starbigdowload.blogspot.com/2013/10/mozilla-firefox240-o-famoso-navegador.html/
172.217.21.161 17 kB URL starbigdowload.blogspot.com/2013/10/mozilla-firefox240-o-famoso-navegador.html/
IP 172.217.21.161:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4225)
Hash ba0d070501fa8abd6b4882ae98e91766
c3b2578b90db6ce8add2573114f40dacefc5ea5e
d9964d17ccd46ffba7c638d1f1f300f9905bb6211863e32b5610338e345ca1db
GET /2013/10/mozilla-firefox240-o-famoso-navegador.html/ HTTP/1.1
Host: starbigdowload.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 30 Nov 2023 09:42:52 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 17317
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
starbigdowload.blogspot.com/2013/10/mozilla-firefox240-o-famoso-navegador.html/
172.217.21.161 15 kB URL starbigdowload.blogspot.com/2013/10/mozilla-firefox240-o-famoso-navegador.html/
IP 172.217.21.161:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4218)
Hash 02dabf0673b16ac0ecf4deedca0bee43
26a38080ed207ac200ef12f84028a33851e9603a
d31ce93a5f19ef2fbbe4b9f7acaaf846b9ff5b741d1a762cb65f1f5bf7d14204
GET /2013/10/mozilla-firefox240-o-famoso-navegador.html/ HTTP/1.1
Host: starbigdowload.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 30 Nov 2023 09:42:53 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 15090
Server: GSE
starbigdowload.blogspot.com/js/cookienotice.js
172.217.21.161 2.0 kB URL starbigdowload.blogspot.com/js/cookienotice.js
IP 172.217.21.161:0
Hash a705132a2174f88e196ec3610d68faa8
3bad57a48d973a678fec600d45933010f6edc659
068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
GET /js/cookienotice.js HTTP/1.1
Host: starbigdowload.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://starbigdowload.blogspot.com/2013/10/mozilla-firefox240-o-famoso-navegador.html/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
Date: Thu, 30 Nov 2023 09:42:54 GMT
Expires: Thu, 07 Dec 2023 09:42:54 GMT
Cache-Control: public, max-age=604800
Last-Modified: Thu, 30 Nov 2023 07:56:57 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
contador.s12.com.br/ad.js?id=y1ZBd210
104.21.3.29 0 B URL contador.s12.com.br/ad.js?id=y1ZBd210
IP 104.21.3.29:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ad.js?id=y1ZBd210 HTTP/1.1
Host: contador.s12.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://starbigdowload.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Thu, 30 Nov 2023 09:42:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 30 Nov 2023 10:42:54 GMT
Location: https://contador.s12.com.br/ad.js?id=y1ZBd210
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MRFUHyuT44EOTK4Pnpyx8IkNjhj2g3sUbFvCM7d5L7QbjCzuPhzFX5WpCQo4MAoQ%2F39QziM0YcZ22CZXhyglNwIDzrgClITS%2BRssrAdM6fQPqsQKp28j69tjvwvpHeQ0BWT399Wa"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82e2249be9ec7130-OSL
alt-svc: h2=":443"; ma=60
www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
216.58.207.233 6.6 kB URL www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
IP 216.58.207.233:0
File type ASCII text, with very long lines (30596)
Hash e3f09df1bc175f411d1ec3dfb5afb17b
3994ec3efe3c2447e7bbfdd97bb7e190dd1658f9
1a2eca9e492e3a21e02dd77ad44d7af45c4091d35ede79e948b7a3f23e5b3617
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://starbigdowload.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 23:22:00 GMT
expires: Fri, 22 Nov 2024 23:22:00 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 23 Nov 2023 17:53:39 GMT
content-type: text/css
vary: Accept-Encoding
age: 555654
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
contador.s12.com.br/img-y1ZBd210-26.gif
104.21.3.29 0 B URL contador.s12.com.br/img-y1ZBd210-26.gif
IP 104.21.3.29:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /img-y1ZBd210-26.gif HTTP/1.1
Host: contador.s12.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://starbigdowload.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Thu, 30 Nov 2023 09:42:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 30 Nov 2023 10:42:54 GMT
Location: https://contador.s12.com.br/img-y1ZBd210-26.gif
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sh7ETnaJYnwHP%2FJHSyr9gyv%2F1Ysh8nZE3siZQAF9BfMPr690cpywkquLQdxC%2FMIWTPqCb4HDE6fRd10Pz2ADAqf1dhIo6NLhoRKROstUr8exWDyj9WHDxEUMoH2O5SE5HlQkjyCS"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82e2249c0a0d7130-OSL
alt-svc: h2=":443"; ma=60
afiliados.hostgator.com.br/banners/88x31.gif
172.66.40.38 3.5 kB URL afiliados.hostgator.com.br/banners/88x31.gif
IP 172.66.40.38:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5214)
Hash c15d48c851dde4becc8d6d3edd80c0bc
056df66d707e0b28bcd615324c61ce940f6f3c96
3b586edb00619412e610051ad9074ed8fdc0220ec794b8ae13ac2a79f326c7ef
GET /banners/88x31.gif HTTP/1.1
Host: afiliados.hostgator.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://starbigdowload.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Thu, 30 Nov 2023 09:42:54 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
cf-mitigated: challenge
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Set-Cookie: __cf_bm=oFqJCSQZl234dbWibSz8GX10Gr_PBqR2kqQn02a.v9A-1701337374-0-AeCICglFaJRhOwAqXn7IOaxvxzTMEtoSzZRDldSI1MljfzJtbWpAtUgIkijSaSD+qFp1X68qgt5Qk9SpmNRQ2bo=; path=/; expires=Thu, 30-Nov-23 10:12:54 GMT; domain=.hostgator.com.br; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82e2249c0e005689-OSL
Content-Encoding: gzip
afiliados.hostgator.com.br/banners/poweredby.gif
172.66.40.38 3.5 kB URL afiliados.hostgator.com.br/banners/poweredby.gif
IP 172.66.40.38:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5234)
Hash e5701b31b1d84610173473f54f19d41d
be950c67c28f9ff1a65659814082912dfc00fcac
7107a3907369195dcb2921c8f409b6db81bee6ccff20069dcc1f2743f0e6f9f5
GET /banners/poweredby.gif HTTP/1.1
Host: afiliados.hostgator.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://starbigdowload.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Thu, 30 Nov 2023 09:42:54 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
cf-mitigated: challenge
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Set-Cookie: __cf_bm=iYUCXGUTWNhCpcvbICFFLEL5XVpar1x0Zm19SXki5BU-1701337374-0-AQ3K3HRBHRRnOeJ0jv7WDq8IkGShLCa+LcdX5oANT3vT/dQ3dFQt399RPW8CgVsOcBzOOBNJ0RFiZmum6GpW550=; path=/; expires=Thu, 30-Nov-23 10:12:54 GMT; domain=.hostgator.com.br; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82e2249c085c56c4-OSL
Content-Encoding: gzip
lh3.googleusercontent.com/blogger_img_proxy/ALY8t1ulnidzk5GMFk3t_FaclQx1-V2cL3nLm2amy4aV_oGf-KBboR34ZyUOt0_s0S7xyBZbpz3cI9aN_pgUYNC-CxbNwl5H2OSLSku4s-PsFybFolCy-7kz5TtzIU4vzs3NcQ=w72-h72-p-k-no-nu
142.250.74.97 3.6 kB URL lh3.googleusercontent.com/blogger_img_proxy/ALY8t1ulnidzk5GMFk3t_FaclQx1-V2cL3nLm2amy4aV_oGf-KBboR34ZyUOt0_s0S7xyBZbpz3cI9aN_pgUYNC-CxbNwl5H2OSLSku4s-PsFybFolCy-7kz5TtzIU4vzs3NcQ=w72-h72-p-k-no-nu
IP 142.250.74.97:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 72x72, components 3\012- data
Hash 203e2167ad863619b07da3e51ba213e3
77158f3d6be39ef6623b7802ff9d08746fb4d858
0f776916a705ec42986748cca83620282a90b5b19a7eff16130a8ad1e2b13020
GET /blogger_img_proxy/ALY8t1ulnidzk5GMFk3t_FaclQx1-V2cL3nLm2amy4aV_oGf-KBboR34ZyUOt0_s0S7xyBZbpz3cI9aN_pgUYNC-CxbNwl5H2OSLSku4s-PsFybFolCy-7kz5TtzIU4vzs3NcQ=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://starbigdowload.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
expires: Fri, 01 Dec 2023 09:42:54 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Thu, 30 Nov 2023 09:42:54 GMT
server: fife
content-length: 3643
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ALY8t1sh8CRje_DOUg3uTt_LrdttaUdiWWVdoMD1mLmPQUHoI2VJGT01Ai_4Ns8-u6pY5kRHDakJizQTqJ6twTVXvbc5s1AQUBBXUZa9ruPk1mJwYF1nqA=w72-h72-p-k-no-nu
142.250.74.97 3.6 kB URL lh3.googleusercontent.com/blogger_img_proxy/ALY8t1sh8CRje_DOUg3uTt_LrdttaUdiWWVdoMD1mLmPQUHoI2VJGT01Ai_4Ns8-u6pY5kRHDakJizQTqJ6twTVXvbc5s1AQUBBXUZa9ruPk1mJwYF1nqA=w72-h72-p-k-no-nu
IP 142.250.74.97:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 72x72, components 3\012- data
Hash c38c146836ad3861f77033135d6df54c
0da70347b252377601cace782d1d155857c1d5b5
94593e6a5292c4f4c3ab5b46cb7b9634587578c72b062b3319296093e1bb14cb
GET /blogger_img_proxy/ALY8t1sh8CRje_DOUg3uTt_LrdttaUdiWWVdoMD1mLmPQUHoI2VJGT01Ai_4Ns8-u6pY5kRHDakJizQTqJ6twTVXvbc5s1AQUBBXUZa9ruPk1mJwYF1nqA=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://starbigdowload.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
expires: Fri, 01 Dec 2023 09:42:54 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Thu, 30 Nov 2023 09:42:54 GMT
server: fife
content-length: 3565
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ALY8t1sb_bi2ovna6hTAFOMccakyjpeWSudibPQWveHnhHhmQN7DQFaRrLirZujgJA6RECebLKianYDJkxuBPXQtbbcWpHqQtOH2qwpnVBZ28El7jGORQxOYZlEEEEF41yNw=w72-h72-p-k-no-nu
142.250.74.97 2.1 kB URL lh3.googleusercontent.com/blogger_img_proxy/ALY8t1sb_bi2ovna6hTAFOMccakyjpeWSudibPQWveHnhHhmQN7DQFaRrLirZujgJA6RECebLKianYDJkxuBPXQtbbcWpHqQtOH2qwpnVBZ28El7jGORQxOYZlEEEEF41yNw=w72-h72-p-k-no-nu
IP 142.250.74.97:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 72x72, components 3\012- data
Hash da36a1453063b273197b9d38e4f19bbd
ea0f863e3d92a17fed9a84013fb78e393ec76022
f7f8edbabab43df8c8a930285d9344dc627a5b34411ec50b46f78260c74e152f
GET /blogger_img_proxy/ALY8t1sb_bi2ovna6hTAFOMccakyjpeWSudibPQWveHnhHhmQN7DQFaRrLirZujgJA6RECebLKianYDJkxuBPXQtbbcWpHqQtOH2qwpnVBZ28El7jGORQxOYZlEEEEF41yNw=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://starbigdowload.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
expires: Fri, 01 Dec 2023 09:42:54 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Thu, 30 Nov 2023 09:42:54 GMT
server: fife
content-length: 2056
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ALY8t1uOgW-uqJV1b5jj_cAHe4byL33oNfs65D7q2pbyyACV2efnXw5uyQMBOxxNkxumunTdD-FFRP6FPpHTMKVk82KqaZPcnkGKBGAw6TjXf04TlbS9UQ=w72-h72-p-k-no-nu
142.250.74.97 3.5 kB URL lh3.googleusercontent.com/blogger_img_proxy/ALY8t1uOgW-uqJV1b5jj_cAHe4byL33oNfs65D7q2pbyyACV2efnXw5uyQMBOxxNkxumunTdD-FFRP6FPpHTMKVk82KqaZPcnkGKBGAw6TjXf04TlbS9UQ=w72-h72-p-k-no-nu
IP 142.250.74.97:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 72x72, components 3\012- data
Hash 6bfd2c81ef14160cda4fb0436d806654
fe761e4038006d4706f3616ba0d4abf4f3aa6e6a
06aea38a2462313ae9e3881dcd357914a5ac85f1ec5273ecaa05ed79a2359e12
GET /blogger_img_proxy/ALY8t1uOgW-uqJV1b5jj_cAHe4byL33oNfs65D7q2pbyyACV2efnXw5uyQMBOxxNkxumunTdD-FFRP6FPpHTMKVk82KqaZPcnkGKBGAw6TjXf04TlbS9UQ=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://starbigdowload.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
expires: Fri, 01 Dec 2023 09:42:54 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Thu, 30 Nov 2023 09:42:54 GMT
server: fife
content-length: 3506
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ALY8t1vUU0p6XSx6DpZS-TXxWIQXxw9bIFaaIWAji-2HFb9CCblSqaQsYG82jKxKtHoFGzKqtGIUgBJgtfze2OneTL2-39l3ztZZurlawBsXOKl5_EWxe0BQ5fXrcVsde3bd=w72-h72-p-k-no-nu
142.250.74.97 2.8 kB URL lh3.googleusercontent.com/blogger_img_proxy/ALY8t1vUU0p6XSx6DpZS-TXxWIQXxw9bIFaaIWAji-2HFb9CCblSqaQsYG82jKxKtHoFGzKqtGIUgBJgtfze2OneTL2-39l3ztZZurlawBsXOKl5_EWxe0BQ5fXrcVsde3bd=w72-h72-p-k-no-nu
IP 142.250.74.97:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 72x72, components 3\012- data
