 547x662, components 3\012- data
Size 222 kB (222134 bytes)
Hash 91045f7b8c8632488ddffbacd16f3ef2
498f0a1756d3ff8c2ecfce418225683a511066e9
157c636621f8a63f10d017f89585894c4eaf1dcd903d0a59408533b088b9d643
GET /images/forum/1000/1018_1251843487144_full.jpg HTTP/1.1
Host: images2.fanpop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
HTTP/1.1 200 OK
Date: Wed, 28 Dec 2022 05:53:23 GMT
Content-Type: image/jpeg
Content-Length: 222134
Connection: keep-alive
Last-Modified: Tue, 01 Sep 2009 22:18:07 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nVifSRXvODDuJj6dUlkWUepb70f0ugJKz%2FNrRv7OmjoR8XOjuk%2FwBGZNQ7MQyeRvIJ2ZThdLVrpcxj17%2F4fWkSVmWXjgVR7EFlR7wI0juiqji%2BupGGlNSTW%2FdDkVK%2F0aZx%2FYew%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78080903b8cd1c16-OSL
alt-svc: h2=":443"; ma=60
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 0b2c848be40f4b8453f2d08a381f5159
524007538dbb1bf28ba708bbb2dffdd02ea6c45a
c12bb66a6254f7164ae408c1126bee70abf8a368ba4dfe888612ea08e88e0205
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=155251
Date: Wed, 28 Dec 2022 05:53:23 GMT
Etag: "63ab8188-1d7"
Expires: Fri, 30 Dec 2022 01:00:54 GMT
Last-Modified: Tue, 27 Dec 2022 23:36:40 GMT
Server: ECS (nyb/1D2D)
X-Cache: Miss from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ZZ-60ZKtEZczBEq2FUlwrU36LOgHjBdm_Q5Mxgskmtxlm9AiSXKMIA==
Age: 5054
accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D1250069118049223412%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM5OTk5OTkiByM5OWFhZGQqByMwMDAwMDAyByNhYWRkOTk6ByM5OTk5OTlCByM5OWFhZGRKByM3Nzc3NzdSByM5OWFhZGRaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D1621234668100781554%26origin%3Dhttp://kimkardashian-ring.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.ydLROSGdlBE.O/d%253D1/rs%253DAHpOoo_OUY4V-VcsLuRVnUuYVO758FydkA/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D1250069118049223412%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM5OTk5OTkiByM5OWFhZGQqByMwMDAwMDAyByNhYWRkOTk6ByM5OTk5OTlCByM5OWFhZGRKByM3Nzc3NzdSByM5OWFhZGRaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D1621234668100781554%26origin%3Dhttp://kimkardashian-ring.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.ydLROSGdlBE.O/d%253D1/rs%253DAHpOoo_OUY4V-VcsLuRVnUuYVO758FydkA/m%253D__features__%26bpli%3D1&go=true
302 Found 496 B URL HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D1250069118049223412%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM5OTk5OTkiByM5OWFhZGQqByMwMDAwMDAyByNhYWRkOTk6ByM5OTk5OTlCByM5OWFhZGRKByM3Nzc3NzdSByM5OWFhZGRaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D1621234668100781554%26origin%3Dhttp://kimkardashian-ring.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.ydLROSGdlBE.O/d%253D1/rs%253DAHpOoo_OUY4V-VcsLuRVnUuYVO758FydkA/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D1250069118049223412%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM5OTk5OTkiByM5OWFhZGQqByMwMDAwMDAyByNhYWRkOTk6ByM5OTk5OTlCByM5OWFhZGRKByM3Nzc3NzdSByM5OWFhZGRaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D1621234668100781554%26origin%3Dhttp://kimkardashian-ring.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.ydLROSGdlBE.O/d%253D1/rs%253DAHpOoo_OUY4V-VcsLuRVnUuYVO758FydkA/m%253D__features__%26bpli%3D1&go=true
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (541)
Hash f1e428f8b8de380fe5483605c5992a64
bab9626dce58f1feec3d8a59d98fcde439ca43be
39ebfcf27568c3975920c387faae701697433958067c828c7fe4397f3d328ad9
GET /ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D1250069118049223412%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM5OTk5OTkiByM5OWFhZGQqByMwMDAwMDAyByNhYWRkOTk6ByM5OTk5OTlCByM5OWFhZGRKByM3Nzc3NzdSByM5OWFhZGRaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D1621234668100781554%26origin%3Dhttp://kimkardashian-ring.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.ydLROSGdlBE.O/d%253D1/rs%253DAHpOoo_OUY4V-VcsLuRVnUuYVO758FydkA/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D1250069118049223412%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM5OTk5OTkiByM5OWFhZGQqByMwMDAwMDAyByNhYWRkOTk6ByM5OTk5OTlCByM5OWFhZGRKByM3Nzc3NzdSByM5OWFhZGRaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D1621234668100781554%26origin%3Dhttp://kimkardashian-ring.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.ydLROSGdlBE.O/d%253D1/rs%253DAHpOoo_OUY4V-VcsLuRVnUuYVO758FydkA/m%253D__features__%26bpli%3D1&go=true HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://kimkardashian-ring.blogspot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 28 Dec 2022 05:53:23 GMT
