Overview

URL rightway-tan.blogspot.com/2016/01/aiib-attracts-nations-from-east-west.html
IP142.250.74.161
ASNGOOGLE
Location United States
Report completed2022-09-22 12:50:27 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-09-22 2 rightway-tan.blogspot.com/2016/01/aiib-attracts-nations-from-east-west.html Phishing
2022-09-22 2 rightway-tan.blogspot.com/2016/01/aiib-attracts-nations-from-east-west.html Phishing
mnemonic secure dns  No alerts detected
Quad9 DNS  No alerts detected


Files

No files detected



Passive DNS (38)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2022-09-22 09:32:38 UTC 93.184.220.29
mnemonic passive DNS adservice.google.no (1) 96969 2017-09-26 14:23:08 UTC 2022-09-22 04:32:08 UTC 142.250.74.2
mnemonic passive DNS img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-09-22 04:23:52 UTC 34.120.237.76
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-22 04:34:04 UTC 34.117.237.239
mnemonic passive DNS img.youtube.com (2) 3087 2012-05-30 07:03:49 UTC 2022-09-22 04:51:36 UTC 142.250.74.78
mnemonic passive DNS ocsp.sca1b.amazontrust.com (2) 1015 2017-03-03 15:20:51 UTC 2019-03-27 04:05:54 UTC 143.204.42.88
mnemonic passive DNS l.sharethis.com (1) 4794 2012-05-21 21:59:04 UTC 2022-09-22 05:58:22 UTC 52.29.39.53
mnemonic passive DNS resources.blogblog.com (9) 13274 2017-01-30 04:47:40 UTC 2022-09-22 07:13:48 UTC 216.58.207.201
mnemonic passive DNS ra.revolvermaps.com (4) 291008 2017-01-29 22:23:23 UTC 2022-09-22 09:56:06 UTC 185.44.104.99
mnemonic passive DNS googleads.g.doubleclick.net (1) 42 2021-02-20 15:43:32 UTC 2022-09-22 12:01:44 UTC 142.250.74.98
mnemonic passive DNS ocsp.sectigo.com (2) 487 2018-12-17 11:31:55 UTC 2022-09-22 08:36:19 UTC 172.64.155.188
mnemonic passive DNS blog.roodo.com (1) 0 2012-10-18 16:31:35 UTC 2022-09-22 03:56:55 UTC 104.21.19.118 Domain (roodo.com) ranked at: 61187
mnemonic passive DNS translate.google.com (1) 1156 2012-05-30 01:30:32 UTC 2022-09-22 04:31:50 UTC 142.250.74.46
mnemonic passive DNS platform-api.sharethis.com (1) 5118 2021-08-13 01:30:50 UTC 2022-09-22 07:17:13 UTC 143.204.55.67
mnemonic passive DNS go.hearty.me (1) 0 2019-11-12 00:06:49 UTC 2022-09-22 03:56:56 UTC 44.199.30.55 Unknown ranking
mnemonic passive DNS r3.o.lencr.org (8) 344 2020-12-02 08:52:13 UTC 2022-09-22 04:32:00 UTC 23.36.76.226
mnemonic passive DNS ocsp.pki.goog (31) 175 2017-06-14 07:23:31 UTC 2022-09-22 04:32:28 UTC 142.250.74.3
mnemonic passive DNS lh3.googleusercontent.com (8) 66 2013-05-30 23:27:19 UTC 2022-09-22 04:45:19 UTC 142.250.74.1
mnemonic passive DNS www.gstatic.com (1) 0 2016-07-26 09:37:06 UTC 2022-09-22 04:32:02 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540
mnemonic passive DNS adservice.google.com (1) 76 2021-02-20 16:10:48 UTC 2022-09-22 11:16:04 UTC 142.250.74.2
mnemonic passive DNS p18334.clksite.com (1) 0 2022-06-04 03:05:49 UTC 2022-09-22 03:56:55 UTC 173.192.101.24 Domain (clksite.com) ranked at: 68288
mnemonic passive DNS www.google.com (1) 7 2016-08-04 12:36:31 UTC 2022-09-22 04:33:41 UTC 142.250.74.164
mnemonic passive DNS hearty.me (1) 0 2016-05-22 03:46:51 UTC 2022-09-22 03:56:56 UTC 104.21.74.109 Unknown ranking
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-09-22 05:09:58 UTC 143.204.55.115
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-22 05:24:31 UTC 143.204.55.35
mnemonic passive DNS www.blogger.com (8) 8975 2012-05-22 07:35:03 UTC 2022-09-22 07:08:26 UTC 216.58.207.201
mnemonic passive DNS jk.revolvermaps.com (2) 0 2016-01-19 05:45:23 UTC 2022-09-22 03:56:55 UTC 185.44.104.99 Domain (revolvermaps.com) ranked at: 67360
mnemonic passive DNS partner.googleadservices.com (1) 798 2012-10-03 01:04:21 UTC 2022-09-22 05:36:46 UTC 172.217.21.162
mnemonic passive DNS buttons-config.sharethis.com (1) 6006 2019-10-19 08:44:23 UTC 2022-09-22 07:17:14 UTC 54.230.111.126
mnemonic passive DNS rightway-tan.blogspot.com (2) 0 2014-11-07 02:49:41 UTC 2022-09-22 12:01:32 UTC 142.250.74.161 Unknown ranking
mnemonic passive DNS apis.google.com (2) 105 2013-05-30 23:17:44 UTC 2022-09-22 04:44:43 UTC 142.250.74.174
mnemonic passive DNS pagead2.googlesyndication.com (3) 101 2021-02-20 15:52:05 UTC 2022-09-22 06:43:14 UTC 142.250.74.2
mnemonic passive DNS i.ytimg.com (1) 109 2019-09-28 06:57:57 UTC 2022-09-22 09:52:01 UTC 142.250.74.86
mnemonic passive DNS feeds.feedburner.com (3) 12807 2013-07-16 03:17:19 UTC 2022-09-22 05:09:59 UTC 216.58.207.206
mnemonic passive DNS platform.twitter.com (1) 597 2012-05-21 03:34:05 UTC 2022-09-22 06:26:30 UTC 93.184.220.66
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-22 05:01:22 UTC 35.164.146.235
mnemonic passive DNS translate.googleapis.com (1) 1005 2014-07-21 13:19:59 UTC 2022-09-22 10:59:59 UTC 142.250.74.74
mnemonic passive DNS play.google.com (1) 34 2018-05-12 00:28:37 UTC 2022-09-22 04:44:56 UTC 216.58.207.206


Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 142.250.74.161

Date UQ / IDS / BL URL IP
2022-12-07 12:25:32 +0000
0 - 0 - 1 redywibisono.blogspot.com/2020/08/diy-ft8-dig (...) 142.250.74.161
2022-12-07 11:38:03 +0000
0 - 0 - 5 935soniasullivannews.blogspot.com/2022/09/ant (...) 142.250.74.161
2022-12-07 05:39:19 +0000
0 - 0 - 1 georgiatechhts.blogspot.ca/search/label/CRC 142.250.74.161
2022-12-06 23:53:41 +0000
0 - 0 - 2 robidowns.blogspot.be/search/label/Cursores 142.250.74.161
2022-12-06 22:52:50 +0000
0 - 0 - 21 onlyfans-videos.blogspot.com/2022/10/shifty-m (...) 142.250.74.161

Last 5 reports on ASN: GOOGLE

Date UQ / IDS / BL URL IP
2022-12-07 13:25:17 +0000
0 - 0 - 0 docs.google.com/forms/d/e/1FAIpQLSd_RFJosRvlW (...) 142.250.74.142
2022-12-07 12:56:33 +0000
0 - 0 - 1 coinbaseprologinn.blogspot.com/ 172.217.21.161
2022-12-07 12:44:07 +0000
0 - 0 - 20 lindseyandnig.blogspot.com/2022/05/which-of-f (...) 142.250.74.33
2022-12-07 12:25:32 +0000
0 - 0 - 1 redywibisono.blogspot.com/2020/08/diy-ft8-dig (...) 142.250.74.161
2022-12-07 12:21:39 +0000
0 - 0 - 2 raulsrecovery.blogspot.com/2021/05/download-n (...) 172.217.21.161

Last 5 reports on domain: rightway-tan.blogspot.com

Date UQ / IDS / BL URL IP
2022-12-04 03:17:56 +0000
0 - 0 - 2 rightway-tan.blogspot.com/search/label/The%20Age 172.217.21.161
2022-12-04 01:14:24 +0000
0 - 0 - 2 rightway-tan.blogspot.com/search/label/Gerah 142.250.74.33
2022-12-03 03:05:19 +0000
0 - 0 - 2 rightway-tan.blogspot.com/search/label/neighbours 172.217.21.161
2022-12-01 12:55:42 +0000
0 - 0 - 2 rightway-tan.blogspot.com/search/label/Wall%2 (...) 172.217.21.161
2022-12-01 12:22:11 +0000
0 - 0 - 1 rightway-tan.blogspot.com/search/label/G25 142.250.74.161

No other reports with similar screenshot



JavaScript

Executed Scripts (62)


Executed Evals (6)

#1 JavaScript::Eval (size: 15552, repeated: 1) - SHA256: b7bb0c5ac33ab436c5fe975360ef1af5f66987c6c8bf5c0569e749197b16ecaa

