| r10.o.lencr.org/ |  23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashee5b6dc3e7ab972df60b36582e3eaaf4 2a5185acc539fcddac9c33895ec74faf552b62dd be84262bbb3f3aabae368745bc3e85b816e372b16bc37327a1887d3a19992df6
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "BE84262BBB3F3AABAE368745BC3E85B816E372B16BC37327A1887D3A19992DF6"
Last-Modified: Wed, 10 Jul 2024 13:53:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12581
Expires: Thu, 11 Jul 2024 08:21:57 GMT
Date: Thu, 11 Jul 2024 04:52:16 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashe08576e0904dc9903a9c20fa9e3d15b8 74feff76140500fd4a61e89c7e9d8d0a60df1183 ee690bacddf55fd12ae0c9c39e330e0a1a18776b9edc91b4aa6c5bae28824f1e
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "EE690BACDDF55FD12AE0C9C39E330E0A1A18776B9EDC91B4AA6C5BAE28824F1E"
Last-Modified: Tue, 09 Jul 2024 15:28:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8228
Expires: Thu, 11 Jul 2024 07:09:24 GMT
Date: Thu, 11 Jul 2024 04:52:16 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashe7492695b5254a3a63fcffb4f1ee8cec 0361713c6d8129210245347284c7c6babfd28fb7 5d1bc1c01894fd88a0d4680490977488d6458bb58a98ace24ef8aa103538bc1f
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5D1BC1C01894FD88A0D4680490977488D6458BB58A98ACE24EF8AA103538BC1F"
Last-Modified: Tue, 09 Jul 2024 23:47:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3589
Expires: Thu, 11 Jul 2024 05:52:05 GMT
Date: Thu, 11 Jul 2024 04:52:16 GMT
Connection: keep-alive
|
|
| o.pki.goog/wr2 |  142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash2db01644566222c598221c1f9db15c9d 26c600bded5c241f315d6947bdeac0da3ee29522 e7363aa1021138934bbeb671b6dc573e203e2ff3004bff1d07025be214ad23b8
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 11 Jul 2024 04:52:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash9b556e25e514a3cd5829bc4d938e5517 85eeba07dc1438e7433ce7a145500164d842d5db 22f599883dc87540746708049ea46ec4eb88c81c924ba145a58bebd5ee3199cb
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "22F599883DC87540746708049EA46EC4EB88C81C924BA145A58BEBD5EE3199CB"
Last-Modified: Tue, 09 Jul 2024 16:21:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10489
Expires: Thu, 11 Jul 2024 07:47:05 GMT
Date: Thu, 11 Jul 2024 04:52:16 GMT
Connection: keep-alive
|
|
| sofiahalbofanimeworld.blogspot.jp/ | 172.217.21.161 | 302 Found | 208 B |
URL User Request GET HTTP/2sofiahalbofanimeworld.blogspot.jp/ IP172.217.21.161:443
CertificateIssuerGoogle Trust Services Subjectmisc-sni.blogspot.com Fingerprint2C:AB:90:A1:00:95:11:42:95:2A:29:C7:BF:46:89:70:EC:C0:40:5D ValidityThu, 13 Jun 2024 16:10:03 GMT - Thu, 05 Sep 2024 16:10:02 GMT
File typeHTML document, ASCII text Hash7a0adbaf7873135a7491c969d115c2cc 03c8bad489492afa56d2e57cd0fed15e1fba7aff 69d4a5bc1eef97a62af9468ba4df5c2f690c42c5efdce3704e5d8aa248914406
GET / HTTP/1.1
Host: sofiahalbofanimeworld.blogspot.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: https://sofiahalbofanimeworld.blogspot.com/
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Thu, 11 Jul 2024 04:52:16 GMT
expires: Thu, 11 Jul 2024 04:52:16 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 208
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash2db01644566222c598221c1f9db15c9d 26c600bded5c241f315d6947bdeac0da3ee29522 e7363aa1021138934bbeb671b6dc573e203e2ff3004bff1d07025be214ad23b8
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 11 Jul 2024 04:52:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash2db01644566222c598221c1f9db15c9d 26c600bded5c241f315d6947bdeac0da3ee29522 e7363aa1021138934bbeb671b6dc573e203e2ff3004bff1d07025be214ad23b8
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 11 Jul 2024 04:52:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| sofiahalbofanimeworld.blogspot.com/ | 172.217.21.161 | 200 OK | 16 kB |
URL User Request GET HTTP/2sofiahalbofanimeworld.blogspot.com/ IP172.217.21.161:443
CertificateIssuerGoogle Trust Services Subjectmisc-sni.blogspot.com Fingerprint2C:AB:90:A1:00:95:11:42:95:2A:29:C7:BF:46:89:70:EC:C0:40:5D ValidityThu, 13 Jun 2024 16:10:03 GMT - Thu, 05 Sep 2024 16:10:02 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (8483) Hashd712d364a7c4809f05e35ad647008e63 5bc170f42a97f0ee2c032104cc1358bc608b58fc d8ef8c8942d9121984fab6dbc53b750777aa9865dd82e254f5bd639703df9b23
GET / HTTP/1.1
Host: sofiahalbofanimeworld.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Thu, 11 Jul 2024 04:52:17 GMT
date: Thu, 11 Jul 2024 04:52:17 GMT
cache-control: private, max-age=0
last-modified: Thu, 11 Jul 2024 01:03:24 GMT
etag: W/"4cffdca16c434e5f603fb6956e760e734b8e1c3f0353516d2462814e9a477d0d"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 16092
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| sofiahalbofanimeworld.blogspot.com/js/cookienotice.js | 172.217.21.161 | 200 OK | 2.0 kB |
URL GET HTTP/3sofiahalbofanimeworld.blogspot.com/js/cookienotice.js IP172.217.21.161:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subjectmisc-sni.blogspot.com Fingerprint2C:AB:90:A1:00:95:11:42:95:2A:29:C7:BF:46:89:70:EC:C0:40:5D ValidityThu, 13 Jun 2024 16:10:03 GMT - Thu, 05 Sep 2024 16:10:02 GMT
File typeJavaScript source, ASCII text Hasha705132a2174f88e196ec3610d68faa8 3bad57a48d973a678fec600d45933010f6edc659 068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
GET /js/cookienotice.js HTTP/1.1
Host: sofiahalbofanimeworld.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 10 Jul 2024 19:57:42 GMT
expires: Wed, 17 Jul 2024 19:57:42 GMT
cache-control: public, max-age=604800
last-modified: Wed, 10 Jul 2024 17:55:07 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 32075
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hashc59c840125732931609cfc7ccedd83b7 834b9bf612140dddf7af2e64680b9b024f690bc5 bb4ee0945a1ac8545b0abbf6c7c57f25e869947df559a7dc0f153fb25ba1da45
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 11 Jul 2024 04:52:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash6e1fba3051f6941f50022b425fdcbe42 0bb80a257582439fe58c20d50a252fede0d3993e 2bf334267d7e0f9b1b08d84d8407a8d77bf1fa7e078697e3a5d1f46c35a19d15
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 11 Jul 2024 04:52:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hash370b41fdcbed5628b66e14537e338fa7 c251b33650f2e09dd9642509dfc71d6c7b872124 531fd57a5230316eb84714dc02ed9a13eac474d7d732c6d9a052074cb08cb1eb
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 11 Jul 2024 04:52:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| apis.google.com/js/platform.js | 142.250.74.174 | 200 OK | 22 kB |
URL GET HTTP/2apis.google.com/js/platform.js IP142.250.74.174:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.apis.google.com Fingerprint43:19:A2:9C:97:29:9D:18:37:14:A8:F5:D7:91:B0:F1:36:69:34:9F ValidityThu, 13 Jun 2024 16:36:32 GMT - Thu, 05 Sep 2024 16:36:31 GMT
File typeJavaScript source, ASCII text, with very long lines (2767) Hashd7230548fcbd2dd70bef36c8a286668d 8e794892549c2c2abf0ff598185bcd1388b17f42 d28cf1359a62a665dd4c9b946409b31d5a338419e4c570544da6fcb6e200ef42
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 21606
date: Thu, 11 Jul 2024 04:52:17 GMT
expires: Thu, 11 Jul 2024 04:52:17 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "c851b191c0e91c91"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hash370b41fdcbed5628b66e14537e338fa7 c251b33650f2e09dd9642509dfc71d6c7b872124 531fd57a5230316eb84714dc02ed9a13eac474d7d732c6d9a052074cb08cb1eb
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 11 Jul 2024 04:52:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hash370b41fdcbed5628b66e14537e338fa7 c251b33650f2e09dd9642509dfc71d6c7b872124 531fd57a5230316eb84714dc02ed9a13eac474d7d732c6d9a052074cb08cb1eb
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 11 Jul 2024 04:52:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hasha59c17630ced2623b8e664efdaf2a898 18f406669316d299c945aad6360834485c6ca84b baf4107925ecbf5919de29ddd19f795513b9a6640f50ad495a21604ec50ac7ba
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 11 Jul 2024 04:52:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-5387507473582359&host=ca-host-pub-1556223355139109 | 142.250.74.66 | 200 OK | 54 kB |
URL GET HTTP/2pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-5387507473582359&host=ca-host-pub-1556223355139109 IP142.250.74.66:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.g.doubleclick.net Fingerprint87:0D:4E:49:D5:3A:84:7C:EE:CF:28:04:9B:E0:25:8E:35:E9:1A:E4 ValidityThu, 13 Jun 2024 15:27:09 GMT - Thu, 05 Sep 2024 15:27:08 GMT
File typeJavaScript source, ASCII text, with very long lines (3975) Hashc81feb9caf15b7455da6d6bb56873a27 d7abbe71e1054299ee041547a237ab38cf094bf3 46ca29653323efe358ac9c8cab40d71142bac3eff9e461c919f9815be9d8a790
GET /pagead/js/adsbygoogle.js?client=ca-pub-5387507473582359&host=ca-host-pub-1556223355139109 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sofiahalbofanimeworld.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
link: <https://googleads.g.doubleclick.net>; rel="preconnect"; crossorigin
vary: Accept-Encoding
date: Thu, 11 Jul 2024 04:52:17 GMT
expires: Thu, 11 Jul 2024 04:52:17 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
content-type: text/javascript; charset=UTF-8
etag: 15261776683643115515
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 53452
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hasha59c17630ced2623b8e664efdaf2a898 18f406669316d299c945aad6360834485c6ca84b baf4107925ecbf5919de29ddd19f795513b9a6640f50ad495a21604ec50ac7ba
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 11 Jul 2024 04:52:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hashc59c840125732931609cfc7ccedd83b7 834b9bf612140dddf7af2e64680b9b024f690bc5 bb4ee0945a1ac8545b0abbf6c7c57f25e869947df559a7dc0f153fb25ba1da45
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 11 Jul 2024 04:52:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.blogger.com/static/v1/widgets/3399699925-widgets.js | 142.250.74.105 | 200 OK | 51 kB |
URL GET HTTP/3www.blogger.com/static/v1/widgets/3399699925-widgets.js IP142.250.74.105:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.blogger.com Fingerprint50:84:30:B7:69:E9:54:8C:5F:D3:96:91:2A:52:48:AD:0D:29:EB:A7 ValidityThu, 13 Jun 2024 15:23:59 GMT - Thu, 05 Sep 2024 15:23:58 GMT
File typeJavaScript source, ASCII text, with very long lines (1942) Hashec7235b12b33bdafd1a90c19642538b4 fe17f4a93e7851539629270e6e7491b1f5784677 e0bb7b380a611627079eb3213385455d7fc3b1aaff5a79568f21e006bd3f67bf
GET /static/v1/widgets/3399699925-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 51286
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 08 Jul 2024 02:08:13 GMT
expires: Tue, 08 Jul 2025 02:08:13 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 08 Jul 2024 00:53:38 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 269044
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.blogger.com/static/v1/widgets/3566091532-css_bundle_v2.css | 142.250.74.105 | 200 OK | 7.8 kB |
URL GET HTTP/2www.blogger.com/static/v1/widgets/3566091532-css_bundle_v2.css IP142.250.74.105:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.blogger.com Fingerprint50:84:30:B7:69:E9:54:8C:5F:D3:96:91:2A:52:48:AD:0D:29:EB:A7 ValidityThu, 13 Jun 2024 15:23:59 GMT - Thu, 05 Sep 2024 15:23:58 GMT
File typeASCII text, with very long lines (35959) Hash1e32420a7b6ddbdcb7def8b3141c4d1e a1be54d42ff1f95244c9653539f90318f5bc0580 a9ca837900b6ae007386d400f659c233120b8af7d93407fd6475c9180d9e83d2
GET /static/v1/widgets/3566091532-css_bundle_v2.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 7756
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 10 Jul 2024 12:27:09 GMT
expires: Thu, 10 Jul 2025 12:27:09 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 10 Jul 2024 05:54:41 GMT
content-type: text/css
vary: Accept-Encoding
age: 59108
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hash6fe5c354b3d801f926aa06a0e33af54f 947ae92b4f4e3f5cddd7639efbf241451e3ae611 f2b506689f39bdf79ffc1963ed258b123842bda8872be99926d1b7ab8118f2c8
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 11 Jul 2024 04:52:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| resources.blogblog.com/img/icon18_email.gif | 142.250.74.105 | 200 OK | 164 B |
URL GET HTTP/2resources.blogblog.com/img/icon18_email.gif IP142.250.74.105:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.blogger.com Fingerprint50:84:30:B7:69:E9:54:8C:5F:D3:96:91:2A:52:48:AD:0D:29:EB:A7 ValidityThu, 13 Jun 2024 15:23:59 GMT - Thu, 05 Sep 2024 15:23:58 GMT
File typeGIF image data, version 89a, 18 x 13 Hash36b9f993db1b953f3b9b08040aaf9af4 18248661b307586dc291fd2dff4bb59cf7579475 1258cbe1e2900ec3df11a83a6bb6008d7a833f783a6df80b0d5d45a052ac1466
GET /img/icon18_email.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 164
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 Jul 2024 02:51:58 GMT
expires: Thu, 18 Jul 2024 02:51:58 GMT
cache-control: public, max-age=604800
last-modified: Wed, 10 Jul 2024 05:54:41 GMT
content-type: image/gif
age: 7219
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| resources.blogblog.com/img/icon18_edit_allbkg.gif | 142.250.74.105 | 200 OK | 162 B |
URL GET HTTP/2resources.blogblog.com/img/icon18_edit_allbkg.gif IP142.250.74.105:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.blogger.com Fingerprint50:84:30:B7:69:E9:54:8C:5F:D3:96:91:2A:52:48:AD:0D:29:EB:A7 ValidityThu, 13 Jun 2024 15:23:59 GMT - Thu, 05 Sep 2024 15:23:58 GMT
File typeGIF image data, version 89a, 18 x 18 Hashc991641178ff05adf0d004298b5eafa9 d8f6ce8ecd92b86d49849360f6b81ceb10b4c941 ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
GET /img/icon18_edit_allbkg.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 162
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 10 Jul 2024 22:11:24 GMT
expires: Wed, 17 Jul 2024 22:11:24 GMT
cache-control: public, max-age=604800
last-modified: Wed, 10 Jul 2024 08:54:41 GMT
content-type: image/gif
age: 24053
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hasha59c17630ced2623b8e664efdaf2a898 18f406669316d299c945aad6360834485c6ca84b baf4107925ecbf5919de29ddd19f795513b9a6640f50ad495a21604ec50ac7ba
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 11 Jul 2024 04:52:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| pagead2.googlesyndication.com/pagead/js/google_top_exp.js | 142.250.74.66 | 200 OK | 42 B |
URL GET HTTP/3pagead2.googlesyndication.com/pagead/js/google_top_exp.js IP142.250.74.66:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.g.doubleclick.net Fingerprint87:0D:4E:49:D5:3A:84:7C:EE:CF:28:04:9B:E0:25:8E:35:E9:1A:E4 ValidityThu, 13 Jun 2024 15:27:09 GMT - Thu, 05 Sep 2024 15:27:08 GMT
Hash7f5f2be159837d73b72a4b37616bce44 c93d7f25b530b05c26440d3352213b683d03dcc3 ccecd185ac16ba0a538840f37701053fbb861f7fbbdd86039c7415fcd924d1f2
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 42
x-xss-protection: 0
date: Thu, 11 Jul 2024 04:48:57 GMT
expires: Thu, 25 Jul 2024 04:48:57 GMT
cache-control: public, max-age=1209600
age: 201
etag: 13036835877489095579
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.IKZeRvoAYNY.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/am=AAAQ/rs=AHpOoo-SMWTzMRJrTty6iE5dL_aWGYOnuw/cb=gapi.loaded_0?le=scs | 142.250.74.174 | 200 OK | 62 kB |
URL GET HTTP/3apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.IKZeRvoAYNY.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/am=AAAQ/rs=AHpOoo-SMWTzMRJrTty6iE5dL_aWGYOnuw/cb=gapi.loaded_0?le=scs IP142.250.74.174:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint5E:16:23:DF:7D:42:8E:61:6E:AA:4A:CC:FB:08:1A:B9:8F:FA:E0:A2 ValidityThu, 13 Jun 2024 15:27:14 GMT - Thu, 05 Sep 2024 15:27:13 GMT
File typeJavaScript source, ASCII text, with very long lines (2141) Hash2d571aeac055f7dfdc7e42ec83706348 43fa306e8e3f1e40702f375d3e83aae9d28de164 99ff940f764629535ef44ff6c3189ffa8bcd2774039510d01440d0e415d6b5c7
GET /_/scs/abc-static/_/js/k=gapi.lb.en.IKZeRvoAYNY.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/am=AAAQ/rs=AHpOoo-SMWTzMRJrTty6iE5dL_aWGYOnuw/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 62379
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 10 Jul 2024 10:58:35 GMT
expires: Thu, 10 Jul 2025 10:58:35 GMT
cache-control: public, max-age=31536000
age: 64423
last-modified: Thu, 06 Jun 2024 15:21:04 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| pagead2.googlesyndication.com/pagead/managed/js/adsense/m202407030101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-5387507473582359&plah=sofiahalbofanimeworld.blogspot.com&aplac=true | 142.250.74.66 | 200 OK | 147 kB |
URL GET HTTP/3pagead2.googlesyndication.com/pagead/managed/js/adsense/m202407030101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-5387507473582359&plah=sofiahalbofanimeworld.blogspot.com&aplac=true IP142.250.74.66:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.g.doubleclick.net Fingerprint87:0D:4E:49:D5:3A:84:7C:EE:CF:28:04:9B:E0:25:8E:35:E9:1A:E4 ValidityThu, 13 Jun 2024 15:27:09 GMT - Thu, 05 Sep 2024 15:27:08 GMT
File typeJavaScript source, ASCII text, with very long lines (1921) Size147 kB (146730 bytes) Hasha17449af0eed334101aa5759b8f4b38f 73be2478a3da015b5e6b10f33a50619b40a9124f 6b0085ea780fe9ea59bfd6f147307a6589d1a900a8f6a2f493d826006aa87369
GET /pagead/managed/js/adsense/m202407030101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-5387507473582359&plah=sofiahalbofanimeworld.blogspot.com&aplac=true HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Thu, 11 Jul 2024 04:52:18 GMT
expires: Thu, 11 Jul 2024 04:52:18 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
content-type: text/javascript; charset=UTF-8
etag: 4599666157732605715
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 146730
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| resources.blogblog.com/blogblog/data/1kt/ethereal/white-fade.png | 142.250.74.105 | 200 OK | 144 B |
URL GET HTTP/3resources.blogblog.com/blogblog/data/1kt/ethereal/white-fade.png IP142.250.74.105:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.blogger.com Fingerprint50:84:30:B7:69:E9:54:8C:5F:D3:96:91:2A:52:48:AD:0D:29:EB:A7 ValidityThu, 13 Jun 2024 15:23:59 GMT - Thu, 05 Sep 2024 15:23:58 GMT
File typePNG image data, 1 x 590, 8-bit/color RGBA, non-interlaced Hash4ba06844286b94adfc8ad7bc8a8fde94 9e1fa0c37abf7c05300b90f8938dd2458409a35e 909a47a95386ffd0420ff44c0f1278a3259b918b1bc8213afa97ad6a4bb5bb58
GET /blogblog/data/1kt/ethereal/white-fade.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 144
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 10 Jul 2024 13:31:48 GMT
expires: Wed, 17 Jul 2024 13:31:48 GMT
cache-control: public, max-age=604800
last-modified: Tue, 09 Jul 2024 15:56:15 GMT
content-type: image/png
age: 55230
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.blogger.com/img/share_buttons_20_3.png | 142.250.74.105 | 200 OK | 5.1 kB |
URL GET HTTP/3www.blogger.com/img/share_buttons_20_3.png IP142.250.74.105:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.blogger.com Fingerprint50:84:30:B7:69:E9:54:8C:5F:D3:96:91:2A:52:48:AD:0D:29:EB:A7 ValidityThu, 13 Jun 2024 15:23:59 GMT - Thu, 05 Sep 2024 15:23:58 GMT
File typePNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced Hashad9999106d5f550920b586e8e1704e5a 93fd02c51166402a41f96509cd0ca3fb917877dd 3829a5b2ade7cfc416c80b8f3df71e49e68672875f025d525223978f5cee3fd3
GET /img/share_buttons_20_3.png HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/static/v1/widgets/3566091532-css_bundle_v2.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 5080
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 Jul 2024 00:59:53 GMT
expires: Thu, 18 Jul 2024 00:59:53 GMT
cache-control: public, max-age=604800
last-modified: Wed, 10 Jul 2024 17:55:07 GMT
content-type: image/png
age: 13945
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| themes.googleusercontent.com/image?id=0BwVBOzw_-hbMMDZjM2Q4YjctMTY2OC00ZGU2LWJjZDYtODVjOGRiOThlMGQ3 | 142.250.74.97 | 200 OK | 43 kB |
URL GET HTTP/2themes.googleusercontent.com/image?id=0BwVBOzw_-hbMMDZjM2Q4YjctMTY2OC00ZGU2LWJjZDYtODVjOGRiOThlMGQ3 IP142.250.74.97:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint07:FA:CF:5D:23:84:6C:3C:8F:1E:8D:4E:97:CD:C0:BC:9A:C5:42:33 ValidityThu, 13 Jun 2024 16:32:56 GMT - Thu, 05 Sep 2024 16:32:55 GMT
File typePNG image data, 1515 x 971, 8-bit/color RGBA, non-interlaced Hash05d2738b4dc90530c7cfab2ec6a780bd f156f3f4d6b41803bcb8704a01e38623098f09af 919e34ec42b0b8a6f9754b9e33f9faba1c20a79bc151cc03009fc0e2bb17a922
GET /image?id=0BwVBOzw_-hbMMDZjM2Q4YjctMTY2OC00ZGU2LWJjZDYtODVjOGRiOThlMGQ3 HTTP/1.1
Host: themes.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 12 Jul 2024 04:52:18 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.png"
x-content-type-options: nosniff
date: Thu, 11 Jul 2024 04:52:18 GMT
server: fife
content-length: 42869
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.blogger.com/navbar.g?targetBlogID=3405693820859981231&blogName=sofiahalbof+anime+world+&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://sofiahalbofanimeworld.blogspot.com/search&blogLocale=en&v=2&homepageUrl=https://sofiahalbofanimeworld.blogspot.com/&vt=-5639291567810939189&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.IKZeRvoAYNY.O%2Fam%3DAAAQ%2Fd%3D1%2Frs%3DAHpOoo-SMWTzMRJrTty6iE5dL_aWGYOnuw%2Fm%3D__features__ | 142.250.74.105 | | 2.6 kB |
URL www.blogger.com/navbar.g?targetBlogID=3405693820859981231&blogName=sofiahalbof+anime+world+&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://sofiahalbofanimeworld.blogspot.com/search&blogLocale=en&v=2&homepageUrl=https://sofiahalbofanimeworld.blogspot.com/&vt=-5639291567810939189&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.IKZeRvoAYNY.O%2Fam%3DAAAQ%2Fd%3D1%2Frs%3DAHpOoo-SMWTzMRJrTty6iE5dL_aWGYOnuw%2Fm%3D__features__ IP142.250.74.105:0
CertificateIssuerGoogle Trust Services Subject*.blogger.com Fingerprint50:84:30:B7:69:E9:54:8C:5F:D3:96:91:2A:52:48:AD:0D:29:EB:A7 ValidityThu, 13 Jun 2024 15:23:59 GMT - Thu, 05 Sep 2024 15:23:58 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (3170) Hashe6ec260295c399b4d2f401d3856f6915 e9f77132307c69138c0d574de975077c57748716 e8aa725a38538b97096d82a4e81ba867535bf43d999ccf905131cd7a2f563f42
GET /navbar.g?targetBlogID=3405693820859981231&blogName=sofiahalbof+anime+world+&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://sofiahalbofanimeworld.blogspot.com/search&blogLocale=en&v=2&homepageUrl=https://sofiahalbofanimeworld.blogspot.com/&vt=-5639291567810939189&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.IKZeRvoAYNY.O%2Fam%3DAAAQ%2Fd%3D1%2Frs%3DAHpOoo-SMWTzMRJrTty6iE5dL_aWGYOnuw%2Fm%3D__features__ HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 11 Jul 2024 04:52:18 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 2595