location: https://www.blogger.com/followers.g?blogID=1250069118049223412&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM5OTk5OTkiByM5OWFhZGQqByMwMDAwMDAyByNhYWRkOTk6ByM5OTk5OTlCByM5OWFhZGRKByM3Nzc3NzdSByM5OWFhZGRaC3RyYW5zcGFyZW50&pageSize=21&postID=1621234668100781554&origin=http%3A%2F%2Fkimkardashian-ring.blogspot.com%2F&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.ydLROSGdlBE.O%2Fd%3D1%2Frs%3DAHpOoo_OUY4V-VcsLuRVnUuYVO758FydkA%2Fm%3D__features__&bpli=1
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-KvZPQXMgoYJvQYhUcj4Lvg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 496
server: GSE
set-cookie: __Host-GAPS=1:T0LreBJYyAyn4FoI3Y71qM0PP9LtOw:N2fzw2C3rILKnZ0R;Path=/;Expires=Fri, 27-Dec-2024 05:53:23 GMT;Secure;HttpOnly;Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dexplatform.com/publishers/adserving/show.php?token=MTExMXw3Mjh4OTB8NzI4fDkw
200 OK 2.3 kB URL HTTP/1.1 dexplatform.com/publishers/adserving/show.php?token=MTExMXw3Mjh4OTB8NzI4fDkw
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (644)
Hash 5e67e5cd1dcbc9e6e245534b69d11c7b
8e66fbc4891aefe9d32b5f01024f491c7c8333b4
f273a09a3a637018aaea46fef45ff4be7e402f49c766fddd236df2133daa210c
GET /publishers/adserving/show.php?token=MTExMXw3Mjh4OTB8NzI4fDkw HTTP/1.1
Host: dexplatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 28 Dec 2022 05:53:22 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
X-Powered-By: PHP/5.4.16
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 52ca073ad56859a4aa27c7711a0280e0
0f9481ab1d4503f6768b94aca521a8e6a1cacc16
3be123f7c76a1cb88f5f06d8359ee810eb5aa11540c89bc747318101e3585145
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 05:53:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
200 OK 665 B URL HTTP/2 www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
IP
File type ASCII text, with very long lines (1034), with no line terminators
Hash 6554a3c767fc86b88034f0bfa33cc582
92820315fecc0c33871a5498249343f5faa59f68
65d4bf0d07f35e2d58ce01ac5b2c668607468374b034ddd94a4014eec4dbe517
GET /recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Wed, 28 Dec 2022 05:53:23 GMT
date: Wed, 28 Dec 2022 05:53:23 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 665
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9050ee54dae26344646b208a231fc770
a19ae5a4a8f9c28bca52aa8ea55c7313f99e0936
8ab388c1272cd2c6c2137a27f8e021744126f6fc7df5043756a04dac50857436
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 05:53:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ww38.777seo.com/seo.php?username=billymoon&subid1=20221228-1653-233b-9e9b-94064a11547e
200 OK 5.9 kB URL HTTP/1.1 ww38.777seo.com/seo.php?username=billymoon&subid1=20221228-1653-233b-9e9b-94064a11547e
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2610)
Hash 098d0b1ac41cdbd97dc9cc3c79408108
60686a76ca4169bf7e4e9a9475e58a3c734d197e
b5260c260f8846f5d638cde6c47d63bc811fcb63a2652633cbf10ae914d15a31
GET /seo.php?username=billymoon&subid1=20221228-1653-233b-9e9b-94064a11547e HTTP/1.1
Host: ww38.777seo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://kimkardashian-ring.blogspot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 28 Dec 2022 05:53:23 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Buckets: bucket102
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_t3QqyWHM392C4WjJrFRJI/LINTqcYe4R4envZa/g4KqHayL4rBpkIAvFRXBnAwnGiA17WLADU+fDA+YhMmayIg==
X-Template: tpl_CleanPeppermintBlack_twoclick
X-Language: norwegian
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Content-Encoding: gzip
dexplatform.com/page/bouncy.php?&bpae=GbhGdKfmvUx%2FiHOEDz9OQHzQLjZnFMvomSt1tmWyEFF6iSf8AL2JBRef5tVxs5eXTwE8aTbT%2BWFuT%2FGYl7aV2PNMyAxXm2PqwIRRsDazMV8eycQAVTQnhxxWfA6XFYMsV8qx4%2FfEwOwH6BQ%2Fcr%2Bmp%2FPZENwNzSnBSKI6cuwNaLFhNDT7Ra%2F%2BkaBgrkaXsKijWXRBZYRsMd3L5G6pMSFQODPuKfdUt9iqnqrRmHoxroO09DEx3DtTqS1DfajmpK9VJ2T0mWVnHIAjJQ4cBYCpNWEmft4MjV%2BY9rQcLLYPz%2BXVHbpxwcSYbZeQE%2BjWAb4K7ZHrseb4dE%2BV939W8jsIjGFkhs17%2B3whWpObP%2FtshI0l%2BLa9B3UB9JdQloUQg1s1W%2F2GQsJqXeAb8KdVREOUZH%2BC6OINbLD4is5qqF4v%2BBuEbqsDtqkhPCKV3I%2BzJVnKw%2BdtzWRGwg1nTEcbgACU3I4BijJNK8flECt4CgmuAUIfCTsJ2ZdhlifIpg%3D%3D&redirectType=js&inIframe=true&inPopUp=false