                                        /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */
(function() {
    var c = function(E) {
            return E
        },
        h = this || self,
        L = function(E, R) {
            if (R = (E = h.trustedTypes, null), !E || !E.createPolicy) return R;
            try {
                R = E.createPolicy("bg", {
                    createHTML: c,
                    createScript: c,
                    createScriptURL: c
                })
            } catch (J) {
                h.console && h.console.error(J.message)
            }
            return R
        };
    (0, eval)(function(E, R) {
        return (R = L()) && 1 === E.eval(R.createScript("1")) ? function(J) {
            return R.createScript(J)
        } : function(J) {
            return "" + J
        }
    }(h)(Array(7824 * Math.random() | 0).join("\n") + '(function(){var R4=function(E,R,c,L,O,J){function h(){if(E.A==E){if(E.o){var S=[C,R,c,void 0,O,J,arguments];if(2==L)var q=a(false,false,(K(S,E),E));else if(1==L){var r=!E.j.length;K(S,E),r&&a(false,false,E)}else q=EI(E,S);return q}O&&J&&O.removeEventListener(J,h,u)}}return h},J_=function(E,R,c,L){function O(){}return{invoke:(L=sI(E,(c=void 0,function(J){O&&(R&&Y(R),c=J,O(),O=void 0)}),!!R)[0],function(J,h,S,q){function r(){c(function(A){Y(function(){J(A)})},S)}if(!h)return h=L(S),J&&J(h),h;c?r():(q=O,O=function(){Y((q(),r))})})}},D=function(E,R,c){if(260==R||63==R)E.o[R]?E.o[R].concat(c):E.o[R]=cO(E,c);else{if(E.l&&174!=R)return;139==R||279==R||115==R||108==R||485==R?E.o[R]||(E.o[R]=h_(134,c,R,E)):E.o[R]=h_(17,c,R,E)}174==R&&(E.S=e(32,E,false),E.X=void 0)},l=function(E,R){R.h=((R.h?R.h+"~":"E:")+E.message+":"+E.stack).slice(0,2048)},Sy=function(E,R,c,L){try{L=E[((R|0)+2)%3],E[R]=(E[R]|0)-(E[((R|0)+1)%3]|0)-(L|0)^(1==R?L<<c:L>>>c)}catch(O){throw O;}},OI=function(E,R){return R(function(c){c(E)}),[function(){return E}]},q0=function(E,R,c){return E.u(function(L){c=L},false,R),c},CU=function(E,R,c,L,O){(L=N((c=W((L=(E&=(O=E&4,3),W(R)),R)),R),L),O&&(L=rm(""+L)),E)&&B(c,X(L.length,2),R),B(c,L,R)},W=function(E,R){if(E.W)return KU(E.Z,E);return(R=e(8,E,true),R&128)&&(R^=128,E=e(2,E,true),R=(R<<2)+(E|0)),R},m=function(E,R,c){c=this;try{a4(this,R,E)}catch(L){l(L,this),R(function(O){O(c.h)})}},A_=function(E,R,c,L,O){for(R=(L=R[O=0,3]|0,R[2]|0);14>O;O++)c=c>>>8|c<<24,L=L>>>8|L<<24,c+=E|0,E=E<<3|E>>>29,c^=R+1890,L+=R|0,L^=O+1890,R=R<<3|R>>>29,E^=c,R^=L;return[E>>>24&255,E>>>16&255,E>>>8&255,E>>>0&255,c>>>24&255,c>>>16&255,c>>>8&255,c>>>0&255]},uN=function(E,R){D(R,260,((R.hh.push(R.o.slice()),R).o[260]=void 0,E))},Z=function(E,R){for(R=[];E--;)R.push(255*Math.random()|0);return R},sI=function(E,R,c,L){return(L=y[E.substring(0,3)+"_"])?L(E.substring(3),R,c):OI(E,R)},cO=function(E,R,c){return(c=g[E.U](E.sl),c[E.U]=function(){return R},c).concat=function(L){R=L},c},iN=function(E,R){((R.push(E[0]<<24|E[1]<<16|E[2]<<8|E[3]),R).push(E[4]<<24|E[5]<<16|E[6]<<8|E[7]),R).push(E[8]<<24|E[9]<<16|E[10]<<8|E[11])},X=function(E,R,c,L){for(c=(L=[],R|0)-1;0<=c;c--)L[(R|0)-1-(c|0)]=E>>8*c&255;return L},nU=function(E,R,c,L){L=(c=W(E),W(E)),B(L,X(N(E,c),R),E)},TT=function(E,R,c,L){for(;R.j.length;){c=(R.G=null,R.j.pop());try{L=EI(R,c)}catch(O){l(O,R)}if(E&&R.G){(E=R.G,E)(function(){a(true,true,R)});break}}return L},wm=function(E,R){return g[E](g.prototype,{parent:R,propertyIsEnumerable:R,prototype:R,console:R,floor:R,document:R,splice:R,replace:R,call:R,pop:R,length:R,stack:R})},h_=function(E,R,c,L,O,J,h,S){return h=g[L.U]((J=(R=[51,27,-23,78,28,-90,(O=Y1,R),37,-90,16],E&7),L).Ah),h[L.U]=function(q){J+=(S=q,6)+7*E,J&=7},h.concat=function(q){return(q=(q=c%16+1,5)*c*c*q- -1972*S-918*c*S+J+34*S*S+(O()|0)*q-q*S+R[J+35&7]*c*q-170*c*c*S,q=R[q],S=void 0,R)[(J+61&7)+(E&2)]=q,R[J+(E&2)]=27,q},h},a=function(E,R,c,L,O,J){if(c.j.length){c.qN=(c.i&&0(),E),c.i=true;try{O=c.K(),c.I=O,c.H=0,c.B=O,L=TT(E,c),J=c.K()-c.I,c.Y+=J,J<(R?0:10)||0>=c.L--||(J=Math.floor(J),c.N.push(254>=J?J:254))}finally{c.i=false}return L}},pU=function(E,R){if(R=(E=null,x).trustedTypes,!R||!R.createPolicy)return E;try{E=R.createPolicy("bg",{createHTML:zT,createScript:zT,createScriptURL:zT})}catch(c){x.console&&x.console.error(c.message)}return E},K=function(E,R){R.j.splice(0,0,E)},a4=function(E,R,c,L,O){for(L=(O=((E.Ah=((E.yp=D8,E).pz=ey,E.XL=E[P],wm)(E.U,{get:function(){return this.concat()}}),E).sl=g[E.U](E.Ah,{value:{value:{}}}),[]),0);128>L;L++)O[L]=String.fromCharCode(L);((K([(V(348,E,(V((V(390,E,((V(461,((V(452,E,(V(249,E,(V(364,(V((V(164,(V(188,((V(234,E,(D(E,139,[160,0,(D(E,115,(D(E,279,(V(69,E,(V((V(61,(V(141,(D(E,(E.eG=(D(E,(V((D((V(437,(D(E,485,(D(E,(V(229,E,(D(E,((D(E,408,(V(200,(V(402,E,(V(236,E,(D(E,(V(214,E,(V(0,((V(23,(D(E,293,(D(E,(D(E,260,(E.Kz=(E.WF=(E.g=((E.h=(E.P=[],void 0),E.X=void 0,E).W=void 0,E.T=(E.v=(E.C=1,E.Y=0,8001),0),(E.B=0,E).L=(E.A=E,E.o=[],E.F=[],(E.H=void 0,E).N=[],(E.qN=false,E.Z=void 0,E.G=null,E).S=void 0,(E.j=[],E.O=void 0,E).l=((E.ZX=0,E).s=0,L=(E.I=0,window.performance||{}),false),E.hh=[],25),0),function(J){this.A=J}),E.i=false,L.timeOrigin||(L.timing||{}).navigationStart||0),0)),63),0),E)),E),function(J,h,S,q,r,A,n){for(q=(h=N(J,(n=(A=W(J),r=vO(J),""),224)),h.length),S=0;r--;)S=((S|0)+(vO(J)|0))%q,n+=O[h[S]];D(J,A,n)}),V)(406,E,function(J){CU(3,J)}),E),function(J,h,S,q){D(J,(S=(h=W(J),W(J)),q=W(J),q),N(J,h)||N(J,S))}),function(){})),21),0),function(J,h,S,q){D(J,(S=N(J,(q=N(J,(h=(q=(S=W(J),W(J)),W(J)),q)),S)),h),S in q|0)})),function(J,h,S){0!=N(J,(h=N(J,(h=W((S=W(J),J)),h)),S))&&D(J,260,h)})),E),function(J){CU(4,J)}),2048)),V)(128,E,function(J,h,S){(h=N(J,(S=(h=W(J),W(J)),h)),h=t_(h),D)(J,S,h)}),207),467),function(J,h,S,q){S=(h=I((q=W(J),J)),W(J)),D(J,S,N(J,q)>>>h)})),416),x),[0,0,0])),E),function(J,h,S,q){D(J,(S=(h=(q=(h=W(J),W(J)),N(J,h)),N(J,q)),q),S+h)}),E),108,[]),317),E,function(J,h,S,q,r,A,n,z,T,v,w,p){function H(t,Q){for(;r<t;)p|=I(J)<<r,r+=8;return Q=(r-=t,p)&(1<<t)-1,p>>=t,Q}for(p=(n=W(J),r=0),T=(H(3)|0)+1,S=H(5),h=[],q=w=0;w<S;w++)z=H(1),h.push(z),q+=z?0:1;for(v=(q=(w=((q|0)-1).toString(2).length,0),[]);q<S;q++)h[q]||(v[q]=H(w));for(w=0;w<S;w++)h[w]&&(v[w]=W(J));for(A=[];T--;)A.push(N(J,W(J)));V(n,J,function(t,Q,d,k,LU){for(Q=(LU=(d=[],[]),0);Q<S;Q++){if(!h[k=v[Q],Q]){for(;k>=d.length;)d.push(W(t));k=d[k]}LU.push(k)}t.Z=cO(t,(t.W=cO(t,A.slice()),LU))})}),446),{}),0),278),0),E),function(J){nU(J,4)}),E),function(J,h,S,q){D(J,(q=(S=N(J,(q=(S=W(J),W(J)),h=W(J),S)),N)(J,q),h),+(S==q))}),409),E,function(J,h){(J=N((h=W(J),J.A),h),J[0]).removeEventListener(J[1],J[2],u)}),function(J,h,S,q,r){for(r=(S=(q=vO((h=W(J),J)),0),[]);S<q;S++)r.push(I(J));D(J,h,r)})),Z(4))),[])),0)]),function(J,h,S,q){(h=(S=W(J),W(J)),q=W(J),J.A==J)&&(q=N(J,q),h=N(J,h),N(J,S)[h]=q,174==S&&(J.X=void 0,2==h&&(J.S=e(32,J,false),J.X=void 0)))})),V)(209,E,function(J,h,S){D(J,(S=(h=W(J),W)(J),S),""+N(J,h))}),E),function(J,h,S,q,r){h=N(J,(r=(S=N((r=(h=(q=W(J),W(J)),W(J)),S=W(J),J),S),q=N(J.A,q),N(J,r)),h)),0!==q&&(S=R4(J,r,S,1,q,h),q.addEventListener(h,S,u),D(J,21,[q,h,S]))}),E),function(J){nU(J,1)}),225),E,function(J,h,S,q,r,A){G(h,J,false,true)||(q=N0(J.A),h=q.R,S=q.oe,A=q.D,r=A.length,q=q.El,h=0==r?new S[h]:1==r?new S[h](A[0]):2==r?new S[h](A[0],A[1]):3==r?new S[h](A[0],A[1],A[2]):4==r?new S[h](A[0],A[1],A[2],A[3]):2(),D(J,q,h))}),E.ae=0,E),function(J,h,S){G(h,J,false,true)||(h=W(J),S=W(J),D(J,S,function(q){return eval(q)}(lN(N(J.A,h)))))}),function(J,h){h=N(J,W(J)),uN(h,J.A)})),function(J,h,S,q,r,A){if(!G(h,J,true,true)){if("object"==t_((A=(h=N((q=W((A=(r=W((h=W(J),J)),W(J)),J)),J),h),r=N(J,r),N(J,A)),J=N(J,q),h))){for(S in q=[],h)q.push(S);h=q}for(A=0<A?A:1,S=0,q=h.length;S<q;S+=A)r(h.slice(S,(S|0)+(A|0)),J)}})),E).kt=0,E),function(J){WO(J,4)}),V)(252,E,function(J,h,S,q,r){S=N(J,(q=N(J,(r=N(J,(q=(r=(S=(h=W(J),W(J)),W(J)),W(J)),r)),q)),S)),D(J,h,R4(J,S,r,q))}),function(J,h,S,q){!G(h,J,false,true)&&(h=N0(J),S=h.R,q=h.oe,J.A==J||S==J.WF&&q==J)&&(D(J,h.El,S.apply(q,h.D)),J.B=J.K())})),447),E,function(J,h,S,q){if(S=J.hh.pop()){for(q=I(J);0<q;q--)h=W(J),S[h]=J.o[h];((S[108]=J.o[108],S)[408]=J.o[408],J).o=S}else D(J,260,J.s)}),function(J,h,S,q){h=(S=N(J,(q=W((h=(S=W(J),W(J)),J)),S)),N(J,h)),D(J,q,S[h])})),QE)],E),K)([M,c],E),K)([BO,R],E),a(true,true,E)},rm=function(E,R,c,L,O){for(O=(E=E.replace(/\\r\\n/g,"\\n"),[]),R=L=0;L<E.length;L++)c=E.charCodeAt(L),128>c?O[R++]=c:(2048>c?O[R++]=c>>6|192:(55296==(c&64512)&&L+1<E.length&&56320==(E.charCodeAt(L+1)&64512)?(c=65536+((c&1023)<<10)+(E.charCodeAt(++L)&1023),O[R++]=c>>18|240,O[R++]=c>>12&63|128):O[R++]=c>>12|224,O[R++]=c>>6&63|128),O[R++]=c&63|128);return O},x=this||self,e=function(E,R,c,L,O,J,h,S,q,r,A,n,z,T){if((S=N(R,260),S)>=R.s)throw[f,31];for(L=(J=0,R.XL.length),h=E,n=S;0<h;)T=n>>3,r=n%8,q=R.F[T],O=8-(r|0),O=O<h?O:h,c&&(z=R,z.X!=n>>6&&(z.X=n>>6,A=N(z,174),z.O=A_(z.S,[0,0,A[1],A[2]],z.X)),q^=R.O[T&L]),n+=O,J|=(q>>8-(r|0)-(O|0)&(1<<O)-1)<<(h|0)-(O|0),h-=O;return D(R,260,(c=J,(S|0)+(E|0))),c},Xf=function(E,R,c){if(3==E.length){for(c=0;3>c;c++)R[c]+=E[c];for(c=(E=[13,8,13,12,16,5,3,10,15],0);9>c;c++)R[3](R,c%3,E[c])}},t_=function(E,R,c){if("object"==(c=typeof E,c))if(E){if(E instanceof Array)return"array";if(E instanceof Object)return c;if("[object Window]"==(R=Object.prototype.toString.call(E),R))return"object";if("[object Array]"==R||"number"==typeof E.length&&"undefined"!=typeof E.splice&&"undefined"!=typeof E.propertyIsEnumerable&&!E.propertyIsEnumerable("splice"))return"array";if("[object Function]"==R||"undefined"!=typeof E.call&&"undefined"!=typeof E.propertyIsEnumerable&&!E.propertyIsEnumerable("call"))return"function"}else return"null";else if("function"==c&&"undefined"==typeof E.call)return"object";return c},G=function(E,R,c,L,O,J,h,S,q){if((R.A=((q=(O=(h=(S=4==(J=(L||R.H++,0<R.g&&R.i&&R.qN&&1>=R.T)&&!R.W&&!R.G&&(!L||1<R.v-E)&&0==document.hidden,R.H))||J?R.K():R.B,h)-R.B,O)>>14,R.S)&&(R.S^=q*(O<<2)),q)||R.A,R.C+=q,S)||J)R.B=h,R.H=0;if(!J||h-R.I<R.g-(c?255:L?5:2))return false;return(c=N(R,(R.v=E,L?63:260)),D(R,260,R.s),R.j).push([m4,c,L?E+1:E]),R.G=Y,true},vO=function(E,R){return(R=I(E),R)&128&&(R=R&127|I(E)<<7),R},o4=function(E,R,c,L){return N(c,(D(c,260,(HO(((L=N(c,260),c.F&&L<c.s)?(D(c,260,c.s),uN(R,c)):D(c,260,R),E),c),L)),446))},b=function(E,R,c,L,O,J){if(!E.l){if(3<(c=N(((R=((J=void 0,c&&c[0]===f&&(J=c[2],R=c[1],c=void 0),O=N(E,108),0)==O.length&&(L=N(E,63)>>3,O.push(R,L>>8&255,L&255),void 0!=J&&O.push(J&255)),""),c)&&(c.message&&(R+=c.message),c.stack&&(R+=":"+c.stack)),E),408),c)){J=(R=(c-=((R=R.slice(0,(c|0)-3),R).length|0)+3,rm(R)),E.A),E.A=E;try{B(279,X(R.length,2).concat(R),E,9)}finally{E.A=J}}D(E,408,c)}},Z8=function(E,R){return R[E]<<24|R[(E|0)+1]<<16|R[(E|0)+2]<<8|R[(E|0)+3]},I=function(E){return E.W?KU(E.Z,E):e(8,E,true)},zT=function(E){return E},EI=function(E,R,c,L,O){if(L=R[0],L==F)E.L=25,E.V(R);else if(L==P){O=R[1];try{c=E.h||E.V(R)}catch(J){l(J,E),c=E.h}O(c)}else if(L==m4)E.V(R);else if(L==M)E.V(R);else if(L==BO){try{for(c=0;c<E.P.length;c++)try{O=E.P[c],O[0][O[1]](O[2])}catch(J){}}catch(J){}(0,(E.P=[],R)[1])(function(J,h){E.u(J,true,h)},function(J){K([yE],(J=!E.j.length,E)),J&&a(true,false,E)})}else{if(L==C)return c=R[2],D(E,433,R[6]),D(E,446,c),E.V(R);L==yE?(E.o=null,E.F=[],E.N=[]):L==QE&&"loading"===x.document.readyState&&(E.G=function(J,h){function S(){h||(h=true,J())}(x.document.addEventListener("DOMContentLoaded",S,(h=false,u)),x).addEventListener("load",S,u)})}},B=function(E,R,c,L,O,J){if(c.A==c)for(O=N(c,E),279==E?(E=function(h,S,q,r){if((r=(S=O.length,S|0)-4>>3,O).Ul!=r){q=[0,(r=(r<<3)-(O.Ul=r,4),0),J[1],J[2]];try{O.z$=A_(Z8(r,O),q,Z8((r|0)+4,O))}catch(A){throw A;}}O.push(O.z$[S&7]^h)},J=N(c,485)):E=function(h){O.push(h)},L&&E(L&255),c=0,L=R.length;c<L;c++)E(R[c])},Y=x.requestIdleCallback?function(E){requestIdleCallback(function(){E()},{timeout:4})}:x.setImmediate?function(E){setImmediate(E)}:function(E){setTimeout(E,0)},WO=function(E,R,c,L){for(c=(L=W(E),0);0<R;R--)c=c<<8|I(E);D(E,L,c)},V=function(E,R,c){D(R,E,c),c[QE]=2796},y,U,N=function(E,R){if((E=E.o[R],void 0)===E)throw[f,30,R];if(E.value)return E.create();return(E.create(5*R*R+27*R+-58),E).prototype},HO=function(E,R,c,L,O,J){if(!R.h){R.T++;try{for(O=(J=(c=R.s,void 0),0);--E;)try{if((L=void 0,R).W)J=KU(R.W,R);else{if(O=N(R,260),O>=c)break;J=N(R,(D(R,63,O),L=W(R),L))}G((J&&J[yE]&2048?J(R,E):b(R,0,[f,21,L]),E),R,false,false)}catch(h){N(R,207)?b(R,22,h):D(R,207,h)}if(!E){if(R.bG){HO((R.T--,188885615751),R);return}b(R,0,[f,33])}}catch(h){try{b(R,22,h)}catch(S){l(S,R)}}R.T--}},N0=function(E,R,c,L,O,J){for(c=(O=E[gm]||{},R=W(E),O.El=W(E),O.D=[],J=E.A==E?(I(E)|0)-1:1,L=W(E),0);c<J;c++)O.D.push(W(E));for(O.oe=N(E,L);J--;)O.D[J]=N(E,O.D[J]);return O.R=N(E,R),O},KU=function(E,R){return(E=E.create().shift(),R).W.create().length||R.Z.create().length||(R.Z=void 0,R.W=void 0),E},u={passive:true,capture:true},gm=String.fromCharCode(105,110,116,101,103,67,104,101,99,107,66,121,112,97,115,115),BO=(m.prototype.bG=!(m.prototype.J="toString",1),[]),f=(m.prototype.mf=(m.prototype.Vp=void 0,void 0),{}),M=[],m4=[],F=[],yE=[],QE=[],P=[],C=[],Y1=((iN,Z,Sy,Xf,m.prototype).U="create",U=m.prototype,U.nz=function(E,R,c,L,O,J){for(O=(c=0,[]),J=0;J<E.length;J++)for(c+=R,L=L<<R|E[J];7<c;)c-=8,O.push(L>>c&255);return O},U.DX=function(E,R,c,L,O){for(L=O=0;L<E.length;L++)O+=E.charCodeAt(L),O+=O<<10,O^=O>>6;return(O=(E=(O+=O<<3,O^=O>>11,O+(O<<15)>>>0),new Number(E&(1<<R)-1)),O)[0]=(E>>>R)%c,O},void 0),g=f.constructor;(((U.K=(window.performance||{}).now?function(){return this.Kz+window.performance.now()}:function(){return+new Date},U.th=(U.dC=function(){return Math.floor(this.Y+(this.K()-this.I))},function(){return Math.floor(this.K())}),U).SG=function(E,R,c){return E^(R^=R<<13,R^=R>>17,(R=(R^R<<5)&c)||(R=1),R)},U).u=function(E,R,c,L,O){if(c="array"===t_(c)?c:[c],this.h)E(this.h);else try{O=[],L=!this.j.length,K([F,O,c],this),K([P,E,O],this),R&&!L||a(R,true,this)}catch(J){l(J,this),E(this.h)}},m.prototype).V=function(E,R){return R=(Y1=(E={},function(){return R==E?-58:-12}),{}),function(c,L,O,J,h,S,q,r,A,n,z,T,v,w,p){R=(n=R,E);try{if(S=c[0],S==M){z=c[1];try{for(h=(T=(p=[],atob(z)),v=0);v<T.length;v++)A=T.charCodeAt(v),255<A&&(p[h++]=A&255,A>>=8),p[h++]=A;D(this,(this.s=(this.F=p,this.F.length)<<3,174),[0,0,0])}catch(H){b(this,17,H);return}HO(8001,this)}else if(S==F)c[1].push(N(this,139).length,N(this,115).length,N(this,408),N(this,279).length),D(this,446,c[2]),this.o[479]&&o4(8001,N(this,479),this);else{if(S==P){this.A=(J=(O=X(((p=c[2],N(this,139).length)|0)+2,2),this.A),this);try{r=N(this,108),0<r.length&&B(139,X(r.length,2).concat(r),this,10),B(139,X(this.C,1),this,109),B(139,X(this[P].length,1),this),T=0,T+=N(this,278)&2047,T-=(N(this,139).length|0)+5,w=N(this,279),4<w.length&&(T-=(w.length|0)+3),0<T&&B(139,X(T,2).concat(Z(T)),this,15),4<w.length&&B(139,X(w.length,2).concat(w),this,156)}finally{this.A=J}if(((h=Z(2).concat(N(this,139)),h)[1]=h[0]^6,h)[3]=h[1]^O[0],h[4]=h[1]^O[1],L=this.jG(h))L="!"+L;else for(L="",T=0;T<h.length;T++)q=h[T][this.J](16),1==q.length&&(q="0"+q),L+=q;return N((D(this,408,(N(this,(N(this,(v=L,139)).length=p.shift(),115)).length=p.shift(),p.shift())),this),279).length=p.shift(),v}if(S==m4)o4(c[2],c[1],this);else if(S==C)return o4(8001,c[1],this)}}finally{R=n}}}();var ey,D8=(m.prototype.rC=((m.prototype.jG=function(E,R,c,L){if(c=window.btoa){for(L=0,R="";L<E.length;L+=8192)R+=String.fromCharCode.apply(null,E.slice(L,L+8192));E=c(R).replace(/\\+/g,"-").replace(/\\//g,"_").replace(/=/g,"")}else E=void 0;return E},m.prototype).xt=0,0),m.prototype[BO]=[0,0,1,1,0,1,1],/./),x1=M.pop.bind(m.prototype[F]),lN=function(E,R){return(R=pU())&&1===E.eval(R.createScript("1"))?function(c){return R.createScript(c)}:function(c){return""+c}}(((ey=(D8[m.prototype.J]=x1,wm(m.prototype.U,{get:x1})),m).prototype.G$=void 0,x));(40<(y=x.botguard||(x.botguard={}),y.m)||(y.m=41,y.bg=J_,y.a=sI),y).ABO_=function(E,R,c){return[(c=new m(E,R),function(L){return q0(c,L)})]};}).call(this);'));
}).call(this);
                                    