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhv3GkMbCi2cLa6Pj31fugnmVFl-uh8tgz7EpqvqMHYy9m5MoCIuW4-6imZLQGhVnGxBJVphcqKigD1Y1rKewQlzF70062HzyBL1JJrAAlugEcRPgm-kwX5Kn1XlrejRNt_EdpU1v_-zKE/w400-h400-rw/original+%25281%2529.jpg | 142.250.74.97 | 200 OK | 16 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhv3GkMbCi2cLa6Pj31fugnmVFl-uh8tgz7EpqvqMHYy9m5MoCIuW4-6imZLQGhVnGxBJVphcqKigD1Y1rKewQlzF70062HzyBL1JJrAAlugEcRPgm-kwX5Kn1XlrejRNt_EdpU1v_-zKE/w400-h400-rw/original+%25281%2529.jpg IP142.250.74.97:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint07:FA:CF:5D:23:84:6C:3C:8F:1E:8D:4E:97:CD:C0:BC:9A:C5:42:33 ValidityThu, 13 Jun 2024 16:32:56 GMT - Thu, 05 Sep 2024 16:32:55 GMT
File typeRIFF (little-endian) data, Web/P image Hash9e272599de4da47a8cd95a8c7beb9fff 685651b5f69e7b83e36b76c6e88339635d980ea6 53c9da80b7483cd42aaa15da8c206920eec7721d91dec2f17e23aeccbddb6092
GET /img/b/R29vZ2xl/AVvXsEhv3GkMbCi2cLa6Pj31fugnmVFl-uh8tgz7EpqvqMHYy9m5MoCIuW4-6imZLQGhVnGxBJVphcqKigD1Y1rKewQlzF70062HzyBL1JJrAAlugEcRPgm-kwX5Kn1XlrejRNt_EdpU1v_-zKE/w400-h400-rw/original+%25281%2529.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
vary: Origin
access-control-expose-headers: Content-Length
etag: "v50d"
expires: Fri, 12 Jul 2024 04:52:18 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="original (1).webp"
x-content-type-options: nosniff
date: Thu, 11 Jul 2024 04:52:18 GMT
server: fife
content-length: 15706
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhseTpUxkcdHqsidRBkMaLVFAmLGSBygwPxwJ6s7vr7go-Ee9TkilI213RIDQBF618qFHscAZc0z3EMww7XjSsTn5PgqholxWnHEhw9e48EJR23kEu8Nt4EZJ3X3uA_8XhpO5DnzJhDFKU/w635-h640-rw/original+%25284%2529.jpg | 142.250.74.97 | 200 OK | 24 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhseTpUxkcdHqsidRBkMaLVFAmLGSBygwPxwJ6s7vr7go-Ee9TkilI213RIDQBF618qFHscAZc0z3EMww7XjSsTn5PgqholxWnHEhw9e48EJR23kEu8Nt4EZJ3X3uA_8XhpO5DnzJhDFKU/w635-h640-rw/original+%25284%2529.jpg IP142.250.74.97:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint07:FA:CF:5D:23:84:6C:3C:8F:1E:8D:4E:97:CD:C0:BC:9A:C5:42:33 ValidityThu, 13 Jun 2024 16:32:56 GMT - Thu, 05 Sep 2024 16:32:55 GMT
File typeRIFF (little-endian) data, Web/P image Hash0486a0e5405a90fc0528d411f15bacfb f9bfa4be241b5dcb1d08521f2e450e6b5d60c267 047cafbd80a22fe50f919e0be95c387e2bfb3dab555eeeb1b0b3c59157b61687
GET /img/b/R29vZ2xl/AVvXsEhseTpUxkcdHqsidRBkMaLVFAmLGSBygwPxwJ6s7vr7go-Ee9TkilI213RIDQBF618qFHscAZc0z3EMww7XjSsTn5PgqholxWnHEhw9e48EJR23kEu8Nt4EZJ3X3uA_8XhpO5DnzJhDFKU/w635-h640-rw/original+%25284%2529.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
vary: Origin
access-control-expose-headers: Content-Length
etag: "v51c"
expires: Fri, 12 Jul 2024 04:52:18 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="original (4).webp"
x-content-type-options: nosniff
date: Thu, 11 Jul 2024 04:52:18 GMT
server: fife
content-length: 23620
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hash370b41fdcbed5628b66e14537e338fa7 c251b33650f2e09dd9642509dfc71d6c7b872124 531fd57a5230316eb84714dc02ed9a13eac474d7d732c6d9a052074cb08cb1eb
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 11 Jul 2024 04:52:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhseTpUxkcdHqsidRBkMaLVFAmLGSBygwPxwJ6s7vr7go-Ee9TkilI213RIDQBF618qFHscAZc0z3EMww7XjSsTn5PgqholxWnHEhw9e48EJR23kEu8Nt4EZJ3X3uA_8XhpO5DnzJhDFKU/w635-h640/original+%25284%2529.jpg | 142.250.74.97 | 200 OK | 25 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhseTpUxkcdHqsidRBkMaLVFAmLGSBygwPxwJ6s7vr7go-Ee9TkilI213RIDQBF618qFHscAZc0z3EMww7XjSsTn5PgqholxWnHEhw9e48EJR23kEu8Nt4EZJ3X3uA_8XhpO5DnzJhDFKU/w635-h640/original+%25284%2529.jpg IP142.250.74.97:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint07:FA:CF:5D:23:84:6C:3C:8F:1E:8D:4E:97:CD:C0:BC:9A:C5:42:33 ValidityThu, 13 Jun 2024 16:32:56 GMT - Thu, 05 Sep 2024 16:32:55 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], progressive, precision 8, 500x504, components 3 Hash4112a2265f97c15c59d8c48c0d07e556 0ee3839d780347edf08fd5f4a52388dd46bc3ad2 74477a6ab562eaaf23b770ae8a9bb469444d9e2a09fe75a229c163593e2ad518
GET /img/b/R29vZ2xl/AVvXsEhseTpUxkcdHqsidRBkMaLVFAmLGSBygwPxwJ6s7vr7go-Ee9TkilI213RIDQBF618qFHscAZc0z3EMww7XjSsTn5PgqholxWnHEhw9e48EJR23kEu8Nt4EZJ3X3uA_8XhpO5DnzJhDFKU/w635-h640/original+%25284%2529.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-expose-headers: Content-Length
etag: "v51c"
expires: Fri, 12 Jul 2024 04:52:18 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="original (4).jpg"
x-content-type-options: nosniff
date: Thu, 11 Jul 2024 04:52:18 GMT
server: fife
content-length: 24947
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhsRHI13IP_HvEVuO2q3hg524aRbEUUFMafj4Aqw4fKQI7OWlG-UGmmeV7JBNBaap8pfpQuWebBnlPFaDUYMzSKNr3XAE4TE_AP1qy3LcRWU6PbQhZ7zMUx_P_Fth2WhYeT9BC6z_0U1xU/w640-h640-rw/original+%25282%2529.jpg | 142.250.74.97 | 200 OK | 36 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhsRHI13IP_HvEVuO2q3hg524aRbEUUFMafj4Aqw4fKQI7OWlG-UGmmeV7JBNBaap8pfpQuWebBnlPFaDUYMzSKNr3XAE4TE_AP1qy3LcRWU6PbQhZ7zMUx_P_Fth2WhYeT9BC6z_0U1xU/w640-h640-rw/original+%25282%2529.jpg IP142.250.74.97:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint07:FA:CF:5D:23:84:6C:3C:8F:1E:8D:4E:97:CD:C0:BC:9A:C5:42:33 ValidityThu, 13 Jun 2024 16:32:56 GMT - Thu, 05 Sep 2024 16:32:55 GMT
File typeRIFF (little-endian) data, Web/P image Hash57a40768bd5f7b9c8cf9c9009ee12ce1 58571f80a773f00b69cb03a86dec5fbd6905f500 db131aa0556ee0441f7353cd28297fab95360293387f7aed4fece7dbdf01e261
GET /img/b/R29vZ2xl/AVvXsEhsRHI13IP_HvEVuO2q3hg524aRbEUUFMafj4Aqw4fKQI7OWlG-UGmmeV7JBNBaap8pfpQuWebBnlPFaDUYMzSKNr3XAE4TE_AP1qy3LcRWU6PbQhZ7zMUx_P_Fth2WhYeT9BC6z_0U1xU/w640-h640-rw/original+%25282%2529.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
vary: Origin
access-control-expose-headers: Content-Length
etag: "v50f"
expires: Fri, 12 Jul 2024 04:52:18 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="original (2).webp"
x-content-type-options: nosniff
date: Thu, 11 Jul 2024 04:52:18 GMT
server: fife
content-length: 36462
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhrYCsoyj7mlP_5ylo6DufSU4akzQjLvXINwbrmXsVijd6zWJwNFD5dmJz4xBcwT8qszsuzcMyGOHNoOlJZWwBa2EvDuhkaJE_zsrI77a_NqviG6nEgjEp1BAwBAY3DNHrrPM-UHWyP9KI/w640-h360-rw/image.png | 142.250.74.97 | 200 OK | 60 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhrYCsoyj7mlP_5ylo6DufSU4akzQjLvXINwbrmXsVijd6zWJwNFD5dmJz4xBcwT8qszsuzcMyGOHNoOlJZWwBa2EvDuhkaJE_zsrI77a_NqviG6nEgjEp1BAwBAY3DNHrrPM-UHWyP9KI/w640-h360-rw/image.png IP142.250.74.97:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint07:FA:CF:5D:23:84:6C:3C:8F:1E:8D:4E:97:CD:C0:BC:9A:C5:42:33 ValidityThu, 13 Jun 2024 16:32:56 GMT - Thu, 05 Sep 2024 16:32:55 GMT
File typeRIFF (little-endian) data, Web/P image Hashd6253e497f196dad3cf5a556b55dec8f 3488eaecb6ef68a8265814c5a165795532586600 ec8b8dc0ceaa356f1b43fc59b91f03ee2075d81293bd89fb9614e399c5fffd7a
GET /img/b/R29vZ2xl/AVvXsEhrYCsoyj7mlP_5ylo6DufSU4akzQjLvXINwbrmXsVijd6zWJwNFD5dmJz4xBcwT8qszsuzcMyGOHNoOlJZWwBa2EvDuhkaJE_zsrI77a_NqviG6nEgjEp1BAwBAY3DNHrrPM-UHWyP9KI/w640-h360-rw/image.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
vary: Origin
access-control-expose-headers: Content-Length
etag: "v51e"
expires: Fri, 12 Jul 2024 04:52:18 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="image.webp"
x-content-type-options: nosniff
date: Thu, 11 Jul 2024 04:52:18 GMT
server: fife
content-length: 60352
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh7fcYQFvmcsxILGN2A-Klm-89NibSuf47QG-CQO8afqUq-z0N6qgBPvqmkGoglcjDmnAIIl8-msciHEp7TqEFeh65vt1g-VaUvDyR80b6rWOZKpSZ48fnWDMO0pb2fpB4PU07uy42AA3M/s640-rw/20181010-irozuku01-01.jpg | 142.250.74.97 | 200 OK | 41 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh7fcYQFvmcsxILGN2A-Klm-89NibSuf47QG-CQO8afqUq-z0N6qgBPvqmkGoglcjDmnAIIl8-msciHEp7TqEFeh65vt1g-VaUvDyR80b6rWOZKpSZ48fnWDMO0pb2fpB4PU07uy42AA3M/s640-rw/20181010-irozuku01-01.jpg IP142.250.74.97:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint07:FA:CF:5D:23:84:6C:3C:8F:1E:8D:4E:97:CD:C0:BC:9A:C5:42:33 ValidityThu, 13 Jun 2024 16:32:56 GMT - Thu, 05 Sep 2024 16:32:55 GMT
File typeRIFF (little-endian) data, Web/P image Hash1c4adc214668b0e0062dba212a9308a4 5edb78bca0a9de6430767c95fbbdd122edb49a42 801649aeb2ccb54c1bc4cd6bcb070fa5198547584258ae7bbf68fdef2f752ed1
GET /img/b/R29vZ2xl/AVvXsEh7fcYQFvmcsxILGN2A-Klm-89NibSuf47QG-CQO8afqUq-z0N6qgBPvqmkGoglcjDmnAIIl8-msciHEp7TqEFeh65vt1g-VaUvDyR80b6rWOZKpSZ48fnWDMO0pb2fpB4PU07uy42AA3M/s640-rw/20181010-irozuku01-01.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
vary: Origin
access-control-expose-headers: Content-Length
etag: "v39b"
expires: Fri, 12 Jul 2024 04:52:18 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="20181010-irozuku01-01.webp"
x-content-type-options: nosniff
date: Thu, 11 Jul 2024 04:52:18 GMT
server: fife
content-length: 40636
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDlyDEDjyxiF96KQfJE8879Q4Qr3I2-pXDF6f2QHMsnUOPmbucZeiWG6uNTjgyWXQw2RnaRjIh0JBTVYHciTDT8qPFXBdsj2vn2vonN6ofQ5iomWcohBHqCZxs1wju2uU8jCHANUerd4k/w400-h319-rw/tumblr_pay8m5quBt1x58jt2o1_500.jpg | 142.250.74.97 | 200 OK | 22 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDlyDEDjyxiF96KQfJE8879Q4Qr3I2-pXDF6f2QHMsnUOPmbucZeiWG6uNTjgyWXQw2RnaRjIh0JBTVYHciTDT8qPFXBdsj2vn2vonN6ofQ5iomWcohBHqCZxs1wju2uU8jCHANUerd4k/w400-h319-rw/tumblr_pay8m5quBt1x58jt2o1_500.jpg IP142.250.74.97:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint07:FA:CF:5D:23:84:6C:3C:8F:1E:8D:4E:97:CD:C0:BC:9A:C5:42:33 ValidityThu, 13 Jun 2024 16:32:56 GMT - Thu, 05 Sep 2024 16:32:55 GMT
File typeRIFF (little-endian) data, Web/P image Hashaf15e7f1c8524a74490c45c690dceeb3 4da4a90be029c7cb62d1e1542e6f5b169506bb4c a9c1fc9b2035889d12a487b54e55a719b4e54842ae2bac7536ddf95960ec9fa5
GET /img/b/R29vZ2xl/AVvXsEhDlyDEDjyxiF96KQfJE8879Q4Qr3I2-pXDF6f2QHMsnUOPmbucZeiWG6uNTjgyWXQw2RnaRjIh0JBTVYHciTDT8qPFXBdsj2vn2vonN6ofQ5iomWcohBHqCZxs1wju2uU8jCHANUerd4k/w400-h319-rw/tumblr_pay8m5quBt1x58jt2o1_500.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
vary: Origin
access-control-expose-headers: Content-Length
etag: "v4ff"
expires: Fri, 12 Jul 2024 04:52:18 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="tumblr_pay8m5quBt1x58jt2o1_500.webp"
x-content-type-options: nosniff
date: Thu, 11 Jul 2024 04:52:18 GMT
server: fife
content-length: 22108
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiIL0clAHGELinnu7M0t1a5-wpfD8W0lp4abd01C9FTz7Yg6oX_PTTJGgCDho3cGkN-9z4RwlYCUkSAs4YqA1gnJ4kABh22trTlmeN4BVUqveaebdTBNoJ6Pi0AAkqf98BQCG8Oyjcq2-I/w640-h640-rw/image.png | 142.250.74.97 | 200 OK | 327 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiIL0clAHGELinnu7M0t1a5-wpfD8W0lp4abd01C9FTz7Yg6oX_PTTJGgCDho3cGkN-9z4RwlYCUkSAs4YqA1gnJ4kABh22trTlmeN4BVUqveaebdTBNoJ6Pi0AAkqf98BQCG8Oyjcq2-I/w640-h640-rw/image.png IP142.250.74.97:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint07:FA:CF:5D:23:84:6C:3C:8F:1E:8D:4E:97:CD:C0:BC:9A:C5:42:33 ValidityThu, 13 Jun 2024 16:32:56 GMT - Thu, 05 Sep 2024 16:32:55 GMT
File typeRIFF (little-endian) data, Web/P image Size327 kB (327408 bytes) Hashec594b2c5eb1f595e207b48d48619cfb eae8ab412dd779cf3ca5e294d38ed271e2188a0b bf257ae6a2d584b305ec3eb6ec6a64fc86636a0db7c4751e11ba3bea9cb604bb
GET /img/b/R29vZ2xl/AVvXsEiIL0clAHGELinnu7M0t1a5-wpfD8W0lp4abd01C9FTz7Yg6oX_PTTJGgCDho3cGkN-9z4RwlYCUkSAs4YqA1gnJ4kABh22trTlmeN4BVUqveaebdTBNoJ6Pi0AAkqf98BQCG8Oyjcq2-I/w640-h640-rw/image.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
vary: Origin
access-control-expose-headers: Content-Length
etag: "v566"
expires: Fri, 12 Jul 2024 04:52:18 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="image.webp"
x-content-type-options: nosniff
date: Thu, 11 Jul 2024 04:52:18 GMT
server: fife
content-length: 327408
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh6kaW-7d1n_knS7D0gts1sm7q3GI2VxpDcqirBS3RRkwqLymP9S-CLby0v0mdaLdhNxHeN1PWsRxofb3irqBs7Xb5V53wsWhvxHvd80o4cYfGzJSjvjBUF5Emhf_iCmpHTaWeeTZgpgj0/w640-h464-rw/original.png | 142.250.74.97 | 200 OK | 356 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh6kaW-7d1n_knS7D0gts1sm7q3GI2VxpDcqirBS3RRkwqLymP9S-CLby0v0mdaLdhNxHeN1PWsRxofb3irqBs7Xb5V53wsWhvxHvd80o4cYfGzJSjvjBUF5Emhf_iCmpHTaWeeTZgpgj0/w640-h464-rw/original.png IP142.250.74.97:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint07:FA:CF:5D:23:84:6C:3C:8F:1E:8D:4E:97:CD:C0:BC:9A:C5:42:33 ValidityThu, 13 Jun 2024 16:32:56 GMT - Thu, 05 Sep 2024 16:32:55 GMT
File typeRIFF (little-endian) data, Web/P image Size356 kB (356470 bytes) Hash8cb64aca43dc616fe46f8c460a7f540c 22f08a1dc49e138505a579a221e29ff76e0755f5 3029858fc20d15536338c1d7953414a2169270c68d54bfec10b8c2e2d09b9b47
GET /img/b/R29vZ2xl/AVvXsEh6kaW-7d1n_knS7D0gts1sm7q3GI2VxpDcqirBS3RRkwqLymP9S-CLby0v0mdaLdhNxHeN1PWsRxofb3irqBs7Xb5V53wsWhvxHvd80o4cYfGzJSjvjBUF5Emhf_iCmpHTaWeeTZgpgj0/w640-h464-rw/original.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
vary: Origin
access-control-expose-headers: Content-Length
etag: "v511"
expires: Fri, 12 Jul 2024 04:52:18 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="original.webp"
x-content-type-options: nosniff
date: Thu, 11 Jul 2024 04:52:18 GMT
server: fife
content-length: 356470
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.blogger.com/dyn-css/authorization.css?targetBlogID=3405693820859981231&zx=68127591-93e6-4c5e-98e0-1383b3a04642 | 142.250.74.105 | 200 OK | 21 B |
URL GET HTTP/2www.blogger.com/dyn-css/authorization.css?targetBlogID=3405693820859981231&zx=68127591-93e6-4c5e-98e0-1383b3a04642 IP142.250.74.105:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.blogger.com Fingerprint50:84:30:B7:69:E9:54:8C:5F:D3:96:91:2A:52:48:AD:0D:29:EB:A7 ValidityThu, 13 Jun 2024 15:23:59 GMT - Thu, 05 Sep 2024 15:23:58 GMT
File typevery short file (no magic) Hash68b329da9893e34099c7d8ad5cb9c940 adc83b19e793491b1c6ea0fd8b46cd9f32e592fc 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /dyn-css/authorization.css?targetBlogID=3405693820859981231&zx=68127591-93e6-4c5e-98e0-1383b3a04642 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 11 Jul 2024 04:52:18 GMT
last-modified: Thu, 11 Jul 2024 04:52:18 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ad2bitcoin.com/ad.php?ref=sofiahalbof&width=300 | 162.0.208.108 | 200 OK | 1.5 kB |
URL GET HTTP/1.1ad2bitcoin.com/ad.php?ref=sofiahalbof&width=300 IP162.0.208.108:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerLet's Encrypt Subjectwww.ad2bitcoin.com.traffic2bitcoin.com FingerprintAE:3A:5F:C4:93:C9:87:8E:83:3E:4C:B9:F4:47:F4:9D:F6:25:63:38 ValidityFri, 21 Jun 2024 00:56:27 GMT - Thu, 19 Sep 2024 00:56:26 GMT
File typeJavaScript source, ASCII text, with very long lines (1162) Hash42b7efd548188dba4531c0344245e373 3c8182b63e02601845cdbd47707fbe31d429cab5 77f1e21a5652d3bca9fbadf484a1979eb22082237b9c51c847fb25d6baeafde9
GET /ad.php?ref=sofiahalbof&width=300 HTTP/1.1
Host: ad2bitcoin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 11 Jul 2024 04:52:18 GMT
Server: Apache
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1517
Keep-Alive: timeout=5, max=50
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgeaoNsjDNQ-ft3m51CUPvtToBCbzwdc07wA-SfDPeT-QYmEmsTDzvY8IT9fbty0vA7cQw0i0FVu0FF2ondR7f191Nf0ZSiKTH-boMuR4uzVZYnx-uy132RLaT3OwItBoytd6eLbHjhJnk/s1600/tumblr_p9sx9t6ITy1tji7wmo1_640.png | 142.250.74.97 | 200 OK | 19 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgeaoNsjDNQ-ft3m51CUPvtToBCbzwdc07wA-SfDPeT-QYmEmsTDzvY8IT9fbty0vA7cQw0i0FVu0FF2ondR7f191Nf0ZSiKTH-boMuR4uzVZYnx-uy132RLaT3OwItBoytd6eLbHjhJnk/s1600/tumblr_p9sx9t6ITy1tji7wmo1_640.png IP142.250.74.97:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint07:FA:CF:5D:23:84:6C:3C:8F:1E:8D:4E:97:CD:C0:BC:9A:C5:42:33 ValidityThu, 13 Jun 2024 16:32:56 GMT - Thu, 05 Sep 2024 16:32:55 GMT
File typePNG image data, 627 x 348, 8-bit/color RGB, non-interlaced Hash08b8c241415eb845471a6cdc24e86d3d 4a67fd9185985c5eb0f690a81e4723e9fd10991e e20d7cd5eded37c6539062e9a67b2674b0c52f8149c9880c8ea6ca366fe7df00
GET /img/b/R29vZ2xl/AVvXsEgeaoNsjDNQ-ft3m51CUPvtToBCbzwdc07wA-SfDPeT-QYmEmsTDzvY8IT9fbty0vA7cQw0i0FVu0FF2ondR7f191Nf0ZSiKTH-boMuR4uzVZYnx-uy132RLaT3OwItBoytd6eLbHjhJnk/s1600/tumblr_p9sx9t6ITy1tji7wmo1_640.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-expose-headers: Content-Length
etag: "v358"
expires: Fri, 12 Jul 2024 04:52:18 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="tumblr_p9sx9t6ITy1tji7wmo1_640.png"
x-content-type-options: nosniff
date: Thu, 11 Jul 2024 04:52:18 GMT
server: fife
content-length: 19422
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pagead2.googlesyndication.com/pagead/html/r20240708/r20110914/zrt_lookup_fy2021.html | 142.250.74.66 | 200 OK | 4.1 kB |
URL GET HTTP/3pagead2.googlesyndication.com/pagead/html/r20240708/r20110914/zrt_lookup_fy2021.html IP142.250.74.66:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.g.doubleclick.net Fingerprint87:0D:4E:49:D5:3A:84:7C:EE:CF:28:04:9B:E0:25:8E:35:E9:1A:E4 ValidityThu, 13 Jun 2024 15:27:09 GMT - Thu, 05 Sep 2024 15:27:08 GMT
File typeHTML document, ASCII text, with very long lines (3323) Hash035969ba7fe185582ca9a372cce6b616 13a0a6e38fbb29b6486a3346d61c888f11d25e3f 0979555db2b62146491ae2f96bbfedd1c4e16ffcec94310c95b5645e934baf38
GET /pagead/html/r20240708/r20110914/zrt_lookup_fy2021.html HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 4142
x-xss-protection: 0
date: Wed, 10 Jul 2024 16:51:00 GMT
expires: Wed, 24 Jul 2024 16:51:00 GMT
cache-control: public, max-age=1209600
age: 43278
etag: 2738592464165616
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| pagead2.googlesyndication.com/pagead/ads?npa=1<d_cs=1&client=ca-pub-5387507473582359&output=html&adk=1812271804&adf=3025194257&abgtt=7&lmt=1720659804&plat=3%3A16%2C4%3A16%2C9%3A134250504%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fsofiahalbofanimeworld.blogspot.com%2F&host=ca-host-pub-1556223355139109&pra=5&wgl=1&easpi=0&aihb=0&asro=0&ailel=32~27~1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~30&aiael=32~27~1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~30&aifxl=32_7~27_8~30_19&aiixl=32_9~27_3~30_6&aslmct=0.7&asamct=0.7&aisaib=1&itsi=-1&dt=1720673537993&bpp=32&bdt=390&idt=318&shv=r20240708&mjsv=m202407030101&ptt=9&saldr=aa&abxe=1&eoidce=1&nras=1&correlator=663818509917&frm=20&pv=2&ga_vid=1611035193.1720673538&ga_sid=1720673538&ga_hid=1566784277&ga_fc=0&u_tz=0&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_sd=1&adx=-12245933&ady=-12245933&biw=1280&bih=1024&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31084867%2C31085211%2C95330413%2C95334508%2C95334527%2C95334830&oid=2&pvsid=4273762509651220&tmod=1762222434&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C1024&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&ifi=1&uci=a!1&fsb=1&dtd=362 | 142.250.74.66 | 200 OK | 46 B |
URL GET HTTP/3pagead2.googlesyndication.com/pagead/ads?npa=1<d_cs=1&client=ca-pub-5387507473582359&output=html&adk=1812271804&adf=3025194257&abgtt=7&lmt=1720659804&plat=3%3A16%2C4%3A16%2C9%3A134250504%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fsofiahalbofanimeworld.blogspot.com%2F&host=ca-host-pub-1556223355139109&pra=5&wgl=1&easpi=0&aihb=0&asro=0&ailel=32~27~1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~30&aiael=32~27~1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~30&aifxl=32_7~27_8~30_19&aiixl=32_9~27_3~30_6&aslmct=0.7&asamct=0.7&aisaib=1&itsi=-1&dt=1720673537993&bpp=32&bdt=390&idt=318&shv=r20240708&mjsv=m202407030101&ptt=9&saldr=aa&abxe=1&eoidce=1&nras=1&correlator=663818509917&frm=20&pv=2&ga_vid=1611035193.1720673538&ga_sid=1720673538&ga_hid=1566784277&ga_fc=0&u_tz=0&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_sd=1&adx=-12245933&ady=-12245933&biw=1280&bih=1024&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31084867%2C31085211%2C95330413%2C95334508%2C95334527%2C95334830&oid=2&pvsid=4273762509651220&tmod=1762222434&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C1024&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&ifi=1&uci=a!1&fsb=1&dtd=362 IP142.250.74.66:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.g.doubleclick.net Fingerprint87:0D:4E:49:D5:3A:84:7C:EE:CF:28:04:9B:E0:25:8E:35:E9:1A:E4 ValidityThu, 13 Jun 2024 15:27:09 GMT - Thu, 05 Sep 2024 15:27:08 GMT
File typeHTML document, ASCII text, with very long lines (603), with no line terminators Hash2c739853e3edfa26869416e3d4e5d369 c263dc1c36c954b252bc7e775e6e82865d9b29b8 00daef3b4a945d15f73efa05e0ce2ca51f2f8252e1da8fae5c2efb0f6dddacce
GET /pagead/ads?npa=1<d_cs=1&client=ca-pub-5387507473582359&output=html&adk=1812271804&adf=3025194257&abgtt=7&lmt=1720659804&plat=3%3A16%2C4%3A16%2C9%3A134250504%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fsofiahalbofanimeworld.blogspot.com%2F&host=ca-host-pub-1556223355139109&pra=5&wgl=1&easpi=0&aihb=0&asro=0&ailel=32~27~1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~30&aiael=32~27~1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~30&aifxl=32_7~27_8~30_19&aiixl=32_9~27_3~30_6&aslmct=0.7&asamct=0.7&aisaib=1&itsi=-1&dt=1720673537993&bpp=32&bdt=390&idt=318&shv=r20240708&mjsv=m202407030101&ptt=9&saldr=aa&abxe=1&eoidce=1&nras=1&correlator=663818509917&frm=20&pv=2&ga_vid=1611035193.1720673538&ga_sid=1720673538&ga_hid=1566784277&ga_fc=0&u_tz=0&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_sd=1&adx=-12245933&ady=-12245933&biw=1280&bih=1024&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31084867%2C31085211%2C95330413%2C95334508%2C95334527%2C95334830&oid=2&pvsid=4273762509651220&tmod=1762222434&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C1024&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&ifi=1&uci=a!1&fsb=1&dtd=362 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
date: Thu, 11 Jul 2024 04:52:18 GMT
server: cafe
content-length: 46
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hash370b41fdcbed5628b66e14537e338fa7 c251b33650f2e09dd9642509dfc71d6c7b872124 531fd57a5230316eb84714dc02ed9a13eac474d7d732c6d9a052074cb08cb1eb
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 11 Jul 2024 04:52:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.blogger.com/img/logo-16.png | 142.250.74.105 | 200 OK | 279 B |
URL GET HTTP/3www.blogger.com/img/logo-16.png IP142.250.74.105:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.blogger.com Fingerprint50:84:30:B7:69:E9:54:8C:5F:D3:96:91:2A:52:48:AD:0D:29:EB:A7 ValidityThu, 13 Jun 2024 15:23:59 GMT - Thu, 05 Sep 2024 15:23:58 GMT
File typePNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced Hash5ffecab6c722bb0adc3fce8d83b27993 0e59b05d3da526e82bb4f5d47c5d94e2a318dafb cca664ca16fde285160e80eae6ba4501c27b1dd1ce09aec1e84caa74b5baff53
GET /img/logo-16.png HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 279
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 04 Jul 2024 11:12:26 GMT
expires: Thu, 11 Jul 2024 11:12:26 GMT
cache-control: public, max-age=604800
last-modified: Wed, 03 Jul 2024 12:55:50 GMT
content-type: image/png
age: 581993
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| resources.blogblog.com/img/navbar/icons_peach.png | 142.250.74.105 | 200 OK | 907 B |
URL GET HTTP/3resources.blogblog.com/img/navbar/icons_peach.png IP142.250.74.105:443
Requested byhttps://www.blogger.com/navbar.g?targetBlogID=3405693820859981231&blogName=sofiahalbof+anime+world+&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://sofiahalbofanimeworld.blogspot.com/search&blogLocale=en&v=2&homepageUrl=https://sofiahalbofanimeworld.blogspot.com/&vt=-5639291567810939189&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.IKZeRvoAYNY.O%2Fam%3DAAAQ%2Fd%3D1%2Frs%3DAHpOoo-SMWTzMRJrTty6iE5dL_aWGYOnuw%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Fsofiahalbofanimeworld.blogspot.com&pfname=&rpctoken=35619019 CertificateIssuerGoogle Trust Services Subject*.blogger.com Fingerprint50:84:30:B7:69:E9:54:8C:5F:D3:96:91:2A:52:48:AD:0D:29:EB:A7 ValidityThu, 13 Jun 2024 15:23:59 GMT - Thu, 05 Sep 2024 15:23:58 GMT
File typePNG image data, 46 x 20, 8-bit colormap, non-interlaced Hash3718077fe5eb689b0ded987a52881d06 f0ce5596ef43f850c400cbbc0556697fb3e7b232 72be8098b87d7e2d7fbc6eb0a3eaebcf1013186d7733cd340549f9e1701a4865
GET /img/navbar/icons_peach.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 907
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 04 Jul 2024 07:02:59 GMT
expires: Thu, 11 Jul 2024 07:02:59 GMT
cache-control: public, max-age=604800
last-modified: Wed, 03 Jul 2024 22:55:34 GMT
content-type: image/png
age: 596960
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| resources.blogblog.com/img/navbar/arrows-light.png | 142.250.74.105 | 200 OK | 117 B |
URL GET HTTP/3resources.blogblog.com/img/navbar/arrows-light.png IP142.250.74.105:443
Requested byhttps://www.blogger.com/navbar.g?targetBlogID=3405693820859981231&blogName=sofiahalbof+anime+world+&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://sofiahalbofanimeworld.blogspot.com/search&blogLocale=en&v=2&homepageUrl=https://sofiahalbofanimeworld.blogspot.com/&vt=-5639291567810939189&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.IKZeRvoAYNY.O%2Fam%3DAAAQ%2Fd%3D1%2Frs%3DAHpOoo-SMWTzMRJrTty6iE5dL_aWGYOnuw%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Fsofiahalbofanimeworld.blogspot.com&pfname=&rpctoken=35619019 CertificateIssuerGoogle Trust Services Subject*.blogger.com Fingerprint50:84:30:B7:69:E9:54:8C:5F:D3:96:91:2A:52:48:AD:0D:29:EB:A7 ValidityThu, 13 Jun 2024 15:23:59 GMT - Thu, 05 Sep 2024 15:23:58 GMT
File typePNG image data, 19 x 4, 8-bit/color RGBA, non-interlaced Hash25c2b0cfe0ad4dcda4a0e3727d091d80 b9d16f4311e64648b7970baf00cb9841e3c3351b bb6685107846b4c25384202730b84ec168fecee197e5f9e3fe8ffdd5bed6749d
GET /img/navbar/arrows-light.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 117
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 04 Jul 2024 06:59:53 GMT
expires: Thu, 11 Jul 2024 06:59:53 GMT
cache-control: public, max-age=604800
last-modified: Wed, 03 Jul 2024 19:54:54 GMT
content-type: image/png
age: 597146
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| apis.google.com/js/platform:gapi.iframes.style.common.js | 142.250.74.174 | 200 OK | 22 kB |
URL GET HTTP/3apis.google.com/js/platform:gapi.iframes.style.common.js IP142.250.74.174:443
Requested byhttps://www.blogger.com/navbar.g?targetBlogID=3405693820859981231&blogName=sofiahalbof+anime+world+&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://sofiahalbofanimeworld.blogspot.com/search&blogLocale=en&v=2&homepageUrl=https://sofiahalbofanimeworld.blogspot.com/&vt=-5639291567810939189&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.IKZeRvoAYNY.O%2Fam%3DAAAQ%2Fd%3D1%2Frs%3DAHpOoo-SMWTzMRJrTty6iE5dL_aWGYOnuw%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Fsofiahalbofanimeworld.blogspot.com&pfname=&rpctoken=35619019 CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint5E:16:23:DF:7D:42:8E:61:6E:AA:4A:CC:FB:08:1A:B9:8F:FA:E0:A2 ValidityThu, 13 Jun 2024 15:27:14 GMT - Thu, 05 Sep 2024 15:27:13 GMT
File typeJavaScript source, ASCII text, with very long lines (2767) Hashebe5a485f29f7967338096e4e6878846 845bc70098eb80aef57ea87da8fc7bffe5aab067 29b3fe99b016598da9c20ee848f9a90e48e14b16a1393e91a7fe714738790625
GET /js/platform:gapi.iframes.style.common.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 21617
date: Thu, 11 Jul 2024 04:52:19 GMT
expires: Thu, 11 Jul 2024 04:52:19 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "69696d4fb3a5c5ad"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash50e4489707989517510128817aedd2ea 36a54d7b34a9ac621715b569e5a870f62671c574 3e28ea2cede92dae0f7bfcd98eaf9bd016ab8ecc4ea81b7e8f7b90ba4e20aa40
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "3E28EA2CEDE92DAE0F7BFCD98EAF9BD016AB8ECC4EA81B7E8F7B90BA4E20AA40"
Last-Modified: Wed, 10 Jul 2024 17:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19219
Expires: Thu, 11 Jul 2024 10:12:38 GMT
Date: Thu, 11 Jul 2024 04:52:19 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash50e4489707989517510128817aedd2ea 36a54d7b34a9ac621715b569e5a870f62671c574 3e28ea2cede92dae0f7bfcd98eaf9bd016ab8ecc4ea81b7e8f7b90ba4e20aa40
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "3E28EA2CEDE92DAE0F7BFCD98EAF9BD016AB8ECC4EA81B7E8F7B90BA4E20AA40"
Last-Modified: Wed, 10 Jul 2024 17:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19219
Expires: Thu, 11 Jul 2024 10:12:38 GMT
Date: Thu, 11 Jul 2024 04:52:19 GMT
Connection: keep-alive
|
|
| cdn.surdotly.com/js/Surly.min.js | 54.173.41.122 | 200 OK | 1.7 kB |
URL GET HTTP/2cdn.surdotly.com/js/Surly.min.js IP54.173.41.122:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerLet's Encrypt Subjectcdn.surdotly.com FingerprintD3:61:B6:C5:55:62:F5:B3:81:09:20:ED:23:55:29:DE:E7:97:68:1B ValidityWed, 15 May 2024 11:13:36 GMT - Tue, 13 Aug 2024 11:13:35 GMT
File typegzip compressed data, from Unix Hash4684cd171f3378333f9e62f691dd4dfd 9445f67d798b346029e07fcf64ad24ddb1d27cbd 507178734c72f35da25038d80770f5464a3a5a5f6ed9c7dcfa33b0b536e14aa1
GET /js/Surly.min.js HTTP/1.1
Host: cdn.surdotly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.14.2
date: Thu, 11 Jul 2024 04:52:18 GMT
content-type: application/javascript
last-modified: Mon, 13 Jun 2022 04:23:22 GMT
vary: Accept-Encoding
etag: W/"62a6bbba-b7a"
expires: Sat, 10 Aug 2024 04:52:18 GMT
cache-control: max-age=2592000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash50e4489707989517510128817aedd2ea 36a54d7b34a9ac621715b569e5a870f62671c574 3e28ea2cede92dae0f7bfcd98eaf9bd016ab8ecc4ea81b7e8f7b90ba4e20aa40
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "3E28EA2CEDE92DAE0F7BFCD98EAF9BD016AB8ECC4EA81B7E8F7B90BA4E20AA40"
Last-Modified: Wed, 10 Jul 2024 17:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19219
Expires: Thu, 11 Jul 2024 10:12:38 GMT
Date: Thu, 11 Jul 2024 04:52:19 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash50e4489707989517510128817aedd2ea 36a54d7b34a9ac621715b569e5a870f62671c574 3e28ea2cede92dae0f7bfcd98eaf9bd016ab8ecc4ea81b7e8f7b90ba4e20aa40
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "3E28EA2CEDE92DAE0F7BFCD98EAF9BD016AB8ECC4EA81B7E8F7B90BA4E20AA40"
Last-Modified: Wed, 10 Jul 2024 17:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19219
Expires: Thu, 11 Jul 2024 10:12:38 GMT
Date: Thu, 11 Jul 2024 04:52:19 GMT
Connection: keep-alive
|
|
| apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.IKZeRvoAYNY.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/am=AAAQ/rs=AHpOoo-SMWTzMRJrTty6iE5dL_aWGYOnuw/cb=gapi.loaded_0?le=scs | 142.250.74.174 | 200 OK | 46 kB |
URL GET HTTP/3apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.IKZeRvoAYNY.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/am=AAAQ/rs=AHpOoo-SMWTzMRJrTty6iE5dL_aWGYOnuw/cb=gapi.loaded_0?le=scs IP142.250.74.174:443
Requested byhttps://www.blogger.com/navbar.g?targetBlogID=3405693820859981231&blogName=sofiahalbof+anime+world+&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://sofiahalbofanimeworld.blogspot.com/search&blogLocale=en&v=2&homepageUrl=https://sofiahalbofanimeworld.blogspot.com/&vt=-5639291567810939189&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.IKZeRvoAYNY.O%2Fam%3DAAAQ%2Fd%3D1%2Frs%3DAHpOoo-SMWTzMRJrTty6iE5dL_aWGYOnuw%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Fsofiahalbofanimeworld.blogspot.com&pfname=&rpctoken=35619019 CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint5E:16:23:DF:7D:42:8E:61:6E:AA:4A:CC:FB:08:1A:B9:8F:FA:E0:A2 ValidityThu, 13 Jun 2024 15:27:14 GMT - Thu, 05 Sep 2024 15:27:13 GMT
File typeJavaScript source, ASCII text, with very long lines (2141) Hash5a7616280268d3642196c89bd5a7bf00 0350f9555271f57d150da785524e095a7e8eea56 276ab13834ac74ad86344346135288624927cf2e8c5cdd589bd4619fcd467c44
GET /_/scs/abc-static/_/js/k=gapi.lb.en.IKZeRvoAYNY.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/am=AAAQ/rs=AHpOoo-SMWTzMRJrTty6iE5dL_aWGYOnuw/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 46436
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 10 Jul 2024 22:11:27 GMT
expires: Thu, 10 Jul 2025 22:11:27 GMT
cache-control: public, max-age=31536000
age: 24052
last-modified: Thu, 06 Jun 2024 15:21:04 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| i.ibb.co/kGScsYS/test-jpg.jpg |  162.19.58.156 | 200 OK | 37 kB |
URL GET HTTP/2i.ibb.co/kGScsYS/test-jpg.jpg IP162.19.58.156:443
Requested byhttps://ad2bitcoin.com/ad.php?ref=sofiahalbof&width=300 CertificateIssuerLet's Encrypt Subjectibb.co Fingerprint5F:18:DC:78:83:E8:A9:2D:9B:15:95:2F:AC:0C:82:09:04:D5:10:6D ValidityFri, 21 Jun 2024 07:49:37 GMT - Thu, 19 Sep 2024 07:49:36 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 5.0.13], baseline, precision 8, 300x250, components 3 Hashf1cc627588c92b1ff17bfff17c4cddb6 d2b9ddfd9434b75f6bdf181134b8ee0312f669ea e496f93646d55dcddb4d59e0ff1d16ccab036f87ce1e4bdb1a811527d30a2149
GET /kGScsYS/test-jpg.jpg HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ad2bitcoin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 11 Jul 2024 04:52:19 GMT
content-type: image/jpeg
content-length: 36974
last-modified: Wed, 03 Jul 2024 15:40:45 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ad2bitcoin.com/adqlt.php?ref=sofiahalbof&keycode=8436 | 162.0.208.108 | 200 OK | 222 B |
URL GET HTTP/1.1ad2bitcoin.com/adqlt.php?ref=sofiahalbof&keycode=8436 IP162.0.208.108:443
Requested byhttps://ad2bitcoin.com/ad.php?ref=sofiahalbof&width=300 CertificateIssuerLet's Encrypt Subjectwww.ad2bitcoin.com.traffic2bitcoin.com FingerprintAE:3A:5F:C4:93:C9:87:8E:83:3E:4C:B9:F4:47:F4:9D:F6:25:63:38 ValidityFri, 21 Jun 2024 00:56:27 GMT - Thu, 19 Sep 2024 00:56:26 GMT
File typeASCII text, with very long lines (762), with no line terminators Hash5c07e927b2ef0c4602b61329d3cbb0bf 28a6e9739e09c4257d0ab5f214c0ee59fea80a1d c2beacd76942f3bbd6ac26d93a907ed65ca91b1ce2111e4070bbeacc093217c3
GET /adqlt.php?ref=sofiahalbof&keycode=8436 HTTP/1.1
Host: ad2bitcoin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ad2bitcoin.com/ad.php?ref=sofiahalbof&width=300
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 11 Jul 2024 04:52:19 GMT
Server: Apache
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 222
Keep-Alive: timeout=5, max=49
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
|
|
| sofiahalbofanimeworld.blogspot.com/favicon.ico | 172.217.21.161 | 200 OK | 412 B |
URL GET HTTP/3sofiahalbofanimeworld.blogspot.com/favicon.ico IP172.217.21.161:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subjectmisc-sni.blogspot.com Fingerprint2C:AB:90:A1:00:95:11:42:95:2A:29:C7:BF:46:89:70:EC:C0:40:5D ValidityThu, 13 Jun 2024 16:10:03 GMT - Thu, 05 Sep 2024 16:10:02 GMT
File typeMS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel Hash59a0c7b6e4848ccdabcea0636efda02b 30ef5c54b8bbc3487ea2b4c45cd11ea2932e4340 a1495da3cf3db37bf105a12658636ff628fee7b73975b9200049af7747e60b1f
GET /favicon.ico HTTP/1.1
Host: sofiahalbofanimeworld.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/x-icon; charset=UTF-8
expires: Thu, 11 Jul 2024 04:52:20 GMT
date: Thu, 11 Jul 2024 04:52:20 GMT
cache-control: private, max-age=86400
last-modified: Thu, 11 Jul 2024 01:03:24 GMT
etag: W/"4cffdca16c434e5f603fb6956e760e734b8e1c3f0353516d2462814e9a477d0d"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 412
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.2/css/fontawesome.min.css |  104.17.25.14 | 200 OK | 10 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.2/css/fontawesome.min.css IP104.17.25.14:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerLet's Encrypt Subjectcdnjs.cloudflare.com Fingerprint3B:5B:7C:DD:19:E8:16:5A:09:22:D6:1E:03:84:8D:B9:A1:32:BF:8E ValiditySun, 02 Jun 2024 00:47:32 GMT - Sat, 31 Aug 2024 00:47:31 GMT
File typeASCII text, with very long lines (57726) Hash437e0fafbd3c880ef8b612d6ca41ed75 f13538cdb2a19731f08cbdc6389338753d66704a 1a0f0322dfe91f9af8ddcfb7e3253822bab9b946d28051078877bdb2a0e0378a
GET /ajax/libs/font-awesome/5.15.2/css/fontawesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://be-the-bes-t.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 11 Jul 2024 04:52:20 GMT
content-type: text/css; charset=utf-8
content-length: 10266
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5fff7431-e238"
last-modified: Wed, 13 Jan 2021 22:29:05 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 21683
expires: Tue, 01 Jul 2025 04:52:20 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z0JT6AohZpOfSeloyXlhquE%2Fc4EyokaN14Ly9UoTVG%2BVuDGNvKYzd9zDcc%2FypzBk0hz3AwdTkFkHnhBVtxVnHYh9Ph%2BIQrrBXTB%2F9fDcuWk4GKskg8qxyps9IhDdzNAWZzggQKhW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8a162efacb1c56bd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| digimonbtc.com/templates/ad728x90.php | 162.0.208.108 | 200 OK | 220 B |
URL GET HTTP/1.1digimonbtc.com/templates/ad728x90.php IP162.0.208.108:443
Requested byhttps://ad2bitcoin.com/adqlt.php?ref=sofiahalbof&keycode=8436 CertificateIssuerLet's Encrypt Subject*.digimonbtc.com FingerprintF1:E9:67:4A:E9:8A:A7:28:DA:C2:63:B6:DF:C6:92:62:B8:63:7F:6E ValidityTue, 28 May 2024 06:56:36 GMT - Mon, 26 Aug 2024 06:56:35 GMT
File typeHTML document, ASCII text Hash0caf6a66993ee0075ede8d1682c00c12 a9b0e2107c5c7334366db9151d294d4b36a9f1a2 6d14f1756432a5dbaeb31a94ba6eb3474bbcb37e8249498d90c78f14e80547e4
GET /templates/ad728x90.php HTTP/1.1
Host: digimonbtc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ad2bitcoin.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 11 Jul 2024 04:52:20 GMT
Server: Apache
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 220
Keep-Alive: timeout=5, max=50
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
|
|
| blogger.googleusercontent.com/img/a/AVvXsEjHxqpbmECJpIIojuyvHjJNEAlnjtDNvKBhrsCnjsQc76D79s5WCIISKE-btfKqTPxcq0cQJODRLMYFTMdGkufRepENIh4zMH01GtH1NcqKHQE9gZWe6UUeLfMGNYH8qHxXGZ6l9V3qNapGPnO47oPEFNMhzaVPkUKukqctF0CLSt28zZYR7RwM6Bz_J2j7=s70 | 142.250.74.97 | 200 OK | 2.4 kB |
URL GET HTTP/3blogger.googleusercontent.com/img/a/AVvXsEjHxqpbmECJpIIojuyvHjJNEAlnjtDNvKBhrsCnjsQc76D79s5WCIISKE-btfKqTPxcq0cQJODRLMYFTMdGkufRepENIh4zMH01GtH1NcqKHQE9gZWe6UUeLfMGNYH8qHxXGZ6l9V3qNapGPnO47oPEFNMhzaVPkUKukqctF0CLSt28zZYR7RwM6Bz_J2j7=s70 IP142.250.74.97:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint07:FA:CF:5D:23:84:6C:3C:8F:1E:8D:4E:97:CD:C0:BC:9A:C5:42:33 ValidityThu, 13 Jun 2024 16:32:56 GMT - Thu, 05 Sep 2024 16:32:55 GMT
File typePNG image data, 70 x 70, 8-bit/color RGB, non-interlaced Hashd813ef4e354744c43ee221c2b8282ac4 db81fe16a34395bbbaa872607c4cb5ad7f817dc2 98772436808f29f5815c6f648576bdfe3d95e56a1693663b39efb3e4fbfa9fd7
GET /img/a/AVvXsEjHxqpbmECJpIIojuyvHjJNEAlnjtDNvKBhrsCnjsQc76D79s5WCIISKE-btfKqTPxcq0cQJODRLMYFTMdGkufRepENIh4zMH01GtH1NcqKHQE9gZWe6UUeLfMGNYH8qHxXGZ6l9V3qNapGPnO47oPEFNMhzaVPkUKukqctF0CLSt28zZYR7RwM6Bz_J2j7=s70 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://be-the-bes-t.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/png
vary: Origin
access-control-expose-headers: Content-Length
etag: "v17"
expires: Fri, 12 Jul 2024 04:52:20 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Untitled_70x70.png"
x-content-type-options: nosniff
date: Thu, 11 Jul 2024 04:52:20 GMT
server: fife
content-length: 2353
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.1/webfonts/fa-solid-900.woff2 | 104.17.25.14 | 200 OK | 80 kB |
URL GET HTTP/3cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.1/webfonts/fa-solid-900.woff2 IP104.17.25.14:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerLet's Encrypt Subjectcdnjs.cloudflare.com Fingerprint3B:5B:7C:DD:19:E8:16:5A:09:22:D6:1E:03:84:8D:B9:A1:32:BF:8E ValiditySun, 02 Jun 2024 00:47:32 GMT - Sat, 31 Aug 2024 00:47:31 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 80300, version 331.-31392 Hash8e1ed89b6ccb8ce41faf5cb672677105 9b592048b9062b00f0b2dd782d70a95b7dc69b83 6b555920e358f8a25a422988b448615c33bcccb4f932e8331cebfc8e2a737fc7
GET /ajax/libs/font-awesome/5.15.1/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://be-the-bes-t.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://be-the-bes-t.blogspot.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 11 Jul 2024 04:52:20 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 80300
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5f7b5b5f-139ac"
last-modified: Mon, 05 Oct 2020 17:43:59 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1836939
expires: Tue, 01 Jul 2025 04:52:20 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lB%2FhoYnC9V4O%2FPYYp%2BB8ojoYI6H0AaMnjox7X%2F7Hqe3551Ps%2BY4jkvJENyx0FaV8jJJIrUY3niIgYHgQIYnfh%2B7dWGpi5SYPyoVcEc4PLp%2B69upcBH7TYNI1r3fSZV0a5OXLfpnr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8a162efc0f47b503-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.1/webfonts/fa-regular-400.woff2 | 104.17.25.14 | 200 OK | 14 kB |
URL GET HTTP/3cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.1/webfonts/fa-regular-400.woff2 IP104.17.25.14:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerLet's Encrypt Subjectcdnjs.cloudflare.com Fingerprint3B:5B:7C:DD:19:E8:16:5A:09:22:D6:1E:03:84:8D:B9:A1:32:BF:8E ValiditySun, 02 Jun 2024 00:47:32 GMT - Sat, 31 Aug 2024 00:47:31 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 13548, version 331.-31392 Hash4a74738e7728e93c4394b8604081da62 fb9648469530a05fa9aac80e47d4d6960472a242 ce20ed8a323117c8a718ff1ddc6dabb997373b575a8e896f2bf02b846c082c9d
GET /ajax/libs/font-awesome/5.15.1/webfonts/fa-regular-400.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://be-the-bes-t.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://be-the-bes-t.blogspot.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 11 Jul 2024 04:52:20 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 13548
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5f7b5b5f-34ec"
last-modified: Mon, 05 Oct 2020 17:43:59 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 26243
expires: Tue, 01 Jul 2025 04:52:20 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YcM6lV92lGa25kg9gMGPZKmjs1Nm7Or5u9bSJ3yvc5he%2FaspkRgHhQHo8YZRRFzYi6Si1WhdADSC%2Fsq7k334LuBEyXWQjPTZpPmWXiGQvV73MioV6pN5cmCblJIEul897izO8KcA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8a162efc0f48b503-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.1/webfonts/fa-brands-400.woff2 | 104.17.25.14 | 200 OK | 78 kB |
URL GET HTTP/3cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.1/webfonts/fa-brands-400.woff2 IP104.17.25.14:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerLet's Encrypt Subjectcdnjs.cloudflare.com Fingerprint3B:5B:7C:DD:19:E8:16:5A:09:22:D6:1E:03:84:8D:B9:A1:32:BF:8E ValiditySun, 02 Jun 2024 00:47:32 GMT - Sat, 31 Aug 2024 00:47:31 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 78460, version 331.-31392 Hashf075c50f89795e4cdb4d45b51f1a6800 f726c4275bb494a045fde059175f072de06c01df 71b3ce72680f4183d28db86b184542051fd533bb1146933233e4f6a20cf98cba
GET /ajax/libs/font-awesome/5.15.1/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://be-the-bes-t.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://be-the-bes-t.blogspot.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 11 Jul 2024 04:52:20 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 78460
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5f7b5b5f-1327c"
last-modified: Mon, 05 Oct 2020 17:43:59 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 24321
expires: Tue, 01 Jul 2025 04:52:20 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V3NhECdYKUhFcNiLioM3aPaBQlC09FcfBmJxl81C0OqntaXTZ1xZ%2FXrWZDGBNzr%2B1Ps6%2F2SngVnB20oen5k%2FV9YPa%2BhHIj%2Bj%2FXZQgqeFEtj52aE8WicGRCaIiV%2Bbpk9Fxv8hwlgu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8a162efc0f49b503-OSL
alt-svc: h3=":443"; ma=86400
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hashb2f2732df4468e3a758dae49cfc008fa 5096109cdcd304f8feef5a7e1522b309ec1cac59 04725f03352a4d17d4c11e4cb17d8d11496a1d7ccb671660e0092917e47f58d8
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 11 Jul 2024 04:52:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| blogger.googleusercontent.com/img/a/AVvXsEg1709DGaJtqXBl2qpcpjHBZj5EQyCiu9736Wdv5_zy4d-3k0nbOhnJ8KYLqG7XKdP1eaeVVcgB9BczqJx14Y6wWNBbbdo0TEcRZ4RKta99I1byZnYDCohgCcEtb-gM0_510I2fselrovsNJV5ArJXoFdQ2yFtyl_bX5GdoeZ-NXkLmpYjTrEFV8gKoybQZ=w680 | 142.250.74.97 | 200 OK | 93 kB |
URL GET HTTP/3blogger.googleusercontent.com/img/a/AVvXsEg1709DGaJtqXBl2qpcpjHBZj5EQyCiu9736Wdv5_zy4d-3k0nbOhnJ8KYLqG7XKdP1eaeVVcgB9BczqJx14Y6wWNBbbdo0TEcRZ4RKta99I1byZnYDCohgCcEtb-gM0_510I2fselrovsNJV5ArJXoFdQ2yFtyl_bX5GdoeZ-NXkLmpYjTrEFV8gKoybQZ=w680 IP142.250.74.97:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint07:FA:CF:5D:23:84:6C:3C:8F:1E:8D:4E:97:CD:C0:BC:9A:C5:42:33 ValidityThu, 13 Jun 2024 16:32:56 GMT - Thu, 05 Sep 2024 16:32:55 GMT
File typePNG image data, 680 x 304, 8-bit/color RGB, non-interlaced Hash0519de26841b492c00b40bb305bbe415 1267a889d0f70287d5fef57211f0c346159e2b50 12c6b752f2bcab48c8d425b05de2aa2cc220bcd9f33e759df0e85ec830a0eaf5
