firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash cd8d0809aa5948f2a6ee41d2158861af
098cd24ac587cdc70137af412678526de4d43969
88e6741d6bf076bf7132c7cf98456702cc775476095aafd839888edff52fb03e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Backoff, Alert, Retry-After, Content-Length, Content-Type
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 25 Oct 2022 07:53:07 GMT
Expires: Tue, 25 Oct 2022 08:53:07 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: OwmLFDA8z2J2VFp-CCxdD4pwgEqydpD8cUXV0WzDzLB0iY019MENSA==
Age: 1388
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e36c852b5e145f2f09fe73111fb162e1
e439c6a462f86a3003d6464a8b9999b1c4d1e210
52a721168d0c41cb0854ff8c730fce3b79db2e804b383238e95ff1401922bd74
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "52A721168D0C41CB0854FF8C730FCE3B79DB2E804B383238E95FF1401922BD74"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18983
Expires: Tue, 25 Oct 2022 13:32:38 GMT
Date: Tue, 25 Oct 2022 08:16:15 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8db408c487f7d35bba323046736e8d3a
01b91e2dce7c6d3de9adfe6ff4d38f9b24ab7db0
9aeafc72c1a969243e1fc96f68ce18888034a749ee70582208bf814bd40b61a5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9AEAFC72C1A969243E1FC96F68CE18888034A749EE70582208BF814BD40B61A5"
Last-Modified: Tue, 25 Oct 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6767
Expires: Tue, 25 Oct 2022 10:09:02 GMT
Date: Tue, 25 Oct 2022 08:16:15 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: G6fK7U1K0uUfHb6BiZ+AzPwesKaNALHksPsQUhtvJ5DSm1Xl16NxIHrTxt9dzeuljAYFw+RlcO4=
x-amz-request-id: ZAQTHMBXGDKZG9VX
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 25 Oct 2022 08:08:52 GMT
age: 443
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
www.orwell.city/2
301 Moved Permanently 175 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash d1f3abdad061192e3081e0d2418124e1
479eabdb007020e5350a5ad9c1d51b5a9932af26
c4b93f5d511e1244e32408cba0c17f1fa7b958c391be734f5a9cdc203ee4f888
GET /2 HTTP/1.1
Host: www.orwell.city
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Location: https://www.orwell.city/2
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Tue, 25 Oct 2022 08:16:15 GMT
Expires: Tue, 25 Oct 2022 08:16:15 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 175
Server: GSE
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 25 Oct 2022 08:16:15 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/-dTVKVi2jiA
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/-dTVKVi2jiA
IP
Hash 820804d9c0cdb36ac7b728ce2214eaf5
2358ebde2822bb7771c87a99ab50410770b610f1
9dbf17951d84e4ad70102d9afa08d70f030dd2c62062f5da1fdecedbde89251f
POST /s/gts1d4/-dTVKVi2jiA HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:15 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Tue, 25 Oct 2022 07:33:32 GMT
Cache-Control: max-age=3600
Expires: Tue, 25 Oct 2022 08:05:46 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: gurJkbUFrcG-ECDJG8OFQojWZUA5KXGu9-UFf-AXm_xDCAcONiyqfQ==
Age: 2564
ocsp.digicert.com/
200 OK 471 B IP
Hash 7c6fdc8e76ef5875b5c965ade2df503e
45d548aa2a9d7ede163743274790700878eaea62
d2ff6eacd48af4892a2642e5d7bb925ca683062139f5a5cb4047f6f706830618
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6324
Cache-Control: max-age=92153
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:16 GMT
Etag: "63564795-1d7"
Expires: Wed, 26 Oct 2022 09:52:09 GMT
Last-Modified: Mon, 24 Oct 2022 08:06:45 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
www.orwell.city/2
404 Not Found 61 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (5813)
Hash b94934f845213b8697f00b975d2364bc
c0dfb48cf83b1e27f2b18bfc9db3e4188939a91a
6ff531ece4c8bc7939b8737a6f2ba3d8d2645bc5b11416295850743e01a05594
GET /2 HTTP/1.1
Host: www.orwell.city
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 25 Oct 2022 08:16:16 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 60697
server: GSE
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 0X5ospQYmnSYuZzrm8fuTQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: W0oIw7Az+BPN947UJmlkDRi8Keo=
www.orwell.city/js/cookienotice.js
200 OK 2.0 kB URL HTTP/2 www.orwell.city/js/cookienotice.js
IP
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
GET /js/cookienotice.js HTTP/1.1
Host: www.orwell.city
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
date: Tue, 25 Oct 2022 08:16:16 GMT
expires: Tue, 01 Nov 2022 08:16:16 GMT
cache-control: public, max-age=604800
last-modified: Tue, 25 Oct 2022 06:49:05 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d114ab00b1cfe7f9b4f56c7b3655b55d
641e580d6148329b0c9eb2d49f5f8a30c08f30e9
e5420e919b2c05c148179c7d85a210941be6862b1f65ccfafcfc38d960bf38d7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 278 B IP
Hash cef0dba9b87a937ecde01b1b559a2c64
8a793058d49bf6c8e5cd310959c2548294d0d982
83021fdaf93c7f8abb8dd6d659f3c49eada1d18f98b2a2340b0c644f7ab6bd2d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5609
Cache-Control: max-age=170306
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:16 GMT
Etag: "63577ba9-116"
Expires: Thu, 27 Oct 2022 07:34:42 GMT
Last-Modified: Tue, 25 Oct 2022 06:01:13 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 278
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d114ab00b1cfe7f9b4f56c7b3655b55d
641e580d6148329b0c9eb2d49f5f8a30c08f30e9
e5420e919b2c05c148179c7d85a210941be6862b1f65ccfafcfc38d960bf38d7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d114ab00b1cfe7f9b4f56c7b3655b55d
641e580d6148329b0c9eb2d49f5f8a30c08f30e9
e5420e919b2c05c148179c7d85a210941be6862b1f65ccfafcfc38d960bf38d7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d114ab00b1cfe7f9b4f56c7b3655b55d
641e580d6148329b0c9eb2d49f5f8a30c08f30e9
e5420e919b2c05c148179c7d85a210941be6862b1f65ccfafcfc38d960bf38d7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 278 B IP
Hash b6a29443b93f36d01950f837dc80b331
396a0c3376e2703df86bd91164d072ea3b6a57d0
068d0e71f4334a1814522640f491a652eeb30f40981fc6b0c75582c155ff0899
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4508
Cache-Control: max-age=92482
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:16 GMT
Etag: "63564ff6-116"
Expires: Wed, 26 Oct 2022 09:57:38 GMT
Last-Modified: Mon, 24 Oct 2022 08:42:30 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 278
code.jquery.com/jquery-migrate-1.2.1.js
200 OK 5.8 kB URL HTTP/2 code.jquery.com/jquery-migrate-1.2.1.js
IP
Hash ab50f392b13415af57f9720f4d24e981
8bee0d6d15bc0bf62197f6a33493df7494bf42c2
3c7ae468bcd5eefaf92cfac278a5a998f871e0aaa190f87b0f56fd79f93d00b7
GET /jquery-migrate-1.2.1.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 08:16:16 GMT
content-encoding: gzip
content-length: 5783
content-type: application/javascript; charset=utf-8
last-modified: Fri, 12 Aug 2022 13:47:02 GMT
accept-ranges: bytes
server: nginx
etag: W/"62f659d6-40ed"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1666685776.dop065.sk1.t,1666685776.cds065.sk1.hn,1666685776.cds234.sk1.c
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fea5b602f1a33e8dc8cf6506e5986020
e433be69624802f82437d4ee87346ecabfcd5a77
210f5bfc7835b83fde64af18bf1bb553c14043be55ae445c941e6a91de4b867e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/1.11.0/jquery.min.js
200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.11.0/jquery.min.js
IP
File type ASCII text, with very long lines (32341)
Hash 856f85cc1b07156fa844b44a10c236c2
7cef457c0e1cd0c20f4e699564ea8997f0332021
c61aa9ce7b32f93630abac1a4b27382f9333e0ff69477c9d9099070ae0742b01
GET /ajax/libs/jquery/1.11.0/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33576
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 20 Oct 2022 08:08:54 GMT
expires: Fri, 20 Oct 2023 08:08:54 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 432442
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fea5b602f1a33e8dc8cf6506e5986020
e433be69624802f82437d4ee87346ecabfcd5a77
210f5bfc7835b83fde64af18bf1bb553c14043be55ae445c941e6a91de4b867e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 302730f3d7a555e92a8eb18a18b1f6dd
121f4e2db1652c28963d7c5d21da7ddd68bf15ab
1af15e18b397b4d2212951e156be2d4ddabf483f736b494342f82ab8f9b6a68f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 302730f3d7a555e92a8eb18a18b1f6dd
121f4e2db1652c28963d7c5d21da7ddd68bf15ab
1af15e18b397b4d2212951e156be2d4ddabf483f736b494342f82ab8f9b6a68f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
200 OK 6.6 kB URL HTTP/2 www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
IP
File type ASCII text, with very long lines (30596)
Hash 6f46e6f68353c7911fe34f31faa1518f
ea4dbfa2f87c18e9c51c59a32dfa9afb9c2c3472
0be7e26374fcff6f423b88e5f2a05d1cfdcb56abb4a78fa125e391989782ae0f
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 21 Oct 2022 06:44:47 GMT
expires: Sat, 21 Oct 2023 06:44:47 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 21 Oct 2022 00:50:45 GMT
content-type: text/css
age: 351089
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 302730f3d7a555e92a8eb18a18b1f6dd
121f4e2db1652c28963d7c5d21da7ddd68bf15ab
1af15e18b397b4d2212951e156be2d4ddabf483f736b494342f82ab8f9b6a68f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
resources.blogblog.com/img/widgets/arrow_dropdown.gif
200 OK 141 B URL HTTP/2 resources.blogblog.com/img/widgets/arrow_dropdown.gif
IP
File type GIF image data, version 89a, 13 x 10\012- data
Hash 2964a07d60a4e76b299130fb1b4115f6
3b72dcc19f3ad685513eaba612e07e0ed495f2e1
28ab89f0285c48d2faed701905c185c302f2b389584a52ceaa76a91ea64dc3a7
GET /img/widgets/arrow_dropdown.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 141
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 19 Oct 2022 10:36:57 GMT
expires: Wed, 26 Oct 2022 10:36:57 GMT
cache-control: public, max-age=604800
last-modified: Tue, 18 Oct 2022 10:50:50 GMT
content-type: image/gif
age: 509959
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-WKXkdw9PZFg/YPjMZwyM6tI/AAAAAAAAAXs/Ucb4lgF5SiQ02bLbfkbTmrr52Ycql4MMwCLcBGAsYHQ/s72-w640-c-h360/vlcsnap-2021-07-21-21h38m03s939.png
200 OK 10 kB URL HTTP/2 1.bp.blogspot.com/-WKXkdw9PZFg/YPjMZwyM6tI/AAAAAAAAAXs/Ucb4lgF5SiQ02bLbfkbTmrr52Ycql4MMwCLcBGAsYHQ/s72-w640-c-h360/vlcsnap-2021-07-21-21h38m03s939.png
IP
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash 414870511663b9d25d10400b9f05cbcc
25b19c276bdf6ef9d378f4745b7e142e23c4772c
4d0060581099e79ab9e30b2d7eb731d71b0c46cf44e52f1b4170c55fce7c9e6e
GET /-WKXkdw9PZFg/YPjMZwyM6tI/AAAAAAAAAXs/Ucb4lgF5SiQ02bLbfkbTmrr52Ycql4MMwCLcBGAsYHQ/s72-w640-c-h360/vlcsnap-2021-07-21-21h38m03s939.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="vlcsnap-2021-07-21-21h38m03s939.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 10259
x-xss-protection: 0
date: Tue, 25 Oct 2022 06:51:27 GMT
expires: Fri, 21 Oct 2022 05:48:46 GMT
cache-control: public, max-age=86400, no-transform
age: 5089
etag: "v17c"
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
resources.blogblog.com/img/icon_feed12.png
200 OK 500 B URL HTTP/2 resources.blogblog.com/img/icon_feed12.png
IP
File type PNG image data, 12 x 12, 8-bit colormap, non-interlaced\012- data
Hash 44e7355a788fd1082deff0018883758e
50e3a28a44978e85d13c30522e0c71c8d0b24675
3cd341f37642f8a58b0fe14c2645913449c0ffe10be6ba0986275bfef29bc319
GET /img/icon_feed12.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 500
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 21 Oct 2022 14:57:33 GMT
expires: Fri, 28 Oct 2022 14:57:33 GMT
cache-control: public, max-age=604800
last-modified: Thu, 20 Oct 2022 14:00:42 GMT
content-type: image/png
age: 321523
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-4kHGWz00KBE/YPeTdQc9pLI/AAAAAAAAAWw/nDzxA8L2ArITssmU2VtFkT-uZ8LJBkKFQCLcBGAsYHQ/w72-h72-p-k-no-nu/vlcsnap-2021-07-20-23h24m21s497.png
200 OK 11 kB URL HTTP/2 1.bp.blogspot.com/-4kHGWz00KBE/YPeTdQc9pLI/AAAAAAAAAWw/nDzxA8L2ArITssmU2VtFkT-uZ8LJBkKFQCLcBGAsYHQ/w72-h72-p-k-no-nu/vlcsnap-2021-07-20-23h24m21s497.png
IP
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash 80baaada1dc68f5c0fe36414836202e1
5f6a379de32628add55d52c25cf8eff6b3cf3d14
5f1c5c728b374689d47a6de7e3aa93c180e1da05c5132aefbd5d348f77458e6a