#2 JavaScript::Eval (size: 22286, repeated: 1) - SHA256: 1bf59cf79fdd4eb5b4fc73e1263dea75b62c0b9201fbe53734b65ad19ee2ca60

                                        (function() {
    var R4 = function(E, R, c, L, O, J) {
            function h() {
                if (E.A == E) {
                    if (E.o) {
                        var S = [C, R, c, void 0, O, J, arguments];
                        if (2 == L) var q = a(false, false, (K(S, E), E));
                        else if (1 == L) {
                            var r = !E.j.length;
                            K(S, E), r && a(false, false, E)
                        } else q = EI(E, S);
                        return q
                    }
                    O && J && O.removeEventListener(J, h, u)
                }
            }
            return h
        },
        J_ = function(E, R, c, L) {
            function O() {}
            return {
                invoke: (L = sI(E, (c = void 0, function(J) {
                    O && (R && Y(R), c = J, O(), O = void 0)
                }), !!R)[0], function(J, h, S, q) {
                    function r() {
                        c(function(A) {
                            Y(function() {
                                J(A)
                            })
                        }, S)
                    }
                    if (!h) return h = L(S), J && J(h), h;
                    c ? r() : (q = O, O = function() {
                        Y((q(), r))
                    })
                })
            }
        },
        D = function(E, R, c) {
            if (260 == R || 63 == R) E.o[R] ? E.o[R].concat(c) : E.o[R] = cO(E, c);
            else {
                if (E.l && 174 != R) return;
                139 == R || 279 == R || 115 == R || 108 == R || 485 == R ? E.o[R] || (E.o[R] = h_(134, c, R, E)) : E.o[R] = h_(17, c, R, E)
            }
            174 == R && (E.S = e(32, E, false), E.X = void 0)
        },
        l = function(E, R) {
            R.h = ((R.h ? R.h + "~" : "E:") + E.message + ":" + E.stack).slice(0, 2048)
        },
        Sy = function(E, R, c, L) {
            try {
                L = E[((R | 0) + 2) % 3], E[R] = (E[R] | 0) - (E[((R | 0) + 1) % 3] | 0) - (L | 0) ^ (1 == R ? L << c : L >>> c)
            } catch (O) {
                throw O;
            }
        },
        OI = function(E, R) {
            return R(function(c) {
                c(E)
            }), [function() {
                return E
            }]
        },
        q0 = function(E, R, c) {
            return E.u(function(L) {
                c = L
            }, false, R), c
        },
        CU = function(E, R, c, L, O) {
            (L = N((c = W((L = (E &= (O = E & 4, 3), W(R)), R)), R), L), O && (L = rm("" + L)), E) && B(c, X(L.length, 2), R), B(c, L, R)
        },
        W = function(E, R) {
            if (E.W) return KU(E.Z, E);
            return (R = e(8, E, true), R & 128) && (R ^= 128, E = e(2, E, true), R = (R << 2) + (E | 0)), R
        },
        m = function(E, R, c) {
            c = this;
            try {
                a4(this, R, E)
            } catch (L) {
                l(L, this), R(function(O) {
                    O(c.h)
                })
            }
        },
        A_ = function(E, R, c, L, O) {
            for (R = (L = R[O = 0, 3] | 0, R[2] | 0); 14 > O; O++) c = c >>> 8 | c << 24, L = L >>> 8 | L << 24, c += E | 0, E = E << 3 | E >>> 29, c ^= R + 1890, L += R | 0, L ^= O + 1890, R = R << 3 | R >>> 29, E ^= c, R ^= L;
            return [E >>> 24 & 255, E >>> 16 & 255, E >>> 8 & 255, E >>> 0 & 255, c >>> 24 & 255, c >>> 16 & 255, c >>> 8 & 255, c >>> 0 & 255]
        },
        uN = function(E, R) {
            D(R, 260, ((R.hh.push(R.o.slice()), R).o[260] = void 0, E))
        },
        Z = function(E, R) {
            for (R = []; E--;) R.push(255 * Math.random() | 0);
            return R
        },
        sI = function(E, R, c, L) {
            return (L = y[E.substring(0, 3) + "_"]) ? L(E.substring(3), R, c) : OI(E, R)
        },
        cO = function(E, R, c) {
            return (c = g[E.U](E.sl), c[E.U] = function() {
                return R
            }, c).concat = function(L) {
                R = L
            }, c
        },
        iN = function(E, R) {
            ((R.push(E[0] << 24 | E[1] << 16 | E[2] << 8 | E[3]), R).push(E[4] << 24 | E[5] << 16 | E[6] << 8 | E[7]), R).push(E[8] << 24 | E[9] << 16 | E[10] << 8 | E[11])
        },
        X = function(E, R, c, L) {
            for (c = (L = [], R | 0) - 1; 0 <= c; c--) L[(R | 0) - 1 - (c | 0)] = E >> 8 * c & 255;
            return L
        },
        nU = function(E, R, c, L) {
            L = (c = W(E), W(E)), B(L, X(N(E, c), R), E)
        },
        TT = function(E, R, c, L) {
            for (; R.j.length;) {
                c = (R.G = null, R.j.pop());
                try {
                    L = EI(R, c)
                } catch (O) {
                    l(O, R)
                }
                if (E && R.G) {
                    (E = R.G, E)(function() {
                        a(true, true, R)
                    });
                    break
                }
            }
            return L
        },
        wm = function(E, R) {
            return g[E](g.prototype, {
                parent: R,
                propertyIsEnumerable: R,
                prototype: R,
                console: R,
                floor: R,
                document: R,
                splice: R,
                replace: R,
                call: R,
                pop: R,
                length: R,
                stack: R
            })
        },
        h_ = function(E, R, c, L, O, J, h, S) {
            return h = g[L.U]((J = (R = [51, 27, -23, 78, 28, -90, (O = Y1, R), 37, -90, 16], E & 7), L).Ah), h[L.U] = function(q) {
                J += (S = q, 6) + 7 * E, J &= 7
            }, h.concat = function(q) {
                return (q = (q = c % 16 + 1, 5) * c * c * q - -1972 * S - 918 * c * S + J + 34 * S * S + (O() | 0) * q - q * S + R[J + 35 & 7] * c * q - 170 * c * c * S, q = R[q], S = void 0, R)[(J + 61 & 7) + (E & 2)] = q, R[J + (E & 2)] = 27, q
            }, h
        },
        a = function(E, R, c, L, O, J) {
            if (c.j.length) {
                c.qN = (c.i && 0(), E), c.i = true;
                try {
                    O = c.K(), c.I = O, c.H = 0, c.B = O, L = TT(E, c), J = c.K() - c.I, c.Y += J, J < (R ? 0 : 10) || 0 >= c.L-- || (J = Math.floor(J), c.N.push(254 >= J ? J : 254))
                } finally {
                    c.i = false
                }
                return L
            }
        },
        pU = function(E, R) {
            if (R = (E = null, x).trustedTypes, !R || !R.createPolicy) return E;
            try {
                E = R.createPolicy("bg", {
                    createHTML: zT,
                    createScript: zT,
                    createScriptURL: zT
                })
            } catch (c) {
                x.console && x.console.error(c.message)
            }
            return E
        },
        K = function(E, R) {
            R.j.splice(0, 0, E)
        },
        a4 = function(E, R, c, L, O) {
            for (L = (O = ((E.Ah = ((E.yp = D8, E).pz = ey, E.XL = E[P], wm)(E.U, {get: function() {
                        return this.concat()
                    }
                }), E).sl = g[E.U](E.Ah, {
                    value: {
                        value: {}
                    }
                }), []), 0); 128 > L; L++) O[L] = String.fromCharCode(L);
            ((K([(V(348, E, (V((V(390, E, ((V(461, ((V(452, E, (V(249, E, (V(364, (V((V(164, (V(188, ((V(234, E, (D(E, 139, [160, 0, (D(E, 115, (D(E, 279, (V(69, E, (V((V(61, (V(141, (D(E, (E.eG = (D(E, (V((D((V(437, (D(E, 485, (D(E, (V(229, E, (D(E, ((D(E, 408, (V(200, (V(402, E, (V(236, E, (D(E, (V(214, E, (V(0, ((V(23, (D(E, 293, (D(E, (D(E, 260, (E.Kz = (E.WF = (E.g = ((E.h = (E.P = [], void 0), E.X = void 0, E).W = void 0, E.T = (E.v = (E.C = 1, E.Y = 0, 8001), 0), (E.B = 0, E).L = (E.A = E, E.o = [], E.F = [], (E.H = void 0, E).N = [], (E.qN = false, E.Z = void 0, E.G = null, E).S = void 0, (E.j = [], E.O = void 0, E).l = ((E.ZX = 0, E).s = 0, L = (E.I = 0, window.performance || {}), false), E.hh = [], 25), 0), function(J) {
                this.A = J
            }), E.i = false, L.timeOrigin || (L.timing || {}).navigationStart || 0), 0)), 63), 0), E)), E), function(J, h, S, q, r, A, n) {
                for (q = (h = N(J, (n = (A = W(J), r = vO(J), ""), 224)), h.length), S = 0; r--;) S = ((S | 0) + (vO(J) | 0)) % q, n += O[h[S]];
                D(J, A, n)
            }), V)(406, E, function(J) {
                CU(3, J)
            }), E), function(J, h, S, q) {
                D(J, (S = (h = W(J), W(J)), q = W(J), q), N(J, h) || N(J, S))
            }), function() {})), 21), 0), function(J, h, S, q) {
                D(J, (S = N(J, (q = N(J, (h = (q = (S = W(J), W(J)), W(J)), q)), S)), h), S in q | 0)
            })), function(J, h, S) {
                0 != N(J, (h = N(J, (h = W((S = W(J), J)), h)), S)) && D(J, 260, h)
            })), E), function(J) {
                CU(4, J)
            }), 2048)), V)(128, E, function(J, h, S) {
                (h = N(J, (S = (h = W(J), W(J)), h)), h = t_(h), D)(J, S, h)
            }), 207), 467), function(J, h, S, q) {
                S = (h = I((q = W(J), J)), W(J)), D(J, S, N(J, q) >>> h)
            })), 416), x), [0, 0, 0])), E), function(J, h, S, q) {
                D(J, (S = (h = (q = (h = W(J), W(J)), N(J, h)), N(J, q)), q), S + h)
            }), E), 108, []), 317), E, function(J, h, S, q, r, A, n, z, T, v, w, p) {
                function H(t, Q) {
                    for (; r < t;) p |= I(J) << r, r += 8;
                    return Q = (r -= t, p) & (1 << t) - 1, p >>= t, Q
                }
                for (p = (n = W(J), r = 0), T = (H(3) | 0) + 1, S = H(5), h = [], q = w = 0; w < S; w++) z = H(1), h.push(z), q += z ? 0 : 1;
                for (v = (q = (w = ((q | 0) - 1).toString(2).length, 0), []); q < S; q++) h[q] || (v[q] = H(w));
                for (w = 0; w < S; w++) h[w] && (v[w] = W(J));
                for (A = []; T--;) A.push(N(J, W(J)));
                V(n, J, function(t, Q, d, k, LU) {
                    for (Q = (LU = (d = [], []), 0); Q < S; Q++) {
                        if (!h[k = v[Q], Q]) {
                            for (; k >= d.length;) d.push(W(t));
                            k = d[k]
                        }
                        LU.push(k)
                    }
                    t.Z = cO(t, (t.W = cO(t, A.slice()), LU))
                })
            }), 446), {}), 0), 278), 0), E), function(J) {
                nU(J, 4)
            }), E), function(J, h, S, q) {
                D(J, (q = (S = N(J, (q = (S = W(J), W(J)), h = W(J), S)), N)(J, q), h), +(S == q))
            }), 409), E, function(J, h) {
                (J = N((h = W(J), J.A), h), J[0]).removeEventListener(J[1], J[2], u)
            }), function(J, h, S, q, r) {
                for (r = (S = (q = vO((h = W(J), J)), 0), []); S < q; S++) r.push(I(J));
                D(J, h, r)
            })), Z(4))), [])), 0)]), function(J, h, S, q) {
                (h = (S = W(J), W(J)), q = W(J), J.A == J) && (q = N(J, q), h = N(J, h), N(J, S)[h] = q, 174 == S && (J.X = void 0, 2 == h && (J.S = e(32, J, false), J.X = void 0)))
            })), V)(209, E, function(J, h, S) {
                D(J, (S = (h = W(J), W)(J), S), "" + N(J, h))
            }), E), function(J, h, S, q, r) {
                h = N(J, (r = (S = N((r = (h = (q = W(J), W(J)), W(J)), S = W(J), J), S), q = N(J.A, q), N(J, r)), h)), 0 !== q && (S = R4(J, r, S, 1, q, h), q.addEventListener(h, S, u), D(J, 21, [q, h, S]))
            }), E), function(J) {
                nU(J, 1)
            }), 225), E, function(J, h, S, q, r, A) {
                G(h, J, false, true) || (q = N0(J.A), h = q.R, S = q.oe, A = q.D, r = A.length, q = q.El, h = 0 == r ? new S[h] : 1 == r ? new S[h](A[0]) : 2 == r ? new S[h](A[0], A[1]) : 3 == r ? new S[h](A[0], A[1], A[2]) : 4 == r ? new S[h](A[0], A[1], A[2], A[3]) : 2(), D(J, q, h))
            }), E.ae = 0, E), function(J, h, S) {
                G(h, J, false, true) || (h = W(J), S = W(J), D(J, S, function(q) {
                    return eval(q)
                }(lN(N(J.A, h)))))
            }), function(J, h) {
                h = N(J, W(J)), uN(h, J.A)
            })), function(J, h, S, q, r, A) {
                if (!G(h, J, true, true)) {
                    if ("object" == t_((A = (h = N((q = W((A = (r = W((h = W(J), J)), W(J)), J)), J), h), r = N(J, r), N(J, A)), J = N(J, q), h))) {
                        for (S in q = [], h) q.push(S);
                        h = q
                    }
                    for (A = 0 < A ? A : 1, S = 0, q = h.length; S < q; S += A) r(h.slice(S, (S | 0) + (A | 0)), J)
                }
            })), E).kt = 0, E), function(J) {
                WO(J, 4)
            }), V)(252, E, function(J, h, S, q, r) {
                S = N(J, (q = N(J, (r = N(J, (q = (r = (S = (h = W(J), W(J)), W(J)), W(J)), r)), q)), S)), D(J, h, R4(J, S, r, q))
            }), function(J, h, S, q) {
                !G(h, J, false, true) && (h = N0(J), S = h.R, q = h.oe, J.A == J || S == J.WF && q == J) && (D(J, h.El, S.apply(q, h.D)), J.B = J.K())
            })), 447), E, function(J, h, S, q) {
                if (S = J.hh.pop()) {
                    for (q = I(J); 0 < q; q--) h = W(J), S[h] = J.o[h];
                    ((S[108] = J.o[108], S)[408] = J.o[408], J).o = S
                } else D(J, 260, J.s)
            }), function(J, h, S, q) {
                h = (S = N(J, (q = W((h = (S = W(J), W(J)), J)), S)), N(J, h)), D(J, q, S[h])
            })), QE)], E), K)([M, c], E), K)([BO, R], E), a(true, true, E)
        },