GET /img/a/AVvXsEg1709DGaJtqXBl2qpcpjHBZj5EQyCiu9736Wdv5_zy4d-3k0nbOhnJ8KYLqG7XKdP1eaeVVcgB9BczqJx14Y6wWNBbbdo0TEcRZ4RKta99I1byZnYDCohgCcEtb-gM0_510I2fselrovsNJV5ArJXoFdQ2yFtyl_bX5GdoeZ-NXkLmpYjTrEFV8gKoybQZ=w680 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://be-the-bes-t.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/png
vary: Origin
access-control-expose-headers: Content-Length
etag: "v22"
expires: Fri, 12 Jul 2024 04:52:20 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="image.png"
x-content-type-options: nosniff
date: Thu, 11 Jul 2024 04:52:20 GMT
server: fife
content-length: 93018
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/opensans/v17/mem5YaGs126MiZpBA-UN7rgOUuhp.woff2 | 216.58.207.227 | 200 OK | 15 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v17/mem5YaGs126MiZpBA-UN7rgOUuhp.woff2 IP216.58.207.227:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintC4:9C:27:09:1C:F7:14:C9:86:F0:B5:42:0B:8A:D2:AE:5E:AE:98:04 ValidityThu, 13 Jun 2024 16:31:03 GMT - Thu, 05 Sep 2024 16:31:02 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15056, version 1.0 Hash0edb76284a7a0f8db4665b560ee2b48f 02496387a5f7bf7b79df52c7b76ece4ebc7a0710 74201a4b97ec1d5e86252dd0180eafd8c5378a9235864dbcd682f3575b41c85b
GET /s/opensans/v17/mem5YaGs126MiZpBA-UN7rgOUuhp.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://be-the-bes-t.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://be-the-bes-t.blogspot.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15056
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 10 Jul 2024 20:36:31 GMT
expires: Thu, 10 Jul 2025 20:36:31 GMT
cache-control: public, max-age=31536000
age: 29749
last-modified: Tue, 23 Jul 2019 19:30:57 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v17/mem8YaGs126MiZpBA-UFVZ0b.woff2 | 216.58.207.227 | 200 OK | 14 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v17/mem8YaGs126MiZpBA-UFVZ0b.woff2 IP216.58.207.227:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintC4:9C:27:09:1C:F7:14:C9:86:F0:B5:42:0B:8A:D2:AE:5E:AE:98:04 ValidityThu, 13 Jun 2024 16:31:03 GMT - Thu, 05 Sep 2024 16:31:02 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 14380, version 1.0 Hash33543c5cc5d88f5695dd08c87d280dfd 600db9374e47e4f73a59ccc0a99bcc42f4a3e02a 9c50a96c859b9beea47b71740bd14e7f69a4df586d015f47434037f8def53b52
GET /s/opensans/v17/mem8YaGs126MiZpBA-UFVZ0b.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://be-the-bes-t.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://be-the-bes-t.blogspot.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14380
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 10 Jul 2024 10:51:15 GMT
expires: Thu, 10 Jul 2025 10:51:15 GMT
cache-control: public, max-age=31536000
age: 64865
last-modified: Tue, 23 Jul 2019 19:30:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| zerofaucet.com/728x90.php | 68.65.121.78 | 200 OK | 271 B |
URL GET HTTP/1.1zerofaucet.com/728x90.php IP68.65.121.78:443
Requested byhttps://ad2bitcoin.com/adqlt.php?ref=sofiahalbof&keycode=8436 CertificateIssuercPanel, Inc. Subjectzerofaucet.com FingerprintB2:B3:3A:FD:65:74:A7:2D:21:33:77:34:FA:5D:65:FE:34:3B:78:EB ValidityTue, 04 Jun 2024 00:00:00 GMT - Mon, 02 Sep 2024 23:59:59 GMT
File typeHTML document, ASCII text Hashb23e7c2df2c6abadcbaa691e9dd1ce9a a60b7548cc598bd7db9a1836ebdc5c4d064b55bb c6dca15c01e374ab9913be90f1bd2337f353a0fc2c1b7ca531301db92c32ec5b
GET /728x90.php HTTP/1.1
Host: zerofaucet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ad2bitcoin.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 11 Jul 2024 04:52:20 GMT
Server: Apache
Keep-Alive: timeout=5, max=25
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| steemitimages.com/640x0/https://cdn.steemitimages.com/DQmW4ryiaK7qYAHV7BQfuF3HEJwz625EeU8twvE5ntHfpBr/aave-common.177dbad9.jpg | 104.21.234.125 | 301 Moved Permanently | 15 kB |
URL GET HTTP/2steemitimages.com/640x0/https://cdn.steemitimages.com/DQmW4ryiaK7qYAHV7BQfuF3HEJwz625EeU8twvE5ntHfpBr/aave-common.177dbad9.jpg IP104.21.234.125:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerLet's Encrypt Subjectsteemitimages.com Fingerprint64:01:AB:9A:F8:CD:69:CE:71:5C:0F:BD:54:49:BB:A5:51:F0:BD:16 ValidityFri, 28 Jun 2024 23:41:56 GMT - Thu, 26 Sep 2024 23:41:55 GMT
Hash906bce020ee0c0c8b872f5b75d157dd3 259ae007bb0056f988ba1cd07fcb80d2aed5f028 52c981cc652eaf365f531bb01a6a2ed78f2e11832c5ae2bff91d40baaeeb8d0c
GET /640x0/https://cdn.steemitimages.com/DQmW4ryiaK7qYAHV7BQfuF3HEJwz625EeU8twvE5ntHfpBr/aave-common.177dbad9.jpg HTTP/1.1
Host: steemitimages.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Thu, 11 Jul 2024 04:52:18 GMT
content-type: text/html; charset=utf-8
x-request-id: Root=1-668f6502-3e631c7e2b0ee1a3246c4c7c
vary: Origin, Accept-Encoding
location: /p/2N61tyyncFaFVtpM8rCsJzDgecVMtkz4jpzBsszXjhqan9oSxNUiLntKumUx6UXTnjRZBagC7t4wvcU8NfMFRFUUeTxXqYciwYQibrkEfPq2QTEahQD2wEJX5bpqnWRQhwYhW7YSwNYE?format=match&mode=fit&width=640
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mswtTnLDXEWPh1LT2J4uxjfATwjaYGJiRO92hkqk2RChBMQFWM3bse5Hd0IefsuqplaOmCWSO0aFOC5KD2vKOn%2B1ad%2BBbAcb%2FpjKWY%2BtyaG02FROvVTYqAnhSbEBat4AGF5uvA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a162eecbde9955c-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| 1.bp.blogspot.com/-N0yw_tpnF9I/YH-kWNg8m_I/AAAAAAAABVY/rRaGSXISmDIFU2dmAQLkc_0-x02E8GLlgCLcBGAsYHQ/s1600/Piki%2BTemplates%2BIcon%2BPack.png | 142.250.74.65 | 200 OK | 5.5 kB |
URL GET HTTP/21.bp.blogspot.com/-N0yw_tpnF9I/YH-kWNg8m_I/AAAAAAAABVY/rRaGSXISmDIFU2dmAQLkc_0-x02E8GLlgCLcBGAsYHQ/s1600/Piki%2BTemplates%2BIcon%2BPack.png IP142.250.74.65:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerGoogle Trust Services Subjectmisc-sni.blogspot.com Fingerprint2C:AB:90:A1:00:95:11:42:95:2A:29:C7:BF:46:89:70:EC:C0:40:5D ValidityThu, 13 Jun 2024 16:10:03 GMT - Thu, 05 Sep 2024 16:10:02 GMT
File typePNG image data, 400 x 400, 8-bit colormap, non-interlaced Hash72b3a26490c4696f50efcf3075214af8 c5b50d4522607036ee2a6e64c79015b5a5a4f82b cd6af3f33f83bc9fe3d4ad79f67d16b7a5732235cb47de917b7542a3c41035f6
GET /-N0yw_tpnF9I/YH-kWNg8m_I/AAAAAAAABVY/rRaGSXISmDIFU2dmAQLkc_0-x02E8GLlgCLcBGAsYHQ/s1600/Piki%2BTemplates%2BIcon%2BPack.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://be-the-bes-t.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="Piki Templates Icon Pack.png"
x-content-type-options: nosniff
server: fife
content-length: 5502
x-xss-protection: 0
date: Thu, 11 Jul 2024 03:47:41 GMT
expires: Fri, 12 Jul 2024 03:47:41 GMT
cache-control: public, max-age=86400, no-transform
age: 3879
etag: "v558"
content-type: image/png
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| be-the-bes-t.blogspot.com/ | 172.217.21.161 | 200 OK | 589 kB |
URL GET HTTP/3be-the-bes-t.blogspot.com/ IP172.217.21.161:443
Requested byhttps://ad2bitcoin.com/adqlt.php?ref=sofiahalbof&keycode=8436 CertificateIssuerGoogle Trust Services Subjectmisc-sni.blogspot.com Fingerprint2C:AB:90:A1:00:95:11:42:95:2A:29:C7:BF:46:89:70:EC:C0:40:5D ValidityThu, 13 Jun 2024 16:10:03 GMT - Thu, 05 Sep 2024 16:10:02 GMT
File typeHTML document, ASCII text, with very long lines (851) Size589 kB (589239 bytes) Hash7085b6db322ed2a850e23b0287e181d6 100937fbc88a553baa0fbe692943dd7e92f6b917 8a0916e7b78760829c9525621e60d661ae563bc5275bf05f02ce12538f917467
GET / HTTP/1.1
Host: be-the-bes-t.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ad2bitcoin.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
x-robots-tag: all,notranslate
content-type: text/html; charset=UTF-8
expires: Thu, 11 Jul 2024 04:52:20 GMT
date: Thu, 11 Jul 2024 04:52:20 GMT
cache-control: private, max-age=0
last-modified: Wed, 10 Jul 2024 01:11:08 GMT
etag: W/"29d5a0d0050ddbefa66861462ade150ebd6c7ea8b58194dce75590b829642708"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 589239
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hashb2f2732df4468e3a758dae49cfc008fa 5096109cdcd304f8feef5a7e1522b309ec1cac59 04725f03352a4d17d4c11e4cb17d8d11496a1d7ccb671660e0092917e47f58d8
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 11 Jul 2024 04:52:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ads.coinserom.com/publisher?adsunit=323432&serom=31383336&size=300x600 | 104.21.67.26 | 200 OK | 29 kB |
URL GET HTTP/2ads.coinserom.com/publisher?adsunit=323432&serom=31383336&size=300x600 IP104.21.67.26:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerGoogle Trust Services Subjectcoinserom.com Fingerprint45:AC:EA:A6:62:36:2A:28:04:B8:F5:1D:B7:2A:CC:C4:F4:DF:89:F3 ValidityThu, 27 Jun 2024 15:00:31 GMT - Wed, 25 Sep 2024 15:00:30 GMT
File typeJavaScript source, ASCII text, with very long lines (1818) Hash8b73db91a952c593ba1066482ceb1149 565fdadc81620c3eec8057612b87ecab1743ebed fc5e21af298c918373b47b38f1104efb639423f55b978bcbc3f05f3ee4dadad6
GET /publisher?adsunit=323432&serom=31383336&size=300x600 HTTP/1.1
Host: ads.coinserom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://be-the-bes-t.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 11 Jul 2024 04:52:20 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YQdIyNlmbYXLT1Mg5fUA7mzfvHYJaZ2mLtj0wWKIZDmNUsODPdjK5DuarL6p2UsuFFM%2FDBnZ%2FFRyeNei4fwfo00nX8cHHt%2BIIquyXsCfgYYybZ6z1xQhR05JVL5oVJVa23y%2Big%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a162efbcce8b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.blogger.com/static/v1/widgets/3399699925-widgets.js | 142.250.74.105 | 200 OK | 51 kB |
URL GET HTTP/3www.blogger.com/static/v1/widgets/3399699925-widgets.js IP142.250.74.105:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.blogger.com Fingerprint50:84:30:B7:69:E9:54:8C:5F:D3:96:91:2A:52:48:AD:0D:29:EB:A7 ValidityThu, 13 Jun 2024 15:23:59 GMT - Thu, 05 Sep 2024 15:23:58 GMT
File typeJavaScript source, ASCII text, with very long lines (1942) Hashec7235b12b33bdafd1a90c19642538b4 fe17f4a93e7851539629270e6e7491b1f5784677 e0bb7b380a611627079eb3213385455d7fc3b1aaff5a79568f21e006bd3f67bf
GET /static/v1/widgets/3399699925-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://be-the-bes-t.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 51286
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 08 Jul 2024 02:08:13 GMT
expires: Tue, 08 Jul 2025 02:08:13 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 08 Jul 2024 00:53:38 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 269048
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| be-the-bes-t.blogspot.com/js/cookienotice.js | 172.217.21.161 | 200 OK | 2.0 kB |
URL GET HTTP/3be-the-bes-t.blogspot.com/js/cookienotice.js IP172.217.21.161:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerGoogle Trust Services Subjectmisc-sni.blogspot.com Fingerprint2C:AB:90:A1:00:95:11:42:95:2A:29:C7:BF:46:89:70:EC:C0:40:5D ValidityThu, 13 Jun 2024 16:10:03 GMT - Thu, 05 Sep 2024 16:10:02 GMT
File typeJavaScript source, ASCII text Hasha705132a2174f88e196ec3610d68faa8 3bad57a48d973a678fec600d45933010f6edc659 068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
GET /js/cookienotice.js HTTP/1.1
Host: be-the-bes-t.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://be-the-bes-t.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 10 Jul 2024 04:42:41 GMT
expires: Wed, 17 Jul 2024 04:42:41 GMT
cache-control: public, max-age=604800
last-modified: Tue, 09 Jul 2024 17:59:50 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 86980
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| ads.coinserom.com/publisher?adsunit=323430&serom=31383336&size=728x90 | 104.21.67.26 | 200 OK | 16 kB |
URL GET HTTP/2ads.coinserom.com/publisher?adsunit=323430&serom=31383336&size=728x90 IP104.21.67.26:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerGoogle Trust Services Subjectcoinserom.com Fingerprint45:AC:EA:A6:62:36:2A:28:04:B8:F5:1D:B7:2A:CC:C4:F4:DF:89:F3 ValidityThu, 27 Jun 2024 15:00:31 GMT - Wed, 25 Sep 2024 15:00:30 GMT
File typeJavaScript source, ASCII text, with very long lines (1818) Hash8e532fbc39e31575c0155f5fb33b87e7 5a3cc9ed46477c9666d04cfffe5da844c6d4dec3 381aedd201b8c85030df4a4e82e59914f8612f753aa271c1bdab80f92695229d
GET /publisher?adsunit=323430&serom=31383336&size=728x90 HTTP/1.1
Host: ads.coinserom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://be-the-bes-t.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 11 Jul 2024 04:52:20 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jBAe7MJ%2BYYIof80MtFgR%2Bp9LLWX1f84d9E%2BXCv4GFIicZUDmCu86F2MQuXIR7IGosHlN4s1e%2Fd66x8xUUcfoidXj%2FaT4gaJFIdP8FFTt7PSKPuZkDp6MWJ8Yxm0jke59IQfs0Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a162efbdcedb515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.coinserom.com/b/76d74ebdd32f95f317ef08638ee17889c2c3961166504af0747db38cd1e2ae3c52f512eeaea3047bdda6feb9439b8adf272f64a37f69bb89ae4a58cd43eda140eb3e12312014ca54e7d89dea60de90a146eea9d8bb820416e617b268d903683d4e2c8994.gif | 104.21.67.26 | 200 OK | 283 kB |
URL GET HTTP/3cdn.coinserom.com/b/76d74ebdd32f95f317ef08638ee17889c2c3961166504af0747db38cd1e2ae3c52f512eeaea3047bdda6feb9439b8adf272f64a37f69bb89ae4a58cd43eda140eb3e12312014ca54e7d89dea60de90a146eea9d8bb820416e617b268d903683d4e2c8994.gif IP104.21.67.26:443
Requested byhttps://ads.coinserom.com/publisher?adsunit=323430&serom=31383336&size=728x90 CertificateIssuerGoogle Trust Services Subjectcoinserom.com Fingerprint45:AC:EA:A6:62:36:2A:28:04:B8:F5:1D:B7:2A:CC:C4:F4:DF:89:F3 ValidityThu, 27 Jun 2024 15:00:31 GMT - Wed, 25 Sep 2024 15:00:30 GMT
File typeGIF image data, version 89a, 728 x 90 Size283 kB (282971 bytes) Hash3d4f8fc6cb446837811cd39bca20e3e6 f97a2186f0967602dd304b269559b67ee528f05e 6184351fe0ada7a63e0c1d2ec4e9d4679cbe10aedca3de6f8e493ab8bc0471a3
GET /b/76d74ebdd32f95f317ef08638ee17889c2c3961166504af0747db38cd1e2ae3c52f512eeaea3047bdda6feb9439b8adf272f64a37f69bb89ae4a58cd43eda140eb3e12312014ca54e7d89dea60de90a146eea9d8bb820416e617b268d903683d4e2c8994.gif HTTP/1.1
Host: cdn.coinserom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ads.coinserom.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 11 Jul 2024 04:52:21 GMT
content-type: image/gif
content-length: 282971
last-modified: Sun, 07 Jul 2024 20:04:16 GMT
etag: "4515b-61cadcd178d6e"
cache-control: max-age=120
cf-cache-status: HIT
age: 730
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MgHlUOhakIzNvgRpXvmS7reAwtZPd51Ro6OKVw%2BGiWD1J97WKygVsrXhJMFYNullcQoJZVk51F6iwfSwvNTwOUsRcDQApVy1YNTCJ%2FwRozT0gsF8xlX3OkNkgGlylnGQHJJI6Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a162f010c535694-OSL
alt-svc: h3=":443"; ma=86400
|
|
| code.jquery.com/jquery-3.3.1.js | 151.101.130.137 | 200 OK | 80 kB |
URL GET HTTP/2code.jquery.com/jquery-3.3.1.js IP151.101.130.137:443
Requested byhttps://ads.coinserom.com/publisher?adsunit=323432&serom=31383336&size=300x600 CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5 ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File typeJavaScript source, ASCII text Hash6a07da9fae934baf3f749e876bbfdd96 46a436eba01c79acdb225757ed80bf54bad6416b d8aa24ecc6cecb1a60515bc093f1c9da38a0392612d9ab8ae0f7f36e6eee1fad
GET /jquery-3.3.1.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ads.coinserom.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-42587"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 11 Jul 2024 04:52:21 GMT
age: 25871337
x-served-by: cache-lga21980-LGA, cache-hel1410028-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 27237
x-timer: S1720673541.409667,VS0,VE0
vary: Accept-Encoding
content-length: 80268
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-3.3.1.js | 151.101.130.137 | 200 OK | 80 kB |
URL GET HTTP/2code.jquery.com/jquery-3.3.1.js IP151.101.130.137:443
Requested byhttps://ads.coinserom.com/publisher?adsunit=323432&serom=31383336&size=300x600 CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5 ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File typeJavaScript source, ASCII text Hash6a07da9fae934baf3f749e876bbfdd96 46a436eba01c79acdb225757ed80bf54bad6416b d8aa24ecc6cecb1a60515bc093f1c9da38a0392612d9ab8ae0f7f36e6eee1fad
GET /jquery-3.3.1.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ads.coinserom.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-42587"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 11 Jul 2024 04:52:21 GMT
age: 25871337
x-served-by: cache-lga21980-LGA, cache-hel1410028-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 27238
x-timer: S1720673541.419695,VS0,VE0
vary: Accept-Encoding
content-length: 80268
X-Firefox-Spdy: h2
|
|
| cryptocoinsad.com/banner/ads_banner/28202.png | 104.21.23.218 | 200 OK | 28 kB |
URL GET HTTP/3cryptocoinsad.com/banner/ads_banner/28202.png IP104.21.23.218:443
Requested byhttps://cryptocoinsad.com/ads/show.php?a=252986&b=393634 CertificateIssuerGoogle Trust Services Subjectcryptocoinsad.com Fingerprint60:1C:B8:49:A9:FA:06:A7:63:CF:83:66:6A:7A:16:2D:CD:FA:04:70 ValiditySat, 22 Jun 2024 13:01:45 GMT - Fri, 20 Sep 2024 13:01:44 GMT
File typePNG image data, 728 x 90, 8-bit/color RGBA, non-interlaced Hash01fa6bd4a2dddfdb3a1f6b527dbcde6b 51511167b474d7822aaf6940357bddfb19dbcd97 da565abe06fcfaf2d7f5fa12d661f8ab5d98405e9d179472300412bedc3da5a1
GET /banner/ads_banner/28202.png HTTP/1.1
Host: cryptocoinsad.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cryptocoinsad.com/ads/show.php?a=255986&b=396587
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 11 Jul 2024 04:52:21 GMT
content-type: image/png
content-length: 27546
last-modified: Thu, 04 Jul 2024 08:06:36 GMT
etag: "6686580c-6b9a"
cache-control: max-age=10800
cf-cache-status: HIT
age: 1825
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lnTb9UiuYx3Pk5HlcAjJqpkkocy2NVhrSgvCNj6kwEgR7HKttF91nuYn%2FgVaDLwfEWi8M%2Bzy4o47ntuhW1iVn0vfKRnxKRSZPf8E1W8uzICqBnwpohQ%2FjnOX7M3JI8F21R5ABw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a162f02cd090b06-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cryptocoinsad.com/ads/show/img/icon.png | 104.21.23.218 | 200 OK | 3.3 kB |
URL GET HTTP/3cryptocoinsad.com/ads/show/img/icon.png IP104.21.23.218:443
Requested byhttps://cryptocoinsad.com/ads/show.php?a=255986&b=396587 CertificateIssuerGoogle Trust Services Subjectcryptocoinsad.com Fingerprint60:1C:B8:49:A9:FA:06:A7:63:CF:83:66:6A:7A:16:2D:CD:FA:04:70 ValiditySat, 22 Jun 2024 13:01:45 GMT - Fri, 20 Sep 2024 13:01:44 GMT
File typePNG image data, 435 x 435, 8-bit/color RGBA, non-interlaced Hash865296d690eff9da3a1bb21590faa79b 50fd13c32e6f6f0b5aa444c921c6241fcb41b5b3 b14ef09e5d084f7cb785998d54d37e486619c9b9527e72776a7c9d2b7e85c828
GET /ads/show/img/icon.png HTTP/1.1
Host: cryptocoinsad.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cryptocoinsad.com/ads/show.php?a=255986&b=396587
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 11 Jul 2024 04:52:21 GMT
content-type: image/png
content-length: 3309
last-modified: Sat, 29 Jan 2022 11:54:52 GMT
etag: "61f52b0c-ced"
cache-control: max-age=10800
cf-cache-status: HIT
age: 6801
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z0KQwrJrsy0%2Bgd%2BrJxaldisJIP9lEMBGHOh9bjN%2BXGQn3U6agznxlQ99nXyCAJmjNGNJhHJ87qTCq1UZFK633fvuRcslHTqIOtZedrFC36gnHG8iQ2foZUmAbnHFY5hynEvGng%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a162f02cd0f0b06-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ads.coinserom.com/images/12px.png | 104.21.67.26 | 200 OK | 351 B |
URL GET HTTP/3ads.coinserom.com/images/12px.png IP104.21.67.26:443
Requested byhttps://ads.coinserom.com/publisher?adsunit=323430&serom=31383336&size=728x90 CertificateIssuerGoogle Trust Services Subjectcoinserom.com Fingerprint45:AC:EA:A6:62:36:2A:28:04:B8:F5:1D:B7:2A:CC:C4:F4:DF:89:F3 ValidityThu, 27 Jun 2024 15:00:31 GMT - Wed, 25 Sep 2024 15:00:30 GMT
File typePNG image data, 12 x 10, 8-bit/color RGBA, non-interlaced Hash836d5e3d9f7c91cde4598ff5ae33cf8f 9ae775654917508f49f13283eaa74b411104f3c9 6eab3907a4b74df6beac63df58704f3270e08f5504cfc864b947770148ff4faa
GET /images/12px.png HTTP/1.1
Host: ads.coinserom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ads.coinserom.com/publisher?adsunit=323430&serom=31383336&size=728x90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 11 Jul 2024 04:52:21 GMT
content-type: image/png
content-length: 351
last-modified: Sat, 08 Apr 2023 03:36:00 GMT
etag: "15f-5f8cad7228800"
cache-control: max-age=120
cf-cache-status: HIT
age: 524
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BmpDT8VqrYjsbRS%2FZXUUt0Efo%2B2LqY%2BIkQdxUuoqliOOWWiwizv9uKny9%2FFsJ11zAsLPL6aAa%2BDMPCzNe4qkl45qACnkHIUtm0S1hCdyhgZBvNezQiU2xNSkn2S0fmb3KfxSrQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a162f02ccf05694-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cryptocoinsad.com/banner/ads_banner/28202.png | 104.21.23.218 | 200 OK | 28 kB |
URL GET HTTP/3cryptocoinsad.com/banner/ads_banner/28202.png IP104.21.23.218:443
Requested byhttps://cryptocoinsad.com/ads/show.php?a=252986&b=393634 CertificateIssuerGoogle Trust Services Subjectcryptocoinsad.com Fingerprint60:1C:B8:49:A9:FA:06:A7:63:CF:83:66:6A:7A:16:2D:CD:FA:04:70 ValiditySat, 22 Jun 2024 13:01:45 GMT - Fri, 20 Sep 2024 13:01:44 GMT
File typePNG image data, 728 x 90, 8-bit/color RGBA, non-interlaced Hash01fa6bd4a2dddfdb3a1f6b527dbcde6b 51511167b474d7822aaf6940357bddfb19dbcd97 da565abe06fcfaf2d7f5fa12d661f8ab5d98405e9d179472300412bedc3da5a1
GET /banner/ads_banner/28202.png HTTP/1.1
Host: cryptocoinsad.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cryptocoinsad.com/ads/show.php?a=252986&b=393634
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 11 Jul 2024 04:52:21 GMT
content-type: image/png
content-length: 27546
last-modified: Thu, 04 Jul 2024 08:06:36 GMT
etag: "6686580c-6b9a"
cache-control: max-age=10800
cf-cache-status: HIT
age: 1825
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LUCcFNafEH0S5EnV%2FdgRCpW9azS3FjrVeBoiSVy0QbSnwdLnwxvZU7mu0ShgAQ5F6fbR2sRn%2BQqMQyKZIYDLygSVv86PCj8i4v1BXZOcQcV7lPacVSyNTw%2Fe%2BSr5DpmASRDqpw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a162f02dd100b06-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ads.coinserom.com/cdn-cgi/challenge-platform/scripts/jsd/main.js | 104.21.67.26 | 302 Found | 0 B |
URL GET HTTP/3ads.coinserom.com/cdn-cgi/challenge-platform/scripts/jsd/main.js IP104.21.67.26:443
Requested byhttps://ads.coinserom.com/publisher?adsunit=323430&serom=31383336&size=728x90 CertificateIssuerGoogle Trust Services Subjectcoinserom.com Fingerprint45:AC:EA:A6:62:36:2A:28:04:B8:F5:1D:B7:2A:CC:C4:F4:DF:89:F3 ValidityThu, 27 Jun 2024 15:00:31 GMT - Wed, 25 Sep 2024 15:00:30 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: ads.coinserom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Thu, 11 Jul 2024 04:52:21 GMT
content-length: 0
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/191f93ebdf8e/main.js?