404 Not Found 0 B URL HTTP/1.1 dexplatform.com/page/bouncy.php?&bpae=GbhGdKfmvUx%2FiHOEDz9OQHzQLjZnFMvomSt1tmWyEFF6iSf8AL2JBRef5tVxs5eXTwE8aTbT%2BWFuT%2FGYl7aV2PNMyAxXm2PqwIRRsDazMV8eycQAVTQnhxxWfA6XFYMsV8qx4%2FfEwOwH6BQ%2Fcr%2Bmp%2FPZENwNzSnBSKI6cuwNaLFhNDT7Ra%2F%2BkaBgrkaXsKijWXRBZYRsMd3L5G6pMSFQODPuKfdUt9iqnqrRmHoxroO09DEx3DtTqS1DfajmpK9VJ2T0mWVnHIAjJQ4cBYCpNWEmft4MjV%2BY9rQcLLYPz%2BXVHbpxwcSYbZeQE%2BjWAb4K7ZHrseb4dE%2BV939W8jsIjGFkhs17%2B3whWpObP%2FtshI0l%2BLa9B3UB9JdQloUQg1s1W%2F2GQsJqXeAb8KdVREOUZH%2BC6OINbLD4is5qqF4v%2BBuEbqsDtqkhPCKV3I%2BzJVnKw%2BdtzWRGwg1nTEcbgACU3I4BijJNK8flECt4CgmuAUIfCTsJ2ZdhlifIpg%3D%3D&redirectType=js&inIframe=true&inPopUp=false
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /page/bouncy.php?&bpae=GbhGdKfmvUx%2FiHOEDz9OQHzQLjZnFMvomSt1tmWyEFF6iSf8AL2JBRef5tVxs5eXTwE8aTbT%2BWFuT%2FGYl7aV2PNMyAxXm2PqwIRRsDazMV8eycQAVTQnhxxWfA6XFYMsV8qx4%2FfEwOwH6BQ%2Fcr%2Bmp%2FPZENwNzSnBSKI6cuwNaLFhNDT7Ra%2F%2BkaBgrkaXsKijWXRBZYRsMd3L5G6pMSFQODPuKfdUt9iqnqrRmHoxroO09DEx3DtTqS1DfajmpK9VJ2T0mWVnHIAjJQ4cBYCpNWEmft4MjV%2BY9rQcLLYPz%2BXVHbpxwcSYbZeQE%2BjWAb4K7ZHrseb4dE%2BV939W8jsIjGFkhs17%2B3whWpObP%2FtshI0l%2BLa9B3UB9JdQloUQg1s1W%2F2GQsJqXeAb8KdVREOUZH%2BC6OINbLD4is5qqF4v%2BBuEbqsDtqkhPCKV3I%2BzJVnKw%2BdtzWRGwg1nTEcbgACU3I4BijJNK8flECt4CgmuAUIfCTsJ2ZdhlifIpg%3D%3D&redirectType=js&inIframe=true&inPopUp=false HTTP/1.1
Host: dexplatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dexplatform.com/publishers/adserving/show.php?token=MTExMXw3Mjh4OTB8NzI4fDkw
Upgrade-Insecure-Requests: 1
HTTP/1.1 404 Not Found
Date: Wed, 28 Dec 2022 05:53:23 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
X-Powered-By: PHP/5.4.16
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
www.gstatic.com/recaptcha/releases/5qcenVbrhOy8zihcc2aHOWD4/recaptcha__en.js
200 OK 165 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/5qcenVbrhOy8zihcc2aHOWD4/recaptcha__en.js
IP
File type ASCII text, with very long lines (658)
Size 165 kB (164706 bytes)
Hash 0b7fccb24ee065a01fdde10928c03c3f
9b198014f81844820588c202cc24bf5e03bf3dd7
68756de8f0d6742525ddaca56ab350e34d822777e86939fea27eb704ae013280
GET /recaptcha/releases/5qcenVbrhOy8zihcc2aHOWD4/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 164706
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 23 Dec 2022 08:42:55 GMT
expires: Sat, 23 Dec 2023 08:42:55 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 15 Dec 2022 05:24:10 GMT
content-type: text/javascript
age: 421828
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
d38psrni17bvxu.cloudfront.net/scripts/maincaf.js
200 OK 7.0 kB URL HTTP/1.1 d38psrni17bvxu.cloudfront.net/scripts/maincaf.js
IP
File type ASCII text, with very long lines (316)
Hash 3c7567521347bf95b105ffa7fdc7da86
08739adacbf1300c74d8ae1cf100d00d9fbd0e5f
0e32bca6b67dfdeed3f9b988ddcec1adf0502549a130a78c4ace64c318a7ea29
GET /scripts/maincaf.js HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww38.777seo.com/
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 7006
Connection: keep-alive
Server: nginx
Date: Wed, 28 Dec 2022 02:42:00 GMT
Last-Modified: Tue, 15 Nov 2022 15:10:24 GMT
Accept-Ranges: bytes
ETag: "6373abe0-1b5e"
X-Cache: Hit from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: z7oOn3yEwggiJ4RqmNjvvwUNY4nRFzfSHQGHsHa1ii6iToAmAw-v5w==
Age: 11483
comicbookmovie.com/images/users/uploads/12160/kung%2520lee.jpg
404 Not Found 15 kB URL HTTP/2 comicbookmovie.com/images/users/uploads/12160/kung%2520lee.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (747), with CRLF, LF line terminators
Hash df16848868286748a28c29d77e35d05e
d316eabdca41b511472ca34f19b04523fa5504c6
96ee4f07d91080d33131df89ab60ec42d0f944684a1899d1f9429d0a0fe29aeb
GET /images/users/uploads/12160/kung%2520lee.jpg HTTP/1.1
Host: comicbookmovie.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://kimkardashian-ring.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
date: Wed, 28 Dec 2022 05:53:23 GMT
content-type: text/html; charset=utf-8
cache-control: public, max-age=2678400
x-aspnet-version: 4.0.30319
access-control-allow-origin: *
cf-cache-status: MISS
expires: Sat, 28 Jan 2023 05:53:23 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 78080905ee8bb51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r.lnk8j7.com/link/br-js-fraud/pQgb3mexsY2mX3s2DJ2jCr?u=http%3A%2F%2Fbesthitsnow.com&campaign_id=k9SEaoiiwt8PiqaSSUJ7J9