Hash b8f75e651d7c624ced21777e323cbe42
41787ed90445f01207a071f9c87c0b92b64a5d38
97c05fddc38a466a937168c779b39b2d0f8c6f557b1ee924f096aff7e7ba3a50
GET /blogger_img_proxy/ALY8t1vUU0p6XSx6DpZS-TXxWIQXxw9bIFaaIWAji-2HFb9CCblSqaQsYG82jKxKtHoFGzKqtGIUgBJgtfze2OneTL2-39l3ztZZurlawBsXOKl5_EWxe0BQ5fXrcVsde3bd=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://starbigdowload.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
expires: Fri, 01 Dec 2023 09:42:54 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Thu, 30 Nov 2023 09:42:54 GMT
server: fife
content-length: 2813
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/325989852-widgets.js
216.58.207.233 59 kB URL www.blogger.com/static/v1/widgets/325989852-widgets.js
IP 216.58.207.233:0
File type ASCII text, with very long lines (2258)
Hash 2aaaea7286ee481cbc12cfd76e10c0cf
6e8576cb84ac125faa0bc0a5fe5508166cc4eed8
4bfa00cdbc7a40f5dad3dfc3a21dada224e61e358e78d7b262bab098bccbc580
GET /static/v1/widgets/325989852-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://starbigdowload.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 59316
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 01:57:56 GMT
expires: Fri, 29 Nov 2024 01:57:56 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 29 Nov 2023 01:58:19 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 27898
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.datahosting.com.br/afiliados/banners/banner234x60-afiliados-1.gif
38.154.155.210 292 B URL www.datahosting.com.br/afiliados/banners/banner234x60-afiliados-1.gif
IP 38.154.155.210:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 0cbc50619177a277ab4df017ab217db6
92e49ba1c8e305c222688c09e48d3bc716718a09
5db355a038fcf0125cbc62d25a12a7812f75f9545057d5c1a6e35febccc3d3a3
GET /afiliados/banners/banner234x60-afiliados-1.gif HTTP/1.1
Host: www.datahosting.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://starbigdowload.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Thu, 30 Nov 2023 09:42:53 GMT
Server: Apache
Location: https://www.minas.com.br/datahosting/?afiliados/banners/banner234x60-afiliados-1.gif
Content-Length: 292
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
lh3.googleusercontent.com/blogger_img_proxy/ALY8t1uWwYiUWG2Yks7JWO7dl0oG_xa63PtLzIFxAuMRMe9nSXJioKc1_KZ6Bl8JvWA0avz1XXGjk5PW3c1qTWjDpE0ekTiJwYZI10-U=w72-h72-p-k-no-nu
142.250.74.97 1.7 kB URL lh3.googleusercontent.com/blogger_img_proxy/ALY8t1uWwYiUWG2Yks7JWO7dl0oG_xa63PtLzIFxAuMRMe9nSXJioKc1_KZ6Bl8JvWA0avz1XXGjk5PW3c1qTWjDpE0ekTiJwYZI10-U=w72-h72-p-k-no-nu
IP 142.250.74.97:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash ffd095fe49ea75a9ba0807677b2b465b
fc8b89ffe4252028e1ef943109e0c915c77bce9e
556436b4f3f026700434e70641544b5cb7f909129f409a14646e03a1f7b088a4
GET /blogger_img_proxy/ALY8t1uWwYiUWG2Yks7JWO7dl0oG_xa63PtLzIFxAuMRMe9nSXJioKc1_KZ6Bl8JvWA0avz1XXGjk5PW3c1qTWjDpE0ekTiJwYZI10-U=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://starbigdowload.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Thu, 30 Nov 2023 09:42:54 GMT
server: fife
content-length: 1701
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
apis.google.com/js/platform.js
142.250.74.78 22 kB URL apis.google.com/js/platform.js
IP 142.250.74.78:0
File type ASCII text, with very long lines (2664)
Hash fd67324a3d81895bdf76b073089663b1
5abb1b0a36c645085e31830e6647faa790ad4e91
8eaa06f95fa0ac44c2c186f200874f2f3ebc3aaa92412f0d0c096f517d3581d1
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://starbigdowload.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-length: 21930
date: Thu, 30 Nov 2023 09:42:54 GMT
expires: Thu, 30 Nov 2023 09:42:54 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "bccfddc1dce4fb76"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
set-cookie: NID=511=tOGN42ifBGxFmfP2LXkeM22l9SSTm7giAfirId9-kgrRBKfPBU8fLlJhc3ed0LD0tci6FMpAye8O1ZsCBpN6w37o61NddpGR5fWblTr2grhw7nfUfxNWO063HZe3DMGDrKPfxL0_ub7u3ssB1XL76twxCHHjVCVCQ2C6YPXaD2o; expires=Fri, 31-May-2024 09:42:54 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
goo.gl/ymK7Q
142.250.74.14 0 B IP 142.250.74.14:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ymK7Q HTTP/1.1
Host: goo.gl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://starbigdowload.blogspot.com/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Content-Type: application/binary
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 30 Nov 2023 09:42:54 GMT
Location: https://goo.gl/ymK7Q
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
lh3.googleusercontent.com/blogger_img_proxy/ALY8t1tfLz4re8C_GN3spV8GH98481YZ6Lo58qIL19th7eOz86PicZxClU18V3M-p8VntNNVXYO_sjFjkEOmkbzJcRE-JdlDSjSpAFc=w72-h72-p-k-no-nu
142.250.74.97 1.7 kB URL lh3.googleusercontent.com/blogger_img_proxy/ALY8t1tfLz4re8C_GN3spV8GH98481YZ6Lo58qIL19th7eOz86PicZxClU18V3M-p8VntNNVXYO_sjFjkEOmkbzJcRE-JdlDSjSpAFc=w72-h72-p-k-no-nu
IP 142.250.74.97:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 0b142183df6f5a942289e28976dabae6
2d30236883f5344bc99e07ce617d17a6a07840e9
a1180f8ae755b06abba08d511b7a63462040966a77bb4ef88c03000ea677d5ea
GET /blogger_img_proxy/ALY8t1tfLz4re8C_GN3spV8GH98481YZ6Lo58qIL19th7eOz86PicZxClU18V3M-p8VntNNVXYO_sjFjkEOmkbzJcRE-JdlDSjSpAFc=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://starbigdowload.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Thu, 30 Nov 2023 09:42:54 GMT
server: fife
content-length: 1700
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i.imgur.com/hLEOFoF.jpg
151.101.244.193 0 B IP 151.101.244.193:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /hLEOFoF.jpg HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://starbigdowload.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 0
Retry-After: 0
Location: https://i.imgur.com/hLEOFoF.jpg
Accept-Ranges: bytes
Date: Thu, 30 Nov 2023 09:42:54 GMT
X-Served-By: cache-hel1410025-HEL
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1701337375.848916,VS0,VE0
Strict-Transport-Security: max-age=300
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0
3.bp.blogspot.com/-z-89vCF1kDY/UKRFn22FojI/AAAAAAAAC4M/m6PDgrPaU5k/s1600/Body.gif
142.250.74.161 61 B URL 3.bp.blogspot.com/-z-89vCF1kDY/UKRFn22FojI/AAAAAAAAC4M/m6PDgrPaU5k/s1600/Body.gif
IP 142.250.74.161:0
File type GIF image data, version 89a, 16 x 16\012- data
Hash 0df43114afd5b36f3482db801a6c7797
f0d12e8aa22e024d68daa215db63c65837477851
6456e6f5fa3507996b649e992562452910901b527f5fe2ed4f2b88299ecd4da2
GET /-z-89vCF1kDY/UKRFn22FojI/AAAAAAAAC4M/m6PDgrPaU5k/s1600/Body.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://starbigdowload.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/gif
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "v106a"
Expires: Fri, 01 Dec 2023 09:42:54 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Body.gif"
X-Content-Type-Options: nosniff
Date: Thu, 30 Nov 2023 09:42:54 GMT
Server: fife
Content-Length: 61
X-XSS-Protection: 0
www.blogger.com/dyn-css/authorization.css?targetBlogID=748972870649562597&zx=64102aa4-1ab1-4886-be45-584e6a1c1f74
216.58.207.233 21 B URL www.blogger.com/dyn-css/authorization.css?targetBlogID=748972870649562597&zx=64102aa4-1ab1-4886-be45-584e6a1c1f74
IP 216.58.207.233:0
File type very short file (no magic)
Hash 68b329da9893e34099c7d8ad5cb9c940
adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /dyn-css/authorization.css?targetBlogID=748972870649562597&zx=64102aa4-1ab1-4886-be45-584e6a1c1f74 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://starbigdowload.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 30 Nov 2023 09:42:54 GMT
last-modified: Thu, 30 Nov 2023 09:42:54 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ALY8t1sLh8jys7w_UuPl11BHDqcqIIRU3SkNt7O3yPMSawfqgKCtiZ6x9eI0lLYPHFFULbwwkUuL4cp7ERW7G1zgHpETOqAP0nhpZxY=w72-h72-p-k-no-nu
142.250.74.97 1.7 kB URL lh3.googleusercontent.com/blogger_img_proxy/ALY8t1sLh8jys7w_UuPl11BHDqcqIIRU3SkNt7O3yPMSawfqgKCtiZ6x9eI0lLYPHFFULbwwkUuL4cp7ERW7G1zgHpETOqAP0nhpZxY=w72-h72-p-k-no-nu
IP 142.250.74.97:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash d5cdb9828726202a75944881e6f40bb9
c8105775a14a1286e429a62bf410079177164e48
73c4d8a4bcfff576974c0819fe7515345a9359b9ddc10f89d993c99a34fa2abe
GET /blogger_img_proxy/ALY8t1sLh8jys7w_UuPl11BHDqcqIIRU3SkNt7O3yPMSawfqgKCtiZ6x9eI0lLYPHFFULbwwkUuL4cp7ERW7G1zgHpETOqAP0nhpZxY=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://starbigdowload.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Thu, 30 Nov 2023 09:42:54 GMT
server: fife
content-length: 1700
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i.imgur.com/3q1CfWN.jpg
151.101.244.193 0 B IP 151.101.244.193:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /3q1CfWN.jpg HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://starbigdowload.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 0
Retry-After: 0
Location: https://i.imgur.com/3q1CfWN.jpg
Accept-Ranges: bytes
Date: Thu, 30 Nov 2023 09:42:54 GMT
X-Served-By: cache-hel1410032-HEL
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1701337375.984640,VS0,VE0
Strict-Transport-Security: max-age=300
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0
contador.s12.com.br/ad.js?id=y1ZBd210
104.21.3.29 751 B URL contador.s12.com.br/ad.js?id=y1ZBd210
IP 104.21.3.29:0
File type ASCII text, with very long lines (432), with CRLF line terminators
Hash d71c25cfa322f9b6cf8a25e5abae24aa
1f5bcc264e578c9420487b9d67325aa4307b10ba
4ead231e28add67b3eb61782a1caff4875e0736e3a90ca3cc6401a423edd61c6
GET /ad.js?id=y1ZBd210 HTTP/1.1
Host: contador.s12.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://starbigdowload.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 09:42:54 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/5.3.3
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M8hGiNVa475TY7dR089Jc82YY2Qs6poTvViyxmiJZDSG3rrsloXZqUuiDWlmU44457r1NmfhXIxLCbzAv0J5XU2x2Hcwkpsx0yCRx7czj2Nxgl%2FencZpOE6u0oOqYuwswH2b0oHt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e2249cb8db56cb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
i.imgur.com/LeHHFbe.jpg
151.101.244.193 0 B IP 151.101.244.193:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /LeHHFbe.jpg HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://starbigdowload.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 0
Retry-After: 0
Location: https://i.imgur.com/LeHHFbe.jpg
Accept-Ranges: bytes
Date: Thu, 30 Nov 2023 09:42:54 GMT
X-Served-By: cache-hel1410032-HEL
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1701337375.986523,VS0,VE0
Strict-Transport-Security: max-age=300
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0
i.imgur.com/z1MweLe.jpg
151.101.244.193 0 B IP 151.101.244.193:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /z1MweLe.jpg HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://starbigdowload.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 0
Retry-After: 0
Location: https://i.imgur.com/z1MweLe.jpg
Accept-Ranges: bytes
Date: Thu, 30 Nov 2023 09:42:54 GMT
X-Served-By: cache-hel1410033-HEL
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1701337375.990405,VS0,VE0
Strict-Transport-Security: max-age=300
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0
i.imgur.com/9ZvNQ.gif