        rm = function(E, R, c, L, O) {
            for (O = (E = E.replace(/\r\n/g, "\n"), []), R = L = 0; L < E.length; L++) c = E.charCodeAt(L), 128 > c ? O[R++] = c : (2048 > c ? O[R++] = c >> 6 | 192 : (55296 == (c & 64512) && L + 1 < E.length && 56320 == (E.charCodeAt(L + 1) & 64512) ? (c = 65536 + ((c & 1023) << 10) + (E.charCodeAt(++L) & 1023), O[R++] = c >> 18 | 240, O[R++] = c >> 12 & 63 | 128) : O[R++] = c >> 12 | 224, O[R++] = c >> 6 & 63 | 128), O[R++] = c & 63 | 128);
            return O
        },
        x = this || self,
        e = function(E, R, c, L, O, J, h, S, q, r, A, n, z, T) {
            if ((S = N(R, 260), S) >= R.s) throw [f, 31];
            for (L = (J = 0, R.XL.length), h = E, n = S; 0 < h;) T = n >> 3, r = n % 8, q = R.F[T], O = 8 - (r | 0), O = O < h ? O : h, c && (z = R, z.X != n >> 6 && (z.X = n >> 6, A = N(z, 174), z.O = A_(z.S, [0, 0, A[1], A[2]], z.X)), q ^= R.O[T & L]), n += O, J |= (q >> 8 - (r | 0) - (O | 0) & (1 << O) - 1) << (h | 0) - (O | 0), h -= O;
            return D(R, 260, (c = J, (S | 0) + (E | 0))), c
        },
        Xf = function(E, R, c) {
            if (3 == E.length) {
                for (c = 0; 3 > c; c++) R[c] += E[c];
                for (c = (E = [13, 8, 13, 12, 16, 5, 3, 10, 15], 0); 9 > c; c++) R[3](R, c % 3, E[c])
            }
        },
        t_ = function(E, R, c) {
            if ("object" == (c = typeof E, c))
                if (E) {
                    if (E instanceof Array) return "array";
                    if (E instanceof Object) return c;
                    if ("[object Window]" == (R = Object.prototype.toString.call(E), R)) return "object";
                    if ("[object Array]" == R || "number" == typeof E.length && "undefined" != typeof E.splice && "undefined" != typeof E.propertyIsEnumerable && !E.propertyIsEnumerable("splice")) return "array";
                    if ("[object Function]" == R || "undefined" != typeof E.call && "undefined" != typeof E.propertyIsEnumerable && !E.propertyIsEnumerable("call")) return "function"
                } else return "null";
            else if ("function" == c && "undefined" == typeof E.call) return "object";
            return c
        },
        G = function(E, R, c, L, O, J, h, S, q) {
            if ((R.A = ((q = (O = (h = (S = 4 == (J = (L || R.H++, 0 < R.g && R.i && R.qN && 1 >= R.T) && !R.W && !R.G && (!L || 1 < R.v - E) && 0 == document.hidden, R.H)) || J ? R.K() : R.B, h) - R.B, O) >> 14, R.S) && (R.S ^= q * (O << 2)), q) || R.A, R.C += q, S) || J) R.B = h, R.H = 0;
            if (!J || h - R.I < R.g - (c ? 255 : L ? 5 : 2)) return false;
            return (c = N(R, (R.v = E, L ? 63 : 260)), D(R, 260, R.s), R.j).push([m4, c, L ? E + 1 : E]), R.G = Y, true
        },
        vO = function(E, R) {
            return (R = I(E), R) & 128 && (R = R & 127 | I(E) << 7), R
        },
        o4 = function(E, R, c, L) {
            return N(c, (D(c, 260, (HO(((L = N(c, 260), c.F && L < c.s) ? (D(c, 260, c.s), uN(R, c)) : D(c, 260, R), E), c), L)), 446))
        },
        b = function(E, R, c, L, O, J) {
            if (!E.l) {
                if (3 < (c = N(((R = ((J = void 0, c && c[0] === f && (J = c[2], R = c[1], c = void 0), O = N(E, 108), 0) == O.length && (L = N(E, 63) >> 3, O.push(R, L >> 8 & 255, L & 255), void 0 != J && O.push(J & 255)), ""), c) && (c.message && (R += c.message), c.stack && (R += ":" + c.stack)), E), 408), c)) {
                    J = (R = (c -= ((R = R.slice(0, (c | 0) - 3), R).length | 0) + 3, rm(R)), E.A), E.A = E;
                    try {
                        B(279, X(R.length, 2).concat(R), E, 9)
                    } finally {
                        E.A = J
                    }
                }
                D(E, 408, c)
            }
        },
        Z8 = function(E, R) {
            return R[E] << 24 | R[(E | 0) + 1] << 16 | R[(E | 0) + 2] << 8 | R[(E | 0) + 3]
        },
        I = function(E) {
            return E.W ? KU(E.Z, E) : e(8, E, true)
        },
        zT = function(E) {
            return E
        },
        EI = function(E, R, c, L, O) {
            if (L = R[0], L == F) E.L = 25, E.V(R);
            else if (L == P) {
                O = R[1];
                try {
                    c = E.h || E.V(R)
                } catch (J) {
                    l(J, E), c = E.h
                }
                O(c)
            } else if (L == m4) E.V(R);
            else if (L == M) E.V(R);
            else if (L == BO) {
                try {
                    for (c = 0; c < E.P.length; c++) try {
                        O = E.P[c], O[0][O[1]](O[2])
                    } catch (J) {}
                } catch (J) {}(0, (E.P = [], R)[1])(function(J, h) {
                    E.u(J, true, h)
                }, function(J) {
                    K([yE], (J = !E.j.length, E)), J && a(true, false, E)
                })
            } else {
                if (L == C) return c = R[2], D(E, 433, R[6]), D(E, 446, c), E.V(R);
                L == yE ? (E.o = null, E.F = [], E.N = []) : L == QE && "loading" === x.document.readyState && (E.G = function(J, h) {
                    function S() {
                        h || (h = true, J())
                    }(x.document.addEventListener("DOMContentLoaded", S, (h = false, u)), x).addEventListener("load", S, u)
                })
            }
        },
        B = function(E, R, c, L, O, J) {
            if (c.A == c)
                for (O = N(c, E), 279 == E ? (E = function(h, S, q, r) {
                        if ((r = (S = O.length, S | 0) - 4 >> 3, O).Ul != r) {
                            q = [0, (r = (r << 3) - (O.Ul = r, 4), 0), J[1], J[2]];
                            try {
                                O.z$ = A_(Z8(r, O), q, Z8((r | 0) + 4, O))
                            } catch (A) {
                                throw A;
                            }
                        }
                        O.push(O.z$[S & 7] ^ h)
                    }, J = N(c, 485)) : E = function(h) {
                        O.push(h)
                    }, L && E(L & 255), c = 0, L = R.length; c < L; c++) E(R[c])
        },
        Y = x.requestIdleCallback ? function(E) {
            requestIdleCallback(function() {
                E()
            }, {
                timeout: 4
            })
        } : x.setImmediate ? function(E) {
            setImmediate(E)
        } : function(E) {
            setTimeout(E, 0)
        },
        WO = function(E, R, c, L) {
            for (c = (L = W(E), 0); 0 < R; R--) c = c << 8 | I(E);
            D(E, L, c)
        },
        V = function(E, R, c) {
            D(R, E, c), c[QE] = 2796
        },
        y, U, N = function(E, R) {
            if ((E = E.o[R], void 0) === E) throw [f, 30, R];
            if (E.value) return E.create();
            return (E.create(5 * R * R + 27 * R + -58), E).prototype
        },
        HO = function(E, R, c, L, O, J) {
            if (!R.h) {
                R.T++;
                try {
                    for (O = (J = (c = R.s, void 0), 0); --E;) try {
                        if ((L = void 0, R).W) J = KU(R.W, R);
                        else {
                            if (O = N(R, 260), O >= c) break;
                            J = N(R, (D(R, 63, O), L = W(R), L))
                        }
                        G((J && J[yE] & 2048 ? J(R, E) : b(R, 0, [f, 21, L]), E), R, false, false)
                    } catch (h) {
                        N(R, 207) ? b(R, 22, h) : D(R, 207, h)
                    }
                    if (!E) {
                        if (R.bG) {
                            HO((R.T--, 188885615751), R);
                            return
                        }
                        b(R, 0, [f, 33])
                    }
                } catch (h) {
                    try {
                        b(R, 22, h)
                    } catch (S) {
                        l(S, R)
                    }
                }
                R.T--
            }
        },
        N0 = function(E, R, c, L, O, J) {
            for (c = (O = E[gm] || {}, R = W(E), O.El = W(E), O.D = [], J = E.A == E ? (I(E) | 0) - 1 : 1, L = W(E), 0); c < J; c++) O.D.push(W(E));
            for (O.oe = N(E, L); J--;) O.D[J] = N(E, O.D[J]);
            return O.R = N(E, R), O
        },
        KU = function(E, R) {
            return (E = E.create().shift(), R).W.create().length || R.Z.create().length || (R.Z = void 0, R.W = void 0), E
        },
        u = {
            passive: true,
            capture: true
        },
        gm = String.fromCharCode(105, 110, 116, 101, 103, 67, 104, 101, 99, 107, 66, 121, 112, 97, 115, 115),
        BO = (m.prototype.bG = !(m.prototype.J = "toString", 1), []),
        f = (m.prototype.mf = (m.prototype.Vp = void 0, void 0), {}),
        M = [],
        m4 = [],
        F = [],
        yE = [],
        QE = [],
        P = [],
        C = [],
        Y1 = ((iN, Z, Sy, Xf, m.prototype).U = "create", U = m.prototype, U.nz = function(E, R, c, L, O, J) {
            for (O = (c = 0, []), J = 0; J < E.length; J++)
                for (c += R, L = L << R | E[J]; 7 < c;) c -= 8, O.push(L >> c & 255);
            return O
        }, U.DX = function(E, R, c, L, O) {
            for (L = O = 0; L < E.length; L++) O += E.charCodeAt(L), O += O << 10, O ^= O >> 6;
            return (O = (E = (O += O << 3, O ^= O >> 11, O + (O << 15) >>> 0), new Number(E & (1 << R) - 1)), O)[0] = (E >>> R) % c, O
        }, void 0),
        g = f.constructor;
    (((U.K = (window.performance || {}).now ? function() {
        return this.Kz + window.performance.now()
    } : function() {
        return +new Date
    }, U.th = (U.dC = function() {
        return Math.floor(this.Y + (this.K() - this.I))
    }, function() {
        return Math.floor(this.K())
    }), U).SG = function(E, R, c) {
        return E ^ (R ^= R << 13, R ^= R >> 17, (R = (R ^ R << 5) & c) || (R = 1), R)
    }, U).u = function(E, R, c, L, O) {
        if (c = "array" === t_(c) ? c : [c], this.h) E(this.h);
        else try {
            O = [], L = !this.j.length, K([F, O, c], this), K([P, E, O], this), R && !L || a(R, true, this)
        } catch (J) {
            l(J, this), E(this.h)
        }
    }, m.prototype).V = function(E, R) {
        return R = (Y1 = (E = {}, function() {
                return R == E ? -58 : -12
            }), {}),
            function(c, L, O, J, h, S, q, r, A, n, z, T, v, w, p) {
                R = (n = R, E);
                try {
                    if (S = c[0], S == M) {
                        z = c[1];
                        try {
                            for (h = (T = (p = [], atob(z)), v = 0); v < T.length; v++) A = T.charCodeAt(v), 255 < A && (p[h++] = A & 255, A >>= 8), p[h++] = A;
                            D(this, (this.s = (this.F = p, this.F.length) << 3, 174), [0, 0, 0])
                        } catch (H) {
                            b(this, 17, H);
                            return
                        }
                        HO(8001, this)
                    } else if (S == F) c[1].push(N(this, 139).length, N(this, 115).length, N(this, 408), N(this, 279).length), D(this, 446, c[2]), this.o[479] && o4(8001, N(this, 479), this);
                    else {
                        if (S == P) {
                            this.A = (J = (O = X(((p = c[2], N(this, 139).length) | 0) + 2, 2), this.A), this);
                            try {
                                r = N(this, 108), 0 < r.length && B(139, X(r.length, 2).concat(r), this, 10), B(139, X(this.C, 1), this, 109), B(139, X(this[P].length, 1), this), T = 0, T += N(this, 278) & 2047, T -= (N(this, 139).length | 0) + 5, w = N(this, 279), 4 < w.length && (T -= (w.length | 0) + 3), 0 < T && B(139, X(T, 2).concat(Z(T)), this, 15), 4 < w.length && B(139, X(w.length, 2).concat(w), this, 156)
                            } finally {
                                this.A = J
                            }
                            if (((h = Z(2).concat(N(this, 139)), h)[1] = h[0] ^ 6, h)[3] = h[1] ^ O[0], h[4] = h[1] ^ O[1], L = this.jG(h)) L = "!" + L;
                            else
                                for (L = "", T = 0; T < h.length; T++) q = h[T][this.J](16), 1 == q.length && (q = "0" + q), L += q;
                            return N((D(this, 408, (N(this, (N(this, (v = L, 139)).length = p.shift(), 115)).length = p.shift(), p.shift())), this), 279).length = p.shift(), v
                        }
                        if (S == m4) o4(c[2], c[1], this);
                        else if (S == C) return o4(8001, c[1], this)
                    }
                } finally {
                    R = n
                }
            }
    }();
    var ey, D8 = (m.prototype.rC = ((m.prototype.jG = function(E, R, c, L) {
            if (c = window.btoa) {
                for (L = 0, R = ""; L < E.length; L += 8192) R += String.fromCharCode.apply(null, E.slice(L, L + 8192));
                E = c(R).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "")
            } else E = void 0;
            return E
        }, m.prototype).xt = 0, 0), m.prototype[BO] = [0, 0, 1, 1, 0, 1, 1], /./),
        x1 = M.pop.bind(m.prototype[F]),
        lN = function(E, R) {
            return (R = pU()) && 1 === E.eval(R.createScript("1")) ? function(c) {
                return R.createScript(c)
            } : function(c) {
                return "" + c
            }
        }(((ey = (D8[m.prototype.J] = x1, wm(m.prototype.U, {get: x1
        })), m).prototype.G$ = void 0, x));
    (40 < (y = x.botguard || (x.botguard = {}), y.m) || (y.m = 41, y.bg = J_, y.a = sI), y).ABO_ = function(E, R, c) {
        return [(c = new m(E, R), function(L) {
            return q0(c, L)
        })]
    };
}).call(this);
                                    