GET /-4kHGWz00KBE/YPeTdQc9pLI/AAAAAAAAAWw/nDzxA8L2ArITssmU2VtFkT-uZ8LJBkKFQCLcBGAsYHQ/w72-h72-p-k-no-nu/vlcsnap-2021-07-20-23h24m21s497.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="vlcsnap-2021-07-20-23h24m21s497.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 10581
x-xss-protection: 0
date: Tue, 25 Oct 2022 06:51:27 GMT
expires: Fri, 21 Oct 2022 05:48:46 GMT
cache-control: public, max-age=86400, no-transform
age: 5089
etag: "v16d"
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
resources.blogblog.com/img/widgets/subscribe-netvibes.png
200 OK 1.4 kB URL HTTP/2 resources.blogblog.com/img/widgets/subscribe-netvibes.png
IP
File type PNG image data, 91 x 17, 8-bit colormap, non-interlaced\012- data
Hash c52a5f4ecb6be5d7e93b23ef4122ee4e
4e698a5f455daf3a8ea1e219b1998079f0546716
71b8ad79c680b3e5d452a792c3b418b23f739a0a34005e0f37ec674f4c78cb5d
GET /img/widgets/subscribe-netvibes.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 1445
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 21 Oct 2022 22:50:13 GMT
expires: Fri, 28 Oct 2022 22:50:13 GMT
cache-control: public, max-age=604800
last-modified: Fri, 21 Oct 2022 15:50:58 GMT
content-type: image/png
age: 293163
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-WKXkdw9PZFg/YPjMZwyM6tI/AAAAAAAAAXs/Ucb4lgF5SiQ02bLbfkbTmrr52Ycql4MMwCLcBGAsYHQ/w72-h72-p-k-no-nu/vlcsnap-2021-07-21-21h38m03s939.png
200 OK 10 kB URL HTTP/2 1.bp.blogspot.com/-WKXkdw9PZFg/YPjMZwyM6tI/AAAAAAAAAXs/Ucb4lgF5SiQ02bLbfkbTmrr52Ycql4MMwCLcBGAsYHQ/w72-h72-p-k-no-nu/vlcsnap-2021-07-21-21h38m03s939.png
IP
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash dbb04ba9f4c0defafd6ebf402f96a2b3
1034d1c8802b5cf619c49b0561099cd9212e4e91
9df4acbf61d69cea926917a46afb71c9e48214af43cdbd5fa27424b165b567d9
GET /-WKXkdw9PZFg/YPjMZwyM6tI/AAAAAAAAAXs/Ucb4lgF5SiQ02bLbfkbTmrr52Ycql4MMwCLcBGAsYHQ/w72-h72-p-k-no-nu/vlcsnap-2021-07-21-21h38m03s939.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="vlcsnap-2021-07-21-21h38m03s939.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 10212
x-xss-protection: 0
date: Tue, 25 Oct 2022 06:51:27 GMT
expires: Fri, 21 Oct 2022 05:48:46 GMT
cache-control: public, max-age=86400, no-transform
age: 5089
etag: "v17c"
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/2216895134-widgets.js
200 OK 57 kB URL HTTP/2 www.blogger.com/static/v1/widgets/2216895134-widgets.js
IP
File type ASCII text, with very long lines (2221)
Hash 083268f093ceb61c3a61a818f199d053
97e2062e29efe96089c3e98a5e50f29cdcb05464
6dccb46111dff2073ee44dd7c4b0093f39d28ebc62ec17917c6ce6f8d42dba13
GET /static/v1/widgets/2216895134-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56821
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 24 Oct 2022 02:07:25 GMT
expires: Tue, 24 Oct 2023 02:07:25 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 24 Oct 2022 00:51:25 GMT
content-type: text/javascript
age: 108531
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-82ifmmpiaEo/YPZoH1W1XyI/AAAAAAAAAWo/9SnWt6cZKC8cQ6i2aZy-ScpTpXhjDxjWgCLcBGAsYHQ/s72-w640-c-h360/vlcsnap-2021-07-20-02h04m18s241.png
200 OK 12 kB URL HTTP/2 1.bp.blogspot.com/-82ifmmpiaEo/YPZoH1W1XyI/AAAAAAAAAWo/9SnWt6cZKC8cQ6i2aZy-ScpTpXhjDxjWgCLcBGAsYHQ/s72-w640-c-h360/vlcsnap-2021-07-20-02h04m18s241.png
IP
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash 20585ae3760ffcfec2734511e71cc063
47f1b72990954d46e45525c1097284e3aeef2ea9
7919b3160ca04150535d2328e4266efa6b5bd81a3a49bb9c28d348276a0fe1f7
GET /-82ifmmpiaEo/YPZoH1W1XyI/AAAAAAAAAWo/9SnWt6cZKC8cQ6i2aZy-ScpTpXhjDxjWgCLcBGAsYHQ/s72-w640-c-h360/vlcsnap-2021-07-20-02h04m18s241.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="vlcsnap-2021-07-20-02h04m18s241.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 12197
x-xss-protection: 0
date: Tue, 25 Oct 2022 06:51:27 GMT
expires: Fri, 21 Oct 2022 05:48:46 GMT
cache-control: public, max-age=86400, no-transform
age: 5089
etag: "v16b"
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash cef0dba9b87a937ecde01b1b559a2c64
8a793058d49bf6c8e5cd310959c2548294d0d982
83021fdaf93c7f8abb8dd6d659f3c49eada1d18f98b2a2340b0c644f7ab6bd2d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5609
Cache-Control: max-age=170306
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:16 GMT
Etag: "63577ba9-116"
Expires: Thu, 27 Oct 2022 07:34:42 GMT
Last-Modified: Tue, 25 Oct 2022 06:01:13 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 278
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d114ab00b1cfe7f9b4f56c7b3655b55d
641e580d6148329b0c9eb2d49f5f8a30c08f30e9
e5420e919b2c05c148179c7d85a210941be6862b1f65ccfafcfc38d960bf38d7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
resources.blogblog.com/img/widgets/subscribe-yahoo.png
200 OK 580 B URL HTTP/2 resources.blogblog.com/img/widgets/subscribe-yahoo.png
IP
File type PNG image data, 91 x 17, 8-bit colormap, non-interlaced\012- data
Hash 79f602b6ac18bee79b4e2353a6674010
28accf82263aa1a11bb821439d4d185865662530
bbf9b924cc32bff4738bb54d86905476349f90c8b20f748633e56f64379d553e
GET /img/widgets/subscribe-yahoo.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 21 Oct 2022 12:34:46 GMT
expires: Fri, 28 Oct 2022 12:34:46 GMT
cache-control: public, max-age=604800
last-modified: Fri, 21 Oct 2022 01:51:17 GMT
content-type: image/png
age: 330090
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-82ifmmpiaEo/YPZoH1W1XyI/AAAAAAAAAWo/9SnWt6cZKC8cQ6i2aZy-ScpTpXhjDxjWgCLcBGAsYHQ/w72-h72-p-k-no-nu/vlcsnap-2021-07-20-02h04m18s241.png
200 OK 12 kB URL HTTP/2 1.bp.blogspot.com/-82ifmmpiaEo/YPZoH1W1XyI/AAAAAAAAAWo/9SnWt6cZKC8cQ6i2aZy-ScpTpXhjDxjWgCLcBGAsYHQ/w72-h72-p-k-no-nu/vlcsnap-2021-07-20-02h04m18s241.png
IP
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash 99974e025b0ae60d4719d25e2edb81b2
6454af410c78e67d0080ab695581b492b15bfab6
2f40bde8c4bb26bf206d391b6410cca93e37f4e1b670422c8ae86b7e1b0420ef
GET /-82ifmmpiaEo/YPZoH1W1XyI/AAAAAAAAAWo/9SnWt6cZKC8cQ6i2aZy-ScpTpXhjDxjWgCLcBGAsYHQ/w72-h72-p-k-no-nu/vlcsnap-2021-07-20-02h04m18s241.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="vlcsnap-2021-07-20-02h04m18s241.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 12177
x-xss-protection: 0
date: Tue, 25 Oct 2022 06:51:27 GMT
expires: Fri, 21 Oct 2022 05:48:46 GMT
cache-control: public, max-age=86400, no-transform
age: 5089
etag: "v16b"
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-4kHGWz00KBE/YPeTdQc9pLI/AAAAAAAAAWw/nDzxA8L2ArITssmU2VtFkT-uZ8LJBkKFQCLcBGAsYHQ/s72-w640-c-h360/vlcsnap-2021-07-20-23h24m21s497.png
200 OK 11 kB URL HTTP/2 1.bp.blogspot.com/-4kHGWz00KBE/YPeTdQc9pLI/AAAAAAAAAWw/nDzxA8L2ArITssmU2VtFkT-uZ8LJBkKFQCLcBGAsYHQ/s72-w640-c-h360/vlcsnap-2021-07-20-23h24m21s497.png
IP
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash 428b9ceb8745ad0b8bf5414c27be5bf8
51493ebd8a4ba62e2df7f94b32cb5112171c7d27
7d8dfb15dddc3fcaf9817b91eb4b0f64a44a4af0eae0bdfdccf42b7f4e37ff27
GET /-4kHGWz00KBE/YPeTdQc9pLI/AAAAAAAAAWw/nDzxA8L2ArITssmU2VtFkT-uZ8LJBkKFQCLcBGAsYHQ/s72-w640-c-h360/vlcsnap-2021-07-20-23h24m21s497.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="vlcsnap-2021-07-20-23h24m21s497.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 10576
x-xss-protection: 0
date: Tue, 25 Oct 2022 06:51:27 GMT
expires: Fri, 21 Oct 2022 05:48:46 GMT
cache-control: public, max-age=86400, no-transform
age: 5089
etag: "v16d"
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fea5b602f1a33e8dc8cf6506e5986020
e433be69624802f82437d4ee87346ecabfcd5a77
210f5bfc7835b83fde64af18bf1bb553c14043be55ae445c941e6a91de4b867e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fea5b602f1a33e8dc8cf6506e5986020
e433be69624802f82437d4ee87346ecabfcd5a77
210f5bfc7835b83fde64af18bf1bb553c14043be55ae445c941e6a91de4b867e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 302730f3d7a555e92a8eb18a18b1f6dd
121f4e2db1652c28963d7c5d21da7ddd68bf15ab
1af15e18b397b4d2212951e156be2d4ddabf483f736b494342f82ab8f9b6a68f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Open+Sans:300italic,400italic,700italic,400,700,300&subset=latin,cyrillic-ext&ver=3.9.2
200 OK 1.4 kB URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:300italic,400italic,700italic,400,700,300&subset=latin,cyrillic-ext&ver=3.9.2
IP
Hash 1fa5e14fffc9b5942f5809b8a603822b
801b71b616fdf6bfe4b9ec0dd4adbd913aa9fea4
522328b9ea715f8ea133169781cb511a28356c35269fd9c2e67c6844b296202b
GET /css?family=Open+Sans:300italic,400italic,700italic,400,700,300&subset=latin,cyrillic-ext&ver=3.9.2 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 25 Oct 2022 08:16:16 GMT
date: Tue, 25 Oct 2022 08:16:16 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eb9238eaa63063c98563a1961fbbfefa
9b23eea87129d9516b8e7527cce7b8b1efcfa1fe
ff87d571f813dd558347df32a52e27ebb6c66968a6d2e584e6b6467944ef40fb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eb9238eaa63063c98563a1961fbbfefa
9b23eea87129d9516b8e7527cce7b8b1efcfa1fe
ff87d571f813dd558347df32a52e27ebb6c66968a6d2e584e6b6467944ef40fb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eb9238eaa63063c98563a1961fbbfefa
9b23eea87129d9516b8e7527cce7b8b1efcfa1fe
ff87d571f813dd558347df32a52e27ebb6c66968a6d2e584e6b6467944ef40fb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.orwell.city
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 20 Oct 2022 05:42:51 GMT
expires: Fri, 20 Oct 2023 05:42:51 GMT
cache-control: public, max-age=31536000
age: 441205
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.orwell.city
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 19 Oct 2022 19:34:08 GMT
expires: Thu, 19 Oct 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 477728
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.orwell.city
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 19 Oct 2022 19:34:08 GMT
expires: Thu, 19 Oct 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 477728
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
200 OK 46 kB URL HTTP/2 fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 46524, version 1.0\012- data
Hash c1fd378f54921c75e4ae1821e7b8fff6
2ce96e97783b2f154d07f4464ca6f8eb2469f2c1
405ceee1c2f5c31f1cb94ebc63d49a43fddd1471c2c7401a01c7c11bb1d93826
GET /s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.orwell.city
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46524
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 24 Oct 2022 21:13:13 GMT
expires: Tue, 24 Oct 2023 21:13:13 GMT
cache-control: public, max-age=31536000
age: 39783
last-modified: Mon, 18 Jul 2022 19:58:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eb9238eaa63063c98563a1961fbbfefa
9b23eea87129d9516b8e7527cce7b8b1efcfa1fe
ff87d571f813dd558347df32a52e27ebb6c66968a6d2e584e6b6467944ef40fb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2
200 OK 36 kB URL HTTP/2 fonts.gstatic.com/s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 35764, version 1.0\012- data
Hash 60f23230f1a8d5c3b7d25b73f5b5ce23
ed08ada85d017893b9bcb8224e99154c6708f5d2
22b6cdc450204c1cb32b31e679d812fea1c17ac506a7b78daeb12bd0ab25fde8
GET /s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.orwell.city
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35764
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 24 Oct 2022 21:14:36 GMT
expires: Tue, 24 Oct 2023 21:14:36 GMT
cache-control: public, max-age=31536000
age: 39701
last-modified: Mon, 18 Jul 2022 19:06:36 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
commerce.coinbase.com/v1/button.css
200 OK 17 kB URL HTTP/2 commerce.coinbase.com/v1/button.css
IP
Hash 16b6589a494ebcddfd8c814fd1d17791
79d3729301547c81b2bd1e9646c8665ae850db75
d817d39c0aaed57d5962cf4d69bce4e73a5bf0f8a4348982eb66ae616bd3f19d
GET /v1/button.css HTTP/1.1
Host: commerce.coinbase.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 08:16:16 GMT
content-type: text/css; charset=UTF-8
cache-control: public, max-age=43200
