madamezot.blogspot.ru/search/label/sissy%20clits
142.250.74.161
302 Moved Temporarily
196
URL
HTTP/1.1
madamezot.blogspot.ru/search/label/sissy%20clits
IP
142.250.74.161:0
Magic
HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash
9b40bfeb0c8d66fcdcf8b9afd4dbd97f
980c0ca45144dc7d5e6b964a4cf888a52e49b4d6
2d9c3ac6a2e600ceeeff18c40ef975984971c35da6a865d1563df0c3a36ddf0b
Analyzer
Verdict
Alert
fortinet
Malware
GET /search/label/sissy%20clits HTTP/1.1
Host: madamezot.blogspot.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Location: http://madamezot.blogspot.com/search/label/sissy%20clits
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Thu, 15 Dec 2022 12:53:43 GMT
Expires: Thu, 15 Dec 2022 12:53:43 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 196
Server: GSE
r3.o.lencr.org/
23.36.76.249
200 OK
503
IP
23.36.76.249:0
ASN
#20940 Akamai International B.V.
Hash
381442da2a14cb93770f4c8f6e19d35b
31c48467751e2450a63004c57eea0c7872023eaf
61b0985f47033bd7020ab3b8cdcbc6c17be6ab9b6feba69e006088b78e21c0f0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "61B0985F47033BD7020AB3B8CDCBC6C17BE6AB9B6FEBA69E006088B78E21C0F0"
Last-Modified: Thu, 15 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2698
Expires: Thu, 15 Dec 2022 13:38:41 GMT
Date: Thu, 15 Dec 2022 12:53:43 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.249
200 OK
503
IP
23.36.76.249:0
ASN
#20940 Akamai International B.V.
Hash
ae86164fd9297dfdc05d67d69284d70e
5e5f27e3fd492f715baa6820f05c0fafde4040b3
be20f6ae6a51d20611cb4d350b52a5d0a339af6722fe9b2482ef58826c1e9de0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BE20F6AE6A51D20611CB4D350B52A5D0A339AF6722FE9B2482EF58826C1E9DE0"
Last-Modified: Thu, 15 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17550
Expires: Thu, 15 Dec 2022 17:46:13 GMT
Date: Thu, 15 Dec 2022 12:53:43 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.249
200 OK
503
IP
23.36.76.249:0
ASN
#20940 Akamai International B.V.
Hash
51bd0cc75ed746fd33c950eb12936b7e
4a1007ea6c6e4f5e8b4a7d1f85f7a3e329dc8f50
188d4a0d544f40048dc7476cb4f5e478f1eb49a8ef1d51699fb155d2ae258655
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "188D4A0D544F40048DC7476CB4F5E478F1EB49A8EF1D51699FB155D2AE258655"
Last-Modified: Tue, 13 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3809
Expires: Thu, 15 Dec 2022 13:57:12 GMT
Date: Thu, 15 Dec 2022 12:53:43 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150
200 OK
939
URL
HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
Magic
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash
14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Backoff, Content-Length, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 15 Dec 2022 12:08:59 GMT
content-type: application/json
age: 2684
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
34.160.144.191
200 OK
5348
URL
HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
34.160.144.191:0
Magic
PEM certificate\012- , ASCII text
Hash
53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: X17r1SJUId5S7wE019begFpw2aJdUQKHyCKg0AvVeea+23DRoNREDcLeEIZDce73JTcrgYK2fpI=
x-amz-request-id: N6YMK5MKS5PARJT0
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 15 Dec 2022 12:50:55 GMT
age: 168
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239
200 OK
12
URL
HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
Magic
JSON data\012- , ASCII text, with no line terminators
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 15 Dec 2022 12:53:43 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
madamezot.blogspot.com/search/label/sissy%20clits
142.250.74.161