#3 JavaScript::Eval (size: 22, repeated: 1) - SHA256: d651a2902f113132877a12117727707b1031e8f12615f8a3a0ad138ea5eb79ea

                                        0,
function(J) {
    WO(J, 2)
}
                                    

#4 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 6e4c074bba968f3a2899edcbccf9e893ebdad7a5a533463e4d9630f28f3baed1

                                        (a = 0) => {
    let b;
    const c = class {};
}
                                    

#5 JavaScript::Eval (size: 22, repeated: 1) - SHA256: 531ec07d216cb5810b6ebf63f292c8c1759049139e175d847973b17cd08238fa

                                        0,
function(J) {
    WO(J, 1)
}
                                    

#6 JavaScript::Eval (size: 62, repeated: 1) - SHA256: 9a40ef33f7700831131770a8048c5a08faa312d7311fc2c6ced1909ea6e458ce

                                        0,
function(J, h, S) {
    S = (h = (S = W(J), W)(J), J.o)[S] && N(J, S), D(J, h, S)
}
                                    

Executed Writes (0)



HTTP Transactions (116)


Request Response
                                        
                                            GET /2016/01/aiib-attracts-nations-from-east-west.html HTTP/1.1 
Host: rightway-tan.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         142.250.74.161
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Location: https://rightway-tan.blogspot.com/2016/01/aiib-attracts-nations-from-east-west.html
Content-Encoding: gzip
Date: Thu, 22 Sep 2022 12:50:16 GMT
Expires: Thu, 22 Sep 2022 12:50:16 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 220
Server: GSE


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   220
Md5:    d870d51a10487dbcad21767c2d158b21
Sha1:   a219e4cac15cd327d1c2c74949fbb6abb17555dc
Sha256: ef8676292036bbf5d1e46aa6efbe4a4627851c454382c75984ae537f188a58c1

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 22 Sep 2022 12:13:58 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: IEZi1sHXB94YceNKlehcA5MvQV8Dx01TSq-UGM-GAA9X9Md3yoaKzA==
Age: 2178


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    2d12f67fe57a87e7366b662d153a5582
Sha1:   d7b02d81cc74f24a251d9363e0f4b0a149264ec1
Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "35BAAAE7B3CE3110EBB2B075881CFAB55ECF3EAB57D834283FD18AC691B41FA2"
Last-Modified: Tue, 20 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3264
Expires: Thu, 22 Sep 2022 13:44:40 GMT
Date: Thu, 22 Sep 2022 12:50:16 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.35
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Thu, 22 Sep 2022 04:35:15 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: MrzOO4pYOVXLPioC2lI5KGr05UKUNr8_Ed0avc81L30_jjfvdIIzAQ==
age: 29702
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 22 Sep 2022 12:50:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Thu, 22 Sep 2022 12:50:16 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Thu, 22 Sep 2022 12:03:22 GMT
Expires: Thu, 22 Sep 2022 12:11:58 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Ezp13efdOJeqz98gkKlvEpWXck-RUEWfeFfy6m56RHtXSCG4akDjOg==
Age: 2814


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5541
Cache-Control: 'max-age=158059'
Date: Thu, 22 Sep 2022 12:50:16 GMT
Last-Modified: Thu, 22 Sep 2022 11:17:55 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ghZRjwS7Nj3yFUeQKiyRDg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         35.164.146.235
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: GpQQA0eSy5wGR/LdgfVMMPa4G5A=

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 22 Sep 2022 12:50:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /2016/01/aiib-attracts-nations-from-east-west.html HTTP/1.1 
Host: rightway-tan.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
expires: Thu, 22 Sep 2022 12:50:17 GMT
date: Thu, 22 Sep 2022 12:50:17 GMT
cache-control: private, max-age=0
last-modified: Tue, 20 Sep 2022 15:11:02 GMT
etag: W/"671e9375df513ba3888cc198cbeda79545b0c8fbc8152dd64e312c36c32aefb8"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 25990
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2036)
Size:   25990
Md5:    66bc47e6baea82b5645f9dcb4e73f9fe
Sha1:   c9899374e215c0263373ea8e9601c96466197d38
Sha256: 025e1c7c4b61474311d2f3017a1b13117b791e49935c7276066bfccdcf58a9d4

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 22 Sep 2022 12:50:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 22 Sep 2022 12:50:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 22 Sep 2022 12:50:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /static/v1/widgets/2975350028-css_bundle_v2.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.58.207.201
HTTP/2 200 OK
content-type: text/css
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 7776
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Sep 2022 07:10:12 GMT
expires: Fri, 22 Sep 2023 07:10:12 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 21 Sep 2022 22:56:47 GMT
age: 20405
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (35959)
Size:   7776
Md5:    5aa2d3297bdc86bc81322aedecbb5e79
Sha1:   1c0a3c007e41726e167e79b70ddea76198650884
Sha256: feae1fac625d0f30b5f10fa00b62df1a5600cd2178062c427e55f289b29cc630
                                        
                                            GET /img/blogger_logo_round_35.png HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         216.58.207.201
HTTP/2 200 OK
content-type: image/png
                                        
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2531
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Sep 2022 06:12:46 GMT
expires: Thu, 29 Sep 2022 06:12:46 GMT
cache-control: public, max-age=604800
last-modified: Wed, 21 Sep 2022 20:54:01 GMT
age: 23851
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced\012- data
Size:   2531
Md5:    838622483cbfed35380b4705f19d7cca
Sha1:   7de684136affc969a24d61927afc18905cf2fc36
Sha256: 183923f8c8c3960dce8ad9722cf55a30d19b321b721741bd9e2ab6ae1f1ae72a
                                        
                                            GET /js/platform.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.174
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20361
date: Thu, 22 Sep 2022 12:50:17 GMT
expires: Thu, 22 Sep 2022 12:50:17 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "40c22a9ccbd70870"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1277)
Size:   20361
Md5:    b5a31516be83fe4f962609045d824f88
Sha1:   939a49a9858bf23561279f9ca2d1941d3256c66f
Sha256: edb661aa461800e97e3847608a8b2d81cfe345f69a6f84abaa001d8a60500328
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 22 Sep 2022 12:50:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /static/v1/widgets/1416043673-widgets.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         216.58.207.201
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56913
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 02:21:33 GMT
expires: Thu, 21 Sep 2023 02:21:33 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 21 Sep 2022 00:51:51 GMT
age: 124124
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2221)
Size:   56913
Md5:    c6aef9cbd2abf926a23970b70f8a24c2
Sha1:   78972b4f41a7d2580c383da41e3a472c4cfc647a
Sha256: 111111066b8f3fddcd24cedce8c4e8b93a1d9e9b8e3f5f2959172da5adda14b6
                                        
                                            GET /img/icon18_email.gif HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         216.58.207.201
HTTP/2 200 OK
content-type: image/gif
                                        
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 164
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Sep 2022 05:17:17 GMT
expires: Thu, 29 Sep 2022 05:17:17 GMT
cache-control: public, max-age=604800
last-modified: Wed, 21 Sep 2022 06:52:17 GMT
age: 27180
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 18 x 13\012- data
Size:   164
Md5:    36b9f993db1b953f3b9b08040aaf9af4
Sha1:   18248661b307586dc291fd2dff4bb59cf7579475
Sha256: 1258cbe1e2900ec3df11a83a6bb6008d7a833f783a6df80b0d5d45a052ac1466
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 22 Sep 2022 12:50:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /blogger_img_proxy/ANbyha0tXVerZlhWNGKcCDDLmVwDz0BGWKotTkDAAhm_83Zy5zwTElHIsGMEQLr3139zZQIZGVl5x-nNftjUrs9A9IaCDTRz5fLRss24p5-QAlhUFj0Fzw=w72-h72-n-k-no-nu HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.1
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
expires: Fri, 23 Sep 2022 12:50:17 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 22 Sep 2022 12:50:17 GMT
server: fife
content-length: 2714
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 72x72, components 3\012- data
Size:   2714
Md5:    0944f1403ebebe9ad55f4090a8f631d2
Sha1:   7f007eb65bb55f858fdd3f1bdba39b64a42d184b
Sha256: 54c6ec058d543af101e4b04565764a4d2b1a4513e54c71d76f4d8a30277a5835
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 22 Sep 2022 12:50:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /img/widgets/subscribe-yahoo.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         216.58.207.201
HTTP/2 200 OK
content-type: image/png
                                        
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Sep 2022 05:58:50 GMT
expires: Thu, 29 Sep 2022 05:58:50 GMT
cache-control: public, max-age=604800
last-modified: Thu, 22 Sep 2022 04:51:59 GMT
age: 24687
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 91 x 17, 8-bit colormap, non-interlaced\012- data
Size:   580
Md5:    79f602b6ac18bee79b4e2353a6674010
Sha1:   28accf82263aa1a11bb821439d4d185865662530
Sha256: bbf9b924cc32bff4738bb54d86905476349f90c8b20f748633e56f64379d553e
                                        