200 OK 553 B URL HTTP/2 r.lnk8j7.com/link/br-js-fraud/pQgb3mexsY2mX3s2DJ2jCr?u=http%3A%2F%2Fbesthitsnow.com&campaign_id=k9SEaoiiwt8PiqaSSUJ7J9
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 616ec096cbe7b9f957c0d1be9cc5b320
315d38caa1497d193e15c58215323906d4c83d43
3fdca5cd4516b86846f2fbc9584747b2b265b4c926c34e465311bd622867b800
GET /link/br-js-fraud/pQgb3mexsY2mX3s2DJ2jCr?u=http%3A%2F%2Fbesthitsnow.com&campaign_id=k9SEaoiiwt8PiqaSSUJ7J9 HTTP/1.1
Host: r.lnk8j7.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.besthitsnow.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
content-length: 553
date: Wed, 28 Dec 2022 05:53:23 GMT
x-amzn-requestid: 3c2204fd-5b02-4c22-a2ad-8a1dcc876130
referrer-policy: none, no-referrer, none, no-referrer
content-encoding: gzip
surrogate-control: no-store
x-amzn-remapped-content-length: 1702
x-amz-apigw-id: d175HGR6IAMFaiA=
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate
expires: 0
etag: W/"6a6-iGwkmjCiuVdyHr07fK23xPVI1DE"
x-powered-by: Express
x-amzn-trace-id: Root=1-63abd9d3-6120f0bc77de01c3626a5f5e;Sampled=0
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: PqlVwLl40wpDFBn-XcaDZ5weUad185aMOg-eZriVtcYzEDAEK0G3Fg==
X-Firefox-Spdy: h2
www.sendptp.com/sbanner.php?u=billymoon
302 Found 0 B URL HTTP/1.1 www.sendptp.com/sbanner.php?u=billymoon
IP
ASN #133618 Trellian Pty. Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET /sbanner.php?u=billymoon HTTP/1.1
Host: www.sendptp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
date: Wed, 28 Dec 2022 05:53:23 GMT
server: Apache/2.4.38 (Debian)
set-cookie: __tad=1672206803.6866959; expires=Sat, 25-Dec-2032 05:53:23 GMT; Max-Age=315360000
location: http://ww38.sendptp.com/sbanner.php?u=billymoon
content-length: 0
content-type: text/html; charset=UTF-8
connection: close
ptp4ever.net/banniere.php?ref=billymoon
302 Found 0 B URL HTTP/1.1 ptp4ever.net/banniere.php?ref=billymoon
IP
ASN #133618 Trellian Pty. Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET /banniere.php?ref=billymoon HTTP/1.1
Host: ptp4ever.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kimkardashian-ring.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
date: Wed, 28 Dec 2022 05:53:23 GMT
server: Apache/2.4.38 (Debian)
set-cookie: __tad=1672206803.1951714; expires=Sat, 25-Dec-2032 05:53:23 GMT; Max-Age=315360000
location: http://ww38.ptp4ever.net/banniere.php?ref=billymoon&subid1=20221228-1653-23ed-8d0b-714c2ab3f0d1
content-length: 0
content-type: text/html; charset=UTF-8
connection: close
c.parkingcrew.net/scripts/sale_form.js
200 OK 761 B URL HTTP/1.1 c.parkingcrew.net/scripts/sale_form.js
IP
Hash 64f809e06446647e192fce8d1ec34e09
5b7ced07da42e205067afa88615317a277a4a82c
f52cbd664986ad7ed6e71c448e2d31d1a16463e4d9b7bca0c6be278649ccc4f3
GET /scripts/sale_form.js HTTP/1.1
Host: c.parkingcrew.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww38.777seo.com/
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 28 Dec 2022 05:53:23 GMT
Content-Type: application/javascript
Content-Length: 761
Connection: keep-alive
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
ETag: "5ebab1f0-2f9"
Accept-Ranges: bytes
d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/bottom.png
200 OK 3.4 kB URL HTTP/1.1 d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/bottom.png
IP
File type PNG image data, 459 x 156, 8-bit colormap, non-interlaced\012- data
Hash 8f00618489c9024bc741a161effb2e32
7e3146cfd561806169d6201b01ccbe37a256dfc5
ee13da8e8d4bd49a7fdd595de382a3c7dbfef6f8555aeca5292c8c80da75f355
GET /themes/cleanPeppermintBlack_657d9013/img/bottom.png HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww38.777seo.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 3359
Connection: keep-alive
Server: nginx
Date: Tue, 27 Dec 2022 18:04:31 GMT
Last-Modified: Thu, 23 Jun 2022 10:44:43 GMT
Accept-Ranges: bytes
ETag: "62b4441b-d1f"
X-Cache: Hit from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: iSZlUGYlh5vqEBpuCyLIQEWmFSU9UV3iHO6rorcLktPGm_7R1yqaYQ==
Age: 42532
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 563a71326245b9544f7051f983f4d897
7293247391520689fb7aeac14ee6c984d82d7de3