200 OK
20179
URL
HTTP/1.1
madamezot.blogspot.com/search/label/sissy%20clits
IP
142.250.74.161:0
Magic
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1495)
Hash
e3ad499984c076b9673d956585a1dc4e
61a7dbbb877950e77362382d83d0bbfcec4c826d
0cd2f5584a4b5bddafb0861126dbfbde25c9b9c9086bf1f5ed947bdfefd55299
Analyzer
Verdict
Alert
fortinet
Malware
GET /search/label/sissy%20clits HTTP/1.1
Host: madamezot.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Thu, 15 Dec 2022 12:53:43 GMT
Date: Thu, 15 Dec 2022 12:53:43 GMT
Cache-Control: private, max-age=0
Last-Modified: Sun, 05 Dec 2021 08:01:48 GMT
ETag: W/"8b8b64ad454ef439f7e521a8d894b686c9431d2867773874ff57209b519039af"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 20179
Server: GSE
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150
200 OK
329
URL
HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
Magic
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Backoff, Content-Length, Pragma, Alert, Expires, Last-Modified, Retry-After, ETag, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 15 Dec 2022 12:08:00 GMT
age: 2743
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.6.2/jquery.min.js
142.250.74.42
200 OK
32245
URL
HTTP/1.1
ajax.googleapis.com/ajax/libs/jquery/1.6.2/jquery.min.js
IP
142.250.74.42:0
Magic
HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32764)
Hash
548260b20981c0be2d9dcf8d01c08c24
84230120f8f1bd559eca3fb2fec6acf6cffbf4e7
2f8a612a714e5c928525fdb193f8ec12f7965a6c0d63dd8e58ccae239358c8bb
GET /ajax/libs/jquery/1.6.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madamezot.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="hosted-libraries-pushers"
Report-To: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
Timing-Allow-Origin: *
Content-Length: 32245
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 09 Dec 2022 13:33:29 GMT
Expires: Sat, 09 Dec 2023 13:33:29 GMT
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Last-Modified: Tue, 03 Mar 2020 19:15:00 GMT
Content-Type: text/javascript; charset=UTF-8
Age: 516014
madamezot.blogspot.com/js/cookienotice.js
142.250.74.161
200 OK
2026
URL
HTTP/1.1
madamezot.blogspot.com/js/cookienotice.js
IP
142.250.74.161:0
Hash
c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
Analyzer
Verdict
Alert
fortinet
Malware
GET /js/cookienotice.js HTTP/1.1
Host: madamezot.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madamezot.blogspot.com/search/label/sissy%20clits
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
Date: Thu, 15 Dec 2022 12:53:43 GMT
Expires: Thu, 22 Dec 2022 12:53:43 GMT
Cache-Control: public, max-age=604800
Last-Modified: Thu, 15 Dec 2022 07:38:49 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
scripts.chitika.net/eminimalls/amm.js
143.204.55.12
301 Moved Permanently
167
URL
HTTP/1.1
scripts.chitika.net/eminimalls/amm.js
IP
143.204.55.12:0
Magic
HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash
f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /eminimalls/amm.js HTTP/1.1
Host: scripts.chitika.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madamezot.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Thu, 15 Dec 2022 12:53:43 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://scripts.chitika.net/eminimalls/amm.js
X-Cache: Redirect from cloudfront
Via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 0r4wBM3r7LAgXDscIItCev-AnlLAHnbmF1C7odZ7uu3JFjXHSEL0mQ==
ocsp.pki.goog/gts1c3
142.250.74.131
200 OK
472
IP
142.250.74.131:0
Hash
0ffd9494d7b15d0c02e09f86eb695397
0650b890aa6e1d7651089bfc3b298d5b8d88650d