content-security-policy: default-src 'none'; connect-src https://commerce.coinbase.com https://api.commerce.coinbase.com https://www.coinbase.com https://dp.coinbase.com https://api.cloudinary.com https://api.amplitude.com/; font-src 'self' https://fonts.gstatic.com; frame-src https://www.google.com/recaptcha/ https://fast.wistia.net https://commerce-accounting-reports-prod.s3.us-east-1.amazonaws.com https://wallet.commerce.coinbase.com; img-src 'self' data: https://exceptions.coinbase.com/js https://www.google-analytics.com/ https://res.cloudinary.com https://nft.reddit.com https://dynamic-assets.coinbase.com https://static-assets.coinbase.com asset-metadata-service-production.s3.amazonaws.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; script-src 'self' https://www.google-analytics.com/analytics.js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 'sha256-/T46MuEZnRTWI4K3nyZO+jpGnZUbZ7wHGn1iQXeMfMI='; report-uri https://commerce.coinbase.com/csp/report; block-all-mixed-content
etag: W/"10f2-183c888d838"
last-modified: Tue, 11 Oct 2022 19:32:35 GMT
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: DENY
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 2322
expires: Tue, 25 Oct 2022 20:16:16 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 75f9825a19ffb523-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.orwell.city/feeds/posts/default?max-results=8&orderby=published&alt=json-in-script&callback=showrecentposts2
200 OK 21 kB URL HTTP/2 www.orwell.city/feeds/posts/default?max-results=8&orderby=published&alt=json-in-script&callback=showrecentposts2
IP
File type Unicode text, UTF-8 text, with very long lines (65433)
Hash 38f83215d21d50a9cd192b6703951540
3be9350d6184ab5b8591aab98f5d9780db823344
58c9c29eb8ba5684349c1aed6cb1fd16fecb63057d790f73415960d0f1794daf
GET /feeds/posts/default?max-results=8&orderby=published&alt=json-in-script&callback=showrecentposts2 HTTP/1.1
Host: www.orwell.city
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
etag: W/"0b26da83f0bd3ce99236823e30b14652eb3ab432784eabbba0ceb9fb748fe848"
date: Tue, 25 Oct 2022 08:16:17 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
expires: Tue, 25 Oct 2022 08:16:18 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Mon, 24 Oct 2022 09:30:35 GMT
content-encoding: gzip
content-length: 21128
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 68bd833d6e834b8d876d653751246cf8
fddb68b479878afe5f0e557fd7772b299394129a
c40f3028befadba8b9d60c18e2c9fc83016348759f3fb06817972ab71ccd27e3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
64.media.tumblr.com/3d1bff384558fc1ff8e5e0950cc0cbae/56960fb8bc1fc818-5c/s400x600/c73c651aeed2ff109b80ccfe3a8c43745b7e9ba3.png
200 OK 5.9 kB URL HTTP/2 64.media.tumblr.com/3d1bff384558fc1ff8e5e0950cc0cbae/56960fb8bc1fc818-5c/s400x600/c73c651aeed2ff109b80ccfe3a8c43745b7e9ba3.png
IP
File type PNG image data, 298 x 79, 8-bit/color RGBA, non-interlaced\012- data
Hash d1971fb87d786a43a4d258d1fe41d362
2bf7946f1c781b203b9bd60ee5849da66b3e4989
cd8aea32f911ec256e98934161d4107b62980447124a86cb9efb03ab7dc6586d
GET /3d1bff384558fc1ff8e5e0950cc0cbae/56960fb8bc1fc818-5c/s400x600/c73c651aeed2ff109b80ccfe3a8c43745b7e9ba3.png HTTP/1.1
Host: 64.media.tumblr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 25 Oct 2022 08:16:17 GMT
content-type: image/png
content-length: 5903
last-modified: Sun, 30 May 2021 23:15:41 GMT
etag: "578b38d5d5f4dc7ef6d8f70246977d84-1498089600-c801e2c"
content-disposition: inline; filename="tumblr_3d1bff384558fc1ff8e5e0950cc0cbae_c73c651a_400.png"
x-frames: 1
timing-allow-origin: *
cache-control: max-age=315360000
x-nc: HIT arn 1
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
strict-transport-security: max-age=31536000; preload
server-timing: dc;desc=arn, cache;desc=HIT;dur=0.0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 68bd833d6e834b8d876d653751246cf8
fddb68b479878afe5f0e557fd7772b299394129a
c40f3028befadba8b9d60c18e2c9fc83016348759f3fb06817972ab71ccd27e3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
64.media.tumblr.com/e3cef3e1dcaedca1672ce709ee9c0400/56960fb8bc1fc818-12/s250x400/35e4d7ec3db79c62324c65ed22b757cdfcd1fd63.jpg
200 OK 19 kB URL HTTP/2 64.media.tumblr.com/e3cef3e1dcaedca1672ce709ee9c0400/56960fb8bc1fc818-12/s250x400/35e4d7ec3db79c62324c65ed22b757cdfcd1fd63.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, orientation=upper-left], progressive, precision 8, 200x200, components 3\012- data
Hash eeec8f8d5e7913fa9ff61de8a87e8621
b33526480e6cb08a6c510e5e09e5b3225591738d
dfb312aaf1688e5444cd6643b67f1fb63941bef6da1a3c46bcdb8aaa26d4ae73
GET /e3cef3e1dcaedca1672ce709ee9c0400/56960fb8bc1fc818-12/s250x400/35e4d7ec3db79c62324c65ed22b757cdfcd1fd63.jpg HTTP/1.1
Host: 64.media.tumblr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 25 Oct 2022 08:16:17 GMT
content-type: image/jpeg
content-length: 18616
last-modified: Sun, 30 May 2021 23:46:22 GMT
etag: "a779aeae5809fd14844e7d543e38174f-1498089600-0b5eada"
content-disposition: inline; filename="tumblr_e3cef3e1dcaedca1672ce709ee9c0400_35e4d7ec_250.jpg"
x-frames: 1
timing-allow-origin: *
cache-control: max-age=315360000
x-nc: HIT arn 8
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
strict-transport-security: max-age=31536000; preload
server-timing: dc;desc=arn, cache;desc=HIT;dur=1.0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 68bd833d6e834b8d876d653751246cf8
fddb68b479878afe5f0e557fd7772b299394129a
c40f3028befadba8b9d60c18e2c9fc83016348759f3fb06817972ab71ccd27e3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9ed554f0d1187302352f943e39d6c91a
10e1bb8702d0d14c56b659b1662b7c857484b0e7
2e1eda67a00dcf60ade2e3332b7f8b0c18c88ea6794fbb49fa9503e7c02236e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 472 B IP
Hash 87ace1365b9d8400e17e5b4de6bd77ad
b9c20a2b44e4cde048f3fb95f66beb32fed3b5c2
a69f6a663c3ecb752712d39310841341367596a7e5d17c99a75ccc51e4393117
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 08:16:17 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 23 Oct 2022 04:30:32 GMT
Expires: Sun, 30 Oct 2022 04:30:31 GMT
Etag: "b9c20a2b44e4cde048f3fb95f66beb32fed3b5c2"
Cache-Control: max-age=417853,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75f9825ceb140b3d-OSL
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 68bd833d6e834b8d876d653751246cf8
fddb68b479878afe5f0e557fd7772b299394129a
c40f3028befadba8b9d60c18e2c9fc83016348759f3fb06817972ab71ccd27e3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f1ae675435a8f16bc0b04ec012c41979
182f87a81464c80b0b25fb524c59592cd40b0ef4
9191ced121d8740b4ed3af75db3033e72c0c44c0b45004abd714583deaa749a4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash db98ec19c5494519dc4c97382cbeb3bf
a826d1c4d7fb20d61e5359a76f2c5196bd8f1f10
2d73ed605caf7948fceaffe87ba8535e20f1cdc7efd603c5083fa74c6fc16a2b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2148
Cache-Control: max-age=169725
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:17 GMT
Etag: "635786ea-1d7"
Expires: Thu, 27 Oct 2022 07:25:02 GMT
Last-Modified: Tue, 25 Oct 2022 06:49:14 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 6a06020ca9232f6d28152ee6ba6a7274
6a9863b83c059cbc5e554fc147ea526412a0dfdd
40f22835a446820b71024d1395f8a569f0111cf156c7960f751182f171e2e1b3
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 08:16:17 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Sat, 29 Oct 2022 06:18:37 GMT
ETag: "6a9863b83c059cbc5e554fc147ea526412a0dfdd"
Last-Modified: Tue, 25 Oct 2022 06:18:38 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2640
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75f9825d5cbb0b69-OSL
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Tue, 25 Oct 2022 06:41:09 GMT
expires: Tue, 25 Oct 2022 08:41:09 GMT
cache-control: public, max-age=7200
age: 5708
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/en_US/sdk.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js
IP
File type ASCII text, with very long lines (1961)
Hash 08abf4a3111af3b8c2eb2e1439ade946
16a8c7aa9608fc778629975b9ea0b6eb4856622b
6f9a27d80d1d0b2f498b6930cf810eddfdb35c9978ec51d1cec1901b650160a0
GET /en_US/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 4339faf946186efe552af9d47ad52c42
etag: "91e1ecfb743acec49c33c2fef8a82253"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Tue, 25 Oct 2022 08:16:40 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: CKv0oxEa87jC6y4UOa3pRg==
x-fb-debug: kUiV6jh3qqNGDsTgE6DBk2lqEsEPOE0O4YP8/o0s0GfCf40FUwh7eIU+1/j2BfMZwqjPd7+Q18DMhNOz0AasQQ==
content-length: 1686
x-fb-trip-id: 1679558926
date: Tue, 25 Oct 2022 08:16:17 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
200 OK 56 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
IP
File type ASCII text, with very long lines (2776)
Hash fc2e01d441693a6b80849d652a8e55fc
3c13004c2f2856889909af864a9accf81ec93c8f
b15d93adb805732bfc51f6264bdeacd030f4867468839442ab580481eaeac1ac
GET /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Tue, 25 Oct 2022 08:16:17 GMT
expires: Tue, 25 Oct 2022 08:16:17 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 3581254620398819609
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 55808
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f1ae675435a8f16bc0b04ec012c41979
182f87a81464c80b0b25fb524c59592cd40b0ef4
9191ced121d8740b4ed3af75db3033e72c0c44c0b45004abd714583deaa749a4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash db98ec19c5494519dc4c97382cbeb3bf
a826d1c4d7fb20d61e5359a76f2c5196bd8f1f10
2d73ed605caf7948fceaffe87ba8535e20f1cdc7efd603c5083fa74c6fc16a2b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2148
Cache-Control: max-age=169725
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:17 GMT
Etag: "635786ea-1d7"
Expires: Thu, 27 Oct 2022 07:25:02 GMT
Last-Modified: Tue, 25 Oct 2022 06:49:14 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9ed554f0d1187302352f943e39d6c91a
10e1bb8702d0d14c56b659b1662b7c857484b0e7
2e1eda67a00dcf60ade2e3332b7f8b0c18c88ea6794fbb49fa9503e7c02236e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.orwell.city/favicon.ico
200 OK 337 B URL HTTP/2 www.orwell.city/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 7e0d8fd3fb0a055398ee2d4ecebd771a
a91d8a8d155cb9e9048bb090d964fe26eb33fde8
d438c8dcbd349d1283a9230943de692899d80f43573d822743d5a05c8ccdf225
GET /favicon.ico HTTP/1.1
Host: www.orwell.city
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/x-icon
expires: Tue, 25 Oct 2022 08:16:17 GMT
date: Tue, 25 Oct 2022 08:16:17 GMT
cache-control: private, max-age=86400
last-modified: Mon, 24 Oct 2022 09:30:35 GMT
etag: W/"ac001c8b3dcfd4def671ea33f08ae89fc00c2a10013e3ce3a167a01aa5210b0d"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 337
server: GSE
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/tag.js
200 OK 73 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (587)
Hash 6bb9990fc521832208f25ccf5261b719
be8acfb80dfc034d5cbd7dabb318ea8853762c10
677f03256dacdc519c12971fd422fe1afa0ecca3864f4e8f7aa0bed4eecd9c38
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 73397
date: Tue, 25 Oct 2022 08:16:17 GMT
access-control-allow-origin: *
etag: "63575841-11eb5"
expires: Tue, 25 Oct 2022 09:16:17 GMT
last-modified: Tue, 25 Oct 2022 06:30:09 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/a/AVvXsEhDIx0shoh9IkpS6HSYxUkltCNpSdQJtc4zZLQCmi493rfP2IH_YkODoypLv61EOypQON7KCQN3GGPqLeZdnhA6A8mKPTTLUjpysxG3Sx97G_2OnD5gHe45PK6ipFEmUbTkBVl3_mwYfCjGvMYaAmK2MParm1yCv2tj5vhIA3pnysERpDgRyU-F8NCBSQ=w640-h360
200 OK 425 kB URL HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEhDIx0shoh9IkpS6HSYxUkltCNpSdQJtc4zZLQCmi493rfP2IH_YkODoypLv61EOypQON7KCQN3GGPqLeZdnhA6A8mKPTTLUjpysxG3Sx97G_2OnD5gHe45PK6ipFEmUbTkBVl3_mwYfCjGvMYaAmK2MParm1yCv2tj5vhIA3pnysERpDgRyU-F8NCBSQ=w640-h360
IP
File type PNG image data, 640 x 360, 8-bit/color RGB, non-interlaced\012- data
Size 425 kB (424596 bytes)
Hash 0497a092c7bb80d318781d4d7ebb3ca8
48e8abe8540bba82f07b4c8ad1ebc2ad407b3a7b
e26500c8f8c8fadb38d78b3d33e96d7a2f5599b61b6e3451832a827c36a3ed45
GET /img/a/AVvXsEhDIx0shoh9IkpS6HSYxUkltCNpSdQJtc4zZLQCmi493rfP2IH_YkODoypLv61EOypQON7KCQN3GGPqLeZdnhA6A8mKPTTLUjpysxG3Sx97G_2OnD5gHe45PK6ipFEmUbTkBVl3_mwYfCjGvMYaAmK2MParm1yCv2tj5vhIA3pnysERpDgRyU-F8NCBSQ=w640-h360 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v97d"