17c444592282f17c3eb8a0d8e10ae9b3be096d621bdf2bbd8e12faf13ff4999c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "17C444592282F17C3EB8A0D8E10AE9B3BE096D621BDF2BBD8E12FAF13FF4999C"
Last-Modified: Tue, 27 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9341
Expires: Wed, 28 Dec 2022 08:29:05 GMT
Date: Wed, 28 Dec 2022 05:53:24 GMT
Connection: keep-alive
www.hugedomains.com/domain_profile.cfm?d=ad-u.com
200 OK 9.1 kB URL HTTP/2 www.hugedomains.com/domain_profile.cfm?d=ad-u.com
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1474), with CRLF, LF line terminators
Hash c0630e45faf325aeb21a02ad5ca471b1
4b3de0a7ad28dd07bcc0eac6bfe75fa1f638ec16
fc221000240b75d1b40a4489a6654e4d5f2931e8853bd782c4f8444561f5cc8c
GET /domain_profile.cfm?d=ad-u.com HTTP/1.1
Host: www.hugedomains.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://kimkardashian-ring.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Dec 2022 05:53:22 GMT
content-type: text/html; charset=utf-8
cache-control: private
vary: Accept-Encoding
set-cookie: site_version_phase=108; expires=Sat, 23-Dec-2023 05:53:22 GMT; path=/
site_version=HDv3; expires=Sat, 23-Dec-2023 05:53:22 GMT; path=/
x-powered-by: ASP.NET
lb: TclPrdLbHd1
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4sekYIJXeMxgJFqKxpJ5kTYNSKZUgFmAb9dNTitHgw01%2FxMWgASGfGMEFcR66CNu4Bwft5wpmr3G3Y3JEN08nIwZ2AGXVyRpzVlOq%2BOKDnW8p7HsG3dfFV08R6P6cY81%2BHtY2Xc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78080904bb69b511-OSL
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 563a71326245b9544f7051f983f4d897
7293247391520689fb7aeac14ee6c984d82d7de3
17c444592282f17c3eb8a0d8e10ae9b3be096d621bdf2bbd8e12faf13ff4999c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "17C444592282F17C3EB8A0D8E10AE9B3BE096D621BDF2BBD8E12FAF13FF4999C"
Last-Modified: Tue, 27 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9341
Expires: Wed, 28 Dec 2022 08:29:05 GMT
Date: Wed, 28 Dec 2022 05:53:24 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 563a71326245b9544f7051f983f4d897
7293247391520689fb7aeac14ee6c984d82d7de3
17c444592282f17c3eb8a0d8e10ae9b3be096d621bdf2bbd8e12faf13ff4999c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "17C444592282F17C3EB8A0D8E10AE9B3BE096D621BDF2BBD8E12FAF13FF4999C"
Last-Modified: Tue, 27 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9341
Expires: Wed, 28 Dec 2022 08:29:05 GMT
Date: Wed, 28 Dec 2022 05:53:24 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 563a71326245b9544f7051f983f4d897
7293247391520689fb7aeac14ee6c984d82d7de3
17c444592282f17c3eb8a0d8e10ae9b3be096d621bdf2bbd8e12faf13ff4999c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "17C444592282F17C3EB8A0D8E10AE9B3BE096D621BDF2BBD8E12FAF13FF4999C"
Last-Modified: Tue, 27 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9341
Expires: Wed, 28 Dec 2022 08:29:05 GMT
Date: Wed, 28 Dec 2022 05:53:24 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7efeb4a1-9d83-4fe3-bd8d-999279ed4dcd.jpeg
200 OK 4.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7efeb4a1-9d83-4fe3-bd8d-999279ed4dcd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ae5da67479fa2f3afda50a7566b5e46e
d71de1881ea09f0aed36703f95635cc0cd552429
a67eca901c4f8436074f48a594cd9942742430c8776745152baf3f858a9c3407
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7efeb4a1-9d83-4fe3-bd8d-999279ed4dcd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4443
x-amzn-requestid: 6ca832c3-dcdc-4fc3-bb60-6868d09f824b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d0y_zFEOoAMF9KQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ab6531-0a9be43a500ea8b41200cc43;Sampled=0
x-amzn-remapped-date: Tue, 27 Dec 2022 21:35:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Qy-hxddkp68OmfI4OKNvNu8mRO8re9SQNxsxuPcPyP7-tqIEdl7pug==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Dec 2022 21:42:19 GMT
age: 29465
etag: "d71de1881ea09f0aed36703f95635cc0cd552429"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac8e7926-34e8-4a65-ba5a-894c252c5826.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac8e7926-34e8-4a65-ba5a-894c252c5826.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b970ffab86fbe4a36726473524096ed1
92bc9a2cc454608eae4e310456f2ec180d4ccdca
9d9377466c1d69d25cbde0092dbebb8579ba3f172a001e3068690c7d7efc779c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac8e7926-34e8-4a65-ba5a-894c252c5826.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9103