cache-control: max-age: 300, public
access-control-allow-origin: *
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qsO2Toa4DXaCyFD3RQ%2FdcLCWCxGu50jRirFwlpHynCXecu85CjgxARr6pLZRu7LVlf%2FX%2FUkO8hcDYmlKpv8LHqk3dZ3x6Jmuof4WP%2FjEpKLsljPjeHMi3z%2B%2Fkz0hw5X0s9zaIQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a162f02dcf65694-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cryptocoinsad.com/ads/show/img/icon.png | 104.21.23.218 | 200 OK | 3.3 kB |
URL GET HTTP/3cryptocoinsad.com/ads/show/img/icon.png IP104.21.23.218:443
Requested byhttps://cryptocoinsad.com/ads/show.php?a=255986&b=396587 CertificateIssuerGoogle Trust Services Subjectcryptocoinsad.com Fingerprint60:1C:B8:49:A9:FA:06:A7:63:CF:83:66:6A:7A:16:2D:CD:FA:04:70 ValiditySat, 22 Jun 2024 13:01:45 GMT - Fri, 20 Sep 2024 13:01:44 GMT
File typePNG image data, 435 x 435, 8-bit/color RGBA, non-interlaced Hash865296d690eff9da3a1bb21590faa79b 50fd13c32e6f6f0b5aa444c921c6241fcb41b5b3 b14ef09e5d084f7cb785998d54d37e486619c9b9527e72776a7c9d2b7e85c828
GET /ads/show/img/icon.png HTTP/1.1
Host: cryptocoinsad.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cryptocoinsad.com/ads/show.php?a=252986&b=393634
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 11 Jul 2024 04:52:21 GMT
content-type: image/png
content-length: 3309
last-modified: Sat, 29 Jan 2022 11:54:52 GMT
etag: "61f52b0c-ced"
cache-control: max-age=10800
cf-cache-status: HIT
age: 6801
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=74%2FSX8Q9Yj15IUYQjhZ7fM4Z9izDbKW5zFS7l55M9djzmXOBMguq1weW3%2B5s%2Fk163xX8jIsJq4OyxZQuxb1bR%2FFDsb8pla8d9iV2zBlHqzxoUeJo4MyCFUf4XoByGJxOJrgAWA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a162f02dd170b06-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ads.coinserom.com/cdn-cgi/challenge-platform/scripts/jsd/main.js | 104.21.67.26 | 302 Found | 0 B |
URL GET HTTP/3ads.coinserom.com/cdn-cgi/challenge-platform/scripts/jsd/main.js IP104.21.67.26:443
Requested byhttps://ads.coinserom.com/publisher?adsunit=323430&serom=31383336&size=728x90 CertificateIssuerGoogle Trust Services Subjectcoinserom.com Fingerprint45:AC:EA:A6:62:36:2A:28:04:B8:F5:1D:B7:2A:CC:C4:F4:DF:89:F3 ValidityThu, 27 Jun 2024 15:00:31 GMT - Wed, 25 Sep 2024 15:00:30 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: ads.coinserom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Thu, 11 Jul 2024 04:52:21 GMT
content-length: 0
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/191f93ebdf8e/main.js?
cache-control: max-age: 300, public
access-control-allow-origin: *
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hZSde691sczjLVfblTj%2Bbg4ARro9nCaH3kGpP0EYqTNR13udXN9HeUfcwXBO3s8uGd3MAqtSBr8y9qNTv2RnZs0JHsOWzH04gRu4uzqp7ARfU%2FWF7JHPbWPBO1yJ4NgSinV0Ig%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a162f038d235694-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ads.coinserom.com/images/12px.png | 104.21.67.26 | 200 OK | 351 B |
URL GET HTTP/3ads.coinserom.com/images/12px.png IP104.21.67.26:443
Requested byhttps://ads.coinserom.com/publisher?adsunit=323430&serom=31383336&size=728x90 CertificateIssuerGoogle Trust Services Subjectcoinserom.com Fingerprint45:AC:EA:A6:62:36:2A:28:04:B8:F5:1D:B7:2A:CC:C4:F4:DF:89:F3 ValidityThu, 27 Jun 2024 15:00:31 GMT - Wed, 25 Sep 2024 15:00:30 GMT
File typePNG image data, 12 x 10, 8-bit/color RGBA, non-interlaced Hash836d5e3d9f7c91cde4598ff5ae33cf8f 9ae775654917508f49f13283eaa74b411104f3c9 6eab3907a4b74df6beac63df58704f3270e08f5504cfc864b947770148ff4faa
GET /images/12px.png HTTP/1.1
Host: ads.coinserom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ads.coinserom.com/publisher?adsunit=323432&serom=31383336&size=300x600
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 11 Jul 2024 04:52:21 GMT
content-type: image/png
content-length: 351
last-modified: Sat, 08 Apr 2023 03:36:00 GMT
etag: "15f-5f8cad7228800"
cache-control: max-age=120
cf-cache-status: HIT
age: 524
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5%2Fx6i1nA78ZvUwrh3xYrROxGgNnI9lXORhp7bNA0gJcKZdhAzDwu7xJy25ir4e36sJWQp1kcdndUN6Al0kA%2FSrig72MLK%2FhFNVfKnIcpcQjxVz%2Fy92wmo60iCWi28GtNm9recw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a162f038d225694-OSL
alt-svc: h3=":443"; ma=86400
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hashcf5f998662d89641cd26fce7d82fbb3f de82deeab46ba1426f319d40a231f4d69c49f816 36ddc7588dfb4f426d9541f160727f68bda693b75bcf6f2efc10ffce03274f3c
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 11 Jul 2024 04:52:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ads.coinserom.com/cdn-cgi/challenge-platform/h/b/jsd/r/8a162efbdcedb515 | 104.21.67.26 | 200 OK | 0 B |
URL POST HTTP/3ads.coinserom.com/cdn-cgi/challenge-platform/h/b/jsd/r/8a162efbdcedb515 IP104.21.67.26:443
Requested byhttps://ads.coinserom.com/publisher?adsunit=323430&serom=31383336&size=728x90 CertificateIssuerGoogle Trust Services Subjectcoinserom.com Fingerprint45:AC:EA:A6:62:36:2A:28:04:B8:F5:1D:B7:2A:CC:C4:F4:DF:89:F3 ValidityThu, 27 Jun 2024 15:00:31 GMT - Wed, 25 Sep 2024 15:00:30 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/challenge-platform/h/b/jsd/r/8a162efbdcedb515 HTTP/1.1
Host: ads.coinserom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12226
Origin: https://ads.coinserom.com
DNT: 1
Connection: keep-alive
Referer: https://ads.coinserom.com/publisher?adsunit=323430&serom=31383336&size=728x90
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 11 Jul 2024 04:52:21 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
priority: u=3,i=?0
set-cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=.coinserom.com; HttpOnly; Secure; SameSite=None
cf_clearance=.SH7qdIheT2RGUvUXsyke9ufqbVetfNx_YBahiIdehc-1720673541-1.0.1.1-dqJQlp7WLriocfZFXxbkaMARErzRYOHcN7.7kyZe_F8SyfXYLn3XPfm1GnVEuCqeOjkaXINQlgA2Xmfps2LFGw; Path=/; Expires=Fri, 11-Jul-25 04:52:21 GMT; Domain=.coinserom.com; HttpOnly; Secure; SameSite=None; Partitioned
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UzXg5KoD%2Fm%2FX0EJzBkAZ%2F73283xrMvxw0lSMfdWsd3FSLWB3n%2FyRm4zRTMyxds1%2FtoF7gOh%2FdY55fKG7RZZkyZPB77Ka9Pt2yCH7F%2FrkX9X%2B5ScQMVjn8JJg6uuQvHFPpvSrqQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a162f04bdb35694-OSL
alt-svc: h3=":443"; ma=86400
|
|
| zerossl.ocsp.sectigo.com/ | 172.64.149.23 | | 317 B |
URL zerossl.ocsp.sectigo.com/ IP172.64.149.23:0
Hash1fc5efb84e49a783e5d57046edafa10f 9d78bc85522111d009e7adf6ed5e449a0bcfd1f6 32dfebe9415d75c8fd2163155a587e6345c2541b70a277a9d5d6efa74e23490c
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 11 Jul 2024 04:52:21 GMT
Content-Type: application/ocsp-response
Content-Length: 317
Connection: keep-alive
Last-Modified: Mon, 08 Jul 2024 00:13:51 GMT
Expires: Mon, 15 Jul 2024 00:13:50 GMT
Etag: "9d78bc85522111d009e7adf6ed5e449a0bcfd1f6"
Cache-Control: max-age=328288,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 8a162f04db43b509-OSL
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hashcf5f998662d89641cd26fce7d82fbb3f de82deeab46ba1426f319d40a231f4d69c49f816 36ddc7588dfb4f426d9541f160727f68bda693b75bcf6f2efc10ffce03274f3c
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 11 Jul 2024 04:52:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| 882148.xmlfeed.feed-xml.com/?lang=en-US&domain=be-the-bes-t.blogspot.com |  142.132.249.190 | 404 Not Found | 14 B |
URL GET HTTP/1.1882148.xmlfeed.feed-xml.com/?lang=en-US&domain=be-the-bes-t.blogspot.com IP142.132.249.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerZeroSSL Subject882148.xmlfeed.feed-xml.com Fingerprint90:83:72:13:E9:72:75:32:B2:91:93:65:BA:CF:4E:AB:46:02:AB:6D ValiditySun, 07 Jul 2024 00:00:00 GMT - Sat, 05 Oct 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash3b9e0551f1ed4b83f205b7f1d26dde5c ec24273dfdba3bab43a4e66678ae08df2487c058 00a6b7e5393f6ce123fdeac659c6e6bd1f4e9936f1d43db7f3d3789e132d1f72
GET /?lang=en-US&domain=be-the-bes-t.blogspot.com HTTP/1.1
Host: 882148.xmlfeed.feed-xml.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://be-the-bes-t.blogspot.com/
Origin: https://be-the-bes-t.blogspot.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: Feed-Xml
Date: Thu, 11 Jul 2024 04:52:21 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 14
Access-Control-Allow-Origin: https://be-the-bes-t.blogspot.com
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
Permissions-Policy: browsing-topics=()
X-Robots-Tag: noindex
|
|
| fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 | 216.58.207.227 | 200 OK | 47 kB |
URL GET HTTP/3fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 IP216.58.207.227:443
Requested byhttps://ad.a-ads.com/1110727?size=728x90 CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintC4:9C:27:09:1C:F7:14:C9:86:F0:B5:42:0B:8A:D2:AE:5E:AE:98:04 ValidityThu, 13 Jun 2024 16:31:03 GMT - Thu, 05 Sep 2024 16:31:02 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 46704, version 1.0 Hash30a274cd01b6eeb0b082c918b0697f1e 393311bde26b99a4ad935fa55bad1dce7994388b 88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42
GET /s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ad.a-ads.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46704
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 10 Jul 2024 19:09:42 GMT
expires: Thu, 10 Jul 2025 19:09:42 GMT
cache-control: public, max-age=31536000
age: 34959
last-modified: Wed, 13 Sep 2023 23:49:07 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 | 216.58.207.227 | 200 OK | 47 kB |
URL GET HTTP/3fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 IP216.58.207.227:443
Requested byhttps://ad.a-ads.com/1110727?size=728x90 CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintC4:9C:27:09:1C:F7:14:C9:86:F0:B5:42:0B:8A:D2:AE:5E:AE:98:04 ValidityThu, 13 Jun 2024 16:31:03 GMT - Thu, 05 Sep 2024 16:31:02 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 46704, version 1.0 Hash30a274cd01b6eeb0b082c918b0697f1e 393311bde26b99a4ad935fa55bad1dce7994388b 88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42
GET /s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ad.a-ads.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46704
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 10 Jul 2024 19:09:42 GMT
expires: Thu, 10 Jul 2025 19:09:42 GMT
cache-control: public, max-age=31536000
age: 34959
last-modified: Wed, 13 Sep 2023 23:49:07 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| ads.coinserom.com/cdn-cgi/rum? | 104.21.67.26 | 204 No Content | 0 B |
URL POST HTTP/3ads.coinserom.com/cdn-cgi/rum? IP104.21.67.26:443
Requested byhttps://ads.coinserom.com/publisher?adsunit=323432&serom=31383336&size=300x600 CertificateIssuerGoogle Trust Services Subjectcoinserom.com Fingerprint45:AC:EA:A6:62:36:2A:28:04:B8:F5:1D:B7:2A:CC:C4:F4:DF:89:F3 ValidityThu, 27 Jun 2024 15:00:31 GMT - Wed, 25 Sep 2024 15:00:30 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: ads.coinserom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 1093
Origin: https://ads.coinserom.com
DNT: 1
Connection: keep-alive
Referer: https://ads.coinserom.com/publisher?adsunit=323430&serom=31383336&size=728x90
Cookie: cf_clearance=.SH7qdIheT2RGUvUXsyke9ufqbVetfNx_YBahiIdehc-1720673541-1.0.1.1-dqJQlp7WLriocfZFXxbkaMARErzRYOHcN7.7kyZe_F8SyfXYLn3XPfm1GnVEuCqeOjkaXINQlgA2Xmfps2LFGw
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Thu, 11 Jul 2024 04:52:22 GMT
access-control-allow-origin: https://ads.coinserom.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 8a162f05be455694-OSL
x-frame-options: DENY
x-content-type-options: nosniff
|
|
| ads.coinserom.com/cdn-cgi/rum? | 104.21.67.26 | 204 No Content | 0 B |
URL POST HTTP/3ads.coinserom.com/cdn-cgi/rum? IP104.21.67.26:443
Requested byhttps://ads.coinserom.com/publisher?adsunit=323432&serom=31383336&size=300x600 CertificateIssuerGoogle Trust Services Subjectcoinserom.com Fingerprint45:AC:EA:A6:62:36:2A:28:04:B8:F5:1D:B7:2A:CC:C4:F4:DF:89:F3 ValidityThu, 27 Jun 2024 15:00:31 GMT - Wed, 25 Sep 2024 15:00:30 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: ads.coinserom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 1094
Origin: https://ads.coinserom.com
DNT: 1
Connection: keep-alive
Referer: https://ads.coinserom.com/publisher?adsunit=323432&serom=31383336&size=300x600
Cookie: cf_clearance=.SH7qdIheT2RGUvUXsyke9ufqbVetfNx_YBahiIdehc-1720673541-1.0.1.1-dqJQlp7WLriocfZFXxbkaMARErzRYOHcN7.7kyZe_F8SyfXYLn3XPfm1GnVEuCqeOjkaXINQlgA2Xmfps2LFGw
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Thu, 11 Jul 2024 04:52:22 GMT
access-control-allow-origin: https://ads.coinserom.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 8a162f05ce4d5694-OSL
x-frame-options: DENY
x-content-type-options: nosniff
|
|
| ads.coinserom.com/cdn-cgi/challenge-platform/h/b/jsd/r/8a162efbcce8b515 | 104.21.67.26 | 200 OK | 0 B |
URL POST HTTP/3ads.coinserom.com/cdn-cgi/challenge-platform/h/b/jsd/r/8a162efbcce8b515 IP104.21.67.26:443
Requested byhttps://ads.coinserom.com/publisher?adsunit=323432&serom=31383336&size=300x600 CertificateIssuerGoogle Trust Services Subjectcoinserom.com Fingerprint45:AC:EA:A6:62:36:2A:28:04:B8:F5:1D:B7:2A:CC:C4:F4:DF:89:F3 ValidityThu, 27 Jun 2024 15:00:31 GMT - Wed, 25 Sep 2024 15:00:30 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/challenge-platform/h/b/jsd/r/8a162efbcce8b515 HTTP/1.1
Host: ads.coinserom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12225
Origin: https://ads.coinserom.com
DNT: 1
Connection: keep-alive
Referer: https://ads.coinserom.com/publisher?adsunit=323432&serom=31383336&size=300x600
Cookie: cf_clearance=.SH7qdIheT2RGUvUXsyke9ufqbVetfNx_YBahiIdehc-1720673541-1.0.1.1-dqJQlp7WLriocfZFXxbkaMARErzRYOHcN7.7kyZe_F8SyfXYLn3XPfm1GnVEuCqeOjkaXINQlgA2Xmfps2LFGw
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 11 Jul 2024 04:52:22 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
priority: u=3,i=?0
set-cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=.coinserom.com; HttpOnly; Secure; SameSite=None
cf_clearance=UOZVWxI21scgcewNhHWxp0A16ABQq6QpEwDHq6COwus-1720673542-1.0.1.1-4llhmLoaAognIRDFaxhFntJBVl5FFtauQtBF9QNU3Tc7s9eUcfl96fIsUwjFLNJabv3zIIo9LUUlVzKsWY3qkw; Path=/; Expires=Fri, 11-Jul-25 04:52:22 GMT; Domain=.coinserom.com; HttpOnly; Secure; SameSite=None; Partitioned
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1UNtMu8nGDrrc7h3uodoQWJEvaCaf635ciTXbtDgYueYxU0m%2FMvrdjJuf1Gu%2B3E1dzeeViLv6KLJOribFEU42hnH8XOQVA9eZHhBNh7VeIH3sqh74%2BaSzR%2BDTOehUi5oUALo1w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a162f05ae415694-OSL
alt-svc: h3=":443"; ma=86400
|
|
| be-the-bes-t.blogspot.com/feeds/posts/default?alt=json-in-script&max-results=4&callback=jQuery224064291322611503_1720673541202&_=1720673541203 | 172.217.21.161 | 200 OK | 625 kB |
URL GET HTTP/3be-the-bes-t.blogspot.com/feeds/posts/default?alt=json-in-script&max-results=4&callback=jQuery224064291322611503_1720673541202&_=1720673541203 IP172.217.21.161:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerGoogle Trust Services Subjectmisc-sni.blogspot.com Fingerprint2C:AB:90:A1:00:95:11:42:95:2A:29:C7:BF:46:89:70:EC:C0:40:5D ValidityThu, 13 Jun 2024 16:10:03 GMT - Thu, 05 Sep 2024 16:10:02 GMT
File typeUnicode text, UTF-8 text, with very long lines (65516) Size625 kB (625429 bytes) Hash8baa28df0b2011a4f98c073d796725ec 40a50ada63033d2e4659eca7856ff96ee44932de 3476b8b381ad47cbfc7a6bce1c0bf3740d9866ca44f4b44d5994af8faf827426
GET /feeds/posts/default?alt=json-in-script&max-results=4&callback=jQuery224064291322611503_1720673541202&_=1720673541203 HTTP/1.1
Host: be-the-bes-t.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://be-the-bes-t.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
content-encoding: gzip
etag: W/"28ee2cff1a17f53eace2527a754954dd1fa4047a9c4829cdf9860cc2f4789184"
date: Thu, 11 Jul 2024 04:52:21 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
vary: Accept-Encoding
expires: Thu, 11 Jul 2024 04:52:22 GMT
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Wed, 10 Jul 2024 01:11:08 GMT
content-length: 625429
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| blogger.googleusercontent.com/img/a/AVvXsEg1709DGaJtqXBl2qpcpjHBZj5EQyCiu9736Wdv5_zy4d-3k0nbOhnJ8KYLqG7XKdP1eaeVVcgB9BczqJx14Y6wWNBbbdo0TEcRZ4RKta99I1byZnYDCohgCcEtb-gM0_510I2fselrovsNJV5ArJXoFdQ2yFtyl_bX5GdoeZ-NXkLmpYjTrEFV8gKoybQZ=w640-h286 | 142.250.74.97 | 200 OK | 85 kB |
URL GET HTTP/3blogger.googleusercontent.com/img/a/AVvXsEg1709DGaJtqXBl2qpcpjHBZj5EQyCiu9736Wdv5_zy4d-3k0nbOhnJ8KYLqG7XKdP1eaeVVcgB9BczqJx14Y6wWNBbbdo0TEcRZ4RKta99I1byZnYDCohgCcEtb-gM0_510I2fselrovsNJV5ArJXoFdQ2yFtyl_bX5GdoeZ-NXkLmpYjTrEFV8gKoybQZ=w640-h286 IP142.250.74.97:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint07:FA:CF:5D:23:84:6C:3C:8F:1E:8D:4E:97:CD:C0:BC:9A:C5:42:33 ValidityThu, 13 Jun 2024 16:32:56 GMT - Thu, 05 Sep 2024 16:32:55 GMT
File typePNG image data, 640 x 286, 8-bit/color RGB, non-interlaced Hash94c1aa409733a0fad0a276d2043ea11b 41ad5442f84a097dee40f4fd7cc12b398b47db6e 12cc5e826554a6b1d88b7fd5fc4a9998c2e6892d963df1c329f20013ef1a2836
GET /img/a/AVvXsEg1709DGaJtqXBl2qpcpjHBZj5EQyCiu9736Wdv5_zy4d-3k0nbOhnJ8KYLqG7XKdP1eaeVVcgB9BczqJx14Y6wWNBbbdo0TEcRZ4RKta99I1byZnYDCohgCcEtb-gM0_510I2fselrovsNJV5ArJXoFdQ2yFtyl_bX5GdoeZ-NXkLmpYjTrEFV8gKoybQZ=w640-h286 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://be-the-bes-t.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/png
vary: Origin
access-control-expose-headers: Content-Length
etag: "v22"
expires: Fri, 12 Jul 2024 04:52:22 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="image.png"
x-content-type-options: nosniff
date: Thu, 11 Jul 2024 04:52:22 GMT
server: fife
content-length: 84919
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| blogger.googleusercontent.com/img/a/AVvXsEhDCGTtX7OKJcY-xtW9ueCTMei1cIix9bCIM_n_-U0fATk6rWk5dSUYUxmowkkAl4wv13zbj0qp_JUjGd6CfeNdGqrbaNy2o2F2wAtNUmT2Y_H4wWGHI72xx_yoCrOpeQ8ugbyThj77IK5K_2EeeazrKwVfi6rKgHFzVRd7LFvpNQWsnHQs36kfrwmY2tEW=w640-h276 | 142.250.74.97 | 200 OK | 68 kB |
URL GET HTTP/3blogger.googleusercontent.com/img/a/AVvXsEhDCGTtX7OKJcY-xtW9ueCTMei1cIix9bCIM_n_-U0fATk6rWk5dSUYUxmowkkAl4wv13zbj0qp_JUjGd6CfeNdGqrbaNy2o2F2wAtNUmT2Y_H4wWGHI72xx_yoCrOpeQ8ugbyThj77IK5K_2EeeazrKwVfi6rKgHFzVRd7LFvpNQWsnHQs36kfrwmY2tEW=w640-h276 IP142.250.74.97:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint07:FA:CF:5D:23:84:6C:3C:8F:1E:8D:4E:97:CD:C0:BC:9A:C5:42:33 ValidityThu, 13 Jun 2024 16:32:56 GMT - Thu, 05 Sep 2024 16:32:55 GMT
File typePNG image data, 640 x 276, 8-bit/color RGB, non-interlaced Hashec9495e27dfba2c18469cfb77e82605c e21405dec1818da29d871addd47e65754fe2111f f454447ee9b66f3f45f50ab14c89f68287f7b38b8051b2d6018343aba2ceb380
GET /img/a/AVvXsEhDCGTtX7OKJcY-xtW9ueCTMei1cIix9bCIM_n_-U0fATk6rWk5dSUYUxmowkkAl4wv13zbj0qp_JUjGd6CfeNdGqrbaNy2o2F2wAtNUmT2Y_H4wWGHI72xx_yoCrOpeQ8ugbyThj77IK5K_2EeeazrKwVfi6rKgHFzVRd7LFvpNQWsnHQs36kfrwmY2tEW=w640-h276 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://be-the-bes-t.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/png
vary: Origin
access-control-expose-headers: Content-Length
etag: "v20"
expires: Fri, 12 Jul 2024 04:52:22 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="image.png"
x-content-type-options: nosniff
date: Thu, 11 Jul 2024 04:52:22 GMT
server: fife
content-length: 68270
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| blogger.googleusercontent.com/img/a/AVvXsEjyvB12P_7BG0UTgkFXqoRyDgerYtYvLLIvXcBhDSeUGBj6H_93TIVpJnkRli8YG0E-FwcRKjwp9y8xkND1nHdrmlKaqA44if2JJPREsUpf26ruC2k2Pq0nIR3aO7jdHVJZa_rILFdhEsO0RKFuEkEQu7jNskeT6i8KVIpiLSshCCgB2kISPM-iT29aKE-_=w640-h320 | 142.250.74.97 | 200 OK | 60 kB |
URL GET HTTP/3blogger.googleusercontent.com/img/a/AVvXsEjyvB12P_7BG0UTgkFXqoRyDgerYtYvLLIvXcBhDSeUGBj6H_93TIVpJnkRli8YG0E-FwcRKjwp9y8xkND1nHdrmlKaqA44if2JJPREsUpf26ruC2k2Pq0nIR3aO7jdHVJZa_rILFdhEsO0RKFuEkEQu7jNskeT6i8KVIpiLSshCCgB2kISPM-iT29aKE-_=w640-h320 IP142.250.74.97:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint07:FA:CF:5D:23:84:6C:3C:8F:1E:8D:4E:97:CD:C0:BC:9A:C5:42:33 ValidityThu, 13 Jun 2024 16:32:56 GMT - Thu, 05 Sep 2024 16:32:55 GMT
File typePNG image data, 640 x 320, 8-bit/color RGB, non-interlaced Hash542bb5cccee95857ba0bb7f7b84094cc d807d84c3dbe052766a9896301894d2756588f09 e76e311de40c7ae4091c7b6fb666e25d0e7be65ca51b781281a7b48665c9286c
GET /img/a/AVvXsEjyvB12P_7BG0UTgkFXqoRyDgerYtYvLLIvXcBhDSeUGBj6H_93TIVpJnkRli8YG0E-FwcRKjwp9y8xkND1nHdrmlKaqA44if2JJPREsUpf26ruC2k2Pq0nIR3aO7jdHVJZa_rILFdhEsO0RKFuEkEQu7jNskeT6i8KVIpiLSshCCgB2kISPM-iT29aKE-_=w640-h320 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://be-the-bes-t.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/png
