GET tiny-spot-news.blogspot.com/?m=0
142.250.74.161200 OK 7.6 kB URL User Request GET tiny-spot-news.blogspot.com/?m=0
IP 142.250.74.161:443
Certificate IssuerGoogle Trust Services
Subjectmisc-sni.blogspot.com
Fingerprint62:35:2C:75:A9:F8:BC:A5:9C:C4:96:ED:C9:6D:FC:CC:EC:8C:C6:08
ValidityMon, 02 Jun 2025 08:36:18 GMT - Mon, 25 Aug 2025 08:36:17 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (4056)
Hash cf9fa96e962f044518e3d70c29a305f7
c7cc1df6220c4979a579d632e906ed379676039e
5a945939402a3879d72afa7615ef9059b60b1a2f5e79a477a978e912b4e5834d
GET /?m=0 HTTP/1.1
Host: tiny-spot-news.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Sat, 21 Jun 2025 19:31:40 GMT
date: Sat, 21 Jun 2025 19:31:40 GMT
cache-control: private, max-age=0
last-modified: Thu, 19 Jun 2025 09:41:31 GMT
etag: W/"a55cecac02b39a7f9f0c34d501342e4a94d215833f57baf09357776fa8790954"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 2747
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET tiny-spot-news.blogspot.com/js/cookienotice.js
142.250.74.161200 OK 6.5 kB URL GET tiny-spot-news.blogspot.com/js/cookienotice.js
IP 142.250.74.161:443
Requested by https://tiny-spot-news.blogspot.com/?m=0
Certificate IssuerGoogle Trust Services
Subjectmisc-sni.blogspot.com
Fingerprint62:35:2C:75:A9:F8:BC:A5:9C:C4:96:ED:C9:6D:FC:CC:EC:8C:C6:08
ValidityMon, 02 Jun 2025 08:36:18 GMT - Mon, 25 Aug 2025 08:36:17 GMT
File type JavaScript source, ASCII text
Hash a705132a2174f88e196ec3610d68faa8
3bad57a48d973a678fec600d45933010f6edc659
068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
GET /js/cookienotice.js HTTP/1.1
Host: tiny-spot-news.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tiny-spot-news.blogspot.com/?m=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 19 Jun 2025 14:25:26 GMT
expires: Thu, 26 Jun 2025 14:25:26 GMT
cache-control: public, max-age=604800
last-modified: Wed, 18 Jun 2025 17:02:53 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 191174
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET www.blogger.com/static/v1/widgets/2726972568-widgets.js
172.217.21.169200 OK 147 kB URL GET www.blogger.com/static/v1/widgets/2726972568-widgets.js
IP 172.217.21.169:443
Requested by https://tiny-spot-news.blogspot.com/?m=0
Certificate IssuerGoogle Trust Services
Subject*.blogger.com
FingerprintF4:DF:AB:7A:31:6C:14:BE:ED:45:6E:74:34:C6:D6:21:90:CB:1F:F8
ValidityMon, 02 Jun 2025 08:35:16 GMT - Mon, 25 Aug 2025 08:35:15 GMT
File type JavaScript source, ASCII text, with very long lines (4176)
Size 147 kB (147114 bytes)
Hash 12ee703a0fe01ce873d3281ea5339c7b
0249b38bb5f3b771682b7c4803fb8f88909ab151
10c3cb4b2354f2097b3eb59c8c5648e429f1b176681e98adcaa009775cdcd24a
GET /static/v1/widgets/2726972568-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tiny-spot-news.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 51945
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 20 Jun 2025 01:58:12 GMT
expires: Sat, 20 Jun 2026 01:58:12 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 20 Jun 2025 00:52:46 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 149608
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET tiny-spot-news.blogspot.com/favicon.ico
0.0.0.0 0 B URL GET tiny-spot-news.blogspot.com/favicon.ico
IP 0.0.0.0:0
Requested by https://tiny-spot-news.blogspot.com/?m=0
Certificate IssuerGoogle Trust Services
Subjectmisc-sni.blogspot.com