151.101.244.193 0 B IP 151.101.244.193:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /9ZvNQ.gif HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://starbigdowload.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 0
Retry-After: 0
Location: https://i.imgur.com/9ZvNQ.gif
Accept-Ranges: bytes
Date: Thu, 30 Nov 2023 09:42:54 GMT
X-Served-By: cache-hel1410029-HEL
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1701337375.992581,VS0,VE0
Strict-Transport-Security: max-age=300
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0
lh3.googleusercontent.com/blogger_img_proxy/ALY8t1tEQW8hACS6-uqSuxLf60hZtx7qc2KbsWdLh9PUIJplrzuH8QgSaYrtz_Yb1WcnQ6DbmIjYSRH92p-tUEDIP23vPA7U5It5ZKfz=w72-h72-p-k-no-nu
142.250.74.97 1.7 kB URL lh3.googleusercontent.com/blogger_img_proxy/ALY8t1tEQW8hACS6-uqSuxLf60hZtx7qc2KbsWdLh9PUIJplrzuH8QgSaYrtz_Yb1WcnQ6DbmIjYSRH92p-tUEDIP23vPA7U5It5ZKfz=w72-h72-p-k-no-nu
IP 142.250.74.97:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 502009709f5a16866512be52dd881f15
1b48d2daca661d81d3bc3f9c940f71c85a37f69a
3f05dc62ac42a8124b6f5adc14e36434d928b9e6270cc39e0d74ddb07f1ef354
GET /blogger_img_proxy/ALY8t1tEQW8hACS6-uqSuxLf60hZtx7qc2KbsWdLh9PUIJplrzuH8QgSaYrtz_Yb1WcnQ6DbmIjYSRH92p-tUEDIP23vPA7U5It5ZKfz=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://starbigdowload.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Thu, 30 Nov 2023 09:42:55 GMT
server: fife
content-length: 1701
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i.imgur.com/d3pCZ.gif
151.101.244.193 0 B IP 151.101.244.193:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /d3pCZ.gif HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://starbigdowload.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 0
Retry-After: 0
Location: https://i.imgur.com/d3pCZ.gif
Accept-Ranges: bytes
Date: Thu, 30 Nov 2023 09:42:55 GMT
X-Served-By: cache-hel1410031-HEL
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1701337375.032569,VS0,VE0
Strict-Transport-Security: max-age=300
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0
i.imgur.com/vEIJL.gif
151.101.244.193 0 B IP 151.101.244.193:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /vEIJL.gif HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://starbigdowload.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 0
Retry-After: 0
Location: https://i.imgur.com/vEIJL.gif
Accept-Ranges: bytes
Date: Thu, 30 Nov 2023 09:42:55 GMT
X-Served-By: cache-hel1410031-HEL
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1701337375.032411,VS0,VE0
Strict-Transport-Security: max-age=300
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0
lh3.googleusercontent.com/blogger_img_proxy/ALY8t1sVA7WydHEvYq7oZfhfKvYVsTrXwKguLkTXazSXsYgjvvhJ_utEvdINSfsE3MDgMHx0wbwNNH8b6Ll2Xy7gGHGV_SfFYSYrYN4=w72-h72-p-k-no-nu
142.250.74.97 1.7 kB URL lh3.googleusercontent.com/blogger_img_proxy/ALY8t1sVA7WydHEvYq7oZfhfKvYVsTrXwKguLkTXazSXsYgjvvhJ_utEvdINSfsE3MDgMHx0wbwNNH8b6Ll2Xy7gGHGV_SfFYSYrYN4=w72-h72-p-k-no-nu
IP 142.250.74.97:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 36da621d1938e00126648ad49bc33146
832cf13f6a0f703b41f2c32fd074cc8b1847e318
70029d499f1ef7192d3d4d08745e34e8dd3f31386833af1f84060efef756bc38
GET /blogger_img_proxy/ALY8t1sVA7WydHEvYq7oZfhfKvYVsTrXwKguLkTXazSXsYgjvvhJ_utEvdINSfsE3MDgMHx0wbwNNH8b6Ll2Xy7gGHGV_SfFYSYrYN4=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://starbigdowload.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Thu, 30 Nov 2023 09:42:55 GMT
server: fife
content-length: 1700
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i.imgur.com/3q1CfWN.jpg
151.101.244.193 542 B IP 151.101.244.193:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 210x27, components 3\012- data
Hash 4490dff3e54fc1b72be6c10ab3463907
ac8c154f51aac5c64a7e2bb9ac8b733c107107d8
3da88c24f9829a72aab5d17e43ce30a309f5ccbfd1cb553cfa373a194f2fc79e
GET /3q1CfWN.jpg HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://starbigdowload.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
last-modified: Thu, 07 Mar 2013 03:24:43 GMT
etag: "4490dff3e54fc1b72be6c10ab3463907"
x-amz-cf-pop: IAD89-P1
x-amz-cf-id: mT0uAMDNKFnwiW9jzAUSsiqiy9LeUy4gN8HqV04ZmLx8W4hlsT5QlA==
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Thu, 30 Nov 2023 09:42:55 GMT
age: 2551288
x-served-by: cache-iad-kiad7000045-IAD, cache-hel1410029-HEL
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 96, 4
x-timer: S1701337375.199800,VS0,VE0
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 542
X-Firefox-Spdy: h2
i.imgur.com/d3pCZ.gif
151.101.244.193 157 B IP 151.101.244.193:0
File type GIF image data, version 89a, 520 x 9\012- data
Hash 9db69b1f747b8f20d2ff38c518313515
d193e38b3851ad7f0e2734ccc12ccce8bb721cf0
a379e3d579caf3bd0e44dac3ced403f9c1351e22329c7175a8185b32c8a3fb58
GET /d3pCZ.gif HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://starbigdowload.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/gif
last-modified: Thu, 15 Nov 2012 01:47:19 GMT
etag: "9db69b1f747b8f20d2ff38c518313515"
x-amz-cf-pop: IAD89-P1
x-amz-cf-id: Npt7K-Gc6YM62_X6vBWnUpPvDt6DC-4gpb4gT2RstNULjZB-Fulpag==
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Thu, 30 Nov 2023 09:42:55 GMT
age: 3479459
x-served-by: cache-iad-kcgs7200051-IAD, cache-hel1410029-HEL
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 116, 1
x-timer: S1701337375.200658,VS0,VE1
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 157
X-Firefox-Spdy: h2
i.imgur.com/vEIJL.gif
151.101.244.193 228 B IP 151.101.244.193:0
File type GIF image data, version 89a, 520 x 21\012- data
Hash a426682182f33daa7b34db73baeafce1
5d6e674413bd9971869c8a718ef064b3a57b0ab0
b27d7129397745a18a4837ac3031c5a40a2730276ba463dc39ab2c2abb3bab80
GET /vEIJL.gif HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://starbigdowload.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/gif
last-modified: Thu, 15 Nov 2012 01:43:27 GMT
etag: "a426682182f33daa7b34db73baeafce1"
x-amz-cf-pop: IAD12-P2
x-amz-cf-id: CDJUXH2zrIAQHtoQ-IAMc4c5xeZYg5sXXpB6LhVvb07wV6wgbZK7sQ==
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Thu, 30 Nov 2023 09:42:55 GMT
age: 2577222
x-served-by: cache-iad-kcgs7200037-IAD, cache-hel1410029-HEL
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 126, 1
x-timer: S1701337375.201567,VS0,VE1
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 228
X-Firefox-Spdy: h2
i.imgur.com/V1rJl.gif
151.101.244.193 79 B IP 151.101.244.193:0
File type GIF image data, version 89a, 7 x 11\012- data
Hash f1bd4f12b0dbf28ed6da198a8e67b9e2
5b5181218a188847b7252efd243b1354b0fc10c6
2c1e4dab4ddd7d3983ca72593b0e3100fa3c8cd750271655e6b2fe070848d2ad
GET /V1rJl.gif HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://starbigdowload.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
last-modified: Thu, 15 Nov 2012 02:19:25 GMT
etag: "f1bd4f12b0dbf28ed6da198a8e67b9e2"
x-amz-cf-pop: IAD12-P2
x-amz-cf-id: GOSXuEecUaCm_ULyZL0UgNbMMtkVLdAoPnH8Ly9CX-O8nqL2yeGJvA==
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Thu, 30 Nov 2023 09:42:55 GMT
age: 3166131
x-served-by: cache-iad-kcgs7200124-IAD, cache-hel1410029-HEL
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 125, 10
x-timer: S1701337375.215061,VS0,VE1
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 79
X-Firefox-Spdy: h2
i.imgur.com/LeHHFbe.jpg
151.101.244.193 111 kB IP 151.101.244.193:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 950x180, components 3\012- data
Size 111 kB (111354 bytes)
Hash 11b48d75afe7eeb0cffcf159a8ca1dbf
2d6c01356928875bfcd887369ec4f048592623a9
95893e54cf7e486926d77a2913dfc9e9816a78a100819de7fad1c55f651e4315
GET /LeHHFbe.jpg HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://starbigdowload.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
last-modified: Thu, 07 Mar 2013 03:38:43 GMT
etag: "11b48d75afe7eeb0cffcf159a8ca1dbf"
x-amz-cf-pop: IAD89-P1
x-amz-cf-id: 0EjPqC0P7rUffWzWU1LhKG1HSWcwqIsCIiHqYNicCXITUEGirRJlKA==
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Thu, 30 Nov 2023 09:42:55 GMT
age: 765765
x-served-by: cache-iad-kjyo7100138-IAD, cache-hel1410029-HEL
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 19, 1
x-timer: S1701337375.218632,VS0,VE2
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 111354
X-Firefox-Spdy: h2
i.imgur.com/z1MweLe.jpg
151.101.244.193 316 B IP 151.101.244.193:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1x37, components 3\012- data
Hash cc03a01dd9709e65f5e57a20677612e2
e337128febf02d36e0113418a416e4325b271bd3
4e329b89ea757bfe5ea0eebb49101f74afa76dbf14cd122938011a179783391d
GET /z1MweLe.jpg HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://starbigdowload.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
last-modified: Thu, 07 Mar 2013 03:26:43 GMT
etag: "cc03a01dd9709e65f5e57a20677612e2"
x-amz-cf-pop: IAD12-P2
x-amz-cf-id: 0RJ6AahXPu5kRu4M73VZV2LVOv6DnSP_12iXG7V7oZOFUwu541s5TA==
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Thu, 30 Nov 2023 09:42:55 GMT
age: 3095587
x-served-by: cache-iad-kcgs7200048-IAD, cache-hel1410029-HEL
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 35, 1
x-timer: S1701337375.221462,VS0,VE1
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 316
X-Firefox-Spdy: h2
i.imgur.com/9ZvNQ.gif
151.101.244.193 1.5 kB IP 151.101.244.193:0
File type GIF image data, version 89a, 210 x 3500\012- data
Hash 0028fd4c3195ea37241eba94757af277
e39492ce1be8aab85ee59860f7e690f5c71acb49
a9c78c73fb6801327066bc3fda1b983900082e0abafd22dafabaa6608ada9462
GET /9ZvNQ.gif HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://starbigdowload.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
last-modified: Thu, 15 Nov 2012 01:40:18 GMT
etag: "0028fd4c3195ea37241eba94757af277"
x-amz-cf-pop: IAD12-P2
x-amz-cf-id: wYZX-_UwK4fEcNN7zN57DmAtF4VYHEXnYvfoi_OPciPeCzNtfX2w5w==
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Thu, 30 Nov 2023 09:42:55 GMT
age: 3110391
x-served-by: cache-iad-kiad7000144-IAD, cache-hel1410029-HEL
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 155, 1
x-timer: S1701337375.222894,VS0,VE1
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 1471
X-Firefox-Spdy: h2
i.imgur.com/hLEOFoF.jpg
151.101.244.193 570 B IP 151.101.244.193:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 25x24, components 3\012- data
Hash 87ab9939714ad467cedd8fae3d3631d4
0304977442896c522989872f2c47f3288caae208
a7b8f4f86fc2ffe11bd5d093c2b5a445c86b443720078bbc9b383b9657a72fec
GET /hLEOFoF.jpg HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://starbigdowload.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
last-modified: Thu, 07 Mar 2013 03:28:30 GMT
etag: "87ab9939714ad467cedd8fae3d3631d4"
x-amz-cf-pop: PHL50-C1
x-amz-cf-id: _UmZLPU1RiH9VZh7Y9uCU6SAvjohsBectGMvU-_ynf_uCakPyDZQzg==
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Thu, 30 Nov 2023 09:42:55 GMT
age: 1220604
x-served-by: cache-iad-kiad7000102-IAD, cache-hel1410029-HEL
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 61, 1
x-timer: S1701337375.224543,VS0,VE1
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 570
X-Firefox-Spdy: h2
contador.s12.com.br/img-y1ZBd210-26.gif
104.21.3.29 1.5 kB URL contador.s12.com.br/img-y1ZBd210-26.gif
IP 104.21.3.29:0
File type GIF image data, version 87a, 100 x 27\012- data