vary: Origin
access-control-expose-headers: Content-Length
etag: "v1e"
expires: Fri, 12 Jul 2024 04:52:22 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="image.png"
x-content-type-options: nosniff
date: Thu, 11 Jul 2024 04:52:22 GMT
server: fife
content-length: 59993
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| blogger.googleusercontent.com/img/a/AVvXsEhpObzoiTvBI_XotzT-SQ8RHRVnNiFfuTnTjRNbCHHHh8FXefxMnnXnFU2tUx4PvQuZjNbFYKy3sVMKQSH9YDBXWF_pP7HpbS2rgSs_f2AQ87RnKwwpaDbiOKbiBXgnr5jmth7xCRlunwIvE0wiQoCo63omwYi1DkPiKjBGitose2SngipHHajslGumMvuI=w640-h314 | 142.250.74.97 | 200 OK | 154 kB |
URL GET HTTP/3blogger.googleusercontent.com/img/a/AVvXsEhpObzoiTvBI_XotzT-SQ8RHRVnNiFfuTnTjRNbCHHHh8FXefxMnnXnFU2tUx4PvQuZjNbFYKy3sVMKQSH9YDBXWF_pP7HpbS2rgSs_f2AQ87RnKwwpaDbiOKbiBXgnr5jmth7xCRlunwIvE0wiQoCo63omwYi1DkPiKjBGitose2SngipHHajslGumMvuI=w640-h314 IP142.250.74.97:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint07:FA:CF:5D:23:84:6C:3C:8F:1E:8D:4E:97:CD:C0:BC:9A:C5:42:33 ValidityThu, 13 Jun 2024 16:32:56 GMT - Thu, 05 Sep 2024 16:32:55 GMT
File typePNG image data, 639 x 314, 8-bit/color RGB, non-interlaced Size154 kB (153968 bytes) Hash7eb6a7b13cc2dd95d8978e2c10952f77 535f8a6d22550666785b828552f7e114e924e3ee 350f957176ca7d12e83e912150005144d0ecf25c666e24ed38c21362490d59ac
GET /img/a/AVvXsEhpObzoiTvBI_XotzT-SQ8RHRVnNiFfuTnTjRNbCHHHh8FXefxMnnXnFU2tUx4PvQuZjNbFYKy3sVMKQSH9YDBXWF_pP7HpbS2rgSs_f2AQ87RnKwwpaDbiOKbiBXgnr5jmth7xCRlunwIvE0wiQoCo63omwYi1DkPiKjBGitose2SngipHHajslGumMvuI=w640-h314 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://be-the-bes-t.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/png
vary: Origin
access-control-expose-headers: Content-Length
etag: "v1c"
expires: Fri, 12 Jul 2024 04:52:22 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="image.png"
x-content-type-options: nosniff
date: Thu, 11 Jul 2024 04:52:22 GMT
server: fife
content-length: 153968
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash97a456cb6e9ff54f16d881410f15dff2 a90c6b83767b41544e82c898f4287309227fc4c4 e7d4ccc52c939e688914c14314a69904779b54815b1c64c605b2c5f97d5e241b
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "E7D4CCC52C939E688914C14314A69904779B54815B1C64C605B2C5F97D5E241B"
Last-Modified: Mon, 08 Jul 2024 14:44:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6745
Expires: Thu, 11 Jul 2024 06:44:47 GMT
Date: Thu, 11 Jul 2024 04:52:22 GMT
Connection: keep-alive
|
|
| uwoaptee.com/zone?pub=0&zone_id=4773408&is_mobile=false&domain=be-the-bes-t.blogspot.com&var=&ymid=&var_3=&tg=0&sw=3.1.533&drf=https%3A%2F%2Fad2bitcoin.com%2F |  139.45.197.251 | 200 OK | 180 B |
URL GET HTTP/2uwoaptee.com/zone?pub=0&zone_id=4773408&is_mobile=false&domain=be-the-bes-t.blogspot.com&var=&ymid=&var_3=&tg=0&sw=3.1.533&drf=https%3A%2F%2Fad2bitcoin.com%2F IP139.45.197.251:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerLet's Encrypt Subjectuwoaptee.com Fingerprint8F:8F:18:6D:FB:B0:90:CB:87:C6:BE:C0:A3:59:EE:42:E3:44:58:7F ValiditySat, 11 May 2024 05:10:55 GMT - Fri, 09 Aug 2024 05:10:54 GMT
Hasha05e130e2ed5a977231be4ec211bf860 e14ab29820075937870bbe4ff321cd6b836e8550 5b44a3a80a8754c7c8eb45d4b3a6d99d9b3e029c0804c68d900cf5ac44c7b7c0
GET /zone?pub=0&zone_id=4773408&is_mobile=false&domain=be-the-bes-t.blogspot.com&var=&ymid=&var_3=&tg=0&sw=3.1.533&drf=https%3A%2F%2Fad2bitcoin.com%2F HTTP/1.1
Host: uwoaptee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://be-the-bes-t.blogspot.com/
Origin: https://be-the-bes-t.blogspot.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 11 Jul 2024 04:52:22 GMT
content-type: application/json; charset=utf-8
content-length: 180
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://be-the-bes-t.blogspot.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| lurgaimt.net/4/6974627 | 139.45.197.237 | 403 Forbidden | 7 B |
IP139.45.197.237:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerLet's Encrypt Subjectlurgaimt.net FingerprintDF:C9:74:73:5E:C1:4C:28:3A:6D:5A:CE:96:93:FC:B4:D1:0C:5A:FE ValidityTue, 25 Jun 2024 21:26:19 GMT - Mon, 23 Sep 2024 21:26:18 GMT
File typeASCII text, with no line terminators Hash758ff964ee78d0c90f3a14d8d4af8ab3 f248d30ac9849b0ead400537632beb02c9c703d1 00e3fbbf542561da72fdc5ea89cfd1405c17739dd49210252e611c3122018efe
GET /4/6974627 HTTP/1.1
Host: lurgaimt.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://be-the-bes-t.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
server: nginx
date: Thu, 11 Jul 2024 04:52:22 GMT
content-type: text/plain; charset=utf-8
content-length: 7
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| vooculok.com/400/4751071 | 139.45.197.236 | 403 Forbidden | 22 B |
IP139.45.197.236:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerLet's Encrypt Subjectvooculok.com FingerprintDC:2E:46:B8:2C:89:68:BB:26:17:C1:4F:8D:04:05:D1:FE:65:34:77 ValidityMon, 13 May 2024 05:12:35 GMT - Sun, 11 Aug 2024 05:12:34 GMT
File typeASCII text, with no line terminators Hashb5e50d07b6b24e1e105e6e4fceb97bf6 95d7e8119b8befc7153b44b4c7be59f26bd6ad33 61c3148fba3befcce5b4636c4209a440913a136138bf62005df97386827f2ae2
GET /400/4751071 HTTP/1.1
Host: vooculok.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://be-the-bes-t.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
server: nginx
date: Thu, 11 Jul 2024 04:52:23 GMT
content-type: text/plain; charset=utf-8
content-length: 22
x-trace-id: 74c1e329ed50a4db09d421ce14befda6
timing-allow-origin: *
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/3fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintC4:9C:27:09:1C:F7:14:C9:86:F0:B5:42:0B:8A:D2:AE:5E:AE:98:04 ValidityThu, 13 Jun 2024 16:31:03 GMT - Thu, 05 Sep 2024 16:31:02 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://be-the-bes-t.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 04 Jul 2024 12:40:58 GMT
expires: Fri, 04 Jul 2025 12:40:58 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 576685
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashbe6eda744d97d65ea4abef3cfc1b26be 1ae5ec060aa07593d191a2c28e48313fb9021433 bfcb9e499e141e56e33a05c377a4dc90d4c2a403eba95fda51371b99447b26f6
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "BFCB9E499E141E56E33A05C377A4DC90D4C2A403EBA95FDA51371B99447B26F6"
Last-Modified: Wed, 10 Jul 2024 22:22:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5835
Expires: Thu, 11 Jul 2024 06:29:38 GMT
Date: Thu, 11 Jul 2024 04:52:23 GMT
Connection: keep-alive
|
|
| uwoaptee.com/3bT/27mJf/universal.min.js?v=3.1.533 | 139.45.197.251 | 200 OK | 35 kB |
URL GET HTTP/2uwoaptee.com/3bT/27mJf/universal.min.js?v=3.1.533 IP139.45.197.251:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerLet's Encrypt Subjectuwoaptee.com Fingerprint8F:8F:18:6D:FB:B0:90:CB:87:C6:BE:C0:A3:59:EE:42:E3:44:58:7F ValiditySat, 11 May 2024 05:10:55 GMT - Fri, 09 Aug 2024 05:10:54 GMT
File typegzip compressed data, max speed, from Unix Hash103d98e0b7ad1f348c14d3723013786e 55e9117d749e4451b3cbee9c275abeddb36c8452 d91fed8ea7645d3aa6287f9aac23bd298b73398c7545d07c3c045ab4830b220e
GET /3bT/27mJf/universal.min.js?v=3.1.533 HTTP/1.1
Host: uwoaptee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://be-the-bes-t.blogspot.com/
Origin: https://be-the-bes-t.blogspot.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 11 Jul 2024 04:52:23 GMT
content-type: application/javascript
last-modified: Tue, 09 Jul 2024 12:30:20 GMT
etag: W/"668d2d5c-167c4"
access-control-allow-origin: https://be-the-bes-t.blogspot.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash7bc20711fa0f649f0831d75340941683 8b4bb7c68a2cd63b60a19197462848a08fece65b 56f282aa445d697efab11ccaacf24441c1e445d6101d880bfc3f5b03fd8f93fa
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 11 Jul 2024 04:52:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| tpc.googlesyndication.com/sodar/sodar2.js | 216.58.207.193 | 200 OK | 6.4 kB |
URL GET HTTP/2tpc.googlesyndication.com/sodar/sodar2.js IP216.58.207.193:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subjecttpc.googlesyndication.com Fingerprint89:7A:C2:61:37:CA:C9:B0:5D:4E:90:1B:A1:98:FA:6C:CD:67:0E:86 ValidityThu, 13 Jun 2024 16:29:50 GMT - Thu, 05 Sep 2024 16:29:49 GMT
File typeJavaScript source, ASCII text, with very long lines (1321) Hash2cc87e9764aebcbbf36ff2061e6a2793 b4f2ffdf4c695aa79f0e63651c18a88729c2407b 61c32059a5e94075a7ecff678b33907966fc9cfa384daa01aa057f872da14dbb
GET /sodar/sodar2.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 6386
date: Thu, 11 Jul 2024 04:52:23 GMT
expires: Thu, 11 Jul 2024 04:52:23 GMT
cache-control: private, max-age=3000
etag: "1637097310169751"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| tpc.googlesyndication.com/sodar/sodar2/225/runner.html | 216.58.207.193 | 200 OK | 5.0 kB |
URL GET HTTP/3tpc.googlesyndication.com/sodar/sodar2/225/runner.html IP216.58.207.193:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.g.doubleclick.net Fingerprint87:0D:4E:49:D5:3A:84:7C:EE:CF:28:04:9B:E0:25:8E:35:E9:1A:E4 ValidityThu, 13 Jun 2024 15:27:09 GMT - Thu, 05 Sep 2024 15:27:08 GMT
File typeHTML document, ASCII text, with very long lines (2020) Hash1d3d22df067f5219073f9c0fabb74fdd d5c226022639323d93946df3571404116041e588 55a119c0394f901a8a297e109c17b5e5402689708b999ab10691c16179f32a4a
GET /sodar/sodar2/225/runner.html HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 5046
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 10 Jul 2024 12:20:00 GMT
expires: Thu, 10 Jul 2025 12:20:00 GMT
cache-control: public, max-age=31536000
age: 59543
last-modified: Mon, 21 Jun 2021 20:47:05 GMT
content-type: text/html
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| pagead2.googlesyndication.com/bg/YfS7Id2oicF2yXLXhDZfBHx-VLRQVygWsE5cOp1Kt5E.js | 142.250.74.66 | | 20 kB |
URL pagead2.googlesyndication.com/bg/YfS7Id2oicF2yXLXhDZfBHx-VLRQVygWsE5cOp1Kt5E.js IP142.250.74.66:0
CertificateIssuerGoogle Trust Services Subject*.g.doubleclick.net Fingerprint87:0D:4E:49:D5:3A:84:7C:EE:CF:28:04:9B:E0:25:8E:35:E9:1A:E4 ValidityThu, 13 Jun 2024 15:27:09 GMT - Thu, 05 Sep 2024 15:27:08 GMT
File typeJavaScript source, ASCII text, with very long lines (52055) Hash7f7f02db954fe3034963d5fae76929e9 ac4e2463fa9edf159342565ebced68087707503f 61f4bb21dda889c176c972d784365f047c7e54b450572816b04e5c3a9d4ab791
GET /bg/YfS7Id2oicF2yXLXhDZfBHx-VLRQVygWsE5cOp1Kt5E.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tpc.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 20416
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 10 Jul 2024 12:12:48 GMT
expires: Thu, 10 Jul 2025 12:12:48 GMT
cache-control: public, max-age=31536000
age: 59976
last-modified: Mon, 01 Jul 2024 12:08:00 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| uwoaptee.com/custom | 139.45.197.251 | 200 OK | 0 B |
IP139.45.197.251:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerLet's Encrypt Subjectuwoaptee.com Fingerprint8F:8F:18:6D:FB:B0:90:CB:87:C6:BE:C0:A3:59:EE:42:E3:44:58:7F ValiditySat, 11 May 2024 05:10:55 GMT - Fri, 09 Aug 2024 05:10:54 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /custom HTTP/1.1
Host: uwoaptee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://be-the-bes-t.blogspot.com/
Origin: https://be-the-bes-t.blogspot.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 11 Jul 2024 04:52:24 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://be-the-bes-t.blogspot.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
|
|
| uwoaptee.com/custom | 139.45.197.251 | 200 OK | 0 B |
IP139.45.197.251:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerLet's Encrypt Subjectuwoaptee.com Fingerprint8F:8F:18:6D:FB:B0:90:CB:87:C6:BE:C0:A3:59:EE:42:E3:44:58:7F ValiditySat, 11 May 2024 05:10:55 GMT - Fri, 09 Aug 2024 05:10:54 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /custom HTTP/1.1
Host: uwoaptee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://be-the-bes-t.blogspot.com/
Origin: https://be-the-bes-t.blogspot.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 11 Jul 2024 04:52:24 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://be-the-bes-t.blogspot.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
|
|
| bytogeticr.com/split_track?action=error_track&zone=4030717&branch=undefined&error=SyntaxError:%20JSON.parse:%20unexpected%20non-whitespace%20character%20after%20JSON%20data%20at%20line%201%20column%202%20of%20the%20JSON%20data&trp=3 | 104.21.17.211 | 200 OK | 0 B |
URL GET HTTP/2bytogeticr.com/split_track?action=error_track&zone=4030717&branch=undefined&error=SyntaxError:%20JSON.parse:%20unexpected%20non-whitespace%20character%20after%20JSON%20data%20at%20line%201%20column%202%20of%20the%20JSON%20data&trp=3 IP104.21.17.211:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerGoogle Trust Services LLC Subjectbytogeticr.com Fingerprint53:F5:F6:E9:B8:6E:8C:52:C6:4C:68:F6:27:10:6E:5B:F0:B0:AA:48 ValidityTue, 04 Jun 2024 23:08:25 GMT - Mon, 02 Sep 2024 23:08:24 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /split_track?action=error_track&zone=4030717&branch=undefined&error=SyntaxError:%20JSON.parse:%20unexpected%20non-whitespace%20character%20after%20JSON%20data%20at%20line%201%20column%202%20of%20the%20JSON%20data&trp=3 HTTP/1.1
Host: bytogeticr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://be-the-bes-t.blogspot.com/
Origin: https://be-the-bes-t.blogspot.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 11 Jul 2024 04:52:24 GMT
content-type: application/octet-stream
content-length: 0
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hRxmOTOAsDmvM52J6eqTXJCcGrAfg%2Bo3BcDttYT1hmFwgN3GAjE6JgcK9JGwm8zd71l3X%2FMIugEtRc7A0omtKK5BbwFAwuNJVpgiJau9j5XqCDrkKvPxpTnqU2%2FdXt7OXg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a162f139f15b523-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| uwoaptee.com/custom | 139.45.197.251 | 200 OK | 39 B |
IP139.45.197.251:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerLet's Encrypt Subjectuwoaptee.com Fingerprint8F:8F:18:6D:FB:B0:90:CB:87:C6:BE:C0:A3:59:EE:42:E3:44:58:7F ValiditySat, 11 May 2024 05:10:55 GMT - Fri, 09 Aug 2024 05:10:54 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: uwoaptee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://be-the-bes-t.blogspot.com/
Content-Type: application/json
Content-Length: 334
Origin: https://be-the-bes-t.blogspot.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 11 Jul 2024 04:52:24 GMT
content-type: application/json; charset=utf-8
content-length: 39
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://be-the-bes-t.blogspot.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| uwoaptee.com/custom | 139.45.197.251 | 200 OK | 39 B |
IP139.45.197.251:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerLet's Encrypt Subjectuwoaptee.com Fingerprint8F:8F:18:6D:FB:B0:90:CB:87:C6:BE:C0:A3:59:EE:42:E3:44:58:7F ValiditySat, 11 May 2024 05:10:55 GMT - Fri, 09 Aug 2024 05:10:54 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: uwoaptee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://be-the-bes-t.blogspot.com/
Content-Type: application/json
Content-Length: 706
Origin: https://be-the-bes-t.blogspot.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 11 Jul 2024 04:52:24 GMT
content-type: application/json; charset=utf-8
content-length: 39
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://be-the-bes-t.blogspot.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash38d1e1cd97ca7f4af48b91fa4f9940fd 4c6725f572847490c9e4ea98ec42525fb62c8601 0b348e8a346f44b3fb047acb1b15c40925d325e8dd9cffaa59d17b1245360ee7
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "0B348E8A346F44B3FB047ACB1B15C40925D325E8DD9CFFAA59D17B1245360EE7"
Last-Modified: Tue, 09 Jul 2024 11:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10977
Expires: Thu, 11 Jul 2024 07:55:21 GMT
Date: Thu, 11 Jul 2024 04:52:24 GMT
Connection: keep-alive
|
|
| my.rtmark.net/gid.js?pub=0&userId=ba363f4fb9534086bca278af8aeed1f3&zoneId=4773408&checkDuplicate=true&ymid=&var=&source=pusher | 139.45.195.8 | 200 OK | 65 B |
URL GET HTTP/2my.rtmark.net/gid.js?pub=0&userId=ba363f4fb9534086bca278af8aeed1f3&zoneId=4773408&checkDuplicate=true&ymid=&var=&source=pusher IP139.45.195.8:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerLet's Encrypt Subjectrtmark.net Fingerprint4B:EF:80:EB:90:B5:8C:01:82:25:B6:92:59:BE:A9:6A:C7:83:75:8E ValidityFri, 05 Jul 2024 22:30:11 GMT - Thu, 03 Oct 2024 22:30:10 GMT
Hash42621d419e8c125a21647b5baaa1fc25 1af5b0ec41fcba78dbe63f2e98dc778cd7b7a2b2 4ec7585f36f2a8422d5933af089293213c13cb0305a8b0bc285edf9eedb73fba
GET /gid.js?pub=0&userId=ba363f4fb9534086bca278af8aeed1f3&zoneId=4773408&checkDuplicate=true&ymid=&var=&source=pusher HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://be-the-bes-t.blogspot.com/
Origin: https://be-the-bes-t.blogspot.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 11 Jul 2024 04:52:24 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://be-the-bes-t.blogspot.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=ba363f4fb9534086bca278af8aeed1f3; expires=Fri, 11 Jul 2025 04:52:24 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| uwoaptee.com/event | 139.45.197.251 | 200 OK | 0 B |
IP139.45.197.251:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerLet's Encrypt Subjectuwoaptee.com Fingerprint8F:8F:18:6D:FB:B0:90:CB:87:C6:BE:C0:A3:59:EE:42:E3:44:58:7F ValiditySat, 11 May 2024 05:10:55 GMT - Fri, 09 Aug 2024 05:10:54 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /event HTTP/1.1
Host: uwoaptee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://be-the-bes-t.blogspot.com/
Origin: https://be-the-bes-t.blogspot.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 11 Jul 2024 04:52:24 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://be-the-bes-t.blogspot.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
|
|
| uwoaptee.com/event | 139.45.197.251 | 200 OK | 94 B |
IP139.45.197.251:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerLet's Encrypt Subjectuwoaptee.com Fingerprint8F:8F:18:6D:FB:B0:90:CB:87:C6:BE:C0:A3:59:EE:42:E3:44:58:7F ValiditySat, 11 May 2024 05:10:55 GMT - Fri, 09 Aug 2024 05:10:54 GMT
Hasha93d64d4a01010becb0ff5cea5b7347e de56449819f7490988a02c6fcdedaef1c13176a0 fddf302ecd6ba9c3e8de1172eed82261bcda5d77610e34416a399de478140990
POST /event HTTP/1.1
Host: uwoaptee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://be-the-bes-t.blogspot.com/
Content-Type: application/json
Content-Length: 1934
Origin: https://be-the-bes-t.blogspot.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 11 Jul 2024 04:52:24 GMT
content-type: application/json; charset=utf-8
content-length: 94
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://be-the-bes-t.blogspot.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| tpc.googlesyndication.com/generate_204?bT2g-w | 216.58.207.193 | | 0 B |
URL tpc.googlesyndication.com/generate_204?bT2g-w IP216.58.207.193:0
CertificateIssuerGoogle Trust Services Subjecttpc.googlesyndication.com Fingerprint89:7A:C2:61:37:CA:C9:B0:5D:4E:90:1B:A1:98:FA:6C:CD:67:0E:86 ValidityThu, 13 Jun 2024 16:29:50 GMT - Thu, 05 Sep 2024 16:29:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?bT2g-w HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Thu, 11 Jul 2024 04:52:24 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&t=2&li=gda_r20240708&jk=4273762509651220&bg=!7O-l76DNAAZ5zPvEWcw7ADQBe5WfOKAn2DRIFoheXxDlkGNP1nY5CJPNzEV1DjPyB8-NwWHISsA_j_8GHCVreGFLCn5uAgAAARBSAAAACWgBB34ANZVusPxVWoMWg1euZlDbauRJV0sZfjSpzj9QtCGc6Y-1kP4VLXn-ZFTI3dojDdxt-nKNV54kCgEBvj7VYyyhIedAp9nhiuKLarXP0WEkCWpi-1niZba3ViRlWm3KxyaceOBz5jeGcjtxjZZa88f2OUdH-B7gRezn9Bt397sdeTVHn-aOY9U5cwD2YPDvQBMaJoxtog-cyc9WaNp4TD8zTuFCvkKHMaTLJmV7MNMWT81VhGecoboCcZP5new89m6ePrHsZNdSXxDebWl0vc7odX7u79kGT2S2953iqVZFuA0_lWyqoUy91GTFSWmTQKIt3SsoIZ8HEbMM1rotDWXM56coJg5mXX4bDWRFAu5TNE2-Wgz6gMKtLIHDuguxJxCS1A4QfWq0my8aP2yygDdivEm76F4FCtHx8kiZAiV2ATkA2KT5kj03eiOCwlfHyjc6Ofy3OnImNT7Kg54v7KVSqKtKYbNMndtd3e-_wfaQ-_nS5imG9MyBPVEFNI7xIcg8mCAfbdVkK1fNGkj1NfBcSMycIQTFaFG-k4h87K0IpoQxn997sIjrbLaXGNwZvVQmmDZEKaGWE0aMghMNx1P0Yvl3zSRh7y3_MVMAXpZl1VESVLIonEpUJx0mFKaZkRRhJHkDVOQUQk9VWJGnKu3sAnyF8IljYz8GRyZZrgLS2lnwRiqiR-Lw0UtgQr0gpyVKFFanqiGdeJimAHlt7tVMwvYWhG532II-EVLahH4FNUY1ginZ42e8qDTao3gIDHm3pQnDC_nL9BcZxxVwtRgMIbyhu0goU98JHJO_QzWQgtelmW9udMKUBxx5cNn1I2MSjJM0Nkg_ml1mttka1dAyOlt7Zag3iKUGhZo2W_MC3YSDVYAtaXfaMsTBK4uEQ9FzhoTHYVnO3ZUanFAcSfNs6ceCn-q2z-fknp5zAQcZdhWPFuKFHy_qx9S7FLLAtS-jaRu9s-prZzq8zM8o9EkmYj7DUPf7GdwIpZ273YKhBun-4bIgTaBM2xUf0rAwnwu17YgYUglyHpb0S5EUioVbyAsIJvdaMBBLYaPBn2y-zOAmOLbRjNn2tdULyU4wj2Q9mfanKnWfsF052all6pXoOXwoNAveVSFh4tzPx24spI7Neb0vCRlnacR3tc53ig9YCu8 | 142.250.74.66 | 204 No Content | 0 B |