                                            GET /blogger_img_proxy/ANbyha0QGjfnFh-rwlhfrZg2-BhNJ3tjw7ybcQGG6xC52cYxNt5YvBuOJcY57HQx2ed5PGh5QT_TqvOvRU2RqBQiD91kZI64uOxEdiWaNBmvLmL7zwVrJQ=w72-h72-n-k-no-nu HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.1
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
expires: Fri, 23 Sep 2022 12:50:17 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 22 Sep 2022 12:50:17 GMT
server: fife
content-length: 2965
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 72x72, components 3\012- data
Size:   2965
Md5:    95fc90d9509f69f455ae70c6942e7ea7
Sha1:   2225c48a4fbacff657628a0896faa92b166333ae
Sha256: b7165b734a09436b3546ba558be9ec2c981128a28c3c1b718cb65e8040b00b2b
                                        
                                            GET /img/icon_feed12.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         216.58.207.201
HTTP/2 200 OK
content-type: image/png
                                        
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 500
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Sep 2022 08:37:14 GMT
expires: Thu, 29 Sep 2022 08:37:14 GMT
cache-control: public, max-age=604800
last-modified: Thu, 22 Sep 2022 06:54:41 GMT
age: 15183
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 12 x 12, 8-bit colormap, non-interlaced\012- data
Size:   500
Md5:    44e7355a788fd1082deff0018883758e
Sha1:   50e3a28a44978e85d13c30522e0c71c8d0b24675
Sha256: 3cd341f37642f8a58b0fe14c2645913449c0ffe10be6ba0986275bfef29bc319
                                        
                                            GET /img/icon18_edit_allbkg.gif HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         216.58.207.201
HTTP/2 200 OK
content-type: image/gif
                                        
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 162
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 18:39:38 GMT
expires: Wed, 28 Sep 2022 18:39:38 GMT
cache-control: public, max-age=604800
last-modified: Wed, 21 Sep 2022 13:53:25 GMT
age: 65439
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 18 x 18\012- data
Size:   162
Md5:    c991641178ff05adf0d004298b5eafa9
Sha1:   d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
Sha256: ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
                                        
                                            GET /blogger_img_proxy/ANbyha2NYevlaXMmGW31vfENwW-vPVmpgipWkHBLj1faUs4xrOtz7gQ1Lsq8Q3wl9qCFXP0rjSGKD7MN1sLVNak7alUCSKbGbf0s9iSBoBVfDkYwjSo4Bx2G6S6qlUYokCc=s0-d HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.1
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
                                        
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 22 Sep 2022 12:50:17 GMT
server: fife
content-length: 1715
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Size:   1715
Md5:    23da6fc8c89dc4c94bb7a6d73b76c932
Sha1:   c2708feadcde9956c1bf2d945b2c64e3ef057953
Sha256: 057ed6d06587aef4cdab778b78358083d52eab4015cad0b61709c34e2975f211
                                        
                                            GET /img/widgets/arrow_dropdown.gif HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         216.58.207.201
HTTP/2 200 OK
content-type: image/gif
                                        
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 141
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 22:20:08 GMT
expires: Wed, 28 Sep 2022 22:20:08 GMT
cache-control: public, max-age=604800
last-modified: Wed, 21 Sep 2022 03:52:09 GMT
age: 52209
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 13 x 10\012- data
Size:   141
Md5:    2964a07d60a4e76b299130fb1b4115f6
Sha1:   3b72dcc19f3ad685513eaba612e07e0ed495f2e1
Sha256: 28ab89f0285c48d2faed701905c185c302f2b389584a52ceaa76a91ea64dc3a7
                                        
                                            GET /pagead/js/google_top_exp.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.2
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 67
x-xss-protection: 0
date: Wed, 21 Sep 2022 20:42:43 GMT
expires: Wed, 05 Oct 2022 20:42:43 GMT
cache-control: public, max-age=1209600
age: 58054
etag: 13036835877489095579
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   67
Md5:    9bbc3ca32ec951a484589ce0e6b4db73
Sha1:   753d6f6183b33b2dee5dde2208fca91c17f5bb13
Sha256: b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
                                        
                                            GET /blogger_img_proxy/ANbyha1N-Be_bl_WH0pRhSpsayz7cQ9mUi4B-MM1D3p8PkCIt2evU50BSiGBh1Xj5twiYxeXCDXcL-VrGk6FKI_tNkHe8_lxEuV22T77pbtRDa0iTKRmbialsEBYkrXKbkjgsHA=s0-d HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.1
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
                                        
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 22 Sep 2022 12:50:17 GMT
server: fife
content-length: 1719
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Size:   1719
Md5:    ca60a39107b1f0ae4f9e492fde85dad3
Sha1:   92e29ea3c4a4f9f09951d9d1a3758e93ec6956cb
Sha256: 611b613c329761658c6345060a860d0ea21eb9d0fcbfc2b1e7febe9f617595e7
                                        
                                            GET /img/widgets/subscribe-netvibes.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         216.58.207.201
HTTP/2 200 OK
content-type: image/png
                                        
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 1445
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Sep 2022 01:25:18 GMT
expires: Thu, 29 Sep 2022 01:25:18 GMT
cache-control: public, max-age=604800
last-modified: Wed, 21 Sep 2022 22:56:47 GMT
age: 41099
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 91 x 17, 8-bit colormap, non-interlaced\012- data
Size:   1445
Md5:    c52a5f4ecb6be5d7e93b23ef4122ee4e
Sha1:   4e698a5f455daf3a8ea1e219b1998079f0546716
Sha256: 71b8ad79c680b3e5d452a792c3b418b23f739a0a34005e0f37ec674f4c78cb5d
                                        
                                            GET /blogger_img_proxy/ANbyha1qtr6Gk-Tx_MJeRRG21Jq4ZMHw_EzcI61OZ9gwqBXgqiK3kAA9GAeG7b2GdTayLDRCFI3adXIj6tpZc9rG-Rrzh3D5-Zmt5puJtxEXpQy0m2GIOckXkDrjj9fiqQ=s0-d HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.1
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
                                        
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 22 Sep 2022 12:50:17 GMT
server: fife
content-length: 1714
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Size:   1714
Md5:    5f669aa98e53e6b6bc3cc04240c5db2c
Sha1:   44c5b78ad402c2caa6625e722f63a27491b78b49
Sha256: e6ac3cb7e79218100875ff7c5947f7e69643d153cf8e6a18746aaa6c56ea4cd1
                                        
                                            GET /blogblog/data/1kt/watermark/body_background_birds.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         216.58.207.201
HTTP/2 200 OK
content-type: image/png
                                        
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 22568
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 15:48:10 GMT
expires: Wed, 28 Sep 2022 15:48:10 GMT
cache-control: public, max-age=604800
last-modified: Wed, 21 Sep 2022 14:56:34 GMT
age: 75727
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 300 x 300, 2-bit colormap, non-interlaced\012- data
Size:   22568
Md5:    5cd8cda0e75b359eb8f15dc83b0c5c29
Sha1:   86c99fbb62aadacb3ebd3f948d345b917f65253f
Sha256: 0220dbf46954d4efe2e91d261dd3d40f06e6402c722cc5580129af64bddc58f9
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 22 Sep 2022 12:50:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /static/v1/jsbin/3262169375-comment_from_post_iframe.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.58.207.201
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6499
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Sep 2022 08:22:29 GMT
expires: Fri, 22 Sep 2023 08:22:29 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 21 Sep 2022 20:54:01 GMT
age: 16068
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1264)
Size:   6499
Md5:    30af015884191ce4fe52ce1e707baed9
Sha1:   faa1418efa036704d31eb90f4fbd82de456b81b7
Sha256: 0456cf81299c957c8e54dabb00b4d6d96b76be729b1e112d478b34ba56d8059d
                                        
                                            GET /_/scs/abc-static/_/js/k=gapi.lb.en.z9QjrzsHcOc.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/cb=gapi.loaded_0?le=scs HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.174
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 57995
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 18 Sep 2022 07:25:35 GMT
expires: Mon, 18 Sep 2023 07:25:35 GMT
cache-control: public, max-age=31536000
age: 365082
last-modified: Sat, 30 Jul 2022 15:17:53 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (580)
Size:   57995
Md5:    d70fcc84d705c565b31a5835c0938d5b
Sha1:   d28e5dc9fcc6239d67986df3205468072023d2d7
Sha256: 1d558c94793446aa6a7832dde0c39ed7d9c77fd963ffb738c460e4f7369a7f4e
                                        
                                            GET /blogblog/data/1kt/watermark/body_overlay_birds.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         216.58.207.201
HTTP/2 200 OK
content-type: image/png
                                        
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 3523
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 18:40:24 GMT
expires: Wed, 28 Sep 2022 18:40:24 GMT
cache-control: public, max-age=604800
last-modified: Wed, 21 Sep 2022 15:52:58 GMT
age: 65393
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 386 x 121, 8-bit colormap, non-interlaced\012- data
Size:   3523
Md5:    031c64f442b967c59b28cdc8b03ac349
Sha1:   59f743959d06ced56f36b5e262c76e6cbfef9720
Sha256: 4bff767832f0cae6ed521f2436871dba9c4e1d036efd4889457b9e797738154a
                                        
                                            GET /blogblog/data/1kt/watermark/post_background_birds.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         216.58.207.201
HTTP/2 200 OK
content-type: image/png
                                        
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 103
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 21:42:16 GMT
expires: Wed, 28 Sep 2022 21:42:16 GMT
cache-control: public, max-age=604800
last-modified: Wed, 21 Sep 2022 02:52:11 GMT
age: 54481
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 10 x 10, 8-bit colormap, non-interlaced\012- data
Size:   103
Md5:    7928cb1e4fb733117a1479c289f29d92
Sha1:   bd1bbe65951f64f44ec85910877dabd35c6dbc07
Sha256: 8a44923efeda7708df28a77f7e01bb10be3831d112891172950fe8c2d6b2566e
                                        
                                            GET /pagead/js/adsbygoogle.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.2
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
date: Thu, 22 Sep 2022 12:50:17 GMT
expires: Thu, 22 Sep 2022 12:50:17 GMT
cache-control: private, max-age=3600
etag: 8612242307018977595
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 58009
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2903)
Size:   58009
Md5:    c2d883ace03e1d1a90fbca419e63a8b4
Sha1:   2c79c647df6c01626005a3fcb71d490c5995da10
Sha256: a53d631c86faa983709a16afaed6dc61d166ed919633a20fad474d769bd402b3
                                        
                                            GET /vi/6PbkFQZRjEM/default.jpg HTTP/1.1 
Host: img.youtube.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.78
HTTP/2 200 OK
content-type: image/jpeg
                                        
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 4625
date: Thu, 22 Sep 2022 12:50:17 GMT
expires: Thu, 22 Sep 2022 14:50:17 GMT
cache-control: public, max-age=7200
etag: "1452941306"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3\012- data
Size:   4625
Md5:    2689ea4a5682e312de0a9db1aa1f2bd5
Sha1:   797b34da6ec2e0f556a7bd7e189310229cf55422
Sha256: 59114bc7f0156ec2fbcfba5a77caedbd8d276515e92aaf922ee24b2678fc77dc
                                        
                                            GET /img/share_buttons_20_3.png HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         216.58.207.201
HTTP/2 200 OK
content-type: image/png
                                        
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 5080
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Sep 2022 05:59:46 GMT
expires: Thu, 29 Sep 2022 05:59:46 GMT
cache-control: public, max-age=604800
last-modified: Wed, 21 Sep 2022 13:53:25 GMT
age: 24631
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced\012- data
Size:   5080
Md5:    ad9999106d5f550920b586e8e1704e5a
Sha1:   93fd02c51166402a41f96509cd0ca3fb917877dd
Sha256: 3829a5b2ade7cfc416c80b8f3df71e49e68672875f025d525223978f5cee3fd3
                                        
                                            GET /charts/loader.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: gzip
access-control-allow-credentials: true
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gviz
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gviz"
report-to: {"group":"gviz","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gviz"}]}
content-length: 19937
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Sep 2022 12:43:46 GMT
expires: Thu, 22 Sep 2022 13:43:46 GMT
cache-control: public, max-age=3600
last-modified: Wed, 23 Jun 2021 18:41:30 GMT
age: 391
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2134)
Size:   19937
Md5:    f3341efa0432876b1697ccec98c33b01
Sha1:   55044e79afbe25d119b7b87dc7b5d1b3ec0c607a
Sha256: 6672904faeb4f203e0109279aa99d88f9e8690d2d696d80309ef50a974f88c77
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C7C343B86640657ED68C70CA0C9FE150B8F8C9ED8CB32428D52FD161FC6F2477"
Last-Modified: Wed, 21 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14949
Expires: Thu, 22 Sep 2022 16:59:26 GMT
Date: Thu, 22 Sep 2022 12:50:17 GMT
Connection: keep-alive

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 22 Sep 2022 12:50:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /dyn-css/authorization.css?targetBlogID=3843727205859859637&zx=c3250466-6698-4f6e-b37f-78c843326267 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         216.58.207.201
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                        
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 22 Sep 2022 12:50:17 GMT
last-modified: Thu, 22 Sep 2022 12:50:17 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  very short file (no magic)
Size:   21
Md5:    a62e4d501434033d5d177e67d3aafdd0
Sha1:   34f7300c9ed47334cf10826d57af785321e3138b
Sha256: b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 22 Sep 2022 12:50:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 22 Sep 2022 12:50:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /vi/oHMMmBDeyik/default.jpg HTTP/1.1 
Host: img.youtube.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.78
HTTP/2 200 OK
content-type: image/jpeg
                                        
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 4250
date: Thu, 22 Sep 2022 12:50:17 GMT
expires: Thu, 22 Sep 2022 14:50:17 GMT
cache-control: public, max-age=7200
etag: "1453179786"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3\012- data
Size:   4250
Md5:    e68a20c9d7b1f38093574062be9128d4
Sha1:   7ece0c541a0428707da80f31cd148d22e8b24899
Sha256: ec84fcba09d76bb0e8c525a84eb4cfe6df48848f228a64ffb699af5a61460475
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C7C343B86640657ED68C70CA0C9FE150B8F8C9ED8CB32428D52FD161FC6F2477"
Last-Modified: Wed, 21 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14949
Expires: Thu, 22 Sep 2022 16:59:26 GMT
Date: Thu, 22 Sep 2022 12:50:17 GMT
Connection: keep-alive

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 22 Sep 2022 12:50:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /vi/z149vLKn9d8/hqdefault.jpg HTTP/1.1 
Host: i.ytimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.86
HTTP/2 200 OK
content-type: image/jpeg
                                        