Hash 3cc93df6174c34be1b9e468d2216a40e
78aee10f5890a36c76e352665b1fa1688a251dcb
88887169863d84a22f65829a6744c0cf7113f37478fad6a8503dfead95eb1979
GET /img-y1ZBd210-26.gif HTTP/1.1
Host: contador.s12.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://starbigdowload.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 09:42:55 GMT
content-type: image/gif
content-length: 1519
x-powered-by: PHP/5.3.3
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FnT3fQHn38kPzcrV2TdWfIGE%2BShTkQUCDqO0hnRcyo5i1ys%2F9kzVtGexuWc%2BE4hotUQ6FAPJ0izZcEx3AqI7s5Grfr2fkmYgIXyiesnEPq0rMLkCYcRmQB9AoegGGB1EfMaIGTnT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e224a20dcc5685-OSL
alt-svc: h3=":443"; ma=86400
goo.gl/wlKDd
142.250.74.14 0 B IP 142.250.74.14:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wlKDd HTTP/1.1
Host: goo.gl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://starbigdowload.blogspot.com/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Content-Type: application/binary
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 30 Nov 2023 09:42:55 GMT
Location: https://goo.gl/wlKDd
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=gapi_iframes/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs
142.250.74.78 36 kB URL apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=gapi_iframes/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs
IP 142.250.74.78:0
File type ASCII text, with very long lines (1505)
Hash 734dd60ee891c2be3e3e1062166807c5
d104c3323a33f85d90e101aac653236e85630879
f30f908132336f80827dbbf6936450d18857934e4a63b2b0128bc91fb5e11e5d
GET /_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=gapi_iframes/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://starbigdowload.blogspot.com/
Cookie: NID=511=tOGN42ifBGxFmfP2LXkeM22l9SSTm7giAfirId9-kgrRBKfPBU8fLlJhc3ed0LD0tci6FMpAye8O1ZsCBpN6w37o61NddpGR5fWblTr2grhw7nfUfxNWO063HZe3DMGDrKPfxL0_ub7u3ssB1XL76twxCHHjVCVCQ2C6YPXaD2o
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 35774
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:35:30 GMT
expires: Fri, 29 Nov 2024 05:35:30 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 08 Nov 2023 22:37:21 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 14845
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
bit.ly/3zzKlOA
67.199.248.10 114 B IP 67.199.248.10:0
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 988c249f56442504aa4f0c3d48acc7d9
0f259c7688c84f8bd89946df9aefdf948fe2d1ad
6078c9ebacd41bd894115c096436f290aeb54b6689a894c362501ff5babfdd4d
GET /3zzKlOA HTTP/1.1
Host: bit.ly
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://starbigdowload.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: nginx
date: Thu, 30 Nov 2023 09:42:55 GMT
content-type: text/html; charset=utf-8
content-length: 114
cache-control: private, max-age=90
content-security-policy: referrer always;
location: https://meuip.page/ads5.php
referrer-policy: unsafe-url
set-cookie: _bit=nau9GT-79f08c3ee5db933823-001; Domain=bit.ly; Expires=Tue, 28 May 2024 09:42:55 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i.imgur.com/2K5YV.png
151.101.244.193 0 B IP 151.101.244.193:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /2K5YV.png HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://starbigdowload.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 0
Retry-After: 0
Location: https://i.imgur.com/2K5YV.png
Accept-Ranges: bytes
Date: Thu, 30 Nov 2023 09:42:55 GMT
X-Served-By: cache-hel1410031-HEL
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1701337376.722820,VS0,VE0
Strict-Transport-Security: max-age=300
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0
i.imgur.com/2K5YV.png
151.101.244.193 0 B IP 151.101.244.193:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /2K5YV.png HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://starbigdowload.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 0
Retry-After: 0
Location: https://i.imgur.com/2K5YV.png
Accept-Ranges: bytes
Date: Thu, 30 Nov 2023 09:42:55 GMT
X-Served-By: cache-hel1410023-HEL
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1701337376.731446,VS0,VE0
Strict-Transport-Security: max-age=300
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0
i.imgur.com/2K5YV.png
151.101.244.193 7.1 kB IP 151.101.244.193:0
File type PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced\012- data
Hash 0d79c81c16855bd17d949df3adcca0a6
420cc6ba0d549798e67599f1ceeafe74815987d6
158d74fcf82699e0bd24061e2df501798fd78bcaafb428f9faf1da7bf5ed4bc4
GET /2K5YV.png HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://starbigdowload.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
last-modified: Thu, 15 Nov 2012 03:46:49 GMT
etag: "0d79c81c16855bd17d949df3adcca0a6"
x-amz-cf-pop: IAD89-P1
x-amz-cf-id: 6ALJ71MuXI7IdcrMkFJtlbzBb30q9ParFJFGxDoHtTGRIExOmMboBw==
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Thu, 30 Nov 2023 09:42:55 GMT
age: 1390953
x-served-by: cache-iad-kcgs7200052-IAD, cache-hel1410029-HEL
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 52, 1
x-timer: S1701337376.771761,VS0,VE1
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 7123
X-Firefox-Spdy: h2
goo.gl/ymK7Q
142.250.74.14 14 kB IP 142.250.74.14:0
File type gzip compressed data, max compression\012- data
Hash e62ef10c4363b81841ff3a301b00a50b
e1ec9ee41192f9c80a0d896ed29631ea3fa433da
6afbeed1110f7e1f967afd0426a2844d52da0698a3374b5cd809bf2839c54355
GET /ymK7Q HTTP/1.1
Host: goo.gl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://starbigdowload.blogspot.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: text/html; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 30 Nov 2023 09:42:55 GMT
strict-transport-security: max-age=31536000
content-security-policy: require-trusted-types-for 'script';report-uri /_/DurableDeepLinkUi/cspreport, script-src 'nonce-OX0LxfWo_FwkNMXchzxQYA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DurableDeepLinkUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/DurableDeepLinkUi/cspreport/allowlist
cross-origin-opener-policy: unsafe-none
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/followers.g?blogID=748972870649562597&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2NjY2NjYiByM1NTg4YWEqByNmZmZmZmYyByNjYzY2MDA6ByM2NjY2NjZCByM1NTg4YWFKByM5OTk5OTlSByM1NTg4YWFaC3RyYW5zcGFyZW50&pageSize=21&origin=http://starbigdowload.blogspot.com/&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__
216.58.207.233 531 B URL www.blogger.com/followers.g?blogID=748972870649562597&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2NjY2NjYiByM1NTg4YWEqByNmZmZmZmYyByNjYzY2MDA6ByM2NjY2NjZCByM1NTg4YWFKByM5OTk5OTlSByM1NTg4YWFaC3RyYW5zcGFyZW50&pageSize=21&origin=http://starbigdowload.blogspot.com/&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__
IP 216.58.207.233:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1024)
Hash 859da131c73cadb6cb812bb91289ee78
bedb861ddec5e0b90018b2e77bb87b5b515fc9d9
e63b177869c12501a69e25656bce5833324a047c7d6cee3a61d1d3964645b18a
GET /followers.g?blogID=748972870649562597&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2NjY2NjYiByM1NTg4YWEqByNmZmZmZmYyByNjYzY2MDA6ByM2NjY2NjZCByM1NTg4YWFKByM5OTk5OTlSByM1NTg4YWFaC3RyYW5zcGFyZW50&pageSize=21&origin=http://starbigdowload.blogspot.com/&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__ HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://starbigdowload.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
location: https://accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D748972870649562597%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2NjY2NjYiByM1NTg4YWEqByNmZmZmZmYyByNjYzY2MDA6ByM2NjY2NjZCByM1NTg4YWFKByM5OTk5OTlSByM1NTg4YWFaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://starbigdowload.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.coKrc9A11Ng.O/d%253D1/rs%253DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D748972870649562597%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2NjY2NjYiByM1NTg4YWEqByNmZmZmZmYyByNjYzY2MDA6ByM2NjY2NjZCByM1NTg4YWFKByM5OTk5OTlSByM1NTg4YWFaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://starbigdowload.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.coKrc9A11Ng.O/d%253D1/rs%253DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/m%253D__features__%26bpli%3D1&go=true
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Thu, 30 Nov 2023 09:42:55 GMT
expires: Thu, 30 Nov 2023 09:42:55 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 531
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
goo.gl/wlKDd
142.250.74.14 0 B IP 142.250.74.14:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wlKDd HTTP/1.1
Host: goo.gl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://starbigdowload.blogspot.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-type: application/binary
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 30 Nov 2023 09:42:55 GMT
location: http://blog.downsbrasil.net/
strict-transport-security: max-age=31536000
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: same-site
content-security-policy: script-src 'nonce-5fWGdctMXbHs6YiRE7eGuA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DurableDeepLinkUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/DurableDeepLinkUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/DurableDeepLinkUi/cspreport
cross-origin-opener-policy: unsafe-none
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D748972870649562597%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2NjY2NjYiByM1NTg4YWEqByNmZmZmZmYyByNjYzY2MDA6ByM2NjY2NjZCByM1NTg4YWFKByM5OTk5OTlSByM1NTg4YWFaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://starbigdowload.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.coKrc9A11Ng.O/d%253D1/rs%253DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D748972870649562597%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2NjY2NjYiByM1NTg4YWEqByNmZmZmZmYyByNjYzY2MDA6ByM2NjY2NjZCByM1NTg4YWFKByM5OTk5OTlSByM1NTg4YWFaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://starbigdowload.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.coKrc9A11Ng.O/d%253D1/rs%253DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/m%253D__features__%26bpli%3D1&go=true
64.233.164.84 0 B URL accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D748972870649562597%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2NjY2NjYiByM1NTg4YWEqByNmZmZmZmYyByNjYzY2MDA6ByM2NjY2NjZCByM1NTg4YWFKByM5OTk5OTlSByM1NTg4YWFaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://starbigdowload.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.coKrc9A11Ng.O/d%253D1/rs%253DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D748972870649562597%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2NjY2NjYiByM1NTg4YWEqByNmZmZmZmYyByNjYzY2MDA6ByM2NjY2NjZCByM1NTg4YWFKByM5OTk5OTlSByM1NTg4YWFaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://starbigdowload.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.coKrc9A11Ng.O/d%253D1/rs%253DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/m%253D__features__%26bpli%3D1&go=true