Fingerprint62:35:2C:75:A9:F8:BC:A5:9C:C4:96:ED:C9:6D:FC:CC:EC:8C:C6:08
ValidityMon, 02 Jun 2025 08:36:18 GMT - Mon, 25 Aug 2025 08:36:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: tiny-spot-news.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tiny-spot-news.blogspot.com/?m=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
104.21.64.1301 Moved Permanently 41 kB IP 104.21.64.1:443
Certificate IssuerGoogle Trust Services
Subjectln.run
FingerprintBE:53:D9:D1:85:BB:49:FA:FC:05:C0:05:F3:70:64:B3:A0:D8:4A:42
ValiditySun, 01 Jun 2025 18:15:18 GMT - Sat, 30 Aug 2025 19:13:36 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pLniV HTTP/1.1
Host: ln.run
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 301 Moved Permanently
date: Sat, 21 Jun 2025 19:31:42 GMT
content-length: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W2GR%2FWMFIyoNHDJgQGqM80gEGmOzgL20LuQdC0jMnhGzgOZGQ7vQMDBKbEZg3tvKu6JH2DnTINevvPXnaT7aMDWWZd9OccPF3lu01GbovHpZNKdGEBp7lT4%3D"}],"group":"cf-nel","max_age":604800}
set-cookie: 6853db395e825a03481cfa09=""; Version=1; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/
location: https://obqj2.com/4/8918862
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
content-language: en
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: DYNAMIC
cf-ray: 9535ed759f4356ae-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server-timing: cfL4;desc="?proto=QUIC&rtt=2471&min_rtt=654&rtt_var=1936&sent=87&recv=114&lost=0&retrans=0&sent_bytes=7773&recv_bytes=6716&delivery_rate=642214&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=15466&unsent_bytes=0&cid=911c82c86b944ea6&ts=2393&inflight_dur=29&x=44"
GET obqj2.com/favicon.ico
104.18.41.59204 No Content 0 B IP 104.18.41.59:443
Requested by https://obqj2.com/4/8918862
Certificate IssuerGoogle Trust Services
Subjectobqj2.com
Fingerprint3C:F3:53:4C:93:3D:0B:D7:17:34:6A:C4:B8:6E:74:0C:F3:4D:02:9E
ValiditySat, 21 Jun 2025 12:20:52 GMT - Fri, 19 Sep 2025 13:20:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: obqj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://obqj2.com/4/8918862
Cookie: OAID=0081efba70554523e75c4a36e4c9dc37; oaidts=1750534302
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 204 No Content
date: Sat, 21 Jun 2025 19:31:42 GMT
expires: Tue, 19 Jun 2035 19:31:42 GMT
cache-control: public, max-age=315360000
pragma: public
cf-cache-status: HIT
age: 1516345
priority: u=6,i=?0
vary: Accept-Encoding
server: cloudflare
cf-ray: 9535ed80781db517-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
104.21.64.1301 Moved Permanently 7.6 kB IP 104.21.64.1:443
Certificate IssuerGoogle Trust Services
Subjectln.run
FingerprintBE:53:D9:D1:85:BB:49:FA:FC:05:C0:05:F3:70:64:B3:A0:D8:4A:42
ValiditySun, 01 Jun 2025 18:15:18 GMT - Sat, 30 Aug 2025 19:13:36 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /eK1yD HTTP/1.1
Host: ln.run
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Sat, 21 Jun 2025 19:31:40 GMT
content-length: 0
location: https://tiny-spot-news.blogspot.com/?m=0
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
content-language: en
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Dc8HHXUad6oy7G3hhA7PAc%2B8cLiZeXncjCPu5fdPQuQYO0bMdIvOJbNlys8v98EhbljVcqlT9yGQfwZCyfVhCtmsqbY%3D"}]}
set-cookie: 68570863d6c58b34b653f0e7=""; Path=/; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT
cf-ray: 9535ed6cbf17b4f7-OSL