expires: Wed, 26 Oct 2022 08:16:17 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="vlcsnap-2022-03-17-01h36m18s515.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Tue, 25 Oct 2022 08:16:17 GMT
server: fife
content-length: 424596
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 68bd833d6e834b8d876d653751246cf8
fddb68b479878afe5f0e557fd7772b299394129a
c40f3028befadba8b9d60c18e2c9fc83016348759f3fb06817972ab71ccd27e3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
blogger.googleusercontent.com/img/a/AVvXsEg-pYH78qhE8gT0uMz1i7t9XMR6JIIw7vEwaVXNic5yr_3mjKHEdn4oH-H-JH_Lg4DvzkKph22t7zFFYxhkuGvlSLoRU1mQTmdN0BflfYdUjtx-C6GOu9yEdUrRVpYHowNvF5BAtIW1jsZC1Sd8vu0Kqg6a69BlNDuoyiZTs08uBQo5FhZffCY82O8AkA=w72-h72-p-k-no-nu
200 OK 12 kB URL HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEg-pYH78qhE8gT0uMz1i7t9XMR6JIIw7vEwaVXNic5yr_3mjKHEdn4oH-H-JH_Lg4DvzkKph22t7zFFYxhkuGvlSLoRU1mQTmdN0BflfYdUjtx-C6GOu9yEdUrRVpYHowNvF5BAtIW1jsZC1Sd8vu0Kqg6a69BlNDuoyiZTs08uBQo5FhZffCY82O8AkA=w72-h72-p-k-no-nu
IP
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash 683f1f8567a215ff7db88c453b97596e
90930de30c47a2240a99c9e2f97cc56acd82018b
62371b2b88f62609a4e7baa4743e7b4ae2e667773e3098341b5fa72e7a378ce5
GET /img/a/AVvXsEg-pYH78qhE8gT0uMz1i7t9XMR6JIIw7vEwaVXNic5yr_3mjKHEdn4oH-H-JH_Lg4DvzkKph22t7zFFYxhkuGvlSLoRU1mQTmdN0BflfYdUjtx-C6GOu9yEdUrRVpYHowNvF5BAtIW1jsZC1Sd8vu0Kqg6a69BlNDuoyiZTs08uBQo5FhZffCY82O8AkA=w72-h72-p-k-no-nu HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v44f"
expires: Wed, 26 Oct 2022 08:16:17 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="vlcsnap-2021-12-11-01h51m10s306.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Tue, 25 Oct 2022 08:16:17 GMT
server: fife
content-length: 12127
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/a/AVvXsEi_htYtlOXV4h0CwMpGWy2uhH2QWAWXfTKRUDOP_8UwHgYTX9wVfjTuXA-ODLhV6B3Rsh2J14qwyshoH8vyu9kjSIGu-XD8KA6UC1wQlxgkFONcIsbGDgFPMqx4d7JWmWOE3o6EXZnM40X2A2G-mLE7r5Zfz_jaomjAdqocMrv0LvfJVJBkzpQyw2j2Zg=s16000
200 OK 9.2 kB URL HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEi_htYtlOXV4h0CwMpGWy2uhH2QWAWXfTKRUDOP_8UwHgYTX9wVfjTuXA-ODLhV6B3Rsh2J14qwyshoH8vyu9kjSIGu-XD8KA6UC1wQlxgkFONcIsbGDgFPMqx4d7JWmWOE3o6EXZnM40X2A2G-mLE7r5Zfz_jaomjAdqocMrv0LvfJVJBkzpQyw2j2Zg=s16000
IP
File type PNG image data, 200 x 59, 8-bit/color RGB, non-interlaced\012- data
Hash 43153ed3053dabee236f766048b87af2
4a6b176fa2e088420d199afb0d86819fa725e246
1256d699a722d7bb7a5ba1c569b39c086ff49f604d872a737a7a9abc95cd9729
GET /img/a/AVvXsEi_htYtlOXV4h0CwMpGWy2uhH2QWAWXfTKRUDOP_8UwHgYTX9wVfjTuXA-ODLhV6B3Rsh2J14qwyshoH8vyu9kjSIGu-XD8KA6UC1wQlxgkFONcIsbGDgFPMqx4d7JWmWOE3o6EXZnM40X2A2G-mLE7r5Zfz_jaomjAdqocMrv0LvfJVJBkzpQyw2j2Zg=s16000 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v904"
expires: Wed, 26 Oct 2022 08:16:17 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Donate.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Tue, 25 Oct 2022 08:16:17 GMT
server: fife
content-length: 9243
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/a/AVvXsEiI8Fm08jNfoNibJzS8d_Fl2q04PVz39d5BuuhHdlFyFZz83ag82MOzoMsbM3f5u39xU7nfTaQ_2SQh3uDZGcNQoqVQYEEN5x4m9nNpiN0OBm_H1P6QIi8ukfC5B-kZHSFof6fya2C6X5NcE9YstMV_9peRIVBgpyRlho5nRovAUpREnp3izTjJy8FBtw=s72-w640-c-h360
200 OK 7.3 kB URL HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEiI8Fm08jNfoNibJzS8d_Fl2q04PVz39d5BuuhHdlFyFZz83ag82MOzoMsbM3f5u39xU7nfTaQ_2SQh3uDZGcNQoqVQYEEN5x4m9nNpiN0OBm_H1P6QIi8ukfC5B-kZHSFof6fya2C6X5NcE9YstMV_9peRIVBgpyRlho5nRovAUpREnp3izTjJy8FBtw=s72-w640-c-h360
IP
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash a3105f55ae05e9b0b6279993d3fedbb1
7291c90bef881c3a0c06f625a97e97bc0ba06930
9037b4d34769eab8692bf334ff24f4520c022cfe464d8c0e7e3080987e7d4c65
GET /img/a/AVvXsEiI8Fm08jNfoNibJzS8d_Fl2q04PVz39d5BuuhHdlFyFZz83ag82MOzoMsbM3f5u39xU7nfTaQ_2SQh3uDZGcNQoqVQYEEN5x4m9nNpiN0OBm_H1P6QIi8ukfC5B-kZHSFof6fya2C6X5NcE9YstMV_9peRIVBgpyRlho5nRovAUpREnp3izTjJy8FBtw=s72-w640-c-h360 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v977"
expires: Wed, 26 Oct 2022 08:16:17 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="vlcsnap-2022-03-10-00h39m55s409.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Tue, 25 Oct 2022 08:16:17 GMT
server: fife
content-length: 7289
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/a/AVvXsEiQSwPNYyunGumyN3AnY6djWU_IoS1uB_6sznjPNqH68cLN5F15x0s75rmptr04Dh0DAwgxAUpYauzqF4usV2kaO43dFzhuswLANVhX0ZKckOyxqHPhF51jrgx163gzMlEe6LSFIw9Wdy3Qiteueuc-lB1Ew_U5l52l9F9LRKfrv69tMHhXdlrIdEvxpA=w72-h72-p-k-no-nu
200 OK 7.4 kB URL HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEiQSwPNYyunGumyN3AnY6djWU_IoS1uB_6sznjPNqH68cLN5F15x0s75rmptr04Dh0DAwgxAUpYauzqF4usV2kaO43dFzhuswLANVhX0ZKckOyxqHPhF51jrgx163gzMlEe6LSFIw9Wdy3Qiteueuc-lB1Ew_U5l52l9F9LRKfrv69tMHhXdlrIdEvxpA=w72-h72-p-k-no-nu
IP
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash faeaf9aa023817478df3399b95487188
f92d9131ead1e4943d111d35e72740ecabf12a9c
357fdf306363ef902c237054ac0978ce2a8b7248153d393d764bed38aa801a99
GET /img/a/AVvXsEiQSwPNYyunGumyN3AnY6djWU_IoS1uB_6sznjPNqH68cLN5F15x0s75rmptr04Dh0DAwgxAUpYauzqF4usV2kaO43dFzhuswLANVhX0ZKckOyxqHPhF51jrgx163gzMlEe6LSFIw9Wdy3Qiteueuc-lB1Ew_U5l52l9F9LRKfrv69tMHhXdlrIdEvxpA=w72-h72-p-k-no-nu HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v454"
expires: Wed, 26 Oct 2022 08:16:17 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="vlcsnap-2021-12-12-04h15m26s597.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Tue, 25 Oct 2022 08:16:17 GMT
server: fife
content-length: 7413
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 398e3c90084d7d71fc1e9fd833116f5f
3e202da5559a8f219144adee3639d063a98559c0
724547db3ed9f1779308e9dd6604664e6ffa3580ca076fbdc1dfb1b75591bba4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "724547DB3ED9F1779308E9DD6604664E6FFA3580CA076FBDC1DFB1B75591BBA4"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3243
Expires: Tue, 25 Oct 2022 09:10:20 GMT
Date: Tue, 25 Oct 2022 08:16:17 GMT
Connection: keep-alive
blogger.googleusercontent.com/img/a/AVvXsEg1jmiruUAri4HMUJChScuwhodK1xe4vb6J7XiuipaIC1sk1rzChzU2Jo2dfMo74UqSRBWOZ3khgEIXAsbdOniwCb0d_x_Az3p6yUiNvvUSJl5nFhCfZawxV2_Cw-jiTC9x4e-tSivbxahwBmoloph8U7ydpX9xn93ffHIr38KMsg8qs3Xy8saGSisYEg=w72-h72-p-k-no-nu
200 OK 9.9 kB URL HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEg1jmiruUAri4HMUJChScuwhodK1xe4vb6J7XiuipaIC1sk1rzChzU2Jo2dfMo74UqSRBWOZ3khgEIXAsbdOniwCb0d_x_Az3p6yUiNvvUSJl5nFhCfZawxV2_Cw-jiTC9x4e-tSivbxahwBmoloph8U7ydpX9xn93ffHIr38KMsg8qs3Xy8saGSisYEg=w72-h72-p-k-no-nu
IP
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash 0d589c31df8f011a40f583333fa3422c
a8967adf92a55d3e66818a5f415eff8a9df4f66c
6f526795145ef47c2d96e2b5f79e30c9775af54802384e87451c7be1d6826e68
GET /img/a/AVvXsEg1jmiruUAri4HMUJChScuwhodK1xe4vb6J7XiuipaIC1sk1rzChzU2Jo2dfMo74UqSRBWOZ3khgEIXAsbdOniwCb0d_x_Az3p6yUiNvvUSJl5nFhCfZawxV2_Cw-jiTC9x4e-tSivbxahwBmoloph8U7ydpX9xn93ffHIr38KMsg8qs3Xy8saGSisYEg=w72-h72-p-k-no-nu HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v456"
expires: Wed, 26 Oct 2022 08:16:17 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="vlcsnap-2021-12-13-02h47m12s900.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Tue, 25 Oct 2022 08:16:17 GMT
server: fife
content-length: 9896
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/a/AVvXsEiI8Fm08jNfoNibJzS8d_Fl2q04PVz39d5BuuhHdlFyFZz83ag82MOzoMsbM3f5u39xU7nfTaQ_2SQh3uDZGcNQoqVQYEEN5x4m9nNpiN0OBm_H1P6QIi8ukfC5B-kZHSFof6fya2C6X5NcE9YstMV_9peRIVBgpyRlho5nRovAUpREnp3izTjJy8FBtw=w640-h360
200 OK 118 kB URL HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEiI8Fm08jNfoNibJzS8d_Fl2q04PVz39d5BuuhHdlFyFZz83ag82MOzoMsbM3f5u39xU7nfTaQ_2SQh3uDZGcNQoqVQYEEN5x4m9nNpiN0OBm_H1P6QIi8ukfC5B-kZHSFof6fya2C6X5NcE9YstMV_9peRIVBgpyRlho5nRovAUpREnp3izTjJy8FBtw=w640-h360
IP
File type PNG image data, 640 x 360, 8-bit/color RGB, non-interlaced\012- data
Size 118 kB (118270 bytes)
Hash 95e17c86b4161530f5c55cb6e5f73a5a
589cc80404327b832ca89089349445c9676e964f
e213ade9d92ce6e975ce5888c745417293c9fdcc6b4581ca6a094d9de525d102
GET /img/a/AVvXsEiI8Fm08jNfoNibJzS8d_Fl2q04PVz39d5BuuhHdlFyFZz83ag82MOzoMsbM3f5u39xU7nfTaQ_2SQh3uDZGcNQoqVQYEEN5x4m9nNpiN0OBm_H1P6QIi8ukfC5B-kZHSFof6fya2C6X5NcE9YstMV_9peRIVBgpyRlho5nRovAUpREnp3izTjJy8FBtw=w640-h360 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v977"
expires: Wed, 26 Oct 2022 08:16:17 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="vlcsnap-2022-03-10-00h39m55s409.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Tue, 25 Oct 2022 08:16:17 GMT
server: fife
content-length: 118270
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 398e3c90084d7d71fc1e9fd833116f5f
3e202da5559a8f219144adee3639d063a98559c0
724547db3ed9f1779308e9dd6604664e6ffa3580ca076fbdc1dfb1b75591bba4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "724547DB3ED9F1779308E9DD6604664E6FFA3580CA076FBDC1DFB1B75591BBA4"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3243
Expires: Tue, 25 Oct 2022 09:10:20 GMT
Date: Tue, 25 Oct 2022 08:16:17 GMT
Connection: keep-alive
blogger.googleusercontent.com/img/a/AVvXsEiQSwPNYyunGumyN3AnY6djWU_IoS1uB_6sznjPNqH68cLN5F15x0s75rmptr04Dh0DAwgxAUpYauzqF4usV2kaO43dFzhuswLANVhX0ZKckOyxqHPhF51jrgx163gzMlEe6LSFIw9Wdy3Qiteueuc-lB1Ew_U5l52l9F9LRKfrv69tMHhXdlrIdEvxpA=s72-w640-c-h360
200 OK 8.6 kB URL HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEiQSwPNYyunGumyN3AnY6djWU_IoS1uB_6sznjPNqH68cLN5F15x0s75rmptr04Dh0DAwgxAUpYauzqF4usV2kaO43dFzhuswLANVhX0ZKckOyxqHPhF51jrgx163gzMlEe6LSFIw9Wdy3Qiteueuc-lB1Ew_U5l52l9F9LRKfrv69tMHhXdlrIdEvxpA=s72-w640-c-h360
IP
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash d929e43bea24ef7c1a8949925b5ad85f
73db245ac6e02a1118ee96e4a855cceeda2d3a13
fdc5e24726df7e0a5dae142978fa538ec4db5e1345ee4e1e2a2c6fd71ae58c19
GET /img/a/AVvXsEiQSwPNYyunGumyN3AnY6djWU_IoS1uB_6sznjPNqH68cLN5F15x0s75rmptr04Dh0DAwgxAUpYauzqF4usV2kaO43dFzhuswLANVhX0ZKckOyxqHPhF51jrgx163gzMlEe6LSFIw9Wdy3Qiteueuc-lB1Ew_U5l52l9F9LRKfrv69tMHhXdlrIdEvxpA=s72-w640-c-h360 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v454"
expires: Wed, 26 Oct 2022 08:16:17 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="vlcsnap-2021-12-12-04h15m26s597.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Tue, 25 Oct 2022 08:16:17 GMT
server: fife
content-length: 8620
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/a/AVvXsEhDIx0shoh9IkpS6HSYxUkltCNpSdQJtc4zZLQCmi493rfP2IH_YkODoypLv61EOypQON7KCQN3GGPqLeZdnhA6A8mKPTTLUjpysxG3Sx97G_2OnD5gHe45PK6ipFEmUbTkBVl3_mwYfCjGvMYaAmK2MParm1yCv2tj5vhIA3pnysERpDgRyU-F8NCBSQ=s72-w640-c-h360
200 OK 11 kB URL HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEhDIx0shoh9IkpS6HSYxUkltCNpSdQJtc4zZLQCmi493rfP2IH_YkODoypLv61EOypQON7KCQN3GGPqLeZdnhA6A8mKPTTLUjpysxG3Sx97G_2OnD5gHe45PK6ipFEmUbTkBVl3_mwYfCjGvMYaAmK2MParm1yCv2tj5vhIA3pnysERpDgRyU-F8NCBSQ=s72-w640-c-h360
IP
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash a9f2f6f195f10d69a0edec222f084f25
3dce2589539d2ea76987ada083ecd7d8457a11dd
6c5211fdf15c611d9a5c64466e2d53f15c364d4d03d75c140330b6d177d61cb1
GET /img/a/AVvXsEhDIx0shoh9IkpS6HSYxUkltCNpSdQJtc4zZLQCmi493rfP2IH_YkODoypLv61EOypQON7KCQN3GGPqLeZdnhA6A8mKPTTLUjpysxG3Sx97G_2OnD5gHe45PK6ipFEmUbTkBVl3_mwYfCjGvMYaAmK2MParm1yCv2tj5vhIA3pnysERpDgRyU-F8NCBSQ=s72-w640-c-h360 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v97d"
expires: Wed, 26 Oct 2022 08:16:17 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="vlcsnap-2022-03-17-01h36m18s515.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Tue, 25 Oct 2022 08:16:17 GMT
server: fife
content-length: 10845
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ac739ea-5d5d-4900-8e3f-c815c25f5c8d.png
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ac739ea-5d5d-4900-8e3f-c815c25f5c8d.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1f22a424f72f369a3511d6af25d67a82
e9aabd2daee2d2e6265a69e309542c5b5983d1f2
600f1a4989fe65b14cfe5234c8bc723834d53543026c13eaf8217b22d3a3a9a9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ac739ea-5d5d-4900-8e3f-c815c25f5c8d.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11916
x-amzn-requestid: 319eaac6-dfda-4a48-ae9a-612650705bd6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: afdKuHK6IAMFnXA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63560f11-61545bf1110795c0299b85f4;Sampled=0