IP 64.233.164.84:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D748972870649562597%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2NjY2NjYiByM1NTg4YWEqByNmZmZmZmYyByNjYzY2MDA6ByM2NjY2NjZCByM1NTg4YWFKByM5OTk5OTlSByM1NTg4YWFaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://starbigdowload.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.coKrc9A11Ng.O/d%253D1/rs%253DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D748972870649562597%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2NjY2NjYiByM1NTg4YWEqByNmZmZmZmYyByNjYzY2MDA6ByM2NjY2NjZCByM1NTg4YWFKByM5OTk5OTlSByM1NTg4YWFaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://starbigdowload.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.coKrc9A11Ng.O/d%253D1/rs%253DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/m%253D__features__%26bpli%3D1&go=true HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://starbigdowload.blogspot.com/
DNT: 1
Connection: keep-alive
Cookie: NID=511=tOGN42ifBGxFmfP2LXkeM22l9SSTm7giAfirId9-kgrRBKfPBU8fLlJhc3ed0LD0tci6FMpAye8O1ZsCBpN6w37o61NddpGR5fWblTr2grhw7nfUfxNWO063HZe3DMGDrKPfxL0_ub7u3ssB1XL76twxCHHjVCVCQ2C6YPXaD2o
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:fj7b9VHWlXPUfyts6NEpMvrLdGPFxw:WGxehZ-ymhSSJS-c; Expires=Sat, 29-Nov-2025 09:42:55 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 30 Nov 2023 09:42:55 GMT
location: https://www.blogger.com/followers.g?blogID=748972870649562597&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2NjY2NjYiByM1NTg4YWEqByNmZmZmZmYyByNjYzY2MDA6ByM2NjY2NjZCByM1NTg4YWFKByM5OTk5OTlSByM1NTg4YWFaC3RyYW5zcGFyZW50&pageSize=21&origin=http://starbigdowload.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.coKrc9A11Ng.O/d%3D1/rs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/m%3D__features__&bpli=1
strict-transport-security: max-age=31536000; includeSubDomains
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: unsafe-none
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-cMeXEzFWu13Rouk0IOSSmA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
blog.downsbrasil.net/
116.202.118.107 0 B IP 116.202.118.107:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: blog.downsbrasil.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://starbigdowload.blogspot.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx
Date: Thu, 30 Nov 2023 09:42:56 GMT
Content-Length: 0
Connection: keep-alive
Location: http://www1.downsbrasil.net?backfill=0&domainname=0&searchbox=0&subid4=6568592037b9ef32f90087af
www1.downsbrasil.net/?backfill=0&domainname=0&searchbox=0&subid4=6568592037b9ef32f90087af
185.53.179.29 6.0 kB URL www1.downsbrasil.net/?backfill=0&domainname=0&searchbox=0&subid4=6568592037b9ef32f90087af
IP 185.53.179.29:0
ASN #61969 Team Internet AG
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1494)
Hash 9638d57b04eb4f9fc9796ab984d5b826
fc1ce548ce5be619ebd73d038096b6af09c751d8
db07e1ddbdf2aaca9b7799cc849290f4f359835fc6dcecdb238956caac6c3d4a
GET /?backfill=0&domainname=0&searchbox=0&subid4=6568592037b9ef32f90087af HTTP/1.1
Host: www1.downsbrasil.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://starbigdowload.blogspot.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 30 Nov 2023 09:42:56 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Buckets: bucket003
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_oHhqhiNj7lxLqkv+Vhmbty9vi5z0CoEfg92+HyU6i5IK71SQlKL8zKlaNTPNn5yj2AteGiIAIu6V0euFyQKxEw==
X-Template: tpl_CleanPeppermintBlack_twoclick
X-Language: norwegian
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Domain: downsbrasil.net
X-Subdomain: www1
Content-Encoding: gzip
www.blogger.com/followers.g?blogID=748972870649562597&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2NjY2NjYiByM1NTg4YWEqByNmZmZmZmYyByNjYzY2MDA6ByM2NjY2NjZCByM1NTg4YWFKByM5OTk5OTlSByM1NTg4YWFaC3RyYW5zcGFyZW50&pageSize=21&origin=http://starbigdowload.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.coKrc9A11Ng.O/d%3D1/rs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/m%3D__features__&bpli=1
216.58.207.233 1.6 kB URL www.blogger.com/followers.g?blogID=748972870649562597&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2NjY2NjYiByM1NTg4YWEqByNmZmZmZmYyByNjYzY2MDA6ByM2NjY2NjZCByM1NTg4YWFKByM5OTk5OTlSByM1NTg4YWFaC3RyYW5zcGFyZW50&pageSize=21&origin=http://starbigdowload.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.coKrc9A11Ng.O/d%3D1/rs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/m%3D__features__&bpli=1
IP 216.58.207.233:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 2e844eb3792d7ed8b0d27d274aeaa356
db6e916b92cfbd8701b585b6cd82f7bb3ef3dccb
fc85269a17dc7b1426d5feade26e87283217bef6aab85ccdf94ca77212be1f72
GET /followers.g?blogID=748972870649562597&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2NjY2NjYiByM1NTg4YWEqByNmZmZmZmYyByNjYzY2MDA6ByM2NjY2NjZCByM1NTg4YWFKByM5OTk5OTlSByM1NTg4YWFaC3RyYW5zcGFyZW50&pageSize=21&origin=http://starbigdowload.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.coKrc9A11Ng.O/d%3D1/rs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/m%3D__features__&bpli=1 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://starbigdowload.blogspot.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 30 Nov 2023 09:42:56 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 1550
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/adsense/domains/caf.js?abp=1
142.250.74.132 54 kB URL www.google.com/adsense/domains/caf.js?abp=1
IP 142.250.74.132:0
File type ASCII text, with very long lines (1888)
Hash 8a76c49bbeb49fa874cb415fe2b10d0c
76de9796dbe01e64d77fccd00d0b19cf382493b8
a1f85a8b9c0ae7e01a01780b44c447ebbadb5d856c6ff826e2cd9fe19f15135f
GET /adsense/domains/caf.js?abp=1 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www1.downsbrasil.net/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Type: text/javascript; charset=UTF-8
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui"
Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
Date: Thu, 30 Nov 2023 09:42:56 GMT
Expires: Thu, 30 Nov 2023 09:42:56 GMT
Cache-Control: private, max-age=3600
ETag: "3100330882123301848"
X-Content-Type-Options: nosniff
Link: <https://www.adsensecustomsearchads.com>; rel="preconnect"
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: sffe
X-XSS-Protection: 0
apis.google.com/js/platform.js
142.250.74.78 22 kB URL apis.google.com/js/platform.js
IP 142.250.74.78:0
File type ASCII text, with very long lines (2664)
Hash fd67324a3d81895bdf76b073089663b1
5abb1b0a36c645085e31830e6647faa790ad4e91
8eaa06f95fa0ac44c2c186f200874f2f3ebc3aaa92412f0d0c096f517d3581d1
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Cookie: NID=511=tOGN42ifBGxFmfP2LXkeM22l9SSTm7giAfirId9-kgrRBKfPBU8fLlJhc3ed0LD0tci6FMpAye8O1ZsCBpN6w37o61NddpGR5fWblTr2grhw7nfUfxNWO063HZe3DMGDrKPfxL0_ub7u3ssB1XL76twxCHHjVCVCQ2C6YPXaD2o
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 21930
date: Thu, 30 Nov 2023 09:42:56 GMT
expires: Thu, 30 Nov 2023 09:42:56 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "bccfddc1dce4fb76"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
c.parkingcrew.net/scripts/sale_form.js
185.53.178.30200 OK 761 B URL GET HTTP/1.1 c.parkingcrew.net/scripts/sale_form.js
IP 185.53.178.30:80
Requested by http://www1.downsbrasil.net/?backfill=0&domainname=0&searchbox=0&subid4=6568592037b9ef32f90087af&_xafvr=NjVmZDJjZjFmYjQ4ODcyY2ZiNDQ1NzI2OGNkNzY5NmQxMjUzOTc3MCw2NTY4NTkyMDRiZDY1
Hash 64f809e06446647e192fce8d1ec34e09
5b7ced07da42e205067afa88615317a277a4a82c
f52cbd664986ad7ed6e71c448e2d31d1a16463e4d9b7bca0c6be278649ccc4f3
GET /scripts/sale_form.js HTTP/1.1
Host: c.parkingcrew.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www1.downsbrasil.net/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 30 Nov 2023 09:42:56 GMT
Content-Type: application/javascript
Content-Length: 761
Connection: keep-alive
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
ETag: "5ebab1f0-2f9"
Accept-Ranges: bytes
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=gapi_iframes,gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs
142.250.74.78 46 kB URL apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=gapi_iframes,gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs
IP 142.250.74.78:0
File type ASCII text, with very long lines (1505)
Hash a5139ae5276fac825f580dd8b48d0f72
2820e165c330673129cebdc8e7cf806e1620c0a0
2170ad362c9ba9f7ff9b642d2a9d72a263fff1cd47de3664c55d6a7462c4cbc3
GET /_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=gapi_iframes,gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Cookie: NID=511=tOGN42ifBGxFmfP2LXkeM22l9SSTm7giAfirId9-kgrRBKfPBU8fLlJhc3ed0LD0tci6FMpAye8O1ZsCBpN6w37o61NddpGR5fWblTr2grhw7nfUfxNWO063HZe3DMGDrKPfxL0_ub7u3ssB1XL76twxCHHjVCVCQ2C6YPXaD2o
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 45499
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:42:49 GMT
expires: Fri, 29 Nov 2024 05:42:49 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 08 Nov 2023 22:37:21 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 14407
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
meuip.page/ads5.php
188.114.97.1 0 B IP 188.114.97.1:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /ads5.php HTTP/1.1
Host: meuip.page
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meuip.page/ads5.php
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 09:42:56 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/5.3.3
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3svIJF2mGPYRT6VVSN%2F%2BJazH0PRxwCRFoa6BEDQEr065KlxfQSleSJAQsNApSkkvCpiSHzhHsCkIqeKB4ql1wt4t1y0tn%2BFBZmrJAw1gR%2BLL60bjDHSWAkXnWNza"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e224ab3d9ab51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www1.downsbrasil.net/track.php?domain=downsbrasil.net&toggle=browserjs&uid=MTcwMTMzNzM3Ni4yOTMxOmM1Mjc1YTI2ZjRhYjhiMjAyN2NjMGYxOGZkZmI1YWFhYTQxNjdjMjkwNGI0ZDA2MDdmMWNhMmUxNGQ2MGRkNDI6NjU2ODU5MjA0NzkwZA%3D%3D
185.53.179.29 20 B URL www1.downsbrasil.net/track.php?domain=downsbrasil.net&toggle=browserjs&uid=MTcwMTMzNzM3Ni4yOTMxOmM1Mjc1YTI2ZjRhYjhiMjAyN2NjMGYxOGZkZmI1YWFhYTQxNjdjMjkwNGI0ZDA2MDdmMWNhMmUxNGQ2MGRkNDI6NjU2ODU5MjA0NzkwZA%3D%3D
IP 185.53.179.29:0
ASN #61969 Team Internet AG
File type gzip compressed data, max speed, from Unix\012- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /track.php?domain=downsbrasil.net&toggle=browserjs&uid=MTcwMTMzNzM3Ni4yOTMxOmM1Mjc1YTI2ZjRhYjhiMjAyN2NjMGYxOGZkZmI1YWFhYTQxNjdjMjkwNGI0ZDA2MDdmMWNhMmUxNGQ2MGRkNDI6NjU2ODU5MjA0NzkwZA%3D%3D HTTP/1.1
Host: www1.downsbrasil.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www1.downsbrasil.net/?backfill=0&domainname=0&searchbox=0&subid4=6568592037b9ef32f90087af
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 30 Nov 2023 09:42:56 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Custom-Track: browserjs
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip
ashoupsu.com/tag.min.js
139.45.197.238 26 kB IP 139.45.197.238:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 9e5776eb38c0fc1938551af48da681df
f9e680947df21ba15fa623a4faea75e888e3af64
4cf877fea21245f7ede988e65032ff8f3094b9d3b341c826df407c6bcc0f88ba
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /tag.min.js HTTP/1.1
Host: ashoupsu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meuip.page/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 09:42:56 GMT