URL GET HTTP/3pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&t=2&li=gda_r20240708&jk=4273762509651220&bg=!7O-l76DNAAZ5zPvEWcw7ADQBe5WfOKAn2DRIFoheXxDlkGNP1nY5CJPNzEV1DjPyB8-NwWHISsA_j_8GHCVreGFLCn5uAgAAARBSAAAACWgBB34ANZVusPxVWoMWg1euZlDbauRJV0sZfjSpzj9QtCGc6Y-1kP4VLXn-ZFTI3dojDdxt-nKNV54kCgEBvj7VYyyhIedAp9nhiuKLarXP0WEkCWpi-1niZba3ViRlWm3KxyaceOBz5jeGcjtxjZZa88f2OUdH-B7gRezn9Bt397sdeTVHn-aOY9U5cwD2YPDvQBMaJoxtog-cyc9WaNp4TD8zTuFCvkKHMaTLJmV7MNMWT81VhGecoboCcZP5new89m6ePrHsZNdSXxDebWl0vc7odX7u79kGT2S2953iqVZFuA0_lWyqoUy91GTFSWmTQKIt3SsoIZ8HEbMM1rotDWXM56coJg5mXX4bDWRFAu5TNE2-Wgz6gMKtLIHDuguxJxCS1A4QfWq0my8aP2yygDdivEm76F4FCtHx8kiZAiV2ATkA2KT5kj03eiOCwlfHyjc6Ofy3OnImNT7Kg54v7KVSqKtKYbNMndtd3e-_wfaQ-_nS5imG9MyBPVEFNI7xIcg8mCAfbdVkK1fNGkj1NfBcSMycIQTFaFG-k4h87K0IpoQxn997sIjrbLaXGNwZvVQmmDZEKaGWE0aMghMNx1P0Yvl3zSRh7y3_MVMAXpZl1VESVLIonEpUJx0mFKaZkRRhJHkDVOQUQk9VWJGnKu3sAnyF8IljYz8GRyZZrgLS2lnwRiqiR-Lw0UtgQr0gpyVKFFanqiGdeJimAHlt7tVMwvYWhG532II-EVLahH4FNUY1ginZ42e8qDTao3gIDHm3pQnDC_nL9BcZxxVwtRgMIbyhu0goU98JHJO_QzWQgtelmW9udMKUBxx5cNn1I2MSjJM0Nkg_ml1mttka1dAyOlt7Zag3iKUGhZo2W_MC3YSDVYAtaXfaMsTBK4uEQ9FzhoTHYVnO3ZUanFAcSfNs6ceCn-q2z-fknp5zAQcZdhWPFuKFHy_qx9S7FLLAtS-jaRu9s-prZzq8zM8o9EkmYj7DUPf7GdwIpZ273YKhBun-4bIgTaBM2xUf0rAwnwu17YgYUglyHpb0S5EUioVbyAsIJvdaMBBLYaPBn2y-zOAmOLbRjNn2tdULyU4wj2Q9mfanKnWfsF052all6pXoOXwoNAveVSFh4tzPx24spI7Neb0vCRlnacR3tc53ig9YCu8 IP142.250.74.66:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.g.doubleclick.net Fingerprint87:0D:4E:49:D5:3A:84:7C:EE:CF:28:04:9B:E0:25:8E:35:E9:1A:E4 ValidityThu, 13 Jun 2024 15:27:09 GMT - Thu, 05 Sep 2024 15:27:08 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/sodar?id=sodar2&v=225&t=2&li=gda_r20240708&jk=4273762509651220&bg=!7O-l76DNAAZ5zPvEWcw7ADQBe5WfOKAn2DRIFoheXxDlkGNP1nY5CJPNzEV1DjPyB8-NwWHISsA_j_8GHCVreGFLCn5uAgAAARBSAAAACWgBB34ANZVusPxVWoMWg1euZlDbauRJV0sZfjSpzj9QtCGc6Y-1kP4VLXn-ZFTI3dojDdxt-nKNV54kCgEBvj7VYyyhIedAp9nhiuKLarXP0WEkCWpi-1niZba3ViRlWm3KxyaceOBz5jeGcjtxjZZa88f2OUdH-B7gRezn9Bt397sdeTVHn-aOY9U5cwD2YPDvQBMaJoxtog-cyc9WaNp4TD8zTuFCvkKHMaTLJmV7MNMWT81VhGecoboCcZP5new89m6ePrHsZNdSXxDebWl0vc7odX7u79kGT2S2953iqVZFuA0_lWyqoUy91GTFSWmTQKIt3SsoIZ8HEbMM1rotDWXM56coJg5mXX4bDWRFAu5TNE2-Wgz6gMKtLIHDuguxJxCS1A4QfWq0my8aP2yygDdivEm76F4FCtHx8kiZAiV2ATkA2KT5kj03eiOCwlfHyjc6Ofy3OnImNT7Kg54v7KVSqKtKYbNMndtd3e-_wfaQ-_nS5imG9MyBPVEFNI7xIcg8mCAfbdVkK1fNGkj1NfBcSMycIQTFaFG-k4h87K0IpoQxn997sIjrbLaXGNwZvVQmmDZEKaGWE0aMghMNx1P0Yvl3zSRh7y3_MVMAXpZl1VESVLIonEpUJx0mFKaZkRRhJHkDVOQUQk9VWJGnKu3sAnyF8IljYz8GRyZZrgLS2lnwRiqiR-Lw0UtgQr0gpyVKFFanqiGdeJimAHlt7tVMwvYWhG532II-EVLahH4FNUY1ginZ42e8qDTao3gIDHm3pQnDC_nL9BcZxxVwtRgMIbyhu0goU98JHJO_QzWQgtelmW9udMKUBxx5cNn1I2MSjJM0Nkg_ml1mttka1dAyOlt7Zag3iKUGhZo2W_MC3YSDVYAtaXfaMsTBK4uEQ9FzhoTHYVnO3ZUanFAcSfNs6ceCn-q2z-fknp5zAQcZdhWPFuKFHy_qx9S7FLLAtS-jaRu9s-prZzq8zM8o9EkmYj7DUPf7GdwIpZ273YKhBun-4bIgTaBM2xUf0rAwnwu17YgYUglyHpb0S5EUioVbyAsIJvdaMBBLYaPBn2y-zOAmOLbRjNn2tdULyU4wj2Q9mfanKnWfsF052all6pXoOXwoNAveVSFh4tzPx24spI7Neb0vCRlnacR3tc53ig9YCu8 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Thu, 11 Jul 2024 04:52:25 GMT
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| ads.coinserom.com/cdn-cgi/rum? | 104.21.67.26 | 204 No Content | 0 B |
URL POST HTTP/3ads.coinserom.com/cdn-cgi/rum? IP104.21.67.26:443
Requested byhttps://ads.coinserom.com/publisher?adsunit=323432&serom=31383336&size=300x600 CertificateIssuerGoogle Trust Services Subjectcoinserom.com Fingerprint45:AC:EA:A6:62:36:2A:28:04:B8:F5:1D:B7:2A:CC:C4:F4:DF:89:F3 ValidityThu, 27 Jun 2024 15:00:31 GMT - Wed, 25 Sep 2024 15:00:30 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: ads.coinserom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 465
Origin: https://ads.coinserom.com
DNT: 1
Connection: keep-alive
Referer: https://ads.coinserom.com/publisher?adsunit=323430&serom=31383336&size=728x90
Cookie: cf_clearance=UOZVWxI21scgcewNhHWxp0A16ABQq6QpEwDHq6COwus-1720673542-1.0.1.1-4llhmLoaAognIRDFaxhFntJBVl5FFtauQtBF9QNU3Tc7s9eUcfl96fIsUwjFLNJabv3zIIo9LUUlVzKsWY3qkw
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/3 204 No Content
date: Thu, 11 Jul 2024 04:52:47 GMT
access-control-allow-origin: https://ads.coinserom.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 8a162fa4b9345694-OSL
x-frame-options: DENY
x-content-type-options: nosniff
|
|
| ads.coinserom.com/cdn-cgi/rum? | 104.21.67.26 | 204 No Content | 0 B |
URL POST HTTP/3ads.coinserom.com/cdn-cgi/rum? IP104.21.67.26:443
Requested byhttps://ads.coinserom.com/publisher?adsunit=323432&serom=31383336&size=300x600 CertificateIssuerGoogle Trust Services Subjectcoinserom.com Fingerprint45:AC:EA:A6:62:36:2A:28:04:B8:F5:1D:B7:2A:CC:C4:F4:DF:89:F3 ValidityThu, 27 Jun 2024 15:00:31 GMT - Wed, 25 Sep 2024 15:00:30 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: ads.coinserom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 465
Origin: https://ads.coinserom.com
DNT: 1
Connection: keep-alive
Referer: https://ads.coinserom.com/publisher?adsunit=323432&serom=31383336&size=300x600
Cookie: cf_clearance=UOZVWxI21scgcewNhHWxp0A16ABQq6QpEwDHq6COwus-1720673542-1.0.1.1-4llhmLoaAognIRDFaxhFntJBVl5FFtauQtBF9QNU3Tc7s9eUcfl96fIsUwjFLNJabv3zIIo9LUUlVzKsWY3qkw
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/3 204 No Content
date: Thu, 11 Jul 2024 04:52:47 GMT
access-control-allow-origin: https://ads.coinserom.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 8a162fa4b9365694-OSL
x-frame-options: DENY
x-content-type-options: nosniff
|
|
| be-the-bes-t.blogspot.com/feeds/posts/default?alt=json-in-script&max-results=6&callback=jQuery224064291322611503_1720673541208&_=1720673541209 | 172.217.21.161 | 200 OK | 922 kB |
URL GET HTTP/3be-the-bes-t.blogspot.com/feeds/posts/default?alt=json-in-script&max-results=6&callback=jQuery224064291322611503_1720673541208&_=1720673541209 IP172.217.21.161:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerGoogle Trust Services Subjectmisc-sni.blogspot.com Fingerprint2C:AB:90:A1:00:95:11:42:95:2A:29:C7:BF:46:89:70:EC:C0:40:5D ValidityThu, 13 Jun 2024 16:10:03 GMT - Thu, 05 Sep 2024 16:10:02 GMT
Size922 kB (921611 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /feeds/posts/default?alt=json-in-script&max-results=6&callback=jQuery224064291322611503_1720673541208&_=1720673541209 HTTP/1.1
Host: be-the-bes-t.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://be-the-bes-t.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
content-encoding: gzip
etag: W/"0ff4f153b2b647c1ce0f55af959aa9d4b5e4ff53165d8d8578182a07a86d9e1c"
date: Thu, 11 Jul 2024 04:52:22 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
vary: Accept-Encoding
expires: Thu, 11 Jul 2024 04:52:23 GMT
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Wed, 10 Jul 2024 01:11:08 GMT
content-length: 625431
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| network.eonads.com/adserver/www/delivery/asyncjs.php | 172.67.135.26 | 200 OK | 31 kB |
URL GET HTTP/2network.eonads.com/adserver/www/delivery/asyncjs.php IP172.67.135.26:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerGoogle Trust Services Subjecteonads.com FingerprintDD:43:97:2D:C8:86:17:78:6E:A8:CE:44:75:C2:A6:30:BF:EA:A6:7A ValiditySat, 22 Jun 2024 12:52:48 GMT - Fri, 20 Sep 2024 12:52:47 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hashe7b5fe9c988eb4198f6a7920476042e5 d46736f91215f50a56cab7d1f4368f801c3864df f0e3fb2d2c182e1c8297d0873dc3c9cf7bba745d40e300eb73f90015aa6ed680
GET /adserver/www/delivery/asyncjs.php HTTP/1.1
Host: network.eonads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://be-the-bes-t.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 11 Jul 2024 04:52:22 GMT
content-type: text/javascript;charset=UTF-8
etag: f87497be83f6ed6b52c3b340d803ae0d
expire: Thu, 11 Jul 2024 05:52:22 GMT
cache-control: private, max-age=3600
p3p: CP="CUR ADM OUR NOR STA NID"
set-cookie: OAGEO=2%7CNO%7CEU%7C%7COslo%7C0566%7C59.9016%7C10.7343%7C100%7CEurope%2FOslo%7C%7C03%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C; path=/; secure; SameSite=none
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4r02pM%2BXdinrrJXaYAYNxkSFIhtJIYAxVvIMi92Hf6nlv0S1yVi%2F6BbER5UaQq9ig4bS6%2BZyiP3RiaBR2yOsFEEYP5WPpZA98CtsetFIa5R95lBWDY030N20H%2BZe4FsDw3J07d0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a162f00ace856c9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| data.whicdn.com/images/323602204/original.gif | 0.0.0.0 | | 0 B |
URL GET data.whicdn.com/images/323602204/original.gif IP0.0.0.0:0
Requested byhttps://sofiahalbofanimeworld.blogspot.com/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/323602204/original.gif HTTP/1.1
Host: data.whicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| uwoaptee.com/pfe/current/tag.min.js?z=4773408 | 139.45.197.251 | 200 OK | 15 kB |
URL GET HTTP/2uwoaptee.com/pfe/current/tag.min.js?z=4773408 IP139.45.197.251:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerLet's Encrypt Subjectuwoaptee.com Fingerprint8F:8F:18:6D:FB:B0:90:CB:87:C6:BE:C0:A3:59:EE:42:E3:44:58:7F ValiditySat, 11 May 2024 05:10:55 GMT - Fri, 09 Aug 2024 05:10:54 GMT
File typeJavaScript source, ASCII text, with very long lines (14819), with no line terminators Hash8023db837c777b45a73253e2706aa805 b91260eceed001ac3a7b8348f6436901ab9681b6 c12e13d5391a4b62b14ad85133ed16a6ffa5de24c209ae5638bf50154b78b764
GET /pfe/current/tag.min.js?z=4773408 HTTP/1.1
Host: uwoaptee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://be-the-bes-t.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 11 Jul 2024 04:52:22 GMT
content-type: application/javascript
last-modified: Tue, 09 Jul 2024 12:30:18 GMT
etag: W/"668d2d5a-39e3"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| be-the-bes-t.blogspot.com/feeds/posts/default?alt=json-in-script&max-results=5&callback=jQuery224064291322611503_1720673541214&_=1720673541215 | 172.217.21.161 | 200 OK | 922 kB |
URL GET HTTP/3be-the-bes-t.blogspot.com/feeds/posts/default?alt=json-in-script&max-results=5&callback=jQuery224064291322611503_1720673541214&_=1720673541215 IP172.217.21.161:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerGoogle Trust Services Subjectmisc-sni.blogspot.com Fingerprint2C:AB:90:A1:00:95:11:42:95:2A:29:C7:BF:46:89:70:EC:C0:40:5D ValidityThu, 13 Jun 2024 16:10:03 GMT - Thu, 05 Sep 2024 16:10:02 GMT
Size922 kB (921611 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /feeds/posts/default?alt=json-in-script&max-results=5&callback=jQuery224064291322611503_1720673541214&_=1720673541215 HTTP/1.1
Host: be-the-bes-t.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://be-the-bes-t.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
content-encoding: gzip
etag: W/"10acedba9d1ad9fc2c045fb3138e4ca56872fd5183ecdd227713849fe8faded3"
date: Thu, 11 Jul 2024 04:52:22 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
vary: Accept-Encoding
expires: Thu, 11 Jul 2024 04:52:23 GMT
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Wed, 10 Jul 2024 01:11:08 GMT
content-length: 625431
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cryptocoinsad.com/ads/show.php?a=255986&b=396587 | 104.21.23.218 | 200 OK | 2.1 kB |
URL GET HTTP/2cryptocoinsad.com/ads/show.php?a=255986&b=396587 IP104.21.23.218:443
Requested byhttps://digimonbtc.com/templates/ad728x90.php CertificateIssuerGoogle Trust Services Subjectcryptocoinsad.com Fingerprint60:1C:B8:49:A9:FA:06:A7:63:CF:83:66:6A:7A:16:2D:CD:FA:04:70 ValiditySat, 22 Jun 2024 13:01:45 GMT - Fri, 20 Sep 2024 13:01:44 GMT
File typeHTML document, ASCII text, with very long lines (2264), with no line terminators Hash46b801eac3fce51c278b5100e1ae7c03 6e5cb67fcda39dd0ddbe43241e81002305fa7214 698ef9b44dbc3b56de1a544257b52440e3c67fb9e3c9dec00025f9d019432ccb
GET /ads/show.php?a=255986&b=396587 HTTP/1.1
Host: cryptocoinsad.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://digimonbtc.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 11 Jul 2024 04:52:20 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.2.24-0ubuntu0.18.04.17
set-cookie: i_280558396587=1; expires=Thu, 11-Jul-2024 05:02:20 GMT; Max-Age=600
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cRoqA80b7j%2BzqtpZ1V0HHl%2FWN6dkHZuMv%2F9D64fKn0T4mX%2Ff%2BsfK6Pjs1FTQ%2FSKKUC6rHzH9G%2FhAy85bIB30u80MCdI%2BF4D7HqCUpEmBvC8gX%2FQzNNHFGtmlpZgZb7uDE69qfQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a162efe7accb52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/jquery/2.2.4/jquery.min.js | 104.17.25.14 | 200 OK | 86 kB |
URL GET HTTP/3cdnjs.cloudflare.com/ajax/libs/jquery/2.2.4/jquery.min.js IP104.17.25.14:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerLet's Encrypt Subjectcdnjs.cloudflare.com Fingerprint3B:5B:7C:DD:19:E8:16:5A:09:22:D6:1E:03:84:8D:B9:A1:32:BF:8E ValiditySun, 02 Jun 2024 00:47:32 GMT - Sat, 31 Aug 2024 00:47:31 GMT
File typeJavaScript source, ASCII text, with very long lines (32065) Hash2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://be-the-bes-t.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 11 Jul 2024 04:52:20 GMT
content-type: application/javascript; charset=utf-8
content-length: 26909
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-14e4a"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 447405
expires: Tue, 01 Jul 2025 04:52:20 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tWQqJl4EB0xOf0RHWRiWn5epDvBlmDuZtiTRIrMcubGoPOx4ijir1THJil7QGEspteBSWcOF6uCVAAy2e2yzorVxjX5MJFDdkzQpkEKvWiSWb6IqTQoK9VNpYpgDMXD0ReKa94qZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8a162efe9e09b515-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/opensans/v17/memnYaGs126MiZpBA-UFUKXGUdhrIqM.woff2 | 216.58.207.227 | 200 OK | 14 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v17/memnYaGs126MiZpBA-UFUKXGUdhrIqM.woff2 IP216.58.207.227:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintC4:9C:27:09:1C:F7:14:C9:86:F0:B5:42:0B:8A:D2:AE:5E:AE:98:04 ValidityThu, 13 Jun 2024 16:31:03 GMT - Thu, 05 Sep 2024 16:31:02 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 13852, version 1.0 Hashebdfa24cb411ba3016abd1c3ea5746e5 82bad03d20a8a61aa4069e7c4bbf36e1007591eb 10879c90d675623954d308fa8d34ab038c915646aa4167764fd8bb02804cbbf9
GET /s/opensans/v17/memnYaGs126MiZpBA-UFUKXGUdhrIqM.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://be-the-bes-t.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://be-the-bes-t.blogspot.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13852
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 10 Jul 2024 19:14:56 GMT
expires: Thu, 10 Jul 2025 19:14:56 GMT
cache-control: public, max-age=31536000
age: 34645
last-modified: Tue, 23 Jul 2019 19:31:00 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.blogger.com/navbar.g?targetBlogID=3405693820859981231&blogName=sofiahalbof+anime+world+&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://sofiahalbofanimeworld.blogspot.com/search&blogLocale=en&v=2&homepageUrl=https://sofiahalbofanimeworld.blogspot.com/&vt=-5639291567810939189&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.IKZeRvoAYNY.O%2Fam%3DAAAQ%2Fd%3D1%2Frs%3DAHpOoo-SMWTzMRJrTty6iE5dL_aWGYOnuw%2Fm%3D__features__ | 142.250.74.105 | 200 OK | 6.7 kB |
URL GET HTTP/3www.blogger.com/navbar.g?targetBlogID=3405693820859981231&blogName=sofiahalbof+anime+world+&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://sofiahalbofanimeworld.blogspot.com/search&blogLocale=en&v=2&homepageUrl=https://sofiahalbofanimeworld.blogspot.com/&vt=-5639291567810939189&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.IKZeRvoAYNY.O%2Fam%3DAAAQ%2Fd%3D1%2Frs%3DAHpOoo-SMWTzMRJrTty6iE5dL_aWGYOnuw%2Fm%3D__features__ IP142.250.74.105:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.blogger.com Fingerprint50:84:30:B7:69:E9:54:8C:5F:D3:96:91:2A:52:48:AD:0D:29:EB:A7 ValidityThu, 13 Jun 2024 15:23:59 GMT - Thu, 05 Sep 2024 15:23:58 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (6914), with no line terminators Hashcc5e7d07d10c6c06df8dfca5c6f29c20 5c4937de3d9511c526a4d5a84d7e2674e7ecd67c 1522588f985d73f50f5f7761e5938b7b38fa838b9cddb45cadb1005b57798c9a
GET /navbar.g?targetBlogID=3405693820859981231&blogName=sofiahalbof+anime+world+&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://sofiahalbofanimeworld.blogspot.com/search&blogLocale=en&v=2&homepageUrl=https://sofiahalbofanimeworld.blogspot.com/&vt=-5639291567810939189&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.IKZeRvoAYNY.O%2Fam%3DAAAQ%2Fd%3D1%2Frs%3DAHpOoo-SMWTzMRJrTty6iE5dL_aWGYOnuw%2Fm%3D__features__ HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 11 Jul 2024 04:52:18 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 2595
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| steemitimages.com/p/2N61tyyncFaFVtpM8rCsJzDgecVMtkz4jpzBsszXjhqan9oSxNUiLntKumUx6UXTnjRZBagC7t4wvcU8NfMFRFUUeTxXqYciwYQibrkEfPq2QTEahQD2wEJX5bpqnWRQhwYhW7YSwNYE?format=match&mode=fit&width=640 | 104.21.234.125 | 200 OK | 129 kB |
URL GET HTTP/3steemitimages.com/p/2N61tyyncFaFVtpM8rCsJzDgecVMtkz4jpzBsszXjhqan9oSxNUiLntKumUx6UXTnjRZBagC7t4wvcU8NfMFRFUUeTxXqYciwYQibrkEfPq2QTEahQD2wEJX5bpqnWRQhwYhW7YSwNYE?format=match&mode=fit&width=640 IP104.21.234.125:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerLet's Encrypt Subjectsteemitimages.com Fingerprint64:01:AB:9A:F8:CD:69:CE:71:5C:0F:BD:54:49:BB:A5:51:F0:BD:16 ValidityFri, 28 Jun 2024 23:41:56 GMT - Thu, 26 Sep 2024 23:41:55 GMT
File typeJPEG image data, baseline, precision 8, 600x1071, components 3 Size129 kB (129221 bytes) Hashb1e72d29edfd2035eb5f7c71e1390ef3 ff53221a244690689ef02cdb456dbf334b47971d bb53a33b09d8e7db16c167782532e4695312185d1c6957963407ef1222d42138
GET /p/2N61tyyncFaFVtpM8rCsJzDgecVMtkz4jpzBsszXjhqan9oSxNUiLntKumUx6UXTnjRZBagC7t4wvcU8NfMFRFUUeTxXqYciwYQibrkEfPq2QTEahQD2wEJX5bpqnWRQhwYhW7YSwNYE?format=match&mode=fit&width=640 HTTP/1.1
Host: steemitimages.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sofiahalbofanimeworld.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 11 Jul 2024 04:52:19 GMT
content-type: image/jpeg
x-request-id: Root=1-668ee7cc-789026ea59b52f8d64d0d543
vary: Origin, Accept-Encoding
cache-control: public,max-age=29030400,immutable
cf-cache-status: HIT
age: 32055
last-modified: Wed, 10 Jul 2024 19:58:04 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JLPNdAMYU7LkTVQSLTwS8vWgJ95Xa66kxH4brw0Sjg1egRWuqLdlBX0EeK2VWYkoL0Mm1Js%2BMACFggjyDAeOhePD2F8PmWxPXaz3hgagsVFd8PRc2oIvwY6lWq6C374voNqKlQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a162ef4d85b417c-LHR
alt-svc: h3=":443"; ma=86400
|
|
| ad.a-ads.com/1110727?size=728x90 | 213.239.209.209 | 200 OK | 13 kB |
URL GET HTTP/2ad.a-ads.com/1110727?size=728x90 IP213.239.209.209:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://ad2bitcoin.com/ad.php?ref=sofiahalbof&width=300 CertificateIssuerSectigo Limited Subject*.a-ads.com FingerprintC4:DC:49:DF:0A:63:5A:A6:E4:00:AB:0B:FD:E4:94:92:A8:77:B7:C6 ValidityWed, 27 Dec 2023 00:00:00 GMT - Sun, 26 Jan 2025 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (11039) Hashc9a834b7ba95b14390ab693842a7f9a1 ce65f5ff2ab1040a16d807a46a8eb03ea4748900 05e07554544a2b22390791c81b3e686cc0a6c182070509b648391cd07a7ff1cd
GET /1110727?size=728x90 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ad2bitcoin.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 11 Jul 2024 04:52:21 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding, Accept-Encoding
status: 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-powered-by: Phusion Passenger(R)
x-original-referer: https://ad2bitcoin.com/
x-robots-tag: noindex, nofollow, nosnippet, noarchive
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Roboto&display=swap | 142.250.74.106 | 200 OK | 2.3 kB |
URL GET HTTP/3fonts.googleapis.com/css2?family=Roboto&display=swap IP142.250.74.106:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerGoogle Trust Services Subjectupload.video.google.com FingerprintC7:12:52:3A:BD:E0:73:20:AD:A8:5F:DF:12:DB:C6:DE:AF:63:88:6B ValidityThu, 13 Jun 2024 16:32:33 GMT - Thu, 05 Sep 2024 16:32:32 GMT