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 25914
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Sep 2022 11:30:23 GMT
expires: Thu, 22 Sep 2022 13:30:23 GMT
cache-control: public, max-age=7200
age: 4794
etag: "1628092007"
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3\012- data
Size:   25914
Md5:    e8fd315723e02c8b67da58a96d9f428a
Sha1:   f3b597052b3b3aeb7c7b7a832151310343c976c8
Sha256: f6ad229b3d72afd3da9b50c1d92ca9caacba75815b1b1c298ab529196fa8efaf
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 22 Sep 2022 12:50:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /0/0/6.js?i=0tkahjp5mwu&m=7&s=320&c=e63100&cr1=ffffff&f=arial&l=0&bv=90&lx=-420&ly=420&hi=20&he=7&hc=a8ddff&rs=80 HTTP/1.1 
Host: ra.revolvermaps.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         185.44.104.99
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 22 Sep 2022 12:50:17 GMT
Server: Apache
Last-Modified: Fri, 23 Jun 2017 15:59:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=31536000
Content-Length: 975
Keep-Alive: timeout=4, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (1829), with no line terminators
Size:   975
Md5:    6f2cff312815e129e65971e1f7aa0b6c
Sha1:   f07651ab0ae9b95ef1007782e8d1bbf0fae53f66
Sha256: 26a7a91762ec29a98d90e879584a0218e49e6733c98504d5c15d156f39d72446
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 22 Sep 2022 12:50:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /r.js HTTP/1.1 
Host: jk.revolvermaps.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         185.44.104.99
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Thu, 22 Sep 2022 12:50:17 GMT
Server: Apache
Content-Length: 202
Keep-Alive: timeout=4, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   202
Md5:    2492f7ec93ae23151125ecffdf52af21
Sha1:   9a64e7e59d3161994d437a7aece39f9b32cbf7b2
Sha256: a919e8c6eb303b9d327b089e20e2960cd885836cd236500371d998fa78333362
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 22 Sep 2022 12:50:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 22 Sep 2022 12:50:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 22 Sep 2022 12:50:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /pagead/managed/js/adsense/m202209080101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-7113504168792126&plah=rightway-tan.blogspot.com HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.2
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Thu, 22 Sep 2022 12:50:17 GMT
expires: Thu, 22 Sep 2022 12:50:17 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
etag: 6828512385564138149
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 124743
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (5015)
Size:   124743
Md5:    93295469e0f7e5bcddcaae63a1fa78e0
Sha1:   34b8f2ceb729649a0964b0bd94f632d8951d8ea8
Sha256: 8a7ff33e7d12df400a2099ff51fc5860865c0507cb3c65adb830563feca56be1
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 22 Sep 2022 12:50:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 22 Sep 2022 12:50:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /pagead/html/r20220919/r20190131/zrt_lookup.html HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.98
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 4420
x-xss-protection: 0
date: Wed, 21 Sep 2022 21:20:10 GMT
expires: Wed, 05 Oct 2022 21:20:10 GMT
cache-control: public, max-age=1209600
age: 55807
etag: 9671129459699598864
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1731)
Size:   4420
Md5:    682bf699cccbc0ff817e1fcb7b95262a
Sha1:   11ad3edf0008f52b733c2d6d7199e1f052318d58
Sha256: bd42f773d589f85cf6884d7893746d5d4e0c082f78e1c80511cf3aefa1c69a0f
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 22 Sep 2022 12:50:17 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 19 Sep 2022 11:32:38 GMT
Expires: Mon, 26 Sep 2022 11:32:37 GMT
Etag: "ceae2574b5d187f1e219e0461909d1d8e11f9908"
Cache-Control: max-age=340339,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74eb2a5e28fab511-OSL

                                        
                                            GET /blogger_img_proxy/ANbyha0pJl6qeM8BI6zEpiX0Pf5FpolgpJTO0_gzfzPWu_iqoqyYI5jnZtINP_yk8JXU_ywI7FZJg7QIeZSDJM1TaaFYbyTWFPTPqtl35GVStY69fNgGdA=s0-d HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.1
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
                                        
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 22 Sep 2022 12:50:17 GMT
server: fife
content-length: 1702
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Size:   1702
Md5:    72ca88bb0477596f959d7e074a38f0e1
Sha1:   ec7f2027d9799e4340d9d7e25666fd301572b965
Sha256: 6ad29e0bd09fd5b34bab3cd8b0fda75364953307687055db22680087d95338f5
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 22 Sep 2022 12:50:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /r.js HTTP/1.1 
Host: jk.revolvermaps.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         185.44.104.99
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Thu, 22 Sep 2022 12:50:18 GMT
Server: Apache
Content-Length: 202
Keep-Alive: timeout=4, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   202
Md5:    2492f7ec93ae23151125ecffdf52af21
Sha1:   9a64e7e59d3161994d437a7aece39f9b32cbf7b2
Sha256: a919e8c6eb303b9d327b089e20e2960cd885836cd236500371d998fa78333362
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 22 Sep 2022 12:50:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 22 Sep 2022 12:50:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /translate_static/css/translateelement.css HTTP/1.1 
Host: translate.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.74
HTTP/2 200 OK
content-type: text/css
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 3619
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Sep 2022 12:28:41 GMT
expires: Thu, 22 Sep 2022 13:28:41 GMT
cache-control: public, max-age=3600
age: 1297
last-modified: Wed, 17 Aug 2022 23:38:00 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (18670)
Size:   3619
Md5:    897ba9a21d9625286674da769dacc2e2
Sha1:   84b4923ab7dee562395160824d53496314499b77
Sha256: 696cbf5c2f3f1efae555562b72abbbb22bed02eff03d62074555cab241190ae0
                                        
                                            GET /comment/frame/3843727205859859637?po=7518444995837190993&hl=en-GB&blogspotRpcToken=4912774 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         216.58.207.201
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
x-ua-compatible: IE=edge
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 22 Sep 2022 12:50:17 GMT
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: require-trusted-types-for 'script';report-uri /_/BloggerCommentUi/cspreport, script-src 'nonce-PD5E5wYtiSAcKL5uSJLebw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/BloggerCommentUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/BloggerCommentUi/cspreport/allowlist
report-to: {"group":"BloggerCommentUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/BloggerCommentUi/external"}]}
cross-origin-resource-policy: same-site
cross-origin-opener-policy: same-origin; report-to="BloggerCommentUi"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
set-cookie: NID=511=YxEii7vDvhGbMP7wSwFZ82CRsO_V-lVIEHc83o81l5tIOyUsH2CwRnl2WhicgWsNQ3QA52Pn0mxo6Y6zPqOixfrKr30Isn2WEOWb9gn7WxDsXmTg6eAFUugYHQxkUd13ani7gXQ3_3YFdZo1HSOiAJhil_AoZI16J22l0CNrgCQ; expires=Fri, 24-Mar-2023 12:50:17 GMT; path=/; domain=.blogger.com; Secure; HttpOnly
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (33976)
Size:   110098
Md5:    d7a5d2af3b80084d073679c377c26797
Sha1:   43dc336bba3078d92f4f6ffa798033701931581f
Sha256: e4d1fe6b832daf95091587fec47c30e94c475cd34b602addaf4281caa37f4e6b
                                        
                                            GET /blogger_img_proxy/ANbyha0qbtHGA7_2Wb8GYFWVFWA_81gHas_pnpLaHA0FbIcaXx2Ye-w8JjOS16FXFj1pUIxaH0L6CCpk7-vLk6Wir_npZsPl3WZJPSmoPyGKlEakkWYF4cnsUm31bIr5Nxoa-Dm75iqNXKGR-N540f0MH68Pw3XGIWm9lm6P1r9xMxSr5MWDU0mfcGKqqJbxfRoC63o-uLpugkoDDvXKh1cljRQ3FwusqR7fAQg=s0-d HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.1
HTTP/2 200 OK
content-type: image/png
                                        
access-control-expose-headers: Content-Length
date: Thu, 22 Sep 2022 12:50:18 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate, no-transform
content-disposition: attachment;filename="unnamed.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 15334
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 150 x 185, 8-bit/color RGBA, non-interlaced\012- data
Size:   15334
Md5:    ee050723dad429b13fad7665681b0440
Sha1:   b2f269e2857a26b28461e1002dc3ef9d03025da8
Sha256: 4ba7aee2ad0bd432aa85c121a8641cd2f8071cc47892ae6e012847978ef08238
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 22 Sep 2022 12:50:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 22 Sep 2022 12:50:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /js/c.php?i=0tkahjp5mwu HTTP/1.1 
Host: ra.revolvermaps.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         185.44.104.99
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 22 Sep 2022 12:50:18 GMT
Server: Apache
Cache-Control: max-age=900
Last-Modified: Thu, 22 Sep 2022 12:50:18 GMT
Content-Length: 43
Keep-Alive: timeout=4, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    6d22e4f2d2057c6e8d6fab098e76e80f
Sha1:   b80b11203d97fe01c5597ca3be70406ea48f5709
Sha256: afe0dcfca292a0fae8bce08a48c14d3e59c9d82c6052ab6d48a22ecc6c48f277
                                        
                                            GET /gampad/cookie.js?domain=rightway-tan.blogspot.com&callback=_gfp_s_&client=ca-pub-7113504168792126 HTTP/1.1 
Host: partner.googleadservices.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         172.217.21.162
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Thu, 22 Sep 2022 12:50:18 GMT
server: cafe
cache-control: private
content-length: 202
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   202
Md5:    4bd7b56b9eec03bc6349f933b62e8402
Sha1:   77fb0fc1f24f637a2ca6c5ae4e3774dc38a8206e
Sha256: 7e7b4daf5c938179b50fdc99cbca08b9e9851aaba8a9fb68439369313ebbe97c
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 22 Sep 2022 12:50:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /adsid/integrator.js?domain=rightway-tan.blogspot.com HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.2
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Thu, 22 Sep 2022 12:50:18 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   100
Md5:    917951a58be8c6c6f3680159550ba3c2
Sha1:   21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
Sha256: cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
                                        
                                            GET /adsid/integrator.js?domain=rightway-tan.blogspot.com HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.2
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Thu, 22 Sep 2022 12:50:18 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   100
Md5:    917951a58be8c6c6f3680159550ba3c2
Sha1:   21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
Sha256: cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
                                        
                                            GET /js/r.php?i=0tkahjp5mwu&l=https%3A%2F%2Frightway-tan.blogspot.com%2F2016%2F01%2Faiib-attracts-nations-from-east-west.html&r=1663851017672 HTTP/1.1 
Host: ra.revolvermaps.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         185.44.104.99
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 22 Sep 2022 12:50:18 GMT
Server: Apache
Content-Length: 43
Keep-Alive: timeout=4, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    6d22e4f2d2057c6e8d6fab098e76e80f
Sha1:   b80b11203d97fe01c5597ca3be70406ea48f5709
Sha256: afe0dcfca292a0fae8bce08a48c14d3e59c9d82c6052ab6d48a22ecc6c48f277
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "CA720FEE159F1607EB507E6CE60FAFFDDDD45F1BB7F91DABAA413A6AFC074B87"
Last-Modified: Wed, 21 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21562
Expires: Thu, 22 Sep 2022 18:49:40 GMT
Date: Thu, 22 Sep 2022 12:50:18 GMT
Connection: keep-alive

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 22 Sep 2022 12:50:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /adServe/banners?tid=RIGHTWAYTAN_25267_1&size=26 HTTP/1.1 
Host: p18334.clksite.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         173.192.101.24
HTTP/2 301 Moved Permanently
content-type: text/html
                                        
server: nginx
date: Thu, 22 Sep 2022 12:50:18 GMT
content-length: 162
location: https://mybetterck.com/adServe/banners?tid=RIGHTWAYTAN_25267_1&size=26
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 22 Sep 2022 12:50:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 22 Sep 2022 12:50:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /navbar.g?targetBlogID=3843727205859859637&blogName=Rightway&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://rightway-tan.blogspot.com/search&blogLocale=en_GB&v=2&homepageUrl=https://rightway-tan.blogspot.com/&targetPostID=7518444995837190993&blogPostOrPageUrl=https://rightway-tan.blogspot.com/2016/01/aiib-attracts-nations-from-east-west.html&vt=-6729075888463717012&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.z9QjrzsHcOc.O%2Fd%3D1%2Frs%3DAHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA%2Fm%3D__features__ HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         216.58.207.201
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 22 Sep 2022 12:50:18 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 2646
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3207)
Size:   2646
Md5:    d64d89e84a654259f7fa398bd203fd8a
Sha1:   4db794a34395ebae1638b303b7b7a4736886fb2e
Sha256: 17667865f9a0f818b8f853ea1dc838ef9f5094c569f8296d4a07cfeaeef5da5f
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 22 Sep 2022 12:50:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /w/6/a/a2.php?i=0tkahjp5mwu&m=7&s=320&c=e63100&cr1=ffffff&f=arial&l=0&bv=90&lx=-420&ly=420&hi=20&he=7&hc=a8ddff&rs=80 HTTP/1.1 
Host: ra.revolvermaps.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         185.44.104.99
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 22 Sep 2022 12:50:18 GMT
Server: Apache
Cache-Control: public, max-age=2592000
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=4, max=97
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (33262), with no line terminators
Size:   11405
Md5:    2de366e03a369be3e16190fa8e1311d0
Sha1:   7b5c98b8cdc1358450c14610ae5bac4e416ba025
Sha256: 382b2cb1c25abe4e03d5205966d6c13658d12e190dc5740aafdecf602d983497
                                        
                                            OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 
Host: play.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         216.58.207.206
HTTP/2 200 OK
content-type: text/plain; charset=UTF-8
                                        
access-control-allow-origin: https://www.blogger.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
date: Thu, 22 Sep 2022 12:50:18 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+754; expires=Sat, 21-Sep-2024 12:50:18 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Thu, 22 Sep 2022 12:50:18 GMT
cache-control: private
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 22 Sep 2022 12:50:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.164
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
expires: Thu, 22 Sep 2022 12:50:18 GMT
date: Thu, 22 Sep 2022 12:50:18 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 668
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1034), with no line terminators
Size:   668
Md5:    a885189cd9a522cfaaac98af1a03b512
Sha1:   a4045ce6f8d8e14582bb5245694d73b40da7f0f7
Sha256: 6afe80cbbc72285aa8f73e7d64bdeb755148410a8ec6c0eb13df255548ef17ad
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5808
Expires: Thu, 22 Sep 2022 14:27:06 GMT
Date: Thu, 22 Sep 2022 12:50:18 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5808
Expires: Thu, 22 Sep 2022 14:27:06 GMT
Date: Thu, 22 Sep 2022 12:50:18 GMT
Connection: keep-alive