content-type: text/javascript; charset=utf-8
content-length: 25606
content-encoding: br
x-trace-id: 175aa7b6766fab10a38391344a21703e
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
last-modified: Wed, 29 Nov 2023 09:54:50 GMT
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
www1.downsbrasil.net/ls.php?t=65685920&token=f4aafecba2dc5bcfe0f360b2943af392ec2c5d53
185.53.179.29 16 B URL www1.downsbrasil.net/ls.php?t=65685920&token=f4aafecba2dc5bcfe0f360b2943af392ec2c5d53
IP 185.53.179.29:0
ASN #61969 Team Internet AG
File type JSON data\012- , ASCII text, with no line terminators
Hash 7363e85fe9edee6f053a4b319588c086
a15e2127145548437173fc17f3e980e3f3dee2d0
c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97
GET /ls.php?t=65685920&token=f4aafecba2dc5bcfe0f360b2943af392ec2c5d53 HTTP/1.1
Host: www1.downsbrasil.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www1.downsbrasil.net/?backfill=0&domainname=0&searchbox=0&subid4=6568592037b9ef32f90087af
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 201 Created
Server: nginx
Date: Thu, 30 Nov 2023 09:42:56 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Log-Success: 65685920a1e0897b3a339808
Charset: utf-8
Access-Control-Allow-Origin:
Access-Control-Allow-Methods: POST, OPTIONS
Access-Control-Max-Age: 86400
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_eJg7HUZddt5BNuHy00n4PdGiC62XTUrF8k+YBNhFQc4wyxVXrlmR2+z76uLfVEZFe+g79FgTywQpZUys/J7oXg==
d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/bottom.png
54.230.241.34 3.4 kB URL d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/bottom.png
IP 54.230.241.34:0
File type PNG image data, 459 x 156, 8-bit colormap, non-interlaced\012- data
Hash 8f00618489c9024bc741a161effb2e32
7e3146cfd561806169d6201b01ccbe37a256dfc5
ee13da8e8d4bd49a7fdd595de382a3c7dbfef6f8555aeca5292c8c80da75f355
GET /themes/cleanPeppermintBlack_657d9013/img/bottom.png HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www1.downsbrasil.net/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 3359
Connection: keep-alive
Server: nginx
Date: Thu, 30 Nov 2023 00:42:04 GMT
Last-Modified: Thu, 23 Jun 2022 10:44:43 GMT
Accept-Ranges: bytes
ETag: "62b4441b-d1f"
X-Cache: Hit from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: paltIwVMgNu2DUcdboeOMkHn9W1ntXK8HblTpt3-D-NHsL3l24NLBw==
Age: 32453
status.thawte.com/
192.229.221.95 471 B IP 192.229.221.95:0
Hash f6b11603a5b64457f5d01ffd8a9264ec
43817b127c075639e6798a7a25b0cf0e8fb30c30
a9d5c88201d037360270d42586d23f82065216aaeb47e9b67635e82e450cc8ad
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=7200
Content-Type: application/ocsp-response
Date: Thu, 30 Nov 2023 09:42:57 GMT
Server: ECAcc (amb/6B35)
Content-Length: 471
www.google.com/afs/ads?adtest=off&psid=1167268112&pcsa=false&channel=000001%2C000003%2C000254%2Cbucket003&client=dp-teaminternet04_3ph&r=m&sc_status=0&hl=no&rpbu=http%3A%2F%2Fwww1.downsbrasil.net%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDN8fHx8fHw2NTY4NTkyMDQ3OGU1fHx8MTcwMTMzNzM3Ni4zMTA3fDI2M2Q4M2Q3NTgyNWU0YzAwMGFhOTM5YzJkOGRlMmJkYmE1OGZhODJ8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTURSZk0zQm98ZDgyZjM2MWZiZjFhMmNkYjk1Y2Y3NmRjNjczMTAzZDYzZWVlNTdiZHwwfDB8fDB8fHwwfDB8VzEwPXx8MHxleUp6ZFdKcFpEUWlPaUkyTlRZNE5Ua3lNRE0zWWpsbFpqTXlaamt3TURnM1lXWWlmUT09fGY0YWFmZWNiYTJkYzViY2ZlMGYzNjBiMjk0M2FmMzkyZWMyYzVkNTN8MHxkcC10ZWFtaW50ZXJuZXQwNF8zcGh8MHwwfA%253D%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2823696925907968&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301157&format=r3%7Cs&nocache=7601701337381323&num=0&output=afd_ads&domain_name=www1.downsbrasil.net&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1701337381326&u_w=1280&u_h=1024&biw=-12245933&bih=-12245933&isw=0&ish=0&psw=0&psh=465&frm=2&cl=579967862&uio=--&cont=tc&jsid=caf&jsv=579967862&rurl=http%3A%2F%2Fwww1.downsbrasil.net%2F%3Fbackfill%3D0%26domainname%3D0%26searchbox%3D0%26subid4%3D6568592037b9ef32f90087af&referer=http%3A%2F%2Fstarbigdowload.blogspot.com%2F
142.250.74.132 3.1 kB URL www.google.com/afs/ads?adtest=off&psid=1167268112&pcsa=false&channel=000001%2C000003%2C000254%2Cbucket003&client=dp-teaminternet04_3ph&r=m&sc_status=0&hl=no&rpbu=http%3A%2F%2Fwww1.downsbrasil.net%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDN8fHx8fHw2NTY4NTkyMDQ3OGU1fHx8MTcwMTMzNzM3Ni4zMTA3fDI2M2Q4M2Q3NTgyNWU0YzAwMGFhOTM5YzJkOGRlMmJkYmE1OGZhODJ8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTURSZk0zQm98ZDgyZjM2MWZiZjFhMmNkYjk1Y2Y3NmRjNjczMTAzZDYzZWVlNTdiZHwwfDB8fDB8fHwwfDB8VzEwPXx8MHxleUp6ZFdKcFpEUWlPaUkyTlRZNE5Ua3lNRE0zWWpsbFpqTXlaamt3TURnM1lXWWlmUT09fGY0YWFmZWNiYTJkYzViY2ZlMGYzNjBiMjk0M2FmMzkyZWMyYzVkNTN8MHxkcC10ZWFtaW50ZXJuZXQwNF8zcGh8MHwwfA%253D%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2823696925907968&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301157&format=r3%7Cs&nocache=7601701337381323&num=0&output=afd_ads&domain_name=www1.downsbrasil.net&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1701337381326&u_w=1280&u_h=1024&biw=-12245933&bih=-12245933&isw=0&ish=0&psw=0&psh=465&frm=2&cl=579967862&uio=--&cont=tc&jsid=caf&jsv=579967862&rurl=http%3A%2F%2Fwww1.downsbrasil.net%2F%3Fbackfill%3D0%26domainname%3D0%26searchbox%3D0%26subid4%3D6568592037b9ef32f90087af&referer=http%3A%2F%2Fstarbigdowload.blogspot.com%2F
IP 142.250.74.132:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (14412)
Hash ee47121f6c361445be03dba6d8aa4a19
76b04612ed226311b77342451b5ef677e185b524
44ff8222b684f90bbee406bd11f788f0f3260f19a3fc0e9b4561a446d34bd766
GET /afs/ads?adtest=off&psid=1167268112&pcsa=false&channel=000001%2C000003%2C000254%2Cbucket003&client=dp-teaminternet04_3ph&r=m&sc_status=0&hl=no&rpbu=http%3A%2F%2Fwww1.downsbrasil.net%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDN8fHx8fHw2NTY4NTkyMDQ3OGU1fHx8MTcwMTMzNzM3Ni4zMTA3fDI2M2Q4M2Q3NTgyNWU0YzAwMGFhOTM5YzJkOGRlMmJkYmE1OGZhODJ8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTURSZk0zQm98ZDgyZjM2MWZiZjFhMmNkYjk1Y2Y3NmRjNjczMTAzZDYzZWVlNTdiZHwwfDB8fDB8fHwwfDB8VzEwPXx8MHxleUp6ZFdKcFpEUWlPaUkyTlRZNE5Ua3lNRE0zWWpsbFpqTXlaamt3TURnM1lXWWlmUT09fGY0YWFmZWNiYTJkYzViY2ZlMGYzNjBiMjk0M2FmMzkyZWMyYzVkNTN8MHxkcC10ZWFtaW50ZXJuZXQwNF8zcGh8MHwwfA%253D%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2823696925907968&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301157&format=r3%7Cs&nocache=7601701337381323&num=0&output=afd_ads&domain_name=www1.downsbrasil.net&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1701337381326&u_w=1280&u_h=1024&biw=-12245933&bih=-12245933&isw=0&ish=0&psw=0&psh=465&frm=2&cl=579967862&uio=--&cont=tc&jsid=caf&jsv=579967862&rurl=http%3A%2F%2Fwww1.downsbrasil.net%2F%3Fbackfill%3D0%26domainname%3D0%26searchbox%3D0%26subid4%3D6568592037b9ef32f90087af&referer=http%3A%2F%2Fstarbigdowload.blogspot.com%2F HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www1.downsbrasil.net/
Cookie: NID=511=tOGN42ifBGxFmfP2LXkeM22l9SSTm7giAfirId9-kgrRBKfPBU8fLlJhc3ed0LD0tci6FMpAye8O1ZsCBpN6w37o61NddpGR5fWblTr2grhw7nfUfxNWO063HZe3DMGDrKPfxL0_ub7u3ssB1XL76twxCHHjVCVCQ2C6YPXaD2o
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Thu, 30 Nov 2023 09:42:57 GMT
expires: Thu, 30 Nov 2023 09:42:57 GMT
cache-control: private, max-age=3600
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-5k3afvpymFO0bk9hMb6zew' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-encoding: br
server: gws
content-length: 3063
x-xss-protection: 0
set-cookie: CONSENT=PENDING+897; expires=Sat, 29-Nov-2025 09:42:57 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
my.rtmark.net/gid.js?userId=5327c8ee073342e895bf0b39b7965aa7
139.45.195.8 65 B URL my.rtmark.net/gid.js?userId=5327c8ee073342e895bf0b39b7965aa7
IP 139.45.195.8:0
File type JSON data\012- , ASCII text
Hash 2c9153cdb3b2f057db42bce56e8f62e7
d260a728c07bee2edd61aca6fc2e52e4f860c5f4
4860cfaec80abf607eaff0a3c9fd4e47dc898d5bffabe87a98010e40af65658f
GET /gid.js?userId=5327c8ee073342e895bf0b39b7965aa7 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://meuip.page
DNT: 1
Connection: keep-alive
Referer: https://meuip.page/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 09:42:57 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://meuip.page
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=5327c8ee073342e895bf0b39b7965aa7; expires=Fri, 29 Nov 2024 09:42:57 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
www1.downsbrasil.net/?backfill=0&domainname=0&searchbox=0&subid4=6568592037b9ef32f90087af&_xafvr=NjVmZDJjZjFmYjQ4ODcyY2ZiNDQ1NzI2OGNkNzY5NmQxMjUzOTc3MCw2NTY4NTkyMDRiZDY1
185.53.179.29 2.5 kB URL User Request GET www1.downsbrasil.net/?backfill=0&domainname=0&searchbox=0&subid4=6568592037b9ef32f90087af&_xafvr=NjVmZDJjZjFmYjQ4ODcyY2ZiNDQ1NzI2OGNkNzY5NmQxMjUzOTc3MCw2NTY4NTkyMDRiZDY1
IP 185.53.179.29:0
ASN #61969 Team Internet AG
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash ad65434491961349486fd3032fd5ef21
13ba1210ca1df092469e9caca740ee7eab91c021
7075c56938c0ae6350f5784daed7a19118f1498d5eea28ae44213d8ca59c1d81
GET /?backfill=0&domainname=0&searchbox=0&subid4=6568592037b9ef32f90087af&_xafvr=NjVmZDJjZjFmYjQ4ODcyY2ZiNDQ1NzI2OGNkNzY5NmQxMjUzOTc3MCw2NTY4NTkyMDRiZDY1 HTTP/1.1
Host: www1.downsbrasil.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www1.downsbrasil.net/?backfill=0&domainname=0&searchbox=0&subid4=6568592037b9ef32f90087af
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 30 Nov 2023 09:42:57 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Redirect: skenzo
X-Buckets: bucket003
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_KnvgfBV8hXHCdMqAKmBVwnUpYIJPvuKEyi7iCIk0bFtEB5lZhPQu6kf3KM6Qvtns8phnWXmrj1bdbK/karepPA==
X-Template: tpl_CleanPeppermintBlack_twoclick
X-Language: norwegian
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Domain: downsbrasil.net
X-Subdomain: www1
Content-Encoding: gzip
c.parkingcrew.net/scripts/sale_form.js
185.53.178.30200 OK 761 B URL GET HTTP/1.1 c.parkingcrew.net/scripts/sale_form.js
IP 185.53.178.30:80
Requested by http://www1.downsbrasil.net/?backfill=0&domainname=0&searchbox=0&subid4=6568592037b9ef32f90087af&_xafvr=NjVmZDJjZjFmYjQ4ODcyY2ZiNDQ1NzI2OGNkNzY5NmQxMjUzOTc3MCw2NTY4NTkyMDRiZDY1
Hash 64f809e06446647e192fce8d1ec34e09
5b7ced07da42e205067afa88615317a277a4a82c
f52cbd664986ad7ed6e71c448e2d31d1a16463e4d9b7bca0c6be278649ccc4f3
GET /scripts/sale_form.js HTTP/1.1
Host: c.parkingcrew.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www1.downsbrasil.net/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 30 Nov 2023 09:42:57 GMT
Content-Type: application/javascript
Content-Length: 761
Connection: keep-alive
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
ETag: "5ebab1f0-2f9"
Accept-Ranges: bytes
www1.downsbrasil.net/favicon.ico
185.53.179.29200 OK 0 B URL GET HTTP/1.1 www1.downsbrasil.net/favicon.ico
IP 185.53.179.29:80
ASN #61969 Team Internet AG
Requested by http://www1.downsbrasil.net/?backfill=0&domainname=0&searchbox=0&subid4=6568592037b9ef32f90087af&_xafvr=NjVmZDJjZjFmYjQ4ODcyY2ZiNDQ1NzI2OGNkNzY5NmQxMjUzOTc3MCw2NTY4NTkyMDRiZDY1