x-amzn-remapped-date: Mon, 24 Oct 2022 04:05:37 GMT
x-amz-cf-pop: SFO53-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: wrxksbQXK96TvYk2rEf5biIaLtjbB1ia0FpYxnd908Dd_MkKQSRCtQ==
via: 1.1 0da7848263e39308b12bac6a925793b0.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 15:02:35 GMT
etag: "e9aabd2daee2d2e6265a69e309542c5b5983d1f2"
content-type: image/jpeg
age: 62022
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 398e3c90084d7d71fc1e9fd833116f5f
3e202da5559a8f219144adee3639d063a98559c0
724547db3ed9f1779308e9dd6604664e6ffa3580ca076fbdc1dfb1b75591bba4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "724547DB3ED9F1779308E9DD6604664E6FFA3580CA076FBDC1DFB1B75591BBA4"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3243
Expires: Tue, 25 Oct 2022 09:10:20 GMT
Date: Tue, 25 Oct 2022 08:16:17 GMT
Connection: keep-alive
blogger.googleusercontent.com/img/a/AVvXsEhsuOhftlDZFDxUXsFnhu2QqpD81u2uP88x9dSTupRQzIqybAl20KRbNnOfs3t9GNJy7cCqbrhqCS2fOhXR7tzLa6rrdBXji2RdVJVCK5dHvXtWVF4E6KpgOpZTpo_p_rEmrhDKoef70exxMu5vrCNHV53X92Wd-isXEFrXqQTq_en3k1cyaPQ-DPLq4A=w640-h360
200 OK 241 kB URL HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEhsuOhftlDZFDxUXsFnhu2QqpD81u2uP88x9dSTupRQzIqybAl20KRbNnOfs3t9GNJy7cCqbrhqCS2fOhXR7tzLa6rrdBXji2RdVJVCK5dHvXtWVF4E6KpgOpZTpo_p_rEmrhDKoef70exxMu5vrCNHV53X92Wd-isXEFrXqQTq_en3k1cyaPQ-DPLq4A=w640-h360
IP
File type PNG image data, 640 x 360, 8-bit/color RGB, non-interlaced\012- data
Size 241 kB (240952 bytes)
Hash d90e7e5821df23d127592a15e5723b5a
4b740bff3a1dc9d60d15892e687328195bb778a7
6b56a33f81cef96af4f2a7ab7d91cf886e4e0d7b0d8cb36876a6e46c519c68b2
GET /img/a/AVvXsEhsuOhftlDZFDxUXsFnhu2QqpD81u2uP88x9dSTupRQzIqybAl20KRbNnOfs3t9GNJy7cCqbrhqCS2fOhXR7tzLa6rrdBXji2RdVJVCK5dHvXtWVF4E6KpgOpZTpo_p_rEmrhDKoef70exxMu5vrCNHV53X92Wd-isXEFrXqQTq_en3k1cyaPQ-DPLq4A=w640-h360 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v410"
expires: Wed, 26 Oct 2022 08:16:17 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="vlcsnap-2021-11-12-06h37m55s133.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Tue, 25 Oct 2022 08:16:17 GMT
server: fife
content-length: 240952
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/a/AVvXsEgHimv7S1ouV7lmimbuFuVYG46wvc3d5RWHI4_lAdnTNddFy0Mlv17_8WwGEoVZ5CaWcIpI0RrhF_9ZsZpBvLdDimiNgJD7CHBJ9ot3I3XS2DsFJ7KdPYTBR4l9PAuhsLB1QEp6Id9MPeyyvVRs_Ju4ei8nCq9gFlBWkRP6KV3lDuTyxbILXEIkrBVD3g=w640-h360
200 OK 327 kB URL HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEgHimv7S1ouV7lmimbuFuVYG46wvc3d5RWHI4_lAdnTNddFy0Mlv17_8WwGEoVZ5CaWcIpI0RrhF_9ZsZpBvLdDimiNgJD7CHBJ9ot3I3XS2DsFJ7KdPYTBR4l9PAuhsLB1QEp6Id9MPeyyvVRs_Ju4ei8nCq9gFlBWkRP6KV3lDuTyxbILXEIkrBVD3g=w640-h360
IP
File type PNG image data, 640 x 360, 8-bit/color RGB, non-interlaced\012- data
Size 327 kB (326658 bytes)
Hash 0a438ce86e7a41df2b90a5b9186f73fb
88b78ef4d511114a8e23aaed2ded6dd8bceba9d0
f960d4c6521e09cc200421162ce62ab06409056b91885ebd0c37f12b9e36bf96
GET /img/a/AVvXsEgHimv7S1ouV7lmimbuFuVYG46wvc3d5RWHI4_lAdnTNddFy0Mlv17_8WwGEoVZ5CaWcIpI0RrhF_9ZsZpBvLdDimiNgJD7CHBJ9ot3I3XS2DsFJ7KdPYTBR4l9PAuhsLB1QEp6Id9MPeyyvVRs_Ju4ei8nCq9gFlBWkRP6KV3lDuTyxbILXEIkrBVD3g=w640-h360 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v979"
expires: Wed, 26 Oct 2022 08:16:17 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="vlcsnap-2022-03-13-00h14m03s621.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Tue, 25 Oct 2022 08:16:17 GMT
server: fife
content-length: 326658
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F075a794f-9140-4676-afb2-493f44932cc3.jpeg
200 OK 4.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F075a794f-9140-4676-afb2-493f44932cc3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3cf322f19151bcfa374c2e32b9ac986f
e8e69ac951def18bc1e03ecd4fe8a21d3b825b27
54ddfd1876f65e264b9b3209a0e805a3796013b4aacc8e9fd20b49754b4917a0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F075a794f-9140-4676-afb2-493f44932cc3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4206
x-amzn-requestid: 6b02f96a-ea03-4eff-acde-c73925260102
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ah3E3GPQoAMFpIA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63570552-77cf762d0e54f1f60efe52c3;Sampled=0
x-amzn-remapped-date: Mon, 24 Oct 2022 21:36:18 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: jiu-Z6DMgXxXdZ5BDwjNoq5Y15kBgM894k4EY2qSRZKdvk0bfkn89A==
via: 1.1 fec77e486350d1bd33f526a760d8b5a4.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 21:50:16 GMT
age: 37561
etag: "e8e69ac951def18bc1e03ecd4fe8a21d3b825b27"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh8ukvF9fASUv1ODnmEim8YG0nXVD14L9q43ihgy3yeWTG0ILG__hGTRmBB-sL8nuXw3p12Vwq83VFX68F5PKvWZTBQ5NWuFUKZeSlhRR7ETUQK1SLWSXJ3MOzOoLQS3Hk3mVoHqX0pEglj84E48gvyK0-mQ0chfHznJY8Keai7aZC4EhCf0s3EwC5wig/w640-h360/vlcsnap-2022-03-18-20h31m59s088.png
200 OK 370 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh8ukvF9fASUv1ODnmEim8YG0nXVD14L9q43ihgy3yeWTG0ILG__hGTRmBB-sL8nuXw3p12Vwq83VFX68F5PKvWZTBQ5NWuFUKZeSlhRR7ETUQK1SLWSXJ3MOzOoLQS3Hk3mVoHqX0pEglj84E48gvyK0-mQ0chfHznJY8Keai7aZC4EhCf0s3EwC5wig/w640-h360/vlcsnap-2022-03-18-20h31m59s088.png
IP
File type PNG image data, 640 x 360, 8-bit/color RGB, non-interlaced\012- data
Size 370 kB (370161 bytes)
Hash bc5103dc9e5c146ad4314f459d0909a1
80a8a19ca762b683d7207eff23b575e15dd9f096
877a85eada7696e8fda215324f50b22d9e5bf2a960890a36c55d00cf15f990a2
GET /img/b/R29vZ2xl/AVvXsEh8ukvF9fASUv1ODnmEim8YG0nXVD14L9q43ihgy3yeWTG0ILG__hGTRmBB-sL8nuXw3p12Vwq83VFX68F5PKvWZTBQ5NWuFUKZeSlhRR7ETUQK1SLWSXJ3MOzOoLQS3Hk3mVoHqX0pEglj84E48gvyK0-mQ0chfHznJY8Keai7aZC4EhCf0s3EwC5wig/w640-h360/vlcsnap-2022-03-18-20h31m59s088.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v983"
expires: Wed, 26 Oct 2022 08:16:17 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="vlcsnap-2022-03-18-20h31m59s088.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Tue, 25 Oct 2022 08:16:17 GMT
server: fife
content-length: 370161
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe70105c7-5a5d-48c2-a113-06846e24dff9.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe70105c7-5a5d-48c2-a113-06846e24dff9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e43859d91550f002f2fc145b8a044f40
762e9f0ce9256ff9a54e08d76dca7596d44677df
3d39a87540b716721e9d4e28aa499233ccde5ed4c6e7f1a902010e56572c8f46
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe70105c7-5a5d-48c2-a113-06846e24dff9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11822
x-amzn-requestid: 1702783e-fce4-4c9d-96a9-ee0477cff0ca
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aHpINH1LIAMFZjg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634c889a-0cc362f90671a9827f4573f9;Sampled=0
x-amzn-remapped-date: Sun, 16 Oct 2022 22:41:30 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: YgdgwWNWat8JCI07iCToqMsVpoWDl54TS0Q6o41OGaCePkGjNfYzjA==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 04:08:53 GMT
age: 14844
etag: "762e9f0ce9256ff9a54e08d76dca7596d44677df"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4187937-4231-40b4-ad9b-64f01574c759.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4187937-4231-40b4-ad9b-64f01574c759.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3f221d25faa21470234ce71bf4c932d1
645eaf4c0b5fddecf421e60cec8383b18aa9ade1
fed14838d30250a3e543b00460f099db77084cbe8be03d6dcd4bf41f3e843125
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4187937-4231-40b4-ad9b-64f01574c759.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11349
x-amzn-requestid: 75e9b497-24e9-4fa9-918a-f1500bddb597
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aLiDqGEiIAMF6LQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634e16e4-23e290b155802d4c7ddea4a8;Sampled=0
x-amzn-remapped-date: Tue, 18 Oct 2022 03:00:52 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 3WzSkIh7GxMUoDzYRvmCsEPY7ma9XF7arHIvbhD3KXMUwe5NGWgSog==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 07:35:57 GMT
age: 2420
etag: "645eaf4c0b5fddecf421e60cec8383b18aa9ade1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f505e74-07f3-4154-bfa4-5dfc184b8262.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f505e74-07f3-4154-bfa4-5dfc184b8262.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 01dacddfb62128799a20e0541bf5a18c
1bb8047c270b76c9dfcd8dba4a63b25c7604f03d
65f5c51b84ff7a131a3a695142ae9d82a73a516792abdd2d137714a1a3cf3bb5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f505e74-07f3-4154-bfa4-5dfc184b8262.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7361
x-amzn-requestid: e0f20463-79ba-4eec-b7f5-adbe39995a00
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aYvMsGpjIAMFyIA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63535f1d-79afe3a37142b5743a499e36;Sampled=0
x-amzn-remapped-date: Sat, 22 Oct 2022 03:10:21 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: QxySJ74mvhz9JJK3s-uBK87yNZE4DRbrMann1Kfu8Rk3W_tsNeKTdg==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 05:53:36 GMT
age: 8561
etag: "1bb8047c270b76c9dfcd8dba4a63b25c7604f03d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/a/AVvXsEg1jmiruUAri4HMUJChScuwhodK1xe4vb6J7XiuipaIC1sk1rzChzU2Jo2dfMo74UqSRBWOZ3khgEIXAsbdOniwCb0d_x_Az3p6yUiNvvUSJl5nFhCfZawxV2_Cw-jiTC9x4e-tSivbxahwBmoloph8U7ydpX9xn93ffHIr38KMsg8qs3Xy8saGSisYEg=s72-w640-c-h360
200 OK 9.9 kB URL HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEg1jmiruUAri4HMUJChScuwhodK1xe4vb6J7XiuipaIC1sk1rzChzU2Jo2dfMo74UqSRBWOZ3khgEIXAsbdOniwCb0d_x_Az3p6yUiNvvUSJl5nFhCfZawxV2_Cw-jiTC9x4e-tSivbxahwBmoloph8U7ydpX9xn93ffHIr38KMsg8qs3Xy8saGSisYEg=s72-w640-c-h360
IP
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash 6c0590aaa9fe288716a97013557291ed
53f7032f344209b62d75e6528a42f73efb45cf0e
e2baa5ae085de23694ff37ab2359e61ec0bfbec202809362d98988e9879ba9fb
GET /img/a/AVvXsEg1jmiruUAri4HMUJChScuwhodK1xe4vb6J7XiuipaIC1sk1rzChzU2Jo2dfMo74UqSRBWOZ3khgEIXAsbdOniwCb0d_x_Az3p6yUiNvvUSJl5nFhCfZawxV2_Cw-jiTC9x4e-tSivbxahwBmoloph8U7ydpX9xn93ffHIr38KMsg8qs3Xy8saGSisYEg=s72-w640-c-h360 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v456"
expires: Wed, 26 Oct 2022 08:16:17 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="vlcsnap-2021-12-13-02h47m12s900.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Tue, 25 Oct 2022 08:16:17 GMT
server: fife
content-length: 9921
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/a/AVvXsEiCO7ePZDpovOxynaTsp2VFQZil6lrJjB2nbtOCuMYJ33SU0kmgrubbAfbtAVeOPH-KEklVGS9MZFFEerZV_9ZLhNyEVIkwobZ5Sr2kn00ndIqUrneHBwziAHKf7nWM_ZSgV66HhK4RLUWPPekQhtJmyNJp1hTRJQfpT69S7S5kzNa2CYRSmwjGptSBWA=w640-h360
200 OK 118 kB URL HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEiCO7ePZDpovOxynaTsp2VFQZil6lrJjB2nbtOCuMYJ33SU0kmgrubbAfbtAVeOPH-KEklVGS9MZFFEerZV_9ZLhNyEVIkwobZ5Sr2kn00ndIqUrneHBwziAHKf7nWM_ZSgV66HhK4RLUWPPekQhtJmyNJp1hTRJQfpT69S7S5kzNa2CYRSmwjGptSBWA=w640-h360
IP
File type PNG image data, 640 x 360, 8-bit/color RGB, non-interlaced\012- data
Size 118 kB (117732 bytes)
Hash dcbffe6fd7511b72518d6fc10549ec7e
bf98ef9e2544226901730249d798209e363b6301
31edaf82c09fe7ef7a479e8d27a6cf735256bae5526dd1ede2b900ff490abddd
GET /img/a/AVvXsEiCO7ePZDpovOxynaTsp2VFQZil6lrJjB2nbtOCuMYJ33SU0kmgrubbAfbtAVeOPH-KEklVGS9MZFFEerZV_9ZLhNyEVIkwobZ5Sr2kn00ndIqUrneHBwziAHKf7nWM_ZSgV66HhK4RLUWPPekQhtJmyNJp1hTRJQfpT69S7S5kzNa2CYRSmwjGptSBWA=w640-h360 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v97b"
expires: Wed, 26 Oct 2022 08:16:17 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="vlcsnap-2022-03-15-00h43m28s638.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Tue, 25 Oct 2022 08:16:17 GMT
server: fife
content-length: 117732
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda327ff0-bd82-4034-a53b-e04d5c486276.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda327ff0-bd82-4034-a53b-e04d5c486276.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 531f350512ac7712d932234803aa4602
2fb4599ad3d513a160c1f29fefda27b45852c381
7a4da3420f736c098806676359b8ff80578a2e1e98fc0e20e45e2d6192e1d566
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda327ff0-bd82-4034-a53b-e04d5c486276.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8090
x-amzn-requestid: a84a2888-e0eb-40d3-8377-9c1ea2af733c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aVb2oH2uoAMFueA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63520cf7-204870ee3f63ced427033eb5;Sampled=0
x-amzn-remapped-date: Fri, 21 Oct 2022 03:07:35 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: fUBXr7SKYdvhryoB8p9to-Eo8twjspRYnHO2xf9TtvLJIIyOwe3W1w==
via: 1.1 1de1880e08f1cae7d1aca174a29a5c1e.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 08:34:45 GMT
age: 85292
etag: "2fb4599ad3d513a160c1f29fefda27b45852c381"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4fe08d6ffc931438b886eb80f073ad2e
dae5e9eb8bd9053329d24a55b8017c8162cb21d2
49a26dbac4208540e0d361219db57bea3922a33b0fd692212fec7a61727d387c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5ce788cdd348a769704a7f874b5a2474
4a4dfb44c394a90c5f56af273be8e0924535b8a5
a6ccf1a057148266591bc317c4f8225d00cd81880c559db08f824012f0c397d5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.com/adsid/integrator.js?domain=www.orwell.city
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=www.orwell.city
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=www.orwell.city HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 25 Oct 2022 08:16:18 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=www.orwell.city
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=www.orwell.city
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=www.orwell.city HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 25 Oct 2022 08:16:18 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 25 Oct 2022 08:16:18 GMT
access-control-allow-origin: *
etag: "63575841-2b"
expires: Tue, 25 Oct 2022 09:16:18 GMT
accept-ranges: bytes
last-modified: Tue, 25 Oct 2022 06:30:09 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4fe08d6ffc931438b886eb80f073ad2e
dae5e9eb8bd9053329d24a55b8017c8162cb21d2
49a26dbac4208540e0d361219db57bea3922a33b0fd692212fec7a61727d387c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5ce788cdd348a769704a7f874b5a2474
4a4dfb44c394a90c5f56af273be8e0924535b8a5
a6ccf1a057148266591bc317c4f8225d00cd81880c559db08f824012f0c397d5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mc.yandex.ru/watch/80600038/1?wmode=7&page-url=https%3A%2F%2Fwww.orwell.city%2F2&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahc77qkb9hqc2jb24budq4%3Afp%3A1494%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A690303775317%3Ahid%3A870568927%3Az%3A0%3Ai%3A20221025081615%3Aet%3A1666685776%3Ac%3A1%3Arn%3A750641919%3Arqn%3A1%3Au%3A1666685776688202108%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C207%2C470%2C0%2C403%2C0%2C%2C886%2C52%2C%2C%2C%2C1983%3Ans%3A1666685773452%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666685776%3At%3APage%20Not%20Found%20-%20ORWELL%20CITY&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
200 OK 407 B URL HTTP/2 mc.yandex.ru/watch/80600038/1?wmode=7&page-url=https%3A%2F%2Fwww.orwell.city%2F2&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahc77qkb9hqc2jb24budq4%3Afp%3A1494%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A690303775317%3Ahid%3A870568927%3Az%3A0%3Ai%3A20221025081615%3Aet%3A1666685776%3Ac%3A1%3Arn%3A750641919%3Arqn%3A1%3Au%3A1666685776688202108%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C207%2C470%2C0%2C403%2C0%2C%2C886%2C52%2C%2C%2C%2C1983%3Ans%3A1666685773452%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666685776%3At%3APage%20Not%20Found%20-%20ORWELL%20CITY&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (407), with no line terminators
Hash 0d60a87119d36f84f28d8bf6a14c1290
7868d95fb7136d35ee7d728ca1c030d7a5cadebc
a84c9ac5452ac2e14f1c2fa9b2603711927f47ea203797bebe167bbb0ca913dd
GET /watch/80600038/1?wmode=7&page-url=https%3A%2F%2Fwww.orwell.city%2F2&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahc77qkb9hqc2jb24budq4%3Afp%3A1494%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A690303775317%3Ahid%3A870568927%3Az%3A0%3Ai%3A20221025081615%3Aet%3A1666685776%3Ac%3A1%3Arn%3A750641919%3Arqn%3A1%3Au%3A1666685776688202108%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C207%2C470%2C0%2C403%2C0%2C%2C886%2C52%2C%2C%2C%2C1983%3Ans%3A1666685773452%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666685776%3At%3APage%20Not%20Found%20-%20ORWELL%20CITY&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.orwell.city
Referer: https://www.orwell.city/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 407
date: Tue, 25 Oct 2022 08:16:18 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://www.orwell.city
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 25-Oct-2022 08:16:18 GMT
last-modified: Tue, 25-Oct-2022 08:16:18 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bf10f95d50c50dee2deaab1de5624867
d072afd2950f83002ca53588feed8a88fd2321ac
f639babdd513b2f0dd70687271d9a7ff827d334f67383cfa48bd2608ae9a3548
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
partner.googleadservices.com/gampad/cookie.js?domain=www.orwell.city&callback=_gfp_s_&client=ca-pub-5102631316300045&gpid_exp=1
200 OK 251 B URL HTTP/2 partner.googleadservices.com/gampad/cookie.js?domain=www.orwell.city&callback=_gfp_s_&client=ca-pub-5102631316300045&gpid_exp=1
IP
File type ASCII text, with very long lines (389), with no line terminators
Hash 2619cd269681a57eaab6fec911c8b8ef
67f7c3c2c9e6eee8ebe6a34107b32a9f12f05c93
33961570dc93f4a8686a3c0938fb72f638f9cc5b4329f5ffb14ab6d1ba011110
GET /gampad/cookie.js?domain=www.orwell.city&callback=_gfp_s_&client=ca-pub-5102631316300045&gpid_exp=1 HTTP/1.1
Host: partner.googleadservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 25 Oct 2022 08:16:18 GMT
server: cafe
cache-control: private
content-length: 251
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bf10f95d50c50dee2deaab1de5624867
d072afd2950f83002ca53588feed8a88fd2321ac
f639babdd513b2f0dd70687271d9a7ff827d334f67383cfa48bd2608ae9a3548
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
xn--r1a.website/s/orwellcity
200 OK 20 kB URL HTTP/1.1 xn--r1a.website/s/orwellcity
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1279)
Hash d23fcb87aa5b16a2c0dbd7ceac07d49a
11e3c32194a7182227ccf6562a5bfb462fbddcd8
b94a32cc661691a8b3c855ff72b64d57c012eb688fd746b090f03fb9a24a2978
Analyzer Verdict Alert fortinet Malware
GET /s/orwellcity HTTP/1.1
Host: xn--r1a.website
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 25 Oct 2022 08:16:18 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: stel_ssid=de71f626cb52b116ed_1756560090988388781; expires=Wed, 26 Oct 2022 08:16:18 GMT; path=/; samesite=None; secure; HttpOnly
Pragma: no-cache
Cache-control: no-store
Strict-Transport-Security: max-age=35768000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
ocsp.pki.goog/s/gts1d4/Svlf1UIkr8I
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/Svlf1UIkr8I
IP
Hash 5c3fb15242305526bf766ba9c713897c
036466fadcf10627b734db42027e512401e015f3
5e4d3dcb64a8b969d0cbca87659bd747733fd8323f89bd04d27668c9ca45de70
POST /s/gts1d4/Svlf1UIkr8I HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:18 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Domine:400,700&ver=4.2.4
200 OK 18 kB URL HTTP/2 fonts.googleapis.com/css?family=Domine:400,700&ver=4.2.4
IP
Hash a7c95255ef1992963c664650587b3a06
d365fa3d1c76ea4780417a35d98e99734a454cc4
610fc6161af46db9d9303ae18b0b021deb30623ac150088b411be9da7fe45d43
GET /css?family=Domine:400,700&ver=4.2.4 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 25 Oct 2022 08:16:16 GMT
date: Tue, 25 Oct 2022 08:16:16 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash b8e044fb49125e9368524ef44bf1ee03
eb4f6ce2ff0ec1fe42fb341de813b78d4e427eed
56e07928670c56b122370ec7df5e5f1dd5eafd20c6259b51e6c0e1c5b8ba7114
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 25 Oct 2022 08:16:18 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 24 Oct 2022 22:39:26 GMT
Expires: Tue, 25 Oct 2022 22:39:26 GMT
ETag: "eb4f6ce2ff0ec1fe42fb341de813b78d4e427eed"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash b8e044fb49125e9368524ef44bf1ee03
eb4f6ce2ff0ec1fe42fb341de813b78d4e427eed
56e07928670c56b122370ec7df5e5f1dd5eafd20c6259b51e6c0e1c5b8ba7114
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 25 Oct 2022 08:16:18 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 24 Oct 2022 22:39:26 GMT
Expires: Tue, 25 Oct 2022 22:39:26 GMT
ETag: "eb4f6ce2ff0ec1fe42fb341de813b78d4e427eed"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash b8e044fb49125e9368524ef44bf1ee03
eb4f6ce2ff0ec1fe42fb341de813b78d4e427eed
56e07928670c56b122370ec7df5e5f1dd5eafd20c6259b51e6c0e1c5b8ba7114
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 25 Oct 2022 08:16:18 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 24 Oct 2022 22:39:26 GMT
Expires: Tue, 25 Oct 2022 22:39:26 GMT
ETag: "eb4f6ce2ff0ec1fe42fb341de813b78d4e427eed"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash b8e044fb49125e9368524ef44bf1ee03
eb4f6ce2ff0ec1fe42fb341de813b78d4e427eed
56e07928670c56b122370ec7df5e5f1dd5eafd20c6259b51e6c0e1c5b8ba7114
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 25 Oct 2022 08:16:18 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 24 Oct 2022 22:39:26 GMT
Expires: Tue, 25 Oct 2022 22:39:26 GMT
ETag: "eb4f6ce2ff0ec1fe42fb341de813b78d4e427eed"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.pki.goog/s/gts1d4/Svlf1UIkr8I
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/Svlf1UIkr8I
IP
Hash 5c3fb15242305526bf766ba9c713897c
036466fadcf10627b734db42027e512401e015f3
5e4d3dcb64a8b969d0cbca87659bd747733fd8323f89bd04d27668c9ca45de70
POST /s/gts1d4/Svlf1UIkr8I HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:18 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
telegram.org/img/emoji/40/F09F9189F09F8FBB.png
200 OK 1.4 kB URL HTTP/2 telegram.org/img/emoji/40/F09F9189F09F8FBB.png
IP
ASN #62041 Telegram Messenger Inc
File type PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash b3209d511bfa7925a7ed172ce478cb7d
0159ccce6e29239e89e44c3a4f7c1c2990138f85
dce1d2885b0d564724b04ce9fbfb23c9f9d1f2c970f9aa092518974134ad76a3
GET /img/emoji/40/F09F9189F09F8FBB.png HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 25 Oct 2022 08:16:19 GMT
content-type: image/png
content-length: 1416
last-modified: Fri, 01 Nov 2019 00:04:50 GMT
etag: "5dbb76a2-588"
expires: Sat, 29 Oct 2022 08:16:19 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
telegram.org/img/emoji/40/E29D95.png
200 OK 502 B URL HTTP/2 telegram.org/img/emoji/40/E29D95.png
IP
ASN #62041 Telegram Messenger Inc
File type PNG image data, 40 x 40, 8-bit gray+alpha, non-interlaced\012- data
Hash 8023351f93458396383ed42875cbbe93
467204c2a658c5f46259b9734f5328a2ca4ea403
547b2599d1712190d71a092bb6756052495d7f9bc69fd8104273615fc9367e35
GET /img/emoji/40/E29D95.png HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 25 Oct 2022 08:16:19 GMT
content-type: image/png
content-length: 502
last-modified: Fri, 01 Nov 2019 00:04:50 GMT
etag: "5dbb76a2-1f6"
expires: Sat, 29 Oct 2022 08:16:19 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
telegram.org/img/emoji/40/E280BC.png
200 OK 1.2 kB URL HTTP/2 telegram.org/img/emoji/40/E280BC.png
IP
ASN #62041 Telegram Messenger Inc
File type PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 663785dbb514c6131a634a1521563d34
411dc515ad6c998c63046123e2c130f27710cb72
4a003dc58f3e95a18e44712b9161181319e6a40613242cbcac158f6dc8d7339d
GET /img/emoji/40/E280BC.png HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 25 Oct 2022 08:16:19 GMT
content-type: image/png
content-length: 1190
last-modified: Fri, 01 Nov 2019 00:04:50 GMT
etag: "5dbb76a2-4a6"
expires: Sat, 29 Oct 2022 08:16:19 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
telegram.org/js/widget-frame.js?60
200 OK 45 kB URL HTTP/2 telegram.org/js/widget-frame.js?60
IP
ASN #62041 Telegram Messenger Inc
Hash 278b374c40c475f220e8e4c70c70dfa8
4ba99c73147c2e954a14193ca8c7c08db0df0c27
2d7c571cc43e26564c2e29f8516e6dd7275182960da7d2c8b0b24eca3aa82816
GET /js/widget-frame.js?60 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 25 Oct 2022 08:16:18 GMT
content-type: application/javascript
last-modified: Sat, 08 Oct 2022 23:46:30 GMT
etag: W/"63420bd6-16c85"
expires: Sat, 29 Oct 2022 08:16:18 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
telegram.org/js/telegram-web.js?14
200 OK 16 kB URL HTTP/2 telegram.org/js/telegram-web.js?14
IP
ASN #62041 Telegram Messenger Inc
Hash 1c69298f285ad4052d3be6f2f0c2d067
8dcca440082a2b81799d8619dfa81b96d0a5f45b
b9707ea8a05a2c94ac5bfe428d04cd888762d1afc4e3682da0039ed575c8c205
GET /js/telegram-web.js?14 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 25 Oct 2022 08:16:18 GMT
content-type: application/javascript
last-modified: Fri, 18 Mar 2022 10:32:52 GMT
etag: W/"62345fd4-2e63"
expires: Sat, 29 Oct 2022 08:16:18 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2
200 OK 11 kB URL HTTP/2 telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2
IP
ASN #62041 Telegram Messenger Inc
File type Web Open Font Format (Version 2), TrueType, length 11028, version 1.0\012- data
Hash 1f6d3cf6d38f25d83d95f5a800b8cac3
279f300ca2cbbdf9f5036ef2f438607fbf377daa
796de064b8d80eba7ccacb8ba67d77fdbcdf4b385c844645d452c24537b3108f
GET /fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://xn--r1a.website
Connection: keep-alive
Referer: https://telegram.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 25 Oct 2022 08:16:19 GMT
content-type: application/octet-stream
content-length: 11028
last-modified: Thu, 20 Oct 2022 11:05:33 GMT
etag: "63512b7d-2b14"
expires: Sat, 29 Oct 2022 08:16:19 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2
200 OK 11 kB URL HTTP/2 telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2
IP
ASN #62041 Telegram Messenger Inc
File type Web Open Font Format (Version 2), TrueType, length 11072, version 1.0\012- data
Hash e7df3d0942815909add8f9d0c40d00d9
cf5032eea3399a58870e8a05e629b006a8c7c3c7
bce2f309470952b7affa62ff4d91b454334c68cefa541429b502904d20696875
GET /fonts/Roboto/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://xn--r1a.website
Connection: keep-alive
Referer: https://telegram.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 25 Oct 2022 08:16:19 GMT
content-type: application/octet-stream
content-length: 11072
last-modified: Thu, 20 Oct 2022 11:05:33 GMT
etag: "63512b7d-2b40"
expires: Sat, 29 Oct 2022 08:16:19 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
xn--r1a.website/v/
200 OK 24 B IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash 01e9a6bdf6f882e64253608f6b3d65f3
b25d1264aeffa89799841518a2bccbb408b4437b
5191dd01952ad22c138d1fb8b253c4ba28ed0b823ac46648b4c033c605983ab9
Analyzer Verdict Alert fortinet Malware
POST /v/ HTTP/1.1
Host: xn--r1a.website
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 93
Origin: https://xn--r1a.website
Connection: keep-alive
Referer: https://xn--r1a.website/s/orwellcity
Cookie: stel_ssid=de71f626cb52b116ed_1756560090988388781
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 25 Oct 2022 08:16:20 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-control: no-store
Strict-Transport-Security: max-age=35768000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 719ce0046f17e33dd787b33a065abf84
27e24cb0ab59607018e79c84afa64aca5151739f
9c3df8a5f85fdac58afcc7177074b5949db3e8bfe6d497637103ae12e2e4ab32
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6b183dc2bd0829ce80eb64a0a28d91e7
432f422b2723fdba3f195d9d28ab75492ad497d2
cae00bc5a9c3b9e166805e53c4175d96a0b739817d883f477102e1501a49ac57
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 08:16:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api2/aframe
200 OK 512 B URL HTTP/2 www.google.com/recaptcha/api2/aframe
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (783), with no line terminators
Hash 7bf51769f1c7654fab4e6d078b2a6838
afe019ec46fda5aba10e4c380ca5932e6202852c
632527dd23441b7cb28ff2ba2351b48086f0cb75cc32351df0ae12a499fc437f
GET /recaptcha/api2/aframe HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Tue, 25 Oct 2022 08:16:20 GMT
date: Tue, 25 Oct 2022 08:16:20 GMT
cache-control: private, max-age=300
content-type: text/html; charset=utf-8
content-security-policy: script-src 'nonce-Q2dAhETzpk8Ysq8R0aCnEg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 512
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash b8e044fb49125e9368524ef44bf1ee03
eb4f6ce2ff0ec1fe42fb341de813b78d4e427eed
56e07928670c56b122370ec7df5e5f1dd5eafd20c6259b51e6c0e1c5b8ba7114
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 25 Oct 2022 08:16:20 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 24 Oct 2022 22:39:26 GMT
Expires: Tue, 25 Oct 2022 22:39:26 GMT
ETag: "eb4f6ce2ff0ec1fe42fb341de813b78d4e427eed"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
mc.yandex.ru/webvisor/80600038?wmode=0&wv-part=1&wv-hit=870568927&page-url=https%3A%2F%2Fwww.orwell.city%2F2&rn=328197985&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1666685779%3Aw%3A1268x898%3Av%3A921%3Az%3A0%3Ai%3A20221025081619%3Au%3A1666685776688202108%3Avf%3Ahc77qkb9hqc2jb24budq4%3Awe%3A1%3Ast%3A1666685779&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/80600038?wmode=0&wv-part=1&wv-hit=870568927&page-url=https%3A%2F%2Fwww.orwell.city%2F2&rn=328197985&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1666685779%3Aw%3A1268x898%3Av%3A921%3Az%3A0%3Ai%3A20221025081619%3Au%3A1666685776688202108%3Avf%3Ahc77qkb9hqc2jb24budq4%3Awe%3A1%3Ast%3A1666685779&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/80600038?wmode=0&wv-part=1&wv-hit=870568927&page-url=https%3A%2F%2Fwww.orwell.city%2F2&rn=328197985&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1666685779%3Aw%3A1268x898%3Av%3A921%3Az%3A0%3Ai%3A20221025081619%3Au%3A1666685776688202108%3Avf%3Ahc77qkb9hqc2jb24budq4%3Awe%3A1%3Ast%3A1666685779&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 340121
Origin: https://www.orwell.city
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 25 Oct 2022 08:16:21 GMT
access-control-allow-origin: https://www.orwell.city
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 25-Oct-2022 08:16:21 GMT
last-modified: Tue, 25-Oct-2022 08:16:21 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/80600038?wmode=0&wv-part=1&wv-hit=870568927&page-url=https%3A%2F%2Fwww.orwell.city%2F2&rn=339422116&wv-type=3&browser-info=gdpr%3A14%3Aet%3A1666685780%3Aw%3A1268x898%3Av%3A921%3Az%3A0%3Ai%3A20221025081619%3Au%3A1666685776688202108%3Avf%3Ahc77qkb9hqc2jb24budq4%3Awe%3A1%3Ast%3A1666685780&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/80600038?wmode=0&wv-part=1&wv-hit=870568927&page-url=https%3A%2F%2Fwww.orwell.city%2F2&rn=339422116&wv-type=3&browser-info=gdpr%3A14%3Aet%3A1666685780%3Aw%3A1268x898%3Av%3A921%3Az%3A0%3Ai%3A20221025081619%3Au%3A1666685776688202108%3Avf%3Ahc77qkb9hqc2jb24budq4%3Awe%3A1%3Ast%3A1666685780&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/80600038?wmode=0&wv-part=1&wv-hit=870568927&page-url=https%3A%2F%2Fwww.orwell.city%2F2&rn=339422116&wv-type=3&browser-info=gdpr%3A14%3Aet%3A1666685780%3Aw%3A1268x898%3Av%3A921%3Az%3A0%3Ai%3A20221025081619%3Au%3A1666685776688202108%3Avf%3Ahc77qkb9hqc2jb24budq4%3Awe%3A1%3Ast%3A1666685780&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 54
Origin: https://www.orwell.city
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 25 Oct 2022 08:16:21 GMT
access-control-allow-origin: https://www.orwell.city
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 25-Oct-2022 08:16:21 GMT
last-modified: Tue, 25-Oct-2022 08:16:21 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/80600038?wmode=0&wv-part=2&wv-hit=870568927&page-url=https%3A%2F%2Fwww.orwell.city%2F2&rn=366024183&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1666685781%3Aw%3A1268x898%3Av%3A921%3Az%3A0%3Ai%3A20221025081620%3Au%3A1666685776688202108%3Avf%3Ahc77qkb9hqc2jb24budq4%3Awe%3A1%3Ast%3A1666685781&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/80600038?wmode=0&wv-part=2&wv-hit=870568927&page-url=https%3A%2F%2Fwww.orwell.city%2F2&rn=366024183&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1666685781%3Aw%3A1268x898%3Av%3A921%3Az%3A0%3Ai%3A20221025081620%3Au%3A1666685776688202108%3Avf%3Ahc77qkb9hqc2jb24budq4%3Awe%3A1%3Ast%3A1666685781&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/80600038?wmode=0&wv-part=2&wv-hit=870568927&page-url=https%3A%2F%2Fwww.orwell.city%2F2&rn=366024183&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1666685781%3Aw%3A1268x898%3Av%3A921%3Az%3A0%3Ai%3A20221025081620%3Au%3A1666685776688202108%3Avf%3Ahc77qkb9hqc2jb24budq4%3Awe%3A1%3Ast%3A1666685781&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 26
Origin: https://www.orwell.city
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 25 Oct 2022 08:16:22 GMT
access-control-allow-origin: https://www.orwell.city
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 25-Oct-2022 08:16:22 GMT
last-modified: Tue, 25-Oct-2022 08:16:22 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/80600038?wmode=0&wv-part=2&wv-hit=870568927&page-url=https%3A%2F%2Fwww.orwell.city%2F2&rn=345930173&wv-type=3&browser-info=gdpr%3A14%3Aet%3A1666685781%3Aw%3A1268x898%3Av%3A921%3Az%3A0%3Ai%3A20221025081620%3Au%3A1666685776688202108%3Avf%3Ahc77qkb9hqc2jb24budq4%3Awe%3A1%3Ast%3A1666685781&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/80600038?wmode=0&wv-part=2&wv-hit=870568927&page-url=https%3A%2F%2Fwww.orwell.city%2F2&rn=345930173&wv-type=3&browser-info=gdpr%3A14%3Aet%3A1666685781%3Aw%3A1268x898%3Av%3A921%3Az%3A0%3Ai%3A20221025081620%3Au%3A1666685776688202108%3Avf%3Ahc77qkb9hqc2jb24budq4%3Awe%3A1%3Ast%3A1666685781&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/80600038?wmode=0&wv-part=2&wv-hit=870568927&page-url=https%3A%2F%2Fwww.orwell.city%2F2&rn=345930173&wv-type=3&browser-info=gdpr%3A14%3Aet%3A1666685781%3Aw%3A1268x898%3Av%3A921%3Az%3A0%3Ai%3A20221025081620%3Au%3A1666685776688202108%3Avf%3Ahc77qkb9hqc2jb24budq4%3Awe%3A1%3Ast%3A1666685781&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 141
Origin: https://www.orwell.city
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 25 Oct 2022 08:16:22 GMT
access-control-allow-origin: https://www.orwell.city
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 25-Oct-2022 08:16:22 GMT
last-modified: Tue, 25-Oct-2022 08:16:22 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
telegram.org/css/font-roboto.css?1
200 OK 709 B URL HTTP/2 telegram.org/css/font-roboto.css?1
IP
ASN #62041 Telegram Messenger Inc
Hash 363823548b84cf8725238a42aa6bf31e
e18ab2f1b0c6ed14dff62734af684cc3269825f3
6d796a70099d58b139a62ef6953666a4dc0026a5d5099cb4c5b00cd1b77f45f8
GET /css/font-roboto.css?1 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 25 Oct 2022 08:16:18 GMT
content-type: text/css
last-modified: Thu, 20 Oct 2022 11:05:33 GMT
etag: W/"63512b7d-1816"
expires: Sat, 29 Oct 2022 08:16:18 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/80600038?wmode=0&wv-part=3&wv-hit=870568927&page-url=https%3A%2F%2Fwww.orwell.city%2F2&rn=426891331&wv-type=3&browser-info=gdpr%3A14%3Aet%3A1666685782%3Aw%3A1268x898%3Av%3A921%3Az%3A0%3Ai%3A20221025081622%3Au%3A1666685776688202108%3Avf%3Ahc77qkb9hqc2jb24budq4%3Awe%3A1%3Ast%3A1666685782&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/80600038?wmode=0&wv-part=3&wv-hit=870568927&page-url=https%3A%2F%2Fwww.orwell.city%2F2&rn=426891331&wv-type=3&browser-info=gdpr%3A14%3Aet%3A1666685782%3Aw%3A1268x898%3Av%3A921%3Az%3A0%3Ai%3A20221025081622%3Au%3A1666685776688202108%3Avf%3Ahc77qkb9hqc2jb24budq4%3Awe%3A1%3Ast%3A1666685782&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/80600038?wmode=0&wv-part=3&wv-hit=870568927&page-url=https%3A%2F%2Fwww.orwell.city%2F2&rn=426891331&wv-type=3&browser-info=gdpr%3A14%3Aet%3A1666685782%3Aw%3A1268x898%3Av%3A921%3Az%3A0%3Ai%3A20221025081622%3Au%3A1666685776688202108%3Avf%3Ahc77qkb9hqc2jb24budq4%3Awe%3A1%3Ast%3A1666685782&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 21
Origin: https://www.orwell.city
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 25 Oct 2022 08:16:24 GMT
access-control-allow-origin: https://www.orwell.city
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 25-Oct-2022 08:16:24 GMT
last-modified: Tue, 25-Oct-2022 08:16:24 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
telegram.org/js/tgwallpaper.min.js?3
200 OK 1.6 kB URL HTTP/2 telegram.org/js/tgwallpaper.min.js?3
IP
ASN #62041 Telegram Messenger Inc
Hash d1c18f7569d1aef5ed46f8908c0faa71
55663c1537819ad3c282e7de223c290cbe9cfd59
35e1d5a424c34f1fe19772a0a56e1ce1d67c6c862abab39413a535b093320a58
GET /js/tgwallpaper.min.js?3 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 25 Oct 2022 08:16:18 GMT
content-type: application/javascript
last-modified: Thu, 03 Mar 2022 19:57:25 GMT
etag: W/"62211da5-ba3"
expires: Sat, 29 Oct 2022 08:16:18 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Playfair+Display:400,400i,700,700i,900,900i|Roboto:100,100i,300,300i,400,400i,500,500i,700,700i,900,900i
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Playfair+Display:400,400i,700,700i,900,900i|Roboto:100,100i,300,300i,400,400i,500,500i,700,700i,900,900i
IP
GET /css?family=Playfair+Display:400,400i,700,700i,900,900i|Roboto:100,100i,300,300i,400,400i,500,500i,700,700i,900,900i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 25 Oct 2022 08:16:16 GMT
date: Tue, 25 Oct 2022 08:16:16 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
telegram.org/js/jquery.min.js
200 OK 0 B URL HTTP/2 telegram.org/js/jquery.min.js
IP
ASN #62041 Telegram Messenger Inc
GET /js/jquery.min.js HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 25 Oct 2022 08:16:19 GMT
content-type: application/javascript
last-modified: Fri, 10 Nov 2017 17:54:14 GMT
etag: W/"5a05e7c6-1762a"
expires: Sat, 29 Oct 2022 08:16:19 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Montserrat:400,700&ver=4.2.4
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Montserrat:400,700&ver=4.2.4
IP
GET /css?family=Montserrat:400,700&ver=4.2.4 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 25 Oct 2022 08:16:16 GMT
date: Tue, 25 Oct 2022 08:16:16 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
commerce.coinbase.com/v1/checkout.js?version=201807
200 OK 0 B URL HTTP/2 commerce.coinbase.com/v1/checkout.js?version=201807
IP
GET /v1/checkout.js?version=201807 HTTP/1.1
Host: commerce.coinbase.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 08:16:16 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=14400
etag: W/"1dd3-kGCLmutp/eAEmbJUva1JQjsFWGg"
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-xss-protection: 1; mode=block
cf-cache-status: HIT
expires: Tue, 25 Oct 2022 12:16:16 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 75f98258a84db523-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
c.statcounter.com/t.php?sc_project=12561503&u1=1226806CB12F4F2A168A7013246A1DB8&java=1&security=f05ba710&sc_snum=1&sess=a8f3c4&p=0&rcat=d&rdom=d&rdomg=new&bb=1&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1280&h=1024&camefrom=&u=https%3A//www.orwell.city/2&t=Page%20Not%20Found%20-%20ORWELL%20CITY&invisible=1&sc_rum_e_s=2147&sc_rum_e_e=2155&sc_rum_f_s=0&sc_rum_f_e=2136&get_config=true
200 OK 0 B URL HTTP/2 c.statcounter.com/t.php?sc_project=12561503&u1=1226806CB12F4F2A168A7013246A1DB8&java=1&security=f05ba710&sc_snum=1&sess=a8f3c4&p=0&rcat=d&rdom=d&rdomg=new&bb=1&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1280&h=1024&camefrom=&u=https%3A//www.orwell.city/2&t=Page%20Not%20Found%20-%20ORWELL%20CITY&invisible=1&sc_rum_e_s=2147&sc_rum_e_e=2155&sc_rum_f_s=0&sc_rum_f_e=2136&get_config=true
IP
GET /t.php?sc_project=12561503&u1=1226806CB12F4F2A168A7013246A1DB8&java=1&security=f05ba710&sc_snum=1&sess=a8f3c4&p=0&rcat=d&rdom=d&rdomg=new&bb=1&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1280&h=1024&camefrom=&u=https%3A//www.orwell.city/2&t=Page%20Not%20Found%20-%20ORWELL%20CITY&invisible=1&sc_rum_e_s=2147&sc_rum_e_e=2155&sc_rum_f_s=0&sc_rum_f_e=2136&get_config=true HTTP/1.1
Host: c.statcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.orwell.city
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 08:16:17 GMT
content-type: application/json
p3p: policyref="http://www.statcounter.com/w3c/p3p.xml", CP="ADMa OUR COM NAV NID DSP NOI COR"
expires: Mon, 26 Jul 1997 05:00:00 GMT
set-cookie: is_unique=sc12561503.1666685777.0; SameSite=None; Secure; Expires=Sunday, 24-Oct-2027 05:16:17 -03; Path=/; Domain=.statcounter.com
is_visitor_unique=1666685777271091226; SameSite=None; Secure; Expires=Thursday, 24-Oct-2024 05:16:17 -03; Path=/; Domain=.statcounter.com
access-control-allow-origin: https://www.orwell.city
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 75f9825d7b490b45-OSL
content-encoding: br
X-Firefox-Spdy: h2
telegram.org/js/tgsticker.js?29
200 OK 0 B URL HTTP/2 telegram.org/js/tgsticker.js?29
IP
ASN #62041 Telegram Messenger Inc
GET /js/tgsticker.js?29 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 25 Oct 2022 08:16:18 GMT
content-type: application/javascript
last-modified: Wed, 29 Jun 2022 21:52:44 GMT
etag: W/"62bcc9ac-5faf"
expires: Sat, 29 Oct 2022 08:16:18 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
telegram.org/img/tgme/pattern.svg
200 OK 0 B URL HTTP/2 telegram.org/img/tgme/pattern.svg
IP
ASN #62041 Telegram Messenger Inc
GET /img/tgme/pattern.svg HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://telegram.org/css/telegram-web.css?35
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 25 Oct 2022 08:16:19 GMT
content-type: image/svg+xml
last-modified: Thu, 03 Mar 2022 09:45:08 GMT
etag: W/"62208e24-385d7"
expires: Sat, 29 Oct 2022 08:16:19 GMT
cache-control: max-age=345600
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
mc.yandex.ru/watch/80600038?wmode=7&page-url=https%3A%2F%2Fwww.orwell.city%2F2&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahc77qkb9hqc2jb24budq4%3Afp%3A1494%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A690303775317%3Ahid%3A870568927%3Az%3A0%3Ai%3A20221025081615%3Aet%3A1666685776%3Ac%3A1%3Arn%3A750641919%3Arqn%3A1%3Au%3A1666685776688202108%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C207%2C470%2C0%2C403%2C0%2C%2C886%2C52%2C%2C%2C%2C1983%3Ans%3A1666685773452%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666685776%3At%3APage%20Not%20Found%20-%20ORWELL%20CITY&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/80600038?wmode=7&page-url=https%3A%2F%2Fwww.orwell.city%2F2&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahc77qkb9hqc2jb24budq4%3Afp%3A1494%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A690303775317%3Ahid%3A870568927%3Az%3A0%3Ai%3A20221025081615%3Aet%3A1666685776%3Ac%3A1%3Arn%3A750641919%3Arqn%3A1%3Au%3A1666685776688202108%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C207%2C470%2C0%2C403%2C0%2C%2C886%2C52%2C%2C%2C%2C1983%3Ans%3A1666685773452%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666685776%3At%3APage%20Not%20Found%20-%20ORWELL%20CITY&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
IP
GET /watch/80600038?wmode=7&page-url=https%3A%2F%2Fwww.orwell.city%2F2&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahc77qkb9hqc2jb24budq4%3Afp%3A1494%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A690303775317%3Ahid%3A870568927%3Az%3A0%3Ai%3A20221025081615%3Aet%3A1666685776%3Ac%3A1%3Arn%3A750641919%3Arqn%3A1%3Au%3A1666685776688202108%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C207%2C470%2C0%2C403%2C0%2C%2C886%2C52%2C%2C%2C%2C1983%3Ans%3A1666685773452%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666685776%3At%3APage%20Not%20Found%20-%20ORWELL%20CITY&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.orwell.city
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/80600038/1?wmode=7&page-url=https%3A%2F%2Fwww.orwell.city%2F2&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahc77qkb9hqc2jb24budq4%3Afp%3A1494%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A690303775317%3Ahid%3A870568927%3Az%3A0%3Ai%3A20221025081615%3Aet%3A1666685776%3Ac%3A1%3Arn%3A750641919%3Arqn%3A1%3Au%3A1666685776688202108%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C207%2C470%2C0%2C403%2C0%2C%2C886%2C52%2C%2C%2C%2C1983%3Ans%3A1666685773452%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666685776%3At%3APage%20Not%20Found%20-%20ORWELL%20CITY&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
date: Tue, 25 Oct 2022 08:16:17 GMT
access-control-allow-origin: https://www.orwell.city
set-cookie: yandexuid=6243095411666685777; Expires=Wed, 25-Oct-2023 08:16:17 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=6243095411666685777; Expires=Wed, 25-Oct-2023 08:16:17 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=2440471751666685777; Path=/; SameSite=None; Secure
i=nrTgeY4oHpY9bCEw9JzG2uFJVtIW0vku+3C8wDq0gsJIdrz/5lC0iEYy5Xnxau7mBZFmDTgkJb+Azyuk0qtfqw173wY=; Expires=Fri, 22-Oct-2032 08:16:17 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1698221777.yrts.1666685777#1698221777.yrtsi.1666685777; Expires=Wed, 25-Oct-2023 08:16:17 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 25-Oct-2022 08:16:17 GMT
last-modified: Tue, 25-Oct-2022 08:16:17 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Crimson+Text:400,700,400italic,700italic&ver=3.9.2
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Crimson+Text:400,700,400italic,700italic&ver=3.9.2
IP
GET /css?family=Crimson+Text:400,700,400italic,700italic&ver=3.9.2 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 25 Oct 2022 08:16:16 GMT
date: Tue, 25 Oct 2022 08:16:16 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Lato:300,400,700,400italic&ver=4.2.4
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Lato:300,400,700,400italic&ver=4.2.4
IP
GET /css?family=Lato:300,400,700,400italic&ver=4.2.4 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 25 Oct 2022 08:16:16 GMT
date: Tue, 25 Oct 2022 08:16:16 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
telegram.org/js/jquery-ui.min.js
200 OK 0 B URL HTTP/2 telegram.org/js/jquery-ui.min.js
IP
ASN #62041 Telegram Messenger Inc
GET /js/jquery-ui.min.js HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 25 Oct 2022 08:16:18 GMT
content-type: application/javascript
last-modified: Fri, 10 Nov 2017 17:54:14 GMT
etag: W/"5a05e7c6-181a9"
expires: Sat, 29 Oct 2022 08:16:18 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
telegram.org/css/widget-frame.css?63
200 OK 0 B URL HTTP/2 telegram.org/css/widget-frame.css?63
IP
ASN #62041 Telegram Messenger Inc
GET /css/widget-frame.css?63 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 25 Oct 2022 08:16:18 GMT
content-type: text/css
last-modified: Thu, 20 Oct 2022 11:05:33 GMT
etag: W/"63512b7d-15800"
expires: Sat, 29 Oct 2022 08:16:18 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Bad+Script%7CRaleway:400,500,600,700,300%7CLora:400
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Bad+Script%7CRaleway:400,500,600,700,300%7CLora:400
IP
GET /css?family=Bad+Script%7CRaleway:400,500,600,700,300%7CLora:400 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 25 Oct 2022 08:16:16 GMT
date: Tue, 25 Oct 2022 08:16:16 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
200 OK 0 B URL HTTP/2 maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
IP
GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 08:16:16 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: SE
cdn-edgestorageid: 722, 617
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 2021-03-10 20:26:20
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: 121d365db7a9aba3915641185d93b963
cdn-cache: HIT
cf-cache-status: HIT
age: 15996583
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 75f982587905b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
telegram.org/css/telegram-web.css?35
200 OK 0 B URL HTTP/2 telegram.org/css/telegram-web.css?35
IP
ASN #62041 Telegram Messenger Inc
GET /css/telegram-web.css?35 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 25 Oct 2022 08:16:18 GMT
content-type: text/css
last-modified: Sun, 09 Oct 2022 13:18:38 GMT
etag: W/"6342ca2e-79e7"
expires: Sat, 29 Oct 2022 08:16:18 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
142.250.74.179
93.184.220.29
93.158.134.119
104.18.11.207
95.216.186.40
23.36.76.226