                                        
                                            GET /alame/21368698.swf HTTP/1.1 
Host: blog.roodo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: embed
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.19.118
HTTP/2 301 Moved Permanently
content-type: text/html; charset=utf-8
                                        
date: Thu, 22 Sep 2022 12:50:18 GMT
location: https://go.hearty.me/roodo
cf-ray: 74eb2a5fabfeb512-OSL
vary: Accept-Encoding
cf-cache-status: DYNAMIC
cache-tag: srv-c61rig1g7hp1rg03ajh0
cloudflare-cdn-cache-control: public, max-age=300
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5808
Expires: Thu, 22 Sep 2022 14:27:06 GMT
Date: Thu, 22 Sep 2022 12:50:18 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2a425d5-4fbd-4af0-a85b-75f0878759cb.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7507
x-amzn-requestid: 2a40c792-8b1b-4476-92de-1fce3df48fc1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YcCmaHefoAMF4Ow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63217e28-6b05350006b7f3fb73d1e37a;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 07:09:28 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: PaGFfXo_LFFP5oVfQ8yj4zGeGlg5Rrik1yWgi7YGxaP5IIWXnN9v0w==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 22:35:34 GMT
age: 51284
etag: "09bd3300d710c3212483159f8398b84cde09da26"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7507
Md5:    4d98acc059a69d51165fb5e0c7430ea3
Sha1:   09bd3300d710c3212483159f8398b84cde09da26
Sha256: 6e38bbb5c79c4f714973e10961d7bad9e7ae8711cf24d68b13a77206f474d2a6
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "CA720FEE159F1607EB507E6CE60FAFFDDDD45F1BB7F91DABAA413A6AFC074B87"
Last-Modified: Wed, 21 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21562
Expires: Thu, 22 Sep 2022 18:49:40 GMT
Date: Thu, 22 Sep 2022 12:50:18 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2f739db-1c27-4929-8aff-997c0f66b2ed.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5650
x-amzn-requestid: 41ceb886-c038-4ba0-9e3a-a27879cf48ce
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y1GwjFVjoAMFWNQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632b84d0-3f4f6a367c893c7a0669dffe;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 21:40:32 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: d8Kelwi2OY0jt17q80szh8-ErN3ZQM1hhl3HZeNQvlKijygQIJtNww==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 22:16:00 GMT
etag: "f95b843029e84dbb188427a8c2ff8c9f32740465"
age: 52458
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5650
Md5:    a5edcd9aee78a6cacc9241b47cbce598
Sha1:   f95b843029e84dbb188427a8c2ff8c9f32740465
Sha256: 6a56c3d0eb1d641e565d3d7d31b42be03bdad30beb20b994ffc9a6f2aaceee1e
                                        
                                            GET /blogspot/NYbGpK?format=sigpro HTTP/1.1 
Host: feeds.feedburner.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.58.207.206
HTTP/2 200 OK
content-type: text/xml; charset=utf-8
                                        
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
feedburnerv2:
last-modified: Thu, 22 Sep 2022 12:39:36 GMT
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 22 Sep 2022 12:50:18 GMT
content-security-policy: script-src 'report-sample' 'nonce-mbUtmQKxypf9zmd3C9bHUg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/RaichuFeedServer/cspreport;worker-src 'self'
cross-origin-resource-policy: same-site
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: same-origin
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   9243
Md5:    ae52919207da86f1b977649ec3fffc37
Sha1:   f175fc277471e85edfcc2d0ba62cc17713d9c10a
Sha256: 8fda888b3f717c4073f4a22520275ed4e0cbe73b9641e8164e5d5764d111519c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0788498f-41db-4d62-b749-e01caddb7f8d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10754
x-amzn-requestid: 2d03531d-6055-477f-9cb6-9ea9fa27eeb9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y1F0vHJ4IAMF42Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632b8351-692620e80d5b2efe1d0e3a82;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 21:34:09 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: -3bQG5Av1EDxj7_3i8MktwjlPSEU8WDdxt5M6TsrWaodLWgSf3vdEA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 21:34:22 GMT
age: 54956
etag: "c803e5866edbe6c9baec14e93677f610bdf09bff"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10754
Md5:    af5773255351157d72c28a670a355c60
Sha1:   c803e5866edbe6c9baec14e93677f610bdf09bff
Sha256: 3229b4aa1c698647ad96d114174782549ad240f1b2c4ba8c268165a16afc84f0
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5453bf0-e297-4ace-a174-b28be2bb7e8d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11645
x-amzn-requestid: 0ae5c056-6d78-4c37-8e18-b9abfe1e1f47
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YzG34FKIIAMF6Ug=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632ab832-59fbd91527ea400d333ddc41;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 07:07:30 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Q7rg9YqHScSwWXfS96bSI5Mb0mSYQ-jbShb7wddPcG51nhn0_8DIJA==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 07:14:13 GMT
age: 20165
etag: "5ee6c32afd92810ae61a791c059928e33148bb0c"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11645
Md5:    298be26294efc965abc5707a84df8a0a
Sha1:   5ee6c32afd92810ae61a791c059928e33148bb0c
Sha256: d9b5fe88c8e03f6a6a64e360015080bca00f7fb147515a137447832bacc2e6e7
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faf89a4b3-f586-4870-ab26-efb054f637fd.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8678
x-amzn-requestid: c671a9ab-c5d0-4743-b13e-cc9a47e3d2fe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y1F0vEThIAMFSwQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632b8351-17ed13811d3833ea00a34423;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 21:34:09 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: hp-WIGb9M8tEmNGOVjx6UQKx9E4-1oJmka0a6seG7inahqYByPmRAg==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 21:34:22 GMT
age: 54956
etag: "15d83e44d568938b6c9c87201e898cedb3edec0a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8678
Md5:    91c56f0b9810bfdd84e10a626b89e389
Sha1:   15d83e44d568938b6c9c87201e898cedb3edec0a
Sha256: 942de9764e1c408f7512759774aab0479db201e6fae15ccc39e653adae4cb86f
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         143.204.42.88
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Thu, 22 Sep 2022 12:50:18 GMT
Server: ECS (dcb/7F5D)
X-Cache: Miss from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: _aImhpdipbMo-NUl1bVWIo-BoN6p8zCEV5ds6Ial0VnD31zef9UvPg==

                                        
                                            GET /blogger_img_proxy/ANbyha1ClgTmPiJMyAv9l-NIWZqEJ5vGuNbOB-p8xZON0lVith2Be0LL22P1FD89xKdeH22B5k3PMxxJ9DQBxgzjzQhYLBjLqXbACLqrj3a4IM5FMczhW4slhJ6nyoEqWHUrvVrD2ESlrP6r46vszF7C6jxxG5cHwm3MY98OFlTT1NLaj9_DVfx24H2XHbnA=s0-d HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.1
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
expires: Fri, 23 Sep 2022 12:50:19 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: attachment;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 22 Sep 2022 12:50:19 GMT
server: fife
content-length: 730842
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x4151, components 3\012- data
Size:   730842
Md5:    6da4044d35c673f3e2622d5ae68e1e6d
Sha1:   ccb38f1084cef417019769b9c2f92988d5e4dd48
Sha256: a994d9dd9949ceaf1636ae34da72f4f912272656a4542ead0fd05fd3b100d054
                                        
                                            GET /widgets.js HTTP/1.1 
Host: platform.twitter.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         93.184.220.66
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 3000
Age: 44
Cache-Control: public, max-age=1800
Date: Thu, 22 Sep 2022 12:50:21 GMT
Etag: "f116c7e6b28e2aebeb60ade5bdc8e2b4+gzip"
Last-Modified: Wed, 31 Aug 2022 20:41:50 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F705)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 29220


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (33915)
Size:   29220
Md5:    0ccf02d52b75b85c65aa5460aa24aebf
Sha1:   50d1a19cb9ebbd6d42173ce2d963ea4df29e8e5a
Sha256: d13778acf057777bad23fd020088463d65d2b7baff042cd4529d27faa46daf38
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         143.204.42.88
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 22 Sep 2022 12:50:22 GMT
Last-Modified: Thu, 22 Sep 2022 12:07:33 GMT
Server: ECS (bsa/EB16)
X-Cache: Miss from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: wl8ryCdOKzHtAiTnk0Y0ymBG0EHMCnjDwdHwuQqGEh42BjwPeBBpdw==
Age: 2569

                                        
                                            GET /pview?event=pview&hostname=rightway-tan.blogspot.com&location=%2F2016%2F01%2Faiib-attracts-nations-from-east-west.html&product=sticky-share-buttons&url=https%3A%2F%2Frightway-tan.blogspot.com%2F2016%2F01%2Faiib-attracts-nations-from-east-west.html&source=sharethis.js&fcmp=false&fcmpv2=false&has_segmentio=false&title=Rightway%3A%20AIIB%20attracts%20nations%20from%20East%2C%20West%2C%20its%20fate%20connects%20to%20Chinese%20economy&cms=unknown&publisher=5b12620943e7c90011853fed&sop=true&version=st_sop.js&lang=en HTTP/1.1 
Host: l.sharethis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rightway-tan.blogspot.com
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         52.29.39.53
HTTP/1.1 204 No Content
                                        
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: *
Access-Control-Allow-Origin: https://rightway-tan.blogspot.com
Access-Control-Expose-Headers: stid
Access-Control-Max-Age: 1728000
Cache-Control: no-cache, no-store, must-revalidate
Date: Thu, 22 Sep 2022 12:50:22 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains;
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 22 Sep 2022 12:50:23 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 19 Sep 2022 19:20:07 GMT
Expires: Mon, 26 Sep 2022 19:20:06 GMT
Etag: "f6518b29a76a954d1f280906d046ee6d14999bd5"
Cache-Control: max-age=368382,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74eb2a7e6f72b511-OSL

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62f1d773-46e0-4cf2-8178-3101a22f8b0c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7060
x-amzn-requestid: 69e8f4d4-2360-4124-a9e9-9cce3dd43da7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yx0NWEgmIAMFusQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632a33ee-0f4861c226117d70664b8612;Sampled=0
x-amzn-remapped-date: Tue, 20 Sep 2022 21:43:10 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Ye6ZGwlObuxJlJatHI7KImxBNk60JEfRnT7ZC_Js0WcWhCJi5GlkDw==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 22:03:49 GMT
age: 53196
etag: "9d297544318ff34f839678d8b358290ab6bd62a8"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7060
Md5:    c92f202bddcfee6efac41bcc25be5745
Sha1:   9d297544318ff34f839678d8b358290ab6bd62a8
Sha256: f471aaff7c08c60905cff5b1c9d4b669a3179574493d23d27e681110688af6b2
                                        
                                            GET /?utm_source=roodo&utm_medium=roodo&utm_campaign=roodo HTTP/1.1 
Host: hearty.me
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rightway-tan.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: embed
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         104.21.74.109
HTTP/2 200 OK
content-type: text/html; charset = utf-8;charset=UTF-8
                                        
date: Thu, 22 Sep 2022 12:50:19 GMT
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=rfan1pvsokb79q0rl8qbmrcsre; expires=Fri, 23-Sep-2022 12:50:19 GMT; Max-Age=86400; path=/; domain=.hearty.me; secure; SameSite=None
vary: Accept-Encoding
x-frame-options: sameorigin
content-security-policy: frame-ancestors 'self'; object-src 'none'; upgrade-insecure-requests; block-all-mixed-content
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
referrer-policy: origin-when-cross-origin
expect-ct: max-age=86400, report-uri="https://nien.report-uri.com/r/d/ct/reportOnly"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zmEqZE5WuYjIxD6m%2FDpJ5QABW196Ke7f1NiWqF%2FZR7yfneCmwRm5pGvOX5t%2F1rCTOQ5aYeW7%2FNyBRsFP0VN3Fz3WFUTIF9H80zENe5W38Sx1FQ3dyL6MKYD%2FUnY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74eb2a65288cb500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /js/sharethis.js HTTP/1.1 
Host: platform-api.sharethis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.67
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
content-encoding: gzip
edge-control: cache-maxage=60m,downstream-ttl=60m
x-frame-options: SAMEORIGIN
cache-control: max-age=600, public
date: Thu, 22 Sep 2022 12:45:37 GMT
etag: W/"2f803-KWEpHiRpF8gd4nffcLUX75PpPLQ"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: nQmgxgzFSJu8dbTecKl1Gf3pTUP8rmjxwy-EWhXCB8JQAhFv6OXkAQ==
age: 284
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /js/5b12620943e7c90011853fed.js HTTP/1.1 
Host: buttons-config.sharethis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.126
HTTP/2 200 OK
content-type: text/javascript
                                        
last-modified: Tue, 05 Jun 2018 07:17:34 GMT
server: AmazonS3
content-encoding: gzip
date: Thu, 22 Sep 2022 12:50:23 GMT
cache-control: max-age=60,public
etag: W/"e147f36ea2764b8c721e5074ab836607"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lJsJi5H1W0Wf2HgRwWT_jH5waqHWvRSErgLZBTJeYLzKI3j6dyFcTg==
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1 
Host: translate.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.46
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 22 Sep 2022 12:50:17 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+324; expires=Sat, 21-Sep-2024 12:50:17 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /blogspot/fpdSbA?format=sigpro HTTP/1.1 
Host: feeds.feedburner.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.58.207.206
HTTP/2 200 OK
content-type: text/xml; charset=utf-8
                                        
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
feedburnerv2:
last-modified: Thu, 22 Sep 2022 02:43:12 GMT
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 22 Sep 2022 12:50:18 GMT
content-security-policy: script-src 'report-sample' 'nonce-fg0-zGNhzk02GizUs-3mAg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/RaichuFeedServer/cspreport;worker-src 'self'
cross-origin-opener-policy: same-origin; report-to="RaichuFeedServer"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: same-site
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
report-to: {"group":"RaichuFeedServer","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/RaichuFeedServer/external"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /blogspot/GeRlG?format=sigpro HTTP/1.1 
Host: feeds.feedburner.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rightway-tan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.58.207.206
HTTP/2 200 OK
content-type: text/xml; charset=utf-8
                                        
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
feedburnerv2:
last-modified: Tue, 20 Sep 2022 15:28:16 GMT
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 22 Sep 2022 12:50:18 GMT
cross-origin-resource-policy: same-site
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
report-to: {"group":"RaichuFeedServer","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/RaichuFeedServer/external"}]}
content-security-policy: script-src 'report-sample' 'nonce-TQl0pPbpIJm01X9W7HP8sw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/RaichuFeedServer/cspreport;worker-src 'self'
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy: same-origin; report-to="RaichuFeedServer"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /roodo HTTP/1.1 
Host: go.hearty.me
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rightway-tan.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: embed
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         44.199.30.55
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
                                        
date: Thu, 22 Sep 2022 12:50:18 GMT
location: https://hearty.me/?utm_source=roodo&utm_medium=roodo&utm_campaign=roodo
server: Apache/2.4.7 (Ubuntu)
set-cookie: roodo=1; expires=Sat, 22-Oct-2022 12:56:28 GMT; Max-Age=2592000; path=/roodo; domain=go.hearty.me /roodo=1; expires=Sat, 22-Oct-2022 12:56:28 GMT; Max-Age=2592000; path=/roodo; domain=go.hearty.me
X-Firefox-Spdy: h2


--- Additional Info ---