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www1.downsbrasil.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www1.downsbrasil.net/?backfill=0&domainname=0&searchbox=0&subid4=6568592037b9ef32f90087af&_xafvr=NjVmZDJjZjFmYjQ4ODcyY2ZiNDQ1NzI2OGNkNzY5NmQxMjUzOTc3MCw2NTY4NTkyMDRiZDY1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 30 Nov 2023 09:42:57 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
ETag: "5ebab1f0-0"
Accept-Ranges: bytes
ifdnzact.com/?dn=downsbrasil.net&pid=9PO755G95
208.91.196.46200 OK 27 kB URL GET HTTP/1.1 ifdnzact.com/?dn=downsbrasil.net&pid=9PO755G95
IP 208.91.196.46:80
ASN #40034 CONFLUENCE-NETWORK-INC
Requested by http://www1.downsbrasil.net/?backfill=0&domainname=0&searchbox=0&subid4=6568592037b9ef32f90087af&_xafvr=NjVmZDJjZjFmYjQ4ODcyY2ZiNDQ1NzI2OGNkNzY5NmQxMjUzOTc3MCw2NTY4NTkyMDRiZDY1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (10742), with CRLF, LF line terminators
Hash 9337fad298a398c570b5fc8a86083c7d
d73ee66a180829ce955880bce24a59516f6d22c3
40b03a538b8cfe6c5205f372d42fb0296c936143637bee7e460bc31c678660a2
GET /?dn=downsbrasil.net&pid=9PO755G95 HTTP/1.1
Host: ifdnzact.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www1.downsbrasil.net/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 30 Nov 2023 09:42:58 GMT
Server: Apache
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_cmdmhl81WLeRp/E++Bg0sRpRORqS3Esqu5Uc9iKqTahgKBU0EHUmlJsDE8jFCRKN4EeC+Xs0w095iw0K19X+GA==
Keep-Alive: timeout=5, max=127
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
a.delivery.consentmanager.net/delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Ddownsbrasil.net%26pid%3D9PO755G95&&l=en&o=1701337383233
87.230.98.74200 OK 588 B URL GET HTTP/1.1 a.delivery.consentmanager.net/delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Ddownsbrasil.net%26pid%3D9PO755G95&&l=en&o=1701337383233
IP 87.230.98.74:443
ASN #61157 PlusServer GmbH
Requested by http://ifdnzact.com/?dn=downsbrasil.net&pid=9PO755G95
Certificate IssuerLet's Encrypt
Subjecta.delivery.consentmanager.net
Fingerprint44:49:A8:C0:AF:F7:D9:6E:D0:B5:35:77:3B:05:89:CC:80:9A:8D:50
ValidityWed, 15 Nov 2023 00:31:04 GMT - Tue, 13 Feb 2024 00:31:03 GMT
File type ASCII text, with CRLF line terminators
Hash c509a3debdd31e51776817a1b94ce864
b8b670a7fc6d1e6393f48ca307fd38b84b08ab15
3b2a8abd6358e51240277ba6a92ae02e5d855cf7dc6fb422d5336a9be67fcd46
GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Ddownsbrasil.net%26pid%3D9PO755G95&&l=en&o=1701337383233 HTTP/1.1
Host: a.delivery.consentmanager.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ifdnzact.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 30 Nov 2023 09:42:58 GMT
Cache-Control: no-store, no-cache, must-revalidate
Edge-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Pragma: no-cache
Access-Control-Allow-Origin: *
X-XSS-Protection: 0
Last-Modified: Thu, 30 Nov 2023 09:42:58 GMT
Transfer-Encoding: chunked
Content-Type: text/javascript; charset=utf-8
Content-Encoding: gzip
ifdnzact.com/px.js?ch=1
208.91.196.46200 OK 346 B IP 208.91.196.46:80
ASN #40034 CONFLUENCE-NETWORK-INC
Requested by http://ifdnzact.com/?dn=downsbrasil.net&pid=9PO755G95
File type ASCII text, with very long lines (346), with no line terminators
Hash f84f931c0dd37448e03f0dabf4e4ca9f
9c2c50edcf576453ccc07bf65668bd23c76e8663
5c1d5fd46a88611c31ecbb8ffc1142a7e74ec7fb7d72bd3891131c880ef3f584
GET /px.js?ch=1 HTTP/1.1
Host: ifdnzact.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ifdnzact.com/?dn=downsbrasil.net&pid=9PO755G95
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 30 Nov 2023 09:42:58 GMT
Server: Apache
Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT
ETag: "15a-5b952a63b81f1"
Accept-Ranges: bytes
Content-Length: 346
Keep-Alive: timeout=5, max=128
Connection: Keep-Alive
Content-Type: application/javascript
a.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=1&id=68884&o=1701337378&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Ddownsbrasil.net%26pid%3D9PO755G95&&l=en&odw=0&dlt=1&l=en
87.230.98.74200 OK 590 B URL GET HTTP/1.1 a.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=1&id=68884&o=1701337378&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Ddownsbrasil.net%26pid%3D9PO755G95&&l=en&odw=0&dlt=1&l=en
IP 87.230.98.74:443
ASN #61157 PlusServer GmbH
Requested by http://ifdnzact.com/?dn=downsbrasil.net&pid=9PO755G95
Certificate IssuerLet's Encrypt
Subjecta.delivery.consentmanager.net
Fingerprint44:49:A8:C0:AF:F7:D9:6E:D0:B5:35:77:3B:05:89:CC:80:9A:8D:50
ValidityWed, 15 Nov 2023 00:31:04 GMT - Tue, 13 Feb 2024 00:31:03 GMT
File type ASCII text, with CRLF line terminators
Hash eeb7b38954bf0a1b04d7bb77f99754fc
f8ecfad5fcc08fca868c9a65ce147822fbcc3148
77c77521fb49043f12106483bc95543deae0486b97df0f81a6ef72a71bbe3b74
GET /delivery/cmp.php?__cmpcc=1&id=68884&o=1701337378&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Ddownsbrasil.net%26pid%3D9PO755G95&&l=en&odw=0&dlt=1&l=en HTTP/1.1
Host: a.delivery.consentmanager.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ifdnzact.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 30 Nov 2023 09:42:58 GMT
Cache-Control: no-store, no-cache, must-revalidate
Edge-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Pragma: no-cache
Access-Control-Allow-Origin: *
X-XSS-Protection: 0
Last-Modified: Thu, 30 Nov 2023 09:42:58 GMT
Transfer-Encoding: chunked
Content-Type: text/javascript; charset=utf-8
Content-Encoding: gzip
ifdnzact.com/px.js?ch=2
208.91.196.46200 OK 346 B IP 208.91.196.46:80
ASN #40034 CONFLUENCE-NETWORK-INC
Requested by http://ifdnzact.com/?dn=downsbrasil.net&pid=9PO755G95
File type ASCII text, with very long lines (346), with no line terminators
Hash f84f931c0dd37448e03f0dabf4e4ca9f
9c2c50edcf576453ccc07bf65668bd23c76e8663
5c1d5fd46a88611c31ecbb8ffc1142a7e74ec7fb7d72bd3891131c880ef3f584
GET /px.js?ch=2 HTTP/1.1
Host: ifdnzact.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ifdnzact.com/?dn=downsbrasil.net&pid=9PO755G95
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 30 Nov 2023 09:42:58 GMT
Server: Apache
Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT
ETag: "15a-5b952a63b81f1"
Accept-Ranges: bytes
Content-Length: 346
Keep-Alive: timeout=5, max=126
Connection: Keep-Alive
Content-Type: application/javascript
www.google.com/adsense/domains/caf.js
142.250.74.132 63 kB URL www.google.com/adsense/domains/caf.js
IP 142.250.74.132:0
File type gzip compressed data, max compression\012- data
Hash 8773b0ebab379e65c66505217f9cdccd
8a6a49b51578424f14de5a3a0554276328d2018d
4f6c1f355e69b954553df4496cafaa7c853a105faf12c1f149913416e596bdeb
GET /adsense/domains/caf.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
DNT: 1
Connection: keep-alive
Cookie: NID=511=tOGN42ifBGxFmfP2LXkeM22l9SSTm7giAfirId9-kgrRBKfPBU8fLlJhc3ed0LD0tci6FMpAye8O1ZsCBpN6w37o61NddpGR5fWblTr2grhw7nfUfxNWO063HZe3DMGDrKPfxL0_ub7u3ssB1XL76twxCHHjVCVCQ2C6YPXaD2o
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Thu, 30 Nov 2023 09:42:57 GMT
expires: Thu, 30 Nov 2023 09:42:57 GMT
cache-control: private, max-age=3600
etag: "15592410222595928350"
x-content-type-options: nosniff
link: <https://www.adsensecustomsearchads.com>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
a.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=2&id=68884&o=1701337378&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Ddownsbrasil.net%26pid%3D9PO755G95&&l=en&odw=0&dlt=1&l=en
87.230.98.74200 OK 590 B URL GET HTTP/1.1 a.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=2&id=68884&o=1701337378&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Ddownsbrasil.net%26pid%3D9PO755G95&&l=en&odw=0&dlt=1&l=en
IP 87.230.98.74:443
ASN #61157 PlusServer GmbH
Requested by http://ifdnzact.com/?dn=downsbrasil.net&pid=9PO755G95
Certificate IssuerLet's Encrypt
Subjecta.delivery.consentmanager.net
Fingerprint44:49:A8:C0:AF:F7:D9:6E:D0:B5:35:77:3B:05:89:CC:80:9A:8D:50
ValidityWed, 15 Nov 2023 00:31:04 GMT - Tue, 13 Feb 2024 00:31:03 GMT
File type ASCII text, with CRLF line terminators
Hash 10ed44013dcc9634f4d2c641eda96f29
0e1a404a34944f9db748bb066f2b1099aeb24eff
7c508d23651f24090939976991670b8b361382292f6556a56bf540b9ea488f8e
GET /delivery/cmp.php?__cmpcc=2&id=68884&o=1701337378&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Ddownsbrasil.net%26pid%3D9PO755G95&&l=en&odw=0&dlt=1&l=en HTTP/1.1
Host: a.delivery.consentmanager.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ifdnzact.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 30 Nov 2023 09:42:59 GMT
Cache-Control: no-store, no-cache, must-revalidate
Edge-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Pragma: no-cache
Access-Control-Allow-Origin: *
X-XSS-Protection: 0
Last-Modified: Thu, 30 Nov 2023 09:42:59 GMT
Transfer-Encoding: chunked
Content-Type: text/javascript; charset=utf-8
Content-Encoding: gzip
a.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=3&id=68884&o=1701337379&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Ddownsbrasil.net%26pid%3D9PO755G95&&l=en&odw=0&dlt=1&l=en
87.230.98.74200 OK 14 kB URL GET HTTP/1.1 a.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=3&id=68884&o=1701337379&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Ddownsbrasil.net%26pid%3D9PO755G95&&l=en&odw=0&dlt=1&l=en
IP 87.230.98.74:443
ASN #61157 PlusServer GmbH
Requested by http://ifdnzact.com/?dn=downsbrasil.net&pid=9PO755G95
Certificate IssuerLet's Encrypt
Subjecta.delivery.consentmanager.net
Fingerprint44:49:A8:C0:AF:F7:D9:6E:D0:B5:35:77:3B:05:89:CC:80:9A:8D:50
ValidityWed, 15 Nov 2023 00:31:04 GMT - Tue, 13 Feb 2024 00:31:03 GMT
File type ASCII text, with very long lines (45611), with CRLF, LF line terminators
Hash 127cad7a34bcbdb5f8714c2a7decc6f7
dfc825aa66545cb686a467678e28dbbeae07194d
afff74bf747b23485e22e0fd20757ad528d6c35ba5ba86d69f4a7afbb6476b25
GET /delivery/cmp.php?__cmpcc=3&id=68884&o=1701337379&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Ddownsbrasil.net%26pid%3D9PO755G95&&l=en&odw=0&dlt=1&l=en HTTP/1.1
Host: a.delivery.consentmanager.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ifdnzact.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 30 Nov 2023 09:42:59 GMT
Cache-Control: no-store, no-cache, must-revalidate
Edge-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Pragma: no-cache
Access-Control-Allow-Origin: *
X-XSS-Protection: 0
Last-Modified: Thu, 30 Nov 2023 09:42:59 GMT
Transfer-Encoding: chunked
Content-Type: text/javascript; charset=utf-8
Content-Encoding: gzip
i3.cdn-image.com/__media__/pics/28905/arrrow.png
208.91.196.253200 OK 283 B URL GET HTTP/1.1 i3.cdn-image.com/__media__/pics/28905/arrrow.png
IP 208.91.196.253:80
ASN #40034 CONFLUENCE-NETWORK-INC
Requested by http://ifdnzact.com/?dn=downsbrasil.net&pid=9PO755G95
File type PNG image data, 17 x 27, 8-bit colormap, non-interlaced\012- data
Hash 80d42c82a6c37da90210fd60a2f36128
554ba7c84d2a27ecf3b1f29d03e62101936b54d8
a1626e2d9160a0890a0a8d6e3af9e7095d68a24f9fb5ac8a166000c9a2581e10
GET /__media__/pics/28905/arrrow.png HTTP/1.1
Host: i3.cdn-image.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ifdnzact.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 30 Nov 2023 09:42:59 GMT
Content-Type: image/png
Content-Length: 283
Last-Modified: Tue, 04 Jan 2022 14:44:27 GMT
Connection: keep-alive
ETag: "61d45d4b-11b"
Expires: Thu, 14 Dec 2023 09:42:59 GMT
Cache-Control: max-age=1209600, public
Accept-Ranges: bytes