x-amzn-requestid: d35b52dd-fc72-47ca-8232-00e48cd6d209
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d0z_EEruIAMFlQA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ab66c6-574a052f67683ba238966de5;Sampled=0
x-amzn-remapped-date: Tue, 27 Dec 2022 21:42:30 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ohxADRAP902PofikgbhHb6N0yLainQlafqatm4eBQ1u5DHGr1r15Fg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Dec 2022 21:42:30 GMT
etag: "92bc9a2cc454608eae4e310456f2ec180d4ccdca"
content-type: image/jpeg
age: 29454
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F346e7d95-abf9-4783-baa6-85137bb9cc29.jpeg
200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F346e7d95-abf9-4783-baa6-85137bb9cc29.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8ab36b0d168174ef2d960be9810fdb2d
7c8a7415cab3ef88b5d1204af214a687b1676dda
a1d842fd02273603db0090d34c317d7a3ce3e5f00f29271d45fc4ed6d09ee21e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F346e7d95-abf9-4783-baa6-85137bb9cc29.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7817
x-amzn-requestid: 21a68509-6fec-48b3-8bce-fb2ebfab3289
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d0yuCEVwIAMFUrQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ab64c0-5e23ceec731631d93e01e2c8;Sampled=0
x-amzn-remapped-date: Tue, 27 Dec 2022 21:33:52 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 1F1os87usGl0yMWsHxFZsVnrbmjJKydPf4ZXL4xsXjHau3fAS9Nf1Q==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Dec 2022 21:44:42 GMT
age: 29322
etag: "7c8a7415cab3ef88b5d1204af214a687b1676dda"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F253147ed-dcee-41da-a58c-55d53457a842.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F253147ed-dcee-41da-a58c-55d53457a842.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 70d7cfb90c78f9b238295103b092aa8c
69816b18c05ae710964cc2208f7eb87551f61786
85b651431437dbbba0a1b63f2c44fe07267f0ea8a71aaf77ab2b06d75470fc6a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F253147ed-dcee-41da-a58c-55d53457a842.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9589
x-amzn-requestid: 3fc23f08-db79-4d18-a518-50969103d1a3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d0ys7HyxIAMFeHQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ab64b8-6f12d8b74ee6b06d2a515ccc;Sampled=0
x-amzn-remapped-date: Tue, 27 Dec 2022 21:33:44 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: K6F8WXsXNIzutG56MlJOTPbwKhe35CFvHM-b5n3bSO0vCabUhKMtGg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Dec 2022 21:51:05 GMT
age: 28939
etag: "69816b18c05ae710964cc2208f7eb87551f61786"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d43b473-21c7-4775-9398-1bdecb4d7d28.jpeg
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d43b473-21c7-4775-9398-1bdecb4d7d28.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b373925ce249ca67e6984c436f5cd2b8
ddbc25025b933587990f8e9c32e91c9773256840
7d3c992b715283efeba9bee2e5c08042267017e76074ca6aad870e1dd45b4564
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d43b473-21c7-4775-9398-1bdecb4d7d28.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9007
x-amzn-requestid: 15b3b2e5-d493-4b54-aab4-7374bf892e83
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: drrFbESxIAMFikw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a7beef-37f4ab8e7738b186705bb1db;Sampled=0
x-amzn-remapped-date: Sun, 25 Dec 2022 03:09:35 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Swp663gmExgpgDT8bZUFNOpLEJHZDQWrEeasO7jgP5GClXzyJUTWgw==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Dec 2022 03:27:43 GMT
age: 8741
etag: "ddbc25025b933587990f8e9c32e91c9773256840"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2be386a4-d784-4e1f-8438-ac7fa15c7807.webp
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2be386a4-d784-4e1f-8438-ac7fa15c7807.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5854187fd3f867d811e9aab339f2a074
faf594f1418adb7bcec9391365b39efbcb2e41bf
ee67d43a9ba676a76fdc35db6f960d211ad8bcb288e5007ccc0c0d6e096f2f9a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2be386a4-d784-4e1f-8438-ac7fa15c7807.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7677
x-amzn-requestid: 5769904d-11e8-4ea1-bd47-75817ba0f808
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d0ytDHZyIAMFe-A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ab64b9-1abcb3673547ae3d0dc23114;Sampled=0