File typeASCII text, with very long lines (2379), with no line terminators Hash03278c047a3192f4a25c4644284d910b 61fc733be8553b3e6d9847d43b4bef84b5ae947d d5e8a5e5b7bfea2764abadded25ab112a034543a2315c942bb9fd3cbe7ece8fb
GET /css2?family=Roboto&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://be-the-bes-t.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 11 Jul 2024 04:52:22 GMT
date: Thu, 11 Jul 2024 04:52:22 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/opensans/v17/mem5YaGs126MiZpBA-UNirkOUuhp.woff2 | 216.58.207.227 | 200 OK | 15 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v17/mem5YaGs126MiZpBA-UNirkOUuhp.woff2 IP216.58.207.227:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintC4:9C:27:09:1C:F7:14:C9:86:F0:B5:42:0B:8A:D2:AE:5E:AE:98:04 ValidityThu, 13 Jun 2024 16:31:03 GMT - Thu, 05 Sep 2024 16:31:02 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 14880, version 1.0 Hash819af3d3abdc9f135d49b80a91e2ff4c 0fd9f29faa386a9c8de328f799d2698948ed3d25 1491de1b31182d38593bcf660c99bc6018af8e192d91663f67ec9d045a3b5ccc
GET /s/opensans/v17/mem5YaGs126MiZpBA-UNirkOUuhp.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://be-the-bes-t.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://be-the-bes-t.blogspot.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14880
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 10 Jul 2024 10:51:16 GMT
expires: Thu, 10 Jul 2025 10:51:16 GMT
cache-control: public, max-age=31536000
age: 64864
last-modified: Tue, 23 Jul 2019 19:31:11 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cryptocoinsad.com/ads/show.php?a=252986&b=393634 | 104.21.23.218 | 200 OK | 2.1 kB |
URL GET HTTP/2cryptocoinsad.com/ads/show.php?a=252986&b=393634 IP104.21.23.218:443
Requested byhttps://zerofaucet.com/728x90.php CertificateIssuerGoogle Trust Services Subjectcryptocoinsad.com Fingerprint60:1C:B8:49:A9:FA:06:A7:63:CF:83:66:6A:7A:16:2D:CD:FA:04:70 ValiditySat, 22 Jun 2024 13:01:45 GMT - Fri, 20 Sep 2024 13:01:44 GMT
File typeHTML document, ASCII text, with very long lines (2255), with no line terminators Hash2971313aa758afba69420ecd3e26e16d 751114f1781f889e79d5ee26f392db53b8362b90 2c6945fed0433d8b35d601dd14e2cb8e2e42028496dd95183399ada64b4418a9
GET /ads/show.php?a=252986&b=393634 HTTP/1.1
Host: cryptocoinsad.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zerofaucet.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 11 Jul 2024 04:52:21 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.2.24-0ubuntu0.18.04.17
set-cookie: i_280558393634=1; expires=Thu, 11-Jul-2024 05:02:21 GMT; Max-Age=600
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mbF5f90xL1cb0%2Fmr4OtR9l%2Bgk50qExrFkxX%2FTrbXxE7wQxrNwykxNKEVJbIRxgVxZCi%2FK13ghR4O09Kk0IRT5RZan8DrcqrQzTwoEbrxrmuosjUOvuaVKy7H5cma%2BZ6OkuOPuA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a162f00db85b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| be-the-bes-t.blogspot.com/feeds/posts/default?alt=json-in-script&max-results=5&callback=jQuery224064291322611503_1720673541206&_=1720673541207 | 172.217.21.161 | 200 OK | 922 kB |
URL GET HTTP/3be-the-bes-t.blogspot.com/feeds/posts/default?alt=json-in-script&max-results=5&callback=jQuery224064291322611503_1720673541206&_=1720673541207 IP172.217.21.161:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerGoogle Trust Services Subjectmisc-sni.blogspot.com Fingerprint2C:AB:90:A1:00:95:11:42:95:2A:29:C7:BF:46:89:70:EC:C0:40:5D ValidityThu, 13 Jun 2024 16:10:03 GMT - Thu, 05 Sep 2024 16:10:02 GMT
Size922 kB (921611 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /feeds/posts/default?alt=json-in-script&max-results=5&callback=jQuery224064291322611503_1720673541206&_=1720673541207 HTTP/1.1
Host: be-the-bes-t.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://be-the-bes-t.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
content-encoding: gzip
etag: W/"10acedba9d1ad9fc2c045fb3138e4ca56872fd5183ecdd227713849fe8faded3"
date: Thu, 11 Jul 2024 04:52:22 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
vary: Accept-Encoding
expires: Thu, 11 Jul 2024 04:52:23 GMT
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Wed, 10 Jul 2024 01:11:08 GMT
content-length: 625430
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20240708&st=env | 142.250.74.66 | 200 OK | 17 kB |
URL GET HTTP/3pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20240708&st=env IP142.250.74.66:443
Requested byhttps://sofiahalbofanimeworld.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.g.doubleclick.net Fingerprint87:0D:4E:49:D5:3A:84:7C:EE:CF:28:04:9B:E0:25:8E:35:E9:1A:E4 ValidityThu, 13 Jun 2024 15:27:09 GMT - Thu, 05 Sep 2024 15:27:08 GMT
Hash375fe48d5c74e91eef3fdb6e366adb86 50a4a3cf76bb05343eacdb4dad9fefb6103ad20a 58f3cbb200dbfaa3e84e97a3b84fae08f10caff9361901e4fe32e9428c30d4a9
GET /getconfig/sodar?sv=200&tid=gda&tv=r20240708&st=env HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sofiahalbofanimeworld.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: application/json; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
date: Thu, 11 Jul 2024 04:52:23 GMT
server: cafe
content-length: 12890
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| be-the-bes-t.blogspot.com/feeds/posts/default?alt=json-in-script&max-results=4&callback=jQuery224064291322611503_1720673541210&_=1720673541211 | 172.217.21.161 | 200 OK | 922 kB |
URL GET HTTP/3be-the-bes-t.blogspot.com/feeds/posts/default?alt=json-in-script&max-results=4&callback=jQuery224064291322611503_1720673541210&_=1720673541211 IP172.217.21.161:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerGoogle Trust Services Subjectmisc-sni.blogspot.com Fingerprint2C:AB:90:A1:00:95:11:42:95:2A:29:C7:BF:46:89:70:EC:C0:40:5D ValidityThu, 13 Jun 2024 16:10:03 GMT - Thu, 05 Sep 2024 16:10:02 GMT
Size922 kB (921611 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /feeds/posts/default?alt=json-in-script&max-results=4&callback=jQuery224064291322611503_1720673541210&_=1720673541211 HTTP/1.1
Host: be-the-bes-t.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://be-the-bes-t.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
content-encoding: gzip
etag: W/"28ee2cff1a17f53eace2527a754954dd1fa4047a9c4829cdf9860cc2f4789184"
date: Thu, 11 Jul 2024 04:52:22 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
vary: Accept-Encoding
expires: Thu, 11 Jul 2024 04:52:23 GMT
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Wed, 10 Jul 2024 01:11:08 GMT
content-length: 625429
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| be-the-bes-t.blogspot.com/feeds/posts/default?alt=json-in-script&max-results=6&callback=jQuery224064291322611503_1720673541200&_=1720673541201 | 172.217.21.161 | 200 OK | 922 kB |
URL GET HTTP/3be-the-bes-t.blogspot.com/feeds/posts/default?alt=json-in-script&max-results=6&callback=jQuery224064291322611503_1720673541200&_=1720673541201 IP172.217.21.161:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerGoogle Trust Services Subjectmisc-sni.blogspot.com Fingerprint2C:AB:90:A1:00:95:11:42:95:2A:29:C7:BF:46:89:70:EC:C0:40:5D ValidityThu, 13 Jun 2024 16:10:03 GMT - Thu, 05 Sep 2024 16:10:02 GMT
Size922 kB (921611 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /feeds/posts/default?alt=json-in-script&max-results=6&callback=jQuery224064291322611503_1720673541200&_=1720673541201 HTTP/1.1
Host: be-the-bes-t.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://be-the-bes-t.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
content-encoding: gzip
etag: W/"0ff4f153b2b647c1ce0f55af959aa9d4b5e4ff53165d8d8578182a07a86d9e1c"
date: Thu, 11 Jul 2024 04:52:22 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
vary: Accept-Encoding
expires: Thu, 11 Jul 2024 04:52:23 GMT
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Wed, 10 Jul 2024 01:11:08 GMT
content-length: 625430
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| be-the-bes-t.blogspot.com/feeds/posts/default?alt=json-in-script&max-results=5&callback=jQuery224064291322611503_1720673541204&_=1720673541205 | 172.217.21.161 | 200 OK | 922 kB |
URL GET HTTP/3be-the-bes-t.blogspot.com/feeds/posts/default?alt=json-in-script&max-results=5&callback=jQuery224064291322611503_1720673541204&_=1720673541205 IP172.217.21.161:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerGoogle Trust Services Subjectmisc-sni.blogspot.com Fingerprint2C:AB:90:A1:00:95:11:42:95:2A:29:C7:BF:46:89:70:EC:C0:40:5D ValidityThu, 13 Jun 2024 16:10:03 GMT - Thu, 05 Sep 2024 16:10:02 GMT
Size922 kB (921611 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /feeds/posts/default?alt=json-in-script&max-results=5&callback=jQuery224064291322611503_1720673541204&_=1720673541205 HTTP/1.1
Host: be-the-bes-t.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://be-the-bes-t.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
content-encoding: gzip
etag: W/"10acedba9d1ad9fc2c045fb3138e4ca56872fd5183ecdd227713849fe8faded3"
date: Thu, 11 Jul 2024 04:52:22 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
vary: Accept-Encoding
expires: Thu, 11 Jul 2024 04:52:23 GMT
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Wed, 10 Jul 2024 01:11:08 GMT
content-length: 625431
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| static.adlane.info/adlane/0215ab303dfab3fa908e034dd307d443/spot_25172.js | 45.133.44.3 | 200 OK | 7.7 kB |
URL GET HTTP/2static.adlane.info/adlane/0215ab303dfab3fa908e034dd307d443/spot_25172.js IP45.133.44.3:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerLet's Encrypt Subjectstatic.adlane.info Fingerprint7F:07:47:0C:0A:C5:A9:BA:BC:49:50:47:4B:1C:CC:BB:54:3A:6E:45 ValidityWed, 22 May 2024 03:01:12 GMT - Tue, 20 Aug 2024 03:01:11 GMT
File typeJavaScript source, ASCII text, with very long lines (7932), with no line terminators Hash7bda1afcdef75653d8e7ef452cc06a97 51fa12b547238c71503607ea53638814284afde9 e18822363bf96e0367d67f0b42c1d6a8534248fcf85e832a33477265f84fa482
GET /adlane/0215ab303dfab3fa908e034dd307d443/spot_25172.js HTTP/1.1
Host: static.adlane.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://be-the-bes-t.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 11 Jul 2024 04:52:21 GMT
content-type: application/javascript; charset=utf-8
server: nginx
last-modified: Tue, 07 May 2024 08:39:02 GMT
etag: W/"6639e8a6-1df9"
cache-control: max-age=172800
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
content-encoding: gzip
expires: Sat, 13 Jul 2024 04:52:21 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Inter:wght@400;600&display=swap | 142.250.74.106 | 200 OK | 4.8 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Inter:wght@400;600&display=swap IP142.250.74.106:443
Requested byhttps://ad.a-ads.com/1110727?size=728x90 CertificateIssuerGoogle Trust Services Subjectupload.video.google.com FingerprintC7:12:52:3A:BD:E0:73:20:AD:A8:5F:DF:12:DB:C6:DE:AF:63:88:6B ValidityThu, 13 Jun 2024 16:32:33 GMT - Thu, 05 Sep 2024 16:32:32 GMT
File typeASCII text, with very long lines (4954), with no line terminators Hashe2b76956a2f401d42266e922a300fae3 5cb0f3ee8ad65388ed9575419d24c08e9a890b15 1081acb8e37966be8d88856aac1ec4aa5051600dfa001e82765114a15b397f6e
GET /css2?family=Inter:wght@400;600&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ad.a-ads.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 11 Jul 2024 04:52:21 GMT
date: Thu, 11 Jul 2024 04:52:21 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ads.coinserom.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/191f93ebdf8e/main.js? | 104.21.67.26 | 200 OK | 7.8 kB |
URL GET HTTP/3ads.coinserom.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/191f93ebdf8e/main.js? IP104.21.67.26:443
Requested byhttps://ads.coinserom.com/publisher?adsunit=323432&serom=31383336&size=300x600 CertificateIssuerGoogle Trust Services Subjectcoinserom.com Fingerprint45:AC:EA:A6:62:36:2A:28:04:B8:F5:1D:B7:2A:CC:C4:F4:DF:89:F3 ValidityThu, 27 Jun 2024 15:00:31 GMT - Wed, 25 Sep 2024 15:00:30 GMT
File typeJavaScript source, ASCII text, with very long lines (7802), with no line terminators Hash4857891a9b830cd0e2714e65aeeb39ef 491af0efba8d6242120a1dac7c87fb0e34c4d42c 8b09abaffd202261b5199db969cd4c5ea197753f53e74b9350f411a89d178e7d
GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/191f93ebdf8e/main.js? HTTP/1.1
Host: ads.coinserom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 11 Jul 2024 04:52:21 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=14400, public
x-content-type-options: nosniff
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T2KWRjobAuzhsOzY%2FB%2FIx3IqznZa8EScWevZCrn3UVbZvczF7ehAVxE904PZKIiUZQ5aomYsd3D72YzvEZgLxeRrPHx%2Bfb4P7vJBVAsZX%2B6ecGI6S01R5N%2Bbr2V9V3HSHPSJkw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a162f03cd3b5694-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| be-the-bes-t.blogspot.com/feeds/posts/default?alt=json-in-script&max-results=4&callback=jQuery224064291322611503_1720673541212&_=1720673541213 | 172.217.21.161 | 200 OK | 922 kB |
URL GET HTTP/3be-the-bes-t.blogspot.com/feeds/posts/default?alt=json-in-script&max-results=4&callback=jQuery224064291322611503_1720673541212&_=1720673541213 IP172.217.21.161:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerGoogle Trust Services Subjectmisc-sni.blogspot.com Fingerprint2C:AB:90:A1:00:95:11:42:95:2A:29:C7:BF:46:89:70:EC:C0:40:5D ValidityThu, 13 Jun 2024 16:10:03 GMT - Thu, 05 Sep 2024 16:10:02 GMT
Size922 kB (921611 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /feeds/posts/default?alt=json-in-script&max-results=4&callback=jQuery224064291322611503_1720673541212&_=1720673541213 HTTP/1.1
Host: be-the-bes-t.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://be-the-bes-t.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
content-encoding: gzip
etag: W/"28ee2cff1a17f53eace2527a754954dd1fa4047a9c4829cdf9860cc2f4789184"
date: Thu, 11 Jul 2024 04:52:22 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
vary: Accept-Encoding
expires: Thu, 11 Jul 2024 04:52:23 GMT
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Wed, 10 Jul 2024 01:11:08 GMT
content-length: 625429
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| data.whicdn.com/images/327748005/large.jpg | 0.0.0.0 | | 0 B |
URL GET data.whicdn.com/images/327748005/large.jpg IP0.0.0.0:0
Requested byhttps://sofiahalbofanimeworld.blogspot.com/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/327748005/large.jpg HTTP/1.1
Host: data.whicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sofiahalbofanimeworld.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| iclickcdn.com/tag.min.js | 104.26.13.118 | 200 OK | 79 kB |
IP104.26.13.118:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint69:5A:9D:95:E5:36:A5:18:E0:04:11:44:FA:AD:14:94:26:BD:9D:39 ValiditySat, 12 Aug 2023 00:00:00 GMT - Sun, 11 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashceffc79f7f787fac6a155a595cd2484b 74f4c00ebb09170c3f232ae4ef6d6975ea049b84 7f4bebc811e7086418bbb0a1000c5279694bfac6b656f71908ce973942296cee
GET /tag.min.js HTTP/1.1
Host: iclickcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://be-the-bes-t.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 11 Jul 2024 04:52:22 GMT
content-type: text/javascript; charset=utf-8
x-trace-id: 2dd9f9484e999bf4b8c43db5bc332827
cache-control: max-age=86400
last-modified: Thu, 11 Jul 2024 00:50:45 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
expires: Fri, 12 Jul 2024 04:51:42 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 39
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pGt7HT%2B1iB99ffwVUYyf5%2BGPYy9MtAV5rkabgOLTm2cmwhygCu8wSWtK5qWreDE4EqEuXXZ8ov9UB8uTZi3QxkCo2DlDtjfdjwwDqcw8CzIjyU1tfGy9KDrwUDPNQxc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a162f0ae8a6b4fa-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ads.coinserom.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/191f93ebdf8e/main.js? | 104.21.67.26 | 200 OK | 7.8 kB |
URL GET HTTP/3ads.coinserom.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/191f93ebdf8e/main.js? IP104.21.67.26:443
Requested byhttps://ads.coinserom.com/publisher?adsunit=323430&serom=31383336&size=728x90 CertificateIssuerGoogle Trust Services Subjectcoinserom.com Fingerprint45:AC:EA:A6:62:36:2A:28:04:B8:F5:1D:B7:2A:CC:C4:F4:DF:89:F3 ValidityThu, 27 Jun 2024 15:00:31 GMT - Wed, 25 Sep 2024 15:00:30 GMT
File typeJavaScript source, ASCII text, with very long lines (7818), with no line terminators Hash24ad1de0dd35523ac03257eec6ee3e65 055e97148386d383085c5108b9fc88fbf660afad e43c807f8d75ec6f898a4abda35ccac0a00ca83441018961eef0d5cdced7a380
GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/191f93ebdf8e/main.js? HTTP/1.1
Host: ads.coinserom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 11 Jul 2024 04:52:21 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=14400, public
x-content-type-options: nosniff
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9EtcxHkNWTy2FqxJtzZJ9asgTe7%2FkVe6nWrv3EMhlPQoR%2BhYifO6NMv65IJEJDPnK%2BrQwO6EDvmYGrn1aKu5gkJwAqzFMXXVeis7zUCLtTVsPlWZCEakBStA7%2BtPkEVar2JeBA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a162f03ad2f5694-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 | 104.16.79.73 | 200 OK | 20 kB |
URL GET HTTP/2static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 IP104.16.79.73:443
Requested byhttps://ads.coinserom.com/publisher?adsunit=323430&serom=31383336&size=728x90 CertificateIssuerGoogle Trust Services Subjectcloudflareinsights.com FingerprintEB:6E:FA:69:A4:FA:21:AE:59:5E:1B:46:84:BD:81:51:55:62:5B:04 ValiditySat, 06 Jul 2024 05:58:05 GMT - Fri, 04 Oct 2024 05:58:04 GMT
File typeJavaScript source, ASCII text, with very long lines (19948), with no line terminators Hashec18af6d41f6f278b6aed3bdabffa7bc 62c9e2cab76b888829f3c5335e91c320b22329ae 8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f
GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ads.coinserom.com
DNT: 1
Connection: keep-alive
Referer: https://ads.coinserom.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 11 Jul 2024 04:52:21 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/"2024.6.1"
last-modified: Thu, 06 Jun 2024 15:52:56 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a162f016b795690-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 | 104.16.79.73 | 200 OK | 20 kB |
URL GET HTTP/2static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 IP104.16.79.73:443
Requested byhttps://ads.coinserom.com/publisher?adsunit=323432&serom=31383336&size=300x600 CertificateIssuerGoogle Trust Services Subjectcloudflareinsights.com FingerprintEB:6E:FA:69:A4:FA:21:AE:59:5E:1B:46:84:BD:81:51:55:62:5B:04 ValiditySat, 06 Jul 2024 05:58:05 GMT - Fri, 04 Oct 2024 05:58:04 GMT
File typeJavaScript source, ASCII text, with very long lines (19948), with no line terminators Hashec18af6d41f6f278b6aed3bdabffa7bc 62c9e2cab76b888829f3c5335e91c320b22329ae 8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f
GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ads.coinserom.com
DNT: 1
Connection: keep-alive
Referer: https://ads.coinserom.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 11 Jul 2024 04:52:21 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/"2024.6.1"
last-modified: Thu, 06 Jun 2024 15:52:56 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a162f012b5b5690-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| psauwaun.com/5/4030717/?oo=1&js_build=iclick-v1.840.8-auto | 139.45.197.242 | 403 Forbidden | 7 B |
URL GET HTTP/2psauwaun.com/5/4030717/?oo=1&js_build=iclick-v1.840.8-auto IP139.45.197.242:443
Requested byhttps://be-the-bes-t.blogspot.com/ CertificateIssuerLet's Encrypt Subjectpsauwaun.com Fingerprint6A:53:09:13:46:F6:50:18:69:66:EC:29:06:12:01:BB:30:E9:D4:5C ValidityWed, 10 Jul 2024 21:12:43 GMT - Tue, 08 Oct 2024 21:12:42 GMT
File typeASCII text, with no line terminators Hash758ff964ee78d0c90f3a14d8d4af8ab3 f248d30ac9849b0ead400537632beb02c9c703d1 00e3fbbf542561da72fdc5ea89cfd1405c17739dd49210252e611c3122018efe
GET /5/4030717/?oo=1&js_build=iclick-v1.840.8-auto HTTP/1.1
Host: psauwaun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://be-the-bes-t.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://be-the-bes-t.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
server: nginx
date: Thu, 11 Jul 2024 04:52:23 GMT
content-type: text/plain; charset=utf-8
content-length: 7
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://be-the-bes-t.blogspot.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
0.0.0.0