i3.cdn-image.com/__media__/pics/29590/bg1.png
208.91.196.253200 OK 18 kB URL GET HTTP/1.1 i3.cdn-image.com/__media__/pics/29590/bg1.png
IP 208.91.196.253:80
ASN #40034 CONFLUENCE-NETWORK-INC
Requested by http://ifdnzact.com/?dn=downsbrasil.net&pid=9PO755G95
File type PNG image data, 1730 x 988, 4-bit colormap, non-interlaced\012- data
Hash 825ccd29ac102fcadaf92b2343d5917b
24472e766cfac5b82a73b219796556a0a3702bd6
0878fb2875c0ad852de8fb3e8f443afdf3064890f1443b3feccc274382f913cd
GET /__media__/pics/29590/bg1.png HTTP/1.1
Host: i3.cdn-image.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ifdnzact.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 30 Nov 2023 09:42:59 GMT
Content-Type: image/png
Content-Length: 17986
Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT
Connection: keep-alive
ETag: "6380b223-4642"
Expires: Thu, 14 Dec 2023 09:42:59 GMT
Cache-Control: max-age=1209600, public
Accept-Ranges: bytes
i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
208.91.196.253200 OK 17 kB URL GET HTTP/1.1 i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
IP 208.91.196.253:80
ASN #40034 CONFLUENCE-NETWORK-INC
Requested by http://ifdnzact.com/?dn=downsbrasil.net&pid=9PO755G95
File type Web Open Font Format, TrueType, length 17312, version 2.1\012- data
Hash bebe201d813feaad85a3e66607d0da3a
28b049502afa8e9db5340c1a92400591b39870e8
58bb75322beb862803b0d156e1a1d01fb1e7fde82ee93c929b08bf5aea9fc55b
GET /__media__/fonts/montserrat-bold/montserrat-bold.woff HTTP/1.1
Host: i3.cdn-image.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://ifdnzact.com
DNT: 1
Connection: keep-alive
Referer: http://ifdnzact.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 30 Nov 2023 09:42:59 GMT
Content-Type: application/font-woff
Content-Length: 17312
Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT
Connection: keep-alive
ETag: "600809b7-43a0"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=27313&t=pv.d_ncs.d_ancs.d_bncs.cp.d_ds.cf.cfx.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Ddownsbrasil.net%26pid%3D9PO755G95&o=1701337384334&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=16&dv=28&
87.230.98.74200 OK 43 B URL GET HTTP/1.1 a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=27313&t=pv.d_ncs.d_ancs.d_bncs.cp.d_ds.cf.cfx.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Ddownsbrasil.net%26pid%3D9PO755G95&o=1701337384334&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=16&dv=28&
IP 87.230.98.74:443
ASN #61157 PlusServer GmbH
Requested by http://ifdnzact.com/?dn=downsbrasil.net&pid=9PO755G95
Certificate IssuerLet's Encrypt
Subjecta.delivery.consentmanager.net
Fingerprint44:49:A8:C0:AF:F7:D9:6E:D0:B5:35:77:3B:05:89:CC:80:9A:8D:50
ValidityWed, 15 Nov 2023 00:31:04 GMT - Tue, 13 Feb 2024 00:31:03 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 6f81c41597d3f5a336f458822cc0c32a
8cd77a54b38f1fb376b45af2eaab8f5982523b8d
5704a2e9f2f7ce43a79f9b407f1aedcfd50223cbe8bd2f71ff8c5c819e469cbc
GET /delivery/info/?id=68884&did=1&cfdid=27313&t=pv.d_ncs.d_ancs.d_bncs.cp.d_ds.cf.cfx.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Ddownsbrasil.net%26pid%3D9PO755G95&o=1701337384334&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=16&dv=28& HTTP/1.1
Host: a.delivery.consentmanager.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ifdnzact.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 30 Nov 2023 09:42:59 GMT
Cache-Control: no-store, no-cache, must-revalidate
Edge-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Pragma: no-cache
Access-Control-Allow-Origin: *
X-XSS-Protection: 0
Last-Modified: Thu, 30 Nov 2023 09:42:59 GMT
Content-Length: 43
Content-Type: image/gif
cdn.consentmanager.net/delivery/js/cmp_en.min.js
185.76.9.21200 OK 106 kB URL GET HTTP/2 cdn.consentmanager.net/delivery/js/cmp_en.min.js
IP 185.76.9.21:443
ASN #60068 Datacamp Limited
Requested by http://ifdnzact.com/?dn=downsbrasil.net&pid=9PO755G95
Certificate IssuerLet's Encrypt
Subject1376624012.rsc.cdn77.org
Fingerprint40:27:9C:9D:30:35:40:79:7E:8D:6A:C2:06:C0:6F:B7:C6:8E:6A:2F
ValidityMon, 13 Nov 2023 17:00:32 GMT - Sun, 11 Feb 2024 17:00:31 GMT
File type gzip compressed data, from Unix\012- data
Size 106 kB (106062 bytes)
Hash 15862733486350924d1c8dc42dadb921
9582dbf9372c577499dcdba24d863a1978325a3d
c40b0c0982c875b7412bce818394cf79fdb2ade20a964329a572e539abbadfb2
GET /delivery/js/cmp_en.min.js HTTP/1.1
Host: cdn.consentmanager.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ifdnzact.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 09:42:58 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 28 Nov 2023 20:41:16 GMT
etag: W/"647c2-60b3c70a3f300"
cache-control: max-age=86400
expires: Wed, 29 Nov 2023 20:44:33 GMT
edge-control: max-age=86400
x-77-nzt: EwwBuUwJFAH3IrQAAAgBuUwKCQFhCAHUZjgJAWE
x-77-nzt-ray: af585630b0d3013722596865e446af35
x-77-cache: HIT
content-encoding: gzip
server: CDN77-Turbo
x-accel-expires: @1701377664
x-accel-date: 1701291264
x-cache-lb: MISS, HIT
x-age-lb: 46114
x-77-pop: stockholmSE
x-77-age: 46114
X-Firefox-Spdy: h2
cdn.consentmanager.net/delivery/whitelabel/cmplogo.svg
185.76.9.21200 OK 4.2 kB URL GET HTTP/2 cdn.consentmanager.net/delivery/whitelabel/cmplogo.svg
IP 185.76.9.21:443
ASN #60068 Datacamp Limited
Requested by http://ifdnzact.com/?dn=downsbrasil.net&pid=9PO755G95
Certificate IssuerLet's Encrypt
Subject1376624012.rsc.cdn77.org
Fingerprint40:27:9C:9D:30:35:40:79:7E:8D:6A:C2:06:C0:6F:B7:C6:8E:6A:2F
ValidityMon, 13 Nov 2023 17:00:32 GMT - Sun, 11 Feb 2024 17:00:31 GMT
File type SVG Scalable Vector Graphics image\012- XML document, ASCII text, with very long lines (4425), with no line terminators
Hash 46d40c431f8e14f71ab8f2f31eee942b
4f2140ab124f17c65f4a1d7998301b4747d1f87b
042c930c16842f0c1a14d5c16d23429d075c1ebdd16cad3ddd6f0d94ab0ae0ae
GET /delivery/whitelabel/cmplogo.svg HTTP/1.1
Host: cdn.consentmanager.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ifdnzact.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 09:43:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Wed, 03 May 2023 16:01:17 GMT
etag: W/"104c-5facc2a822d40"
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 20:12:57 GMT
x-77-nzt: EwwBuUwJFAH3Tg8CAAwBuUwKCQH3CAAAAAwBJRPCKAH3BQAAAA
x-77-nzt-ray: af585630b0d3013724596865e43c6b26
x-accel-expires: @1732738377
x-accel-date: 1701202390
x-77-cache: HIT
x-77-age: 135003
content-encoding: gzip
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 8, 134990
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
208.91.196.253200 OK 17 kB URL GET HTTP/1.1 i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
IP 208.91.196.253:80
ASN #40034 CONFLUENCE-NETWORK-INC
Requested by http://ifdnzact.com/?dn=downsbrasil.net&pid=9PO755G95
File type Web Open Font Format, TrueType, length 17264, version 2.1\012- data
Hash a43b107861b42ce1335e41e43d4e4d00
99bdb1cec4a68ebe29249c46fefefb6880d009e5
a6542dc92d71eb412bac89d8fb06c70f15be74a64b1b4ef1633288b78f4f2ff2
GET /__media__/fonts/montserrat-regular/montserrat-regular.woff HTTP/1.1
Host: i3.cdn-image.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://ifdnzact.com
DNT: 1
Connection: keep-alive
Referer: http://ifdnzact.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 30 Nov 2023 09:42:59 GMT
Content-Type: application/font-woff
Content-Length: 17264
Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT
Connection: keep-alive
ETag: "600809b7-4370"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
i3.cdn-image.com/__media__/js/min.js?v2.3
208.91.196.253200 OK 8.4 kB URL GET HTTP/1.1 i3.cdn-image.com/__media__/js/min.js?v2.3
IP 208.91.196.253:80
ASN #40034 CONFLUENCE-NETWORK-INC
Requested by http://ifdnzact.com/?dn=downsbrasil.net&pid=9PO755G95
File type ASCII text, with very long lines (8630), with no line terminators
Hash a0d3b2dd604ba4b71d9859d9fdde83ff
4890694b8841b832a985ee3b19a6d2f5919ca254
cfb9ef92e43df0ab3c6ceafefabe1908a736c4a8c2311dc5c1996fe8db2ac7cf
GET /__media__/js/min.js?v2.3 HTTP/1.1
Host: i3.cdn-image.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ifdnzact.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 30 Nov 2023 09:42:59 GMT
Content-Type: application/javascript
Content-Length: 8435
Last-Modified: Thu, 16 Feb 2023 20:41:24 GMT
Connection: keep-alive
ETag: "63ee94f4-20f3"
Expires: Thu, 14 Dec 2023 09:42:59 GMT
Cache-Control: max-age=1209600, public
Accept-Ranges: bytes
cdn.consentmanager.net/delivery/recall/logos/68884
185.76.9.21301 Moved Permanently 4.2 kB URL GET HTTP/2 cdn.consentmanager.net/delivery/recall/logos/68884
IP 185.76.9.21:443
ASN #60068 Datacamp Limited
Requested by http://ifdnzact.com/?dn=downsbrasil.net&pid=9PO755G95
Certificate IssuerLet's Encrypt
Subject1376624012.rsc.cdn77.org
Fingerprint40:27:9C:9D:30:35:40:79:7E:8D:6A:C2:06:C0:6F:B7:C6:8E:6A:2F
ValidityMon, 13 Nov 2023 17:00:32 GMT - Sun, 11 Feb 2024 17:00:31 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /delivery/recall/logos/68884 HTTP/1.1
Host: cdn.consentmanager.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ifdnzact.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Thu, 30 Nov 2023 09:42:59 GMT
content-type: text/javascript; charset=utf-8
expires: Thu, 30 Nov 2023 20:13:05 GMT
cache-control: public, max-age=86400
edge-control: public, max-age=86400
location: /delivery/whitelabel/cmplogo.svg
x-77-nzt: EwwBuUwJFAH3wL0AAAwBuUwKAQH3EgAAAAgB1GY4nAFB
x-77-nzt-ray: af585630b0d30137235968656f01e12a
x-77-cache: HIT
x-accel-expires: @1701375185
x-accel-date: 1701288803
x-77-age: 48594
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 18, 48576
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
cdn.consentmanager.net/delivery/customdata/bV8xLndfNjg4ODQucl9HRFBSLmxfZW4uZF8yNjQxNS54XzI4LnYucC50XzI2NDE1Lnh0XzI4.js
185.76.9.21200 OK 72 kB URL GET HTTP/2 cdn.consentmanager.net/delivery/customdata/bV8xLndfNjg4ODQucl9HRFBSLmxfZW4uZF8yNjQxNS54XzI4LnYucC50XzI2NDE1Lnh0XzI4.js
IP 185.76.9.21:443
ASN #60068 Datacamp Limited
Requested by http://ifdnzact.com/?dn=downsbrasil.net&pid=9PO755G95
Certificate IssuerLet's Encrypt
Subject1376624012.rsc.cdn77.org
Fingerprint40:27:9C:9D:30:35:40:79:7E:8D:6A:C2:06:C0:6F:B7:C6:8E:6A:2F
ValidityMon, 13 Nov 2023 17:00:32 GMT - Sun, 11 Feb 2024 17:00:31 GMT
File type ASCII text, with very long lines (41766)
Hash b1443f606c44cd759486074830775d3c
11043f465a5fdcc1292f1127aa81d7302c62a651
41d942361f38b705c882957b1b4705363aac4889347a0f283de907786a79ee80
GET /delivery/customdata/bV8xLndfNjg4ODQucl9HRFBSLmxfZW4uZF8yNjQxNS54XzI4LnYucC50XzI2NDE1Lnh0XzI4.js HTTP/1.1
Host: cdn.consentmanager.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ifdnzact.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 09:42:59 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
x-xss-protection: 0
expires: Thu, 30 Nov 2023 09:45:56 GMT
cache-control: public, max-age=1800
edge-control: public, max-age=1800
last-modified: Thu, 30 Nov 2023 09:15:56 GMT
x-77-nzt: EwwBuUwJFAH3IgYAAAwBuUwKCQH3NAAAAAwB1GY4nAH3AQAAAA
x-77-nzt-ray: af585630b0d3013723596865fe9d3521
x-accel-expires: @1701337556
x-accel-date: 1701335809
x-77-cache: HIT
x-77-age: 1623
content-encoding: gzip
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 52, 1570
x-77-pop: stockholmSE
X-Firefox-Spdy: h2