ac0d60d80fcd6577aefe03b46683d3f087cbada34717a3e53ec31cfeb0ed11e7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 12:53:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131
200 OK
472
IP
142.250.74.131:0
Hash
3c76548b39e0166cbb47c6cb5c094f41
5edbfbfc0548e4690fa555a915f1fa4ae5510f81
0e77afa4732ee0a65e0b3b5ca3953ce7bb329502e9068cbb9697f22f1222ed96
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 12:53:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131
200 OK
472
IP
142.250.74.131:0
Hash
3c76548b39e0166cbb47c6cb5c094f41
5edbfbfc0548e4690fa555a915f1fa4ae5510f81
0e77afa4732ee0a65e0b3b5ca3953ce7bb329502e9068cbb9697f22f1222ed96
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 12:53:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css
216.58.207.233
200 OK
7776
URL
HTTP/2
www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css
IP
216.58.207.233:0
Magic
ASCII text, with very long lines (35959)
Hash
5aa2d3297bdc86bc81322aedecbb5e79
1c0a3c007e41726e167e79b70ddea76198650884
feae1fac625d0f30b5f10fa00b62df1a5600cd2178062c427e55f289b29cc630
GET /static/v1/widgets/2975350028-css_bundle_v2.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://madamezot.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 7776
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 09 Dec 2022 13:33:15 GMT
expires: Sat, 09 Dec 2023 13:33:15 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 08 Dec 2022 19:54:39 GMT
content-type: text/css
age: 516029
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
apis.google.com/js/platform.js
172.217.21.174
200 OK
20984
URL
HTTP/2
apis.google.com/js/platform.js
IP
172.217.21.174:0
Magic
ASCII text, with very long lines (1279)
Hash
7ac44ef24e267df17ff72f195b252806
62db12d9ce11a576ccd7fa3544d851c5fd42f3b7
aae7897e7b55999c1b3166309381d19ac488dced51e14071339d8b193a686a61
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://madamezot.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20984
date: Thu, 15 Dec 2022 12:53:44 GMT
expires: Thu, 15 Dec 2022 12:53:44 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "7446758f13887885"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29
200 OK
471
IP
93.184.220.29:0
Hash
b9f0adeb27a19629aeff6f34de67f3ad
3876d1b871d7da6d18de23c2edb301eb30728066
c5744a90c8f66629aa2331465a32afe0d430b36d16fd98bc821e370f1b24463c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 64
Cache-Control: max-age=159260
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 12:53:44 GMT
Etag: "639ae3b4-1d7"
Expires: Sat, 17 Dec 2022 09:08:04 GMT
Last-Modified: Thu, 15 Dec 2022 09:07:00 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
www.blogger.com/static/v1/widgets/2092647672-widgets.js
216.58.207.233
200 OK
56341
URL
HTTP/2
www.blogger.com/static/v1/widgets/2092647672-widgets.js
IP
216.58.207.233:0
Magic
ASCII text, with very long lines (2221)
Hash
689971018982703ab88ce528368b9190
be9697d57e5c19d36c52aacd8b04a6a159a2f3bd
cf8b513cfd596cffc3a7e456eccc198b8e409f5aaf624d5dbeecdd748dce0cef
GET /static/v1/widgets/2092647672-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://madamezot.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56341
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 Dec 2022 02:10:48 GMT
expires: Fri, 15 Dec 2023 02:10:48 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 10 Dec 2022 00:52:24 GMT
content-type: text/javascript
age: 38576
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.geaHZXF2-fw.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/cb=gapi.loaded_0?le=scs
172.217.21.174
200 OK
57794
URL
HTTP/2