X-Firefox-Spdy: h2
GET www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
172.217.21.169200 OK 31 kB URL GET www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
IP 172.217.21.169:443
Requested by https://tiny-spot-news.blogspot.com/?m=0
Certificate IssuerGoogle Trust Services
Subject*.blogger.com
FingerprintF4:DF:AB:7A:31:6C:14:BE:ED:45:6E:74:34:C6:D6:21:90:CB:1F:F8
ValidityMon, 02 Jun 2025 08:35:16 GMT - Mon, 25 Aug 2025 08:35:15 GMT
File type ASCII text, with very long lines (30596)
Hash e3f09df1bc175f411d1ec3dfb5afb17b
3994ec3efe3c2447e7bbfdd97bb7e190dd1658f9
1a2eca9e492e3a21e02dd77ad44d7af45c4091d35ede79e948b7a3f23e5b3617
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tiny-spot-news.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 19 Jun 2025 10:48:43 GMT
expires: Fri, 19 Jun 2026 10:48:43 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 18 Jun 2025 20:07:06 GMT
content-type: text/css
vary: Accept-Encoding
age: 204177
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
104.18.41.59200 OK 41 kB IP 104.18.41.59:443
Certificate IssuerGoogle Trust Services
Subjectobqj2.com
Fingerprint3C:F3:53:4C:93:3D:0B:D7:17:34:6A:C4:B8:6E:74:0C:F3:4D:02:9E
ValiditySat, 21 Jun 2025 12:20:52 GMT - Fri, 19 Sep 2025 13:20:44 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (31138)
Hash f381360b8ac72a1e44e8a04217148d29
ac74b39cbd04e9ee74c5c48fcf9f0300f351b2dd
ff1b85a8d164d70eeda8011c44f1e7e43218a558cdbf934c4675b956eb3db8d7
GET /4/8918862 HTTP/1.1
Host: obqj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Jun 2025 19:31:42 GMT
content-type: text/html; charset=utf8
x-trace-id: 82226ab1ffc9c1269b8bbd03dbe05328
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
timing-allow-origin: *, *
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=0081efba70554523e75c4a36e4c9dc37; expires=Sun, 21 Jun 2026 19:31:42 GMT; path=/; secure; SameSite=None
oaidts=1750534302; expires=Sun, 21 Jun 2026 19:31:42 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: gzip
vary: accept-encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 9535ed7e7f12b4ee-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET my.rtmark.net/img.gif?f=merge&userId=0081efba70554523e75c4a36e4c9dc37&z=8918862&p_rid=98b71d93-7772-43dd-9b9f-2d5d0693471a&p_src=sf
104.18.41.22200 OK 43 B URL GET my.rtmark.net/img.gif?f=merge&userId=0081efba70554523e75c4a36e4c9dc37&z=8918862&p_rid=98b71d93-7772-43dd-9b9f-2d5d0693471a&p_src=sf
IP 104.18.41.22:443
Requested by https://obqj2.com/4/8918862
Certificate IssuerGoogle Trust Services
Subjectmy.rtmark.net
Fingerprint61:93:FB:BF:25:C3:CE:7B:CB:69:5D:87:04:AA:ED:1B:35:8D:44:82
ValidityFri, 02 May 2025 11:10:51 GMT - Thu, 31 Jul 2025 12:10:47 GMT
File type GIF image data, version 89a, 1 x 1
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=merge&userId=0081efba70554523e75c4a36e4c9dc37&z=8918862&p_rid=98b71d93-7772-43dd-9b9f-2d5d0693471a&p_src=sf HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://obqj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Jun 2025 19:31:42 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=0081efba70554523e75c4a36e4c9dc37; expires=Sun, 21 Jun 2026 19:31:42 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 9535ed7fdf6fb527-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET obqj2.com/sftouch?userId=0081efba70554523e75c4a36e4c9dc37&z=8918862&p_rid=98b71d93-7772-43dd-9b9f-2d5d0693471a&p_src=sf&branchId=0&rb=nLqTceIGACPRFQbIR4hiqgggwLluyVPauiPehKXzOxQD5xw5xdI-AyNfyt7eVRlVIONARRYhlZV61xKJ1bPivIUuLUJAMHXQ5v73lUQcOP8qMn_RBCzTfuhtQdRcknjUar7Vtu3yCL_KU-rbcDpyooprDJ5YMnFv2RrStdePk40PjNt72drvJZ2xLLxWDTSJGXzdWhOnEQIhoVob6rXA9xymvph2dNlhzay9vRGvAq5m9r6XUeBYZa9SxkVkgyyPk9zlb9lJuWe22fKIkBjnAAWbbqU=&clksf=1&w_img=1