x-amzn-remapped-date: Tue, 27 Dec 2022 21:33:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FS5Ht51zGmyURrjw7ashn2Nna7y_8BXQRtZslz54fRrDOfMwjc1AfQ==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Dec 2022 21:42:19 GMT
age: 29465
etag: "faf594f1418adb7bcec9391365b39efbcb2e41bf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0ae0707aeabde36523941c20a68b5254
f882332bd8b3c0147af8ca8788be4a290d155766
537eefee073333371ff318be540498d3923603b79e282d6dd706cea5670caa8c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 05:53:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0ae0707aeabde36523941c20a68b5254
f882332bd8b3c0147af8ca8788be4a290d155766
537eefee073333371ff318be540498d3923603b79e282d6dd706cea5670caa8c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 05:53:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0ae0707aeabde36523941c20a68b5254
f882332bd8b3c0147af8ca8788be4a290d155766
537eefee073333371ff318be540498d3923603b79e282d6dd706cea5670caa8c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 05:53:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.blogger.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Wed, 28 Dec 2022 05:53:29 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+350; expires=Fri, 27-Dec-2024 05:53:29 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Wed, 28 Dec 2022 05:53:29 GMT
cache-control: private
X-Firefox-Spdy: h2
ww38.777seo.com/seo.php?username=billymoon&subid1=20221228-1653-233b-9e9b-94064a11547e&_xafvr=ZDUzNWQzZTA2MWQ3MjRlOTM4NjM4OTg5NDA3NTdkNzM0N2FjZWQ2OCw2M2FiZDlkM2FjNWU1
200 OK 2.5 kB URL HTTP/1.1 ww38.777seo.com/seo.php?username=billymoon&subid1=20221228-1653-233b-9e9b-94064a11547e&_xafvr=ZDUzNWQzZTA2MWQ3MjRlOTM4NjM4OTg5NDA3NTdkNzM0N2FjZWQ2OCw2M2FiZDlkM2FjNWU1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash e37d9a287fc99cd74b6e92e59d91bd76
0d1c2fcf8bd811445fec10eeab0730e66582c8e2
175440948751cb48dda722caca0b3e262ad56d0edc1829f78ed2651ab4e6d67a
GET /seo.php?username=billymoon&subid1=20221228-1653-233b-9e9b-94064a11547e&_xafvr=ZDUzNWQzZTA2MWQ3MjRlOTM4NjM4OTg5NDA3NTdkNzM0N2FjZWQ2OCw2M2FiZDlkM2FjNWU1 HTTP/1.1
Host: ww38.777seo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww38.777seo.com/seo.php?username=billymoon&subid1=20221228-1653-233b-9e9b-94064a11547e
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 28 Dec 2022 05:53:29 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Redirect: zeropark_yahoo
X-Template: tpl_CleanPeppermintBlack_twoclick
X-Language: norwegian
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Content-Encoding: gzip
c.parkingcrew.net/scripts/sale_form.js
200 OK 761 B URL HTTP/1.1 c.parkingcrew.net/scripts/sale_form.js
IP
Hash 64f809e06446647e192fce8d1ec34e09
5b7ced07da42e205067afa88615317a277a4a82c
f52cbd664986ad7ed6e71c448e2d31d1a16463e4d9b7bca0c6be278649ccc4f3
GET /scripts/sale_form.js HTTP/1.1
Host: c.parkingcrew.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww38.777seo.com/
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 28 Dec 2022 05:53:29 GMT
Content-Type: application/javascript
Content-Length: 761
Connection: keep-alive
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
ETag: "5ebab1f0-2f9"
Accept-Ranges: bytes
ww38.777seo.com/favicon.ico
200 OK 0 B URL HTTP/1.1 ww38.777seo.com/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: ww38.777seo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww38.777seo.com/seo.php?username=billymoon&subid1=20221228-1653-233b-9e9b-94064a11547e&_xafvr=ZDUzNWQzZTA2MWQ3MjRlOTM4NjM4OTg5NDA3NTdkNzM0N2FjZWQ2OCw2M2FiZDlkM2FjNWU1
HTTP/1.1 200 OK
Date: Wed, 28 Dec 2022 05:53:29 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
Server: nginx
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
ETag: "5ebab1f0-0"
Accept-Ranges: bytes
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 56cd75c1dd73685b19b23e7716fce599
11ccb30f6afddcabe69fc02e95478fa2d75b2210
785709ddbad7677ed6ece18430b8abdb0e592ff056f8cab48b94d1babe675963
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=152360
Date: Wed, 28 Dec 2022 05:53:30 GMT
Etag: "63ab7c08-1d7"
Expires: Fri, 30 Dec 2022 00:12:50 GMT
Last-Modified: Tue, 27 Dec 2022 23:13:12 GMT
Server: ECS (dcb/7EC9)
X-Cache: Miss from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: QBbVgjAnaajcp0qt7he8Xm5q-80YumMYL4IJKJISPsavmlBiFEtRKw==
Age: 3578
www.gamesradar.com/xbox/
200 OK 0 B IP
GET /xbox/ HTTP/1.1
Host: www.gamesradar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://kimkardashian-ring.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
expires: Wed, 28 Dec 2022 05:01:51 GMT
last-modified: Wed, 28 Dec 2022 04:46:51 GMT
xkey: gamesradar-platform-responsive, gamesradar-region-US, gamesradar-listing-xbox, gamesradar-listing-xbox-one, gamesradar-listing-xbox360, gamesradar-listing-xbox-360, gamesradar-version-592318, gamesradar-server-phpfpm-5b56bb58cd-gv2k2
content-encoding: gzip
x-ftr-cache-status: MISS
x-age: 20
cache-control: max-age=60,public
x-ftr-request-id: 05ad429a-8de1-49a6-877b-cb3523d3367a, 00000000000000000000FFFF9D344529:8DFA_00000000000000000000FFFFB9711932:01BB_63ABCA51_11A468D:C1584
x-ftr-balancer: vanilla-mochi-http-haproxy-prod-1
x-ftr-backend: varnish-leopard
x-ftr-backend-server: vanilla-leopard-http-cache-prod-01
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 28 Dec 2022 05:53:22 GMT
age: 3989
x-served-by: cache-lon420095-LON, cache-bma1637-BMA
x-cache-hits: 5, 1
x-timer: S1672206803.887537,VS0,VE1
vary: Accept-Encoding
x-resp-is-stale: true
x-country-code: GB
x-country-code-real: NO
strict-transport-security: max-age=300
set-cookie: FTR_Country_Code=NO; path=/; domain=www.gamesradar.com
FTR_Cache_Status=HIT-STALE-CLUSTER; path=/; domain=www.gamesradar.com
x-cache: HIT-STALE-CLUSTER
content-length: 83670
X-Firefox-Spdy: h2
auto-ping.com/iping.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD2AD0BC1854A7AD421A02FC8C1
404 Not Found 0 B URL HTTP/2 auto-ping.com/iping.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD2AD0BC1854A7AD421A02FC8C1
IP
ASN #24940 Hetzner Online GmbH
GET /iping.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD2AD0BC1854A7AD421A02FC8C1 HTTP/1.1
Host: auto-ping.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://kimkardashian-ring.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
server: nginx/1.18.0 (Ubuntu)
date: Wed, 28 Dec 2022 05:53:22 GMT
content-type: text/html
content-encoding: gzip
X-Firefox-Spdy: h2
static.desktopnexus.com/thumbnails/662825-bigthumbnail.jpg
404 Not Found 0 B URL HTTP/2 static.desktopnexus.com/thumbnails/662825-bigthumbnail.jpg
IP
GET /thumbnails/662825-bigthumbnail.jpg HTTP/1.1
Host: static.desktopnexus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://kimkardashian-ring.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
date: Wed, 28 Dec 2022 05:53:23 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sP1zDHl3l5mgobEhENj%2Bj8ivNPCFAUe4qBG0xhYjcbUtezysq5AQVgtY0umGEKFmRpAty5pRX%2BiF9mza7QHoQDIScfdAWZhd0ADMHW0D2AJ7mHh%2FtVV2M8C8rT6hREhDuzwMwiUKEfSl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78080905fe0a0b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
comicbookmovie.com/images/users/uploads/12160/ray%2520park.jpg
404 Not Found 0 B URL HTTP/2 comicbookmovie.com/images/users/uploads/12160/ray%2520park.jpg
IP
GET /images/users/uploads/12160/ray%2520park.jpg HTTP/1.1
Host: comicbookmovie.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://kimkardashian-ring.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
date: Wed, 28 Dec 2022 05:53:23 GMT
content-type: text/html; charset=utf-8
cache-control: public, max-age=2678400
x-aspnet-version: 4.0.30319
access-control-allow-origin: *
cf-cache-status: MISS
expires: Sat, 28 Jan 2023 05:53:23 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 780809077f84b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
auto-ping.com/iping.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD2AD0BC1854A7AD421A02FC8C1
404 Not Found 0 B URL HTTP/2 auto-ping.com/iping.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD2AD0BC1854A7AD421A02FC8C1
IP
ASN #24940 Hetzner Online GmbH
GET /iping.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD2AD0BC1854A7AD421A02FC8C1 HTTP/1.1
Host: auto-ping.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://kimkardashian-ring.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
server: nginx/1.18.0 (Ubuntu)
date: Wed, 28 Dec 2022 05:53:23 GMT
content-type: text/html
content-encoding: gzip
X-Firefox-Spdy: h2
142.250.74.161
185.113.25.34
104.21.2.106
3.64.163.50
103.224.182.251
23.36.76.226
129.232.136.210
78.141.222.51