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.geaHZXF2-fw.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/cb=gapi.loaded_0?le=scs
IP
172.217.21.174:0
Magic
ASCII text, with very long lines (580)
Hash
813b15c3004464f6bd39fd0773b04757
bd2218fe1e647f61132aad70d29cd91fd0416f26
446c6d83404c0fc4bc1ca6e1c0895f9400309185a534b3f4b6d500e668efeadf
GET /_/scs/abc-static/_/js/k=gapi.lb.en.geaHZXF2-fw.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://madamezot.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 57794
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Dec 2022 19:47:45 GMT
expires: Wed, 13 Dec 2023 19:47:45 GMT
cache-control: public, max-age=31536000
age: 147959
last-modified: Tue, 01 Nov 2022 15:24:55 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
142.250.74.162
200 OK
67
URL
HTTP/1.1
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP
142.250.74.162:0
Hash
9bbc3ca32ec951a484589ce0e6b4db73
753d6f6183b33b2dee5dde2208fca91c17f5bb13
b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madamezot.blogspot.com/
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 0
Date: Thu, 15 Dec 2022 10:55:29 GMT
Expires: Thu, 29 Dec 2022 10:55:29 GMT
Cache-Control: public, max-age=1209600
ETag: 13036835877489095579
Content-Type: text/javascript; charset=UTF-8
Age: 7095
ocsp.pki.goog/gts1c3
142.250.74.131
200 OK
472
IP
142.250.74.131:0
Hash
3c76548b39e0166cbb47c6cb5c094f41
5edbfbfc0548e4690fa555a915f1fa4ae5510f81
0e77afa4732ee0a65e0b3b5ca3953ce7bb329502e9068cbb9697f22f1222ed96
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 12:53:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131
200 OK
472
IP
142.250.74.131:0
Hash
500d7838b7582b456b8025ffe03ac9a8
ba64ec0d9ae36361848bc1be73a99e7c38575271
0da1844c4988d6497821f944b47dd19158be73f10deac19945ebdd9c18927485
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 12:53:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
4.bp.blogspot.com/-ESO1Yzey6nQ/UFIbtMmbNPI/AAAAAAAAM9k/LCOx_t9Anng/s640/cs89usedtumblr_m7wwlhpTKg1rz0458o1_500.jpeg
142.250.74.65
404 Not Found
832
URL
HTTP/1.1
4.bp.blogspot.com/-ESO1Yzey6nQ/UFIbtMmbNPI/AAAAAAAAM9k/LCOx_t9Anng/s640/cs89usedtumblr_m7wwlhpTKg1rz0458o1_500.jpeg
IP
142.250.74.65:0
Magic
PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash
596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
GET /-ESO1Yzey6nQ/UFIbtMmbNPI/AAAAAAAAM9k/LCOx_t9Anng/s640/cs89usedtumblr_m7wwlhpTKg1rz0458o1_500.jpeg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madamezot.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Thu, 15 Dec 2022 12:53:44 GMT
Server: fife
Content-Length: 832
X-XSS-Protection: 0
1.bp.blogspot.com/-7XWeNB4bEQI/ULIyAJs1zMI/AAAAAAAAPCE/qkvbtA7dP3I/s72-c/tumblr_m010w7SGcl1qjk9qao1_500.jpeg
142.250.74.65
404 Not Found
1742
URL
HTTP/1.1
1.bp.blogspot.com/-7XWeNB4bEQI/ULIyAJs1zMI/AAAAAAAAPCE/qkvbtA7dP3I/s72-c/tumblr_m010w7SGcl1qjk9qao1_500.jpeg
IP
142.250.74.65:0
Magic
PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash
58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-7XWeNB4bEQI/ULIyAJs1zMI/AAAAAAAAPCE/qkvbtA7dP3I/s72-c/tumblr_m010w7SGcl1qjk9qao1_500.jpeg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madamezot.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Thu, 15 Dec 2022 12:53:44 GMT
Server: fife
Content-Length: 1742
X-XSS-Protection: 0
3.bp.blogspot.com/-VJ5-s4S3adY/UKaIcX8pk6I/AAAAAAAAO5M/kmVj0j5J4So/s72-c/tumblr_m7ldrlZgn71rzaj8jo1_1280.jpeg
142.250.74.65
404 Not Found
1742
URL
HTTP/1.1
3.bp.blogspot.com/-VJ5-s4S3adY/UKaIcX8pk6I/AAAAAAAAO5M/kmVj0j5J4So/s72-c/tumblr_m7ldrlZgn71rzaj8jo1_1280.jpeg
IP
142.250.74.65:0
Magic
PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash
58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-VJ5-s4S3adY/UKaIcX8pk6I/AAAAAAAAO5M/kmVj0j5J4So/s72-c/tumblr_m7ldrlZgn71rzaj8jo1_1280.jpeg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madamezot.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Thu, 15 Dec 2022 12:53:44 GMT
Server: fife
Content-Length: 1742
X-XSS-Protection: 0
1.bp.blogspot.com/-HV9RhzVlljI/UKaHtlI_JII/AAAAAAAAO48/hk5N1E_lf0o/s72-c/tumblr_mcbicvyqHu1qj1azvo1_1280.jpeg
142.250.74.65
404 Not Found
1742
URL
HTTP/1.1
1.bp.blogspot.com/-HV9RhzVlljI/UKaHtlI_JII/AAAAAAAAO48/hk5N1E_lf0o/s72-c/tumblr_mcbicvyqHu1qj1azvo1_1280.jpeg
IP
142.250.74.65:0
Magic
PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash
58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-HV9RhzVlljI/UKaHtlI_JII/AAAAAAAAO48/hk5N1E_lf0o/s72-c/tumblr_mcbicvyqHu1qj1azvo1_1280.jpeg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madamezot.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Thu, 15 Dec 2022 12:53:44 GMT
Server: fife
Content-Length: 1742
X-XSS-Protection: 0
ocsp.sca1b.amazontrust.com/
143.204.42.156
200 OK
471
URL
HTTP/1.1
ocsp.sca1b.amazontrust.com/
IP
143.204.42.156:0
Hash
5e42933f6271124b34fc5518b9d1d7d1
1bd59e877cc2111daf86ae51bbf088922e73fb70
221c29d44966c7a1085036876d418e1ebac0cb61830c0728a8b84802bbba8f39
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=126157
Date: Thu, 15 Dec 2022 12:53:44 GMT
Etag: "639a5f6e-1d7"
Expires: Fri, 16 Dec 2022 23:56:21 GMT
Last-Modified: Wed, 14 Dec 2022 23:42:38 GMT
Server: ECS (dcb/7F5F)
X-Cache: Miss from cloudfront
Via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: iC0IlTvqIC726IXBA1EzDUQwgSTcTh1RUjrpP7qqQT96bfvWtWkttA==
Age: 823
scripts.chitika.net/eminimalls/amm.js
143.204.55.12
200 OK
0
URL
HTTP/2
scripts.chitika.net/eminimalls/amm.js
IP
143.204.55.12:0
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /eminimalls/amm.js HTTP/1.1
Host: scripts.chitika.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://madamezot.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 0
last-modified: Fri, 19 Apr 2019 16:37:52 GMT
server: AmazonS3
date: Thu, 15 Dec 2022 06:11:35 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: CEYipD7bcnUKNuY3Seo6x2N8GCtyKGPFWlEYRd8Oxe_LHPQK5TIHvQ==
age: 24909
X-Firefox-Spdy: h2
2.bp.blogspot.com/-qNLbEAeYzn8/UKE4cECAXqI/AAAAAAAAOoc/FhmIUqOhFmA/s72-c/img561defeb.jpeg
142.250.74.65
404 Not Found
1742
URL
HTTP/1.1
2.bp.blogspot.com/-qNLbEAeYzn8/UKE4cECAXqI/AAAAAAAAOoc/FhmIUqOhFmA/s72-c/img561defeb.jpeg
IP
142.250.74.65:0
Magic
PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash
58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-qNLbEAeYzn8/UKE4cECAXqI/AAAAAAAAOoc/FhmIUqOhFmA/s72-c/img561defeb.jpeg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madamezot.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Thu, 15 Dec 2022 12:53:44 GMT
Server: fife
Content-Length: 1742
X-XSS-Protection: 0
www.blogblog.com/1kt/simple/paging_dot.png
216.58.207.233
200 OK
99
URL
HTTP/1.1
www.blogblog.com/1kt/simple/paging_dot.png
IP
216.58.207.233:0
Magic
PNG image data, 20 x 18, 8-bit gray+alpha, non-interlaced\012- data
Hash
fcb8627989fa00c5341d05abce52eea9
215f7e27bcb50152a6d87444d3038746c87f1d18
1e3869a752d8d7cfad487a6f4e2def12daa851373a9cce97dcc4a96523501dba
GET /1kt/simple/paging_dot.png HTTP/1.1
Host: www.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madamezot.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 99
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 13 Dec 2022 14:19:36 GMT
Expires: Tue, 20 Dec 2022 14:19:36 GMT
Cache-Control: public, max-age=604800
Last-Modified: Mon, 12 Dec 2022 15:55:44 GMT
Content-Type: image/png
Age: 167648
2.bp.blogspot.com/-CILUwl1OFfE/UKQQpXuTP-I/AAAAAAAAOyI/vuyBFWwSNJE/s72-c/tumblr_mbd9ccvrMU1r2xi0xo1_1280.jpeg
142.250.74.65
404 Not Found
1742
URL
HTTP/1.1
2.bp.blogspot.com/-CILUwl1OFfE/UKQQpXuTP-I/AAAAAAAAOyI/vuyBFWwSNJE/s72-c/tumblr_mbd9ccvrMU1r2xi0xo1_1280.jpeg
IP
142.250.74.65:0
Magic
PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash
58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-CILUwl1OFfE/UKQQpXuTP-I/AAAAAAAAOyI/vuyBFWwSNJE/s72-c/tumblr_mbd9ccvrMU1r2xi0xo1_1280.jpeg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madamezot.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Thu, 15 Dec 2022 12:53:44 GMT
Server: fife
Content-Length: 1742
X-XSS-Protection: 0
2.bp.blogspot.com/-TiV-dnIP9OM/UK4tbm2HFeI/AAAAAAAAO7Q/8fAfaqE0JiE/s72-c/tumblr_md439f9yJI1ruwx7bo1_1280.jpeg
142.250.74.65
404 Not Found
1742
URL
HTTP/1.1
2.bp.blogspot.com/-TiV-dnIP9OM/UK4tbm2HFeI/AAAAAAAAO7Q/8fAfaqE0JiE/s72-c/tumblr_md439f9yJI1ruwx7bo1_1280.jpeg
IP
142.250.74.65:0
Magic
PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash
58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-TiV-dnIP9OM/UK4tbm2HFeI/AAAAAAAAO7Q/8fAfaqE0JiE/s72-c/tumblr_md439f9yJI1ruwx7bo1_1280.jpeg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madamezot.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Thu, 15 Dec 2022 12:53:44 GMT
Server: fife
Content-Length: 1742
X-XSS-Protection: 0
1.bp.blogspot.com/-htugsU2IfgI/UJ05-PeY_yI/AAAAAAAAOh8/29t0-ag1yAQ/s72-c/tumblr_mapgxohgiT1renae1o1_1280.jpeg
142.250.74.65
404 Not Found
1742
URL
HTTP/1.1
1.bp.blogspot.com/-htugsU2IfgI/UJ05-PeY_yI/AAAAAAAAOh8/29t0-ag1yAQ/s72-c/tumblr_mapgxohgiT1renae1o1_1280.jpeg
IP
142.250.74.65:0
Magic
PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash
58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-htugsU2IfgI/UJ05-PeY_yI/AAAAAAAAOh8/29t0-ag1yAQ/s72-c/tumblr_mapgxohgiT1renae1o1_1280.jpeg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madamezot.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Thu, 15 Dec 2022 12:53:44 GMT
Server: fife
Content-Length: 1742
X-XSS-Protection: 0
www.blogger.com/dyn-css/authorization.css?targetBlogID=4578255670983850237&zx=868c8fd4-7a5d-452c-a0b0-ce326439593d
216.58.207.233
200 OK
21
URL
HTTP/2
www.blogger.com/dyn-css/authorization.css?targetBlogID=4578255670983850237&zx=868c8fd4-7a5d-452c-a0b0-ce326439593d
IP
216.58.207.233:0
Magic
very short file (no magic)
Hash
a62e4d501434033d5d177e67d3aafdd0
34f7300c9ed47334cf10826d57af785321e3138b
b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522
GET /dyn-css/authorization.css?targetBlogID=4578255670983850237&zx=868c8fd4-7a5d-452c-a0b0-ce326439593d HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://madamezot.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 15 Dec 2022 12:53:44 GMT
last-modified: Thu, 15 Dec 2022 12:53:44 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
4.bp.blogspot.com/-8yc05sWBqDI/UKZzmZ4TrkI/AAAAAAAAO3s/d4T8BsWP2IU/s72-c/tumblr_mdl3wb9m6C1rdvttgo1_500.jpeg
142.250.74.65
404 Not Found
1742
URL
HTTP/1.1
4.bp.blogspot.com/-8yc05sWBqDI/UKZzmZ4TrkI/AAAAAAAAO3s/d4T8BsWP2IU/s72-c/tumblr_mdl3wb9m6C1rdvttgo1_500.jpeg
IP
142.250.74.65:0
Magic
PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash
58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-8yc05sWBqDI/UKZzmZ4TrkI/AAAAAAAAO3s/d4T8BsWP2IU/s72-c/tumblr_mdl3wb9m6C1rdvttgo1_500.jpeg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madamezot.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Thu, 15 Dec 2022 12:53:44 GMT
Server: fife
Content-Length: 1742
X-XSS-Protection: 0
4.bp.blogspot.com/-0wOT38CQNlo/UJf0T8CgzPI/AAAAAAAAOcA/S_M5-GEi240/s72-c/tumblr_maskfqYB451rb3ftgo1_1280.jpeg
142.250.74.65
404 Not Found
1742
URL
HTTP/1.1
4.bp.blogspot.com/-0wOT38CQNlo/UJf0T8CgzPI/AAAAAAAAOcA/S_M5-GEi240/s72-c/tumblr_maskfqYB451rb3ftgo1_1280.jpeg
IP
142.250.74.65:0
Magic
PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash
58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-0wOT38CQNlo/UJf0T8CgzPI/AAAAAAAAOcA/S_M5-GEi240/s72-c/tumblr_maskfqYB451rb3ftgo1_1280.jpeg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madamezot.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Thu, 15 Dec 2022 12:53:44 GMT
Server: fife
Content-Length: 1742
X-XSS-Protection: 0
themes.googleusercontent.com/image?id=1CwJW5m0Ws7aa94aruzb_ThRKyT7L21QZWeRE6VCvWEmEVSvK7EiC-EIxpnn1EijGlfAK
142.250.74.129
301 Moved Permanently
0
URL
HTTP/1.1
themes.googleusercontent.com/image?id=1CwJW5m0Ws7aa94aruzb_ThRKyT7L21QZWeRE6VCvWEmEVSvK7EiC-EIxpnn1EijGlfAK
IP
142.250.74.129:0
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /image?id=1CwJW5m0Ws7aa94aruzb_ThRKyT7L21QZWeRE6VCvWEmEVSvK7EiC-EIxpnn1EijGlfAK HTTP/1.1
Host: themes.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madamezot.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: application/binary
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 15 Dec 2022 12:53:44 GMT
Location: https://themes.googleusercontent.com/image?id=1CwJW5m0Ws7aa94aruzb_ThRKyT7L21QZWeRE6VCvWEmEVSvK7EiC-EIxpnn1EijGlfAK
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
push.services.mozilla.com/
54.148.84.125
101 Switching Protocols
0
URL
HTTP/1.1
push.services.mozilla.com/
IP
54.148.84.125:0
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: C5odAgZdEeeXPofjixCvyg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: cml9PIv62gdmoBJqzY+p1Q2ZWD4=
ocsp.pki.goog/gts1c3
142.250.74.131
200 OK
472
IP
142.250.74.131:0
Hash
276db8594b864b6dd0cc08dc46eb851a
326f05dade418b2cd6753d780bb9d6ae37826083
c894c4bb8948a062cb4d666d553b9f50a064a06793d9f066f3fa4a33dcfafb01
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 12:53:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
themes.googleusercontent.com/image?id=1CwJW5m0Ws7aa94aruzb_ThRKyT7L21QZWeRE6VCvWEmEVSvK7EiC-EIxpnn1EijGlfAK
142.250.74.129
200 OK
340358
URL
HTTP/2
themes.googleusercontent.com/image?id=1CwJW5m0Ws7aa94aruzb_ThRKyT7L21QZWeRE6VCvWEmEVSvK7EiC-EIxpnn1EijGlfAK
IP
142.250.74.129:0
Magic
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1798x1600, components 3\012- data
Hash
56ff1ccd28d7eca32f30adabc7fcbe06
f4bc4c0ed4626ede74767ae338980a5caee6956a
bbde44fb2bd1a89b2ffeb2407f23fe54020458ecd31b2d478e0ecab648f5286d
GET /image?id=1CwJW5m0Ws7aa94aruzb_ThRKyT7L21QZWeRE6VCvWEmEVSvK7EiC-EIxpnn1EijGlfAK HTTP/1.1
Host: themes.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://madamezot.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 12:53:44 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 12:53:44 GMT
server: fife
content-length: 340358
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
3.bp.blogspot.com/-MGluOM3WSRc/T0s8bqBjuPI/AAAAAAAAADw/iQ0pFkYrb1g/s72-c/image-upload-39-734175.jpg
142.250.74.65
200 OK
3913
URL
HTTP/1.1
3.bp.blogspot.com/-MGluOM3WSRc/T0s8bqBjuPI/AAAAAAAAADw/iQ0pFkYrb1g/s72-c/image-upload-39-734175.jpg
IP
142.250.74.65:0
Magic
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash
e2ad96edc0848dda5c1bdba126d5a178
f6626c0c5db145c108aa9a0c369992f12f5f07c4
1d197b1e8ff661743293e442872eb2b7127be50d2ace656429f2881ff4e229cf