104.18.41.59200 OK 43 B URL GET obqj2.com/sftouch?userId=0081efba70554523e75c4a36e4c9dc37&z=8918862&p_rid=98b71d93-7772-43dd-9b9f-2d5d0693471a&p_src=sf&branchId=0&rb=nLqTceIGACPRFQbIR4hiqgggwLluyVPauiPehKXzOxQD5xw5xdI-AyNfyt7eVRlVIONARRYhlZV61xKJ1bPivIUuLUJAMHXQ5v73lUQcOP8qMn_RBCzTfuhtQdRcknjUar7Vtu3yCL_KU-rbcDpyooprDJ5YMnFv2RrStdePk40PjNt72drvJZ2xLLxWDTSJGXzdWhOnEQIhoVob6rXA9xymvph2dNlhzay9vRGvAq5m9r6XUeBYZa9SxkVkgyyPk9zlb9lJuWe22fKIkBjnAAWbbqU=&clksf=1&w_img=1
IP 104.18.41.59:443
Requested by https://obqj2.com/4/8918862
Certificate IssuerGoogle Trust Services
Subjectobqj2.com
Fingerprint3C:F3:53:4C:93:3D:0B:D7:17:34:6A:C4:B8:6E:74:0C:F3:4D:02:9E
ValiditySat, 21 Jun 2025 12:20:52 GMT - Fri, 19 Sep 2025 13:20:44 GMT
File type GIF image data, version 89a, 1 x 1
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /sftouch?userId=0081efba70554523e75c4a36e4c9dc37&z=8918862&p_rid=98b71d93-7772-43dd-9b9f-2d5d0693471a&p_src=sf&branchId=0&rb=nLqTceIGACPRFQbIR4hiqgggwLluyVPauiPehKXzOxQD5xw5xdI-AyNfyt7eVRlVIONARRYhlZV61xKJ1bPivIUuLUJAMHXQ5v73lUQcOP8qMn_RBCzTfuhtQdRcknjUar7Vtu3yCL_KU-rbcDpyooprDJ5YMnFv2RrStdePk40PjNt72drvJZ2xLLxWDTSJGXzdWhOnEQIhoVob6rXA9xymvph2dNlhzay9vRGvAq5m9r6XUeBYZa9SxkVkgyyPk9zlb9lJuWe22fKIkBjnAAWbbqU=&clksf=1&w_img=1 HTTP/1.1
Host: obqj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://obqj2.com/4/8918862
Cookie: OAID=0081efba70554523e75c4a36e4c9dc37; oaidts=1750534302
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 21 Jun 2025 19:31:42 GMT
content-type: image/gif
content-length: 43
x-trace-id: bc330d23b177a6e6aa75d5867b5b2ddd
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
timing-allow-origin: *, *
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
priority: u=4,i=?0
server: cloudflare
cf-ray: 9535ed7fff70b517-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
POST obqj2.com/qlog/add?userId=0081efba70554523e75c4a36e4c9dc37&p_rid=98b71d93-7772-43dd-9b9f-2d5d0693471a&z=8918862
104.18.41.59200 OK 0 B URL POST obqj2.com/qlog/add?userId=0081efba70554523e75c4a36e4c9dc37&p_rid=98b71d93-7772-43dd-9b9f-2d5d0693471a&z=8918862
IP 104.18.41.59:443
Requested by https://obqj2.com/4/8918862
Certificate IssuerGoogle Trust Services
Subjectobqj2.com
Fingerprint3C:F3:53:4C:93:3D:0B:D7:17:34:6A:C4:B8:6E:74:0C:F3:4D:02:9E
ValiditySat, 21 Jun 2025 12:20:52 GMT - Fri, 19 Sep 2025 13:20:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /qlog/add?userId=0081efba70554523e75c4a36e4c9dc37&p_rid=98b71d93-7772-43dd-9b9f-2d5d0693471a&z=8918862 HTTP/1.1
Host: obqj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2554
Origin: https://obqj2.com
DNT: 1
Connection: keep-alive
Referer: https://obqj2.com/4/8918862
Cookie: OAID=0081efba70554523e75c4a36e4c9dc37; oaidts=1750534302
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/3 200 OK
date: Sat, 21 Jun 2025 19:31:43 GMT
content-length: 0
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
cf-cache-status: DYNAMIC
priority: u=6,i=?0
server: cloudflare
cf-ray: 9535ed829ae5b517-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri