GET habiaunavezchocolate.blogspot.com/search/label/Muskoka?m=1
216.58.207.193200 OK 9.9 kB URL User Request GET HTTP/2 habiaunavezchocolate.blogspot.com/search/label/Muskoka?m=1
IP 216.58.207.193:443
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintDB:6F:B7:F7:A1:B7:4E:4D:A1:FA:56:E5:EB:89:CB:4E:AE:97:4D:CE
ValidityMon, 14 Aug 2023 08:21:16 GMT - Mon, 06 Nov 2023 08:21:15 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (4866)
Hash e02ba98dedfc738491c524274dee267d
630d1954ed083d89ad5036129d6529024a9aa588
23906baecacef73e4cd33788a4b479371068883f855a987372edb8d61884bd17
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /search/label/Muskoka?m=1 HTTP/1.1
Host: habiaunavezchocolate.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Mon, 18 Sep 2023 05:11:17 GMT
date: Mon, 18 Sep 2023 05:11:17 GMT
cache-control: private, max-age=0
last-modified: Sat, 18 Mar 2023 17:42:30 GMT
etag: W/"8aeab64e651cfa632dfc1a5a85b690efbea64b32bdceeeb157192b7c652c6c53"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 9864
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET habiaunavezchocolate.blogspot.com/js/cookienotice.js
216.58.207.193200 OK 2.0 kB URL GET HTTP/3 habiaunavezchocolate.blogspot.com/js/cookienotice.js
IP 216.58.207.193:443
Requested by https://habiaunavezchocolate.blogspot.com/search/label/Muskoka?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintDB:6F:B7:F7:A1:B7:4E:4D:A1:FA:56:E5:EB:89:CB:4E:AE:97:4D:CE
ValidityMon, 14 Aug 2023 08:21:16 GMT - Mon, 06 Nov 2023 08:21:15 GMT
Hash a705132a2174f88e196ec3610d68faa8
3bad57a48d973a678fec600d45933010f6edc659
068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/cookienotice.js HTTP/1.1
Host: habiaunavezchocolate.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://habiaunavezchocolate.blogspot.com/search/label/Muskoka?m=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 15 Sep 2023 22:57:44 GMT
expires: Fri, 22 Sep 2023 22:57:44 GMT
cache-control: public, max-age=604800
last-modified: Fri, 15 Sep 2023 20:55:15 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 195214
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
142.250.74.105200 OK 6.6 kB URL GET HTTP/2 www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
IP 142.250.74.105:443
Requested by https://habiaunavezchocolate.blogspot.com/search/label/Muskoka?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint0A:37:73:3D:BD:C2:5F:FA:38:2B:9B:AB:96:77:54:94:B6:E3:4A:EE
ValidityMon, 14 Aug 2023 08:16:07 GMT - Mon, 06 Nov 2023 08:16:06 GMT
File type ASCII text, with very long lines (30596)
Hash e3f09df1bc175f411d1ec3dfb5afb17b
3994ec3efe3c2447e7bbfdd97bb7e190dd1658f9
1a2eca9e492e3a21e02dd77ad44d7af45c4091d35ede79e948b7a3f23e5b3617
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://habiaunavezchocolate.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 12 Sep 2023 09:44:21 GMT
expires: Wed, 11 Sep 2024 09:44:21 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Sep 2023 11:53:55 GMT
content-type: text/css
vary: Accept-Encoding
age: 502017
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.google.com/help/hc/images/adsense_185665_adformat-text_728x90.png
142.250.74.132200 OK 22 kB URL GET HTTP/2 www.google.com/help/hc/images/adsense_185665_adformat-text_728x90.png
IP 142.250.74.132:443
Requested by https://habiaunavezchocolate.blogspot.com/search/label/Muskoka?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
Fingerprint46:10:6A:3E:F0:E9:34:E0:79:83:32:6E:2E:D8:2A:57:15:BD:AC:4C
ValidityMon, 14 Aug 2023 08:23:03 GMT - Mon, 06 Nov 2023 08:23:02 GMT
File type PNG image data, 728 x 90, 8-bit/color RGB, non-interlaced\012- data
Hash 24fe40f0a76231aad5a9dcbffa313b43
6986053d8906ec6262c2a40b753fe09b4604981d
eb71c9a3af0c036e67071cac62992e2ee7c6eab8aaf7a016da72c571341d05d4
GET /help/hc/images/adsense_185665_adformat-text_728x90.png HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://habiaunavezchocolate.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/www_google
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="uxe-owners-acl/www_google"
report-to: {"group":"uxe-owners-acl/www_google","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/uxe-owners-acl/www_google"}]}
content-length: 22354
date: Mon, 18 Sep 2023 05:11:18 GMT
expires: Mon, 18 Sep 2023 05:11:18 GMT
cache-control: private, max-age=3000
last-modified: Fri, 18 Oct 2019 02:00:00 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.google.com/help/hc/images/adsense/adsense_185665_adformat-text_336x280_en.png
142.250.74.132200 OK 61 kB URL GET HTTP/2 www.google.com/help/hc/images/adsense/adsense_185665_adformat-text_336x280_en.png
IP 142.250.74.132:443
Requested by https://habiaunavezchocolate.blogspot.com/search/label/Muskoka?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
Fingerprint46:10:6A:3E:F0:E9:34:E0:79:83:32:6E:2E:D8:2A:57:15:BD:AC:4C
ValidityMon, 14 Aug 2023 08:23:03 GMT - Mon, 06 Nov 2023 08:23:02 GMT
File type PNG image data, 336 x 280, 8-bit/color RGB, non-interlaced\012- data
Hash 97f102923571f23de9092d01274dbfca
b2f23d1715213e9e32d7cc3d1f62c555882eac3c
2c5650bc587a551be1cb2e3a75eb0c7789f793d3a4bd1954f445ef31d71d7c53
GET /help/hc/images/adsense/adsense_185665_adformat-text_336x280_en.png HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://habiaunavezchocolate.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/www_google
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="uxe-owners-acl/www_google"
report-to: {"group":"uxe-owners-acl/www_google","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/uxe-owners-acl/www_google"}]}
content-length: 60971
date: Mon, 18 Sep 2023 05:11:18 GMT
expires: Mon, 18 Sep 2023 05:11:18 GMT
cache-control: private, max-age=3000
last-modified: Fri, 18 Oct 2019 02:00:00 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.blogger.com/static/v1/widgets/1465578468-widgets.js
142.250.74.105200 OK 58 kB URL GET HTTP/2 www.blogger.com/static/v1/widgets/1465578468-widgets.js
IP 142.250.74.105:443
Requested by https://habiaunavezchocolate.blogspot.com/search/label/Muskoka?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint0A:37:73:3D:BD:C2:5F:FA:38:2B:9B:AB:96:77:54:94:B6:E3:4A:EE
ValidityMon, 14 Aug 2023 08:16:07 GMT - Mon, 06 Nov 2023 08:16:06 GMT
File type ASCII text, with very long lines (2215)
Hash a1cb4046392479f1acaeeba88535eaee
65ac5b085dd4b87ef3dbfe271254bd1d742f1abb
d49c1e3a643794375db57ab0f237a97a189577f3e822d8512ed383f95941dde8
GET /static/v1/widgets/1465578468-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://habiaunavezchocolate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 57929
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 13 Sep 2023 02:11:23 GMT
expires: Thu, 12 Sep 2024 02:11:23 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 01:52:07 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 442795
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET lh3.googleusercontent.com/blogger_img_proxy/AAOd8Mzy3YPu5se06n369vy93k4fLKEVkwNMRL-v6AM4Q3lpxSnR_i3aY79jWAwCfoaYvHybq5vXLfquyACtDPVOzux1wpuHutMiNYvr60a8OFyLUKG4641U_CqljB2fAxqxKw=s0-d
142.250.74.97200 OK 77 kB URL GET HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/AAOd8Mzy3YPu5se06n369vy93k4fLKEVkwNMRL-v6AM4Q3lpxSnR_i3aY79jWAwCfoaYvHybq5vXLfquyACtDPVOzux1wpuHutMiNYvr60a8OFyLUKG4641U_CqljB2fAxqxKw=s0-d
IP 142.250.74.97:443
Requested by https://habiaunavezchocolate.blogspot.com/search/label/Muskoka?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintB5:F6:4B:DC:96:53:57:F2:9C:41:9E:96:E6:9A:00:DF:E1:A9:C9:76
ValidityMon, 14 Aug 2023 08:21:40 GMT - Mon, 06 Nov 2023 08:21:39 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 499x279, components 3\012- data
Hash f96ca31c53e09cff38729a077a09bdaa
7b85698d754573918cc83826d90b19f94d7fb9c4
912d991f15295e6decd3dc2229bc1c3b8b9b6e2bc4ab636639399f0f6c5dff49
GET /blogger_img_proxy/AAOd8Mzy3YPu5se06n369vy93k4fLKEVkwNMRL-v6AM4Q3lpxSnR_i3aY79jWAwCfoaYvHybq5vXLfquyACtDPVOzux1wpuHutMiNYvr60a8OFyLUKG4641U_CqljB2fAxqxKw=s0-d HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://habiaunavezchocolate.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
expires: Tue, 19 Sep 2023 05:11:18 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: attachment;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Mon, 18 Sep 2023 05:11:18 GMT
server: fife
content-length: 77434
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET lh3.googleusercontent.com/blogger_img_proxy/AAOd8MwTSyp9Ni7UoxndRIU--MGbttTM-Y33awDhddWoZ4QVO_qEPYvAcwdrO-1pL2gmQ3xLq4y84dyPPky_8l8_9gsquda8AqnPOL-_rHHs0jWJ8d2VUwcWh2LIIM42QDBp=s0-d
142.250.74.97200 OK 55 kB URL GET HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/AAOd8MwTSyp9Ni7UoxndRIU--MGbttTM-Y33awDhddWoZ4QVO_qEPYvAcwdrO-1pL2gmQ3xLq4y84dyPPky_8l8_9gsquda8AqnPOL-_rHHs0jWJ8d2VUwcWh2LIIM42QDBp=s0-d
IP 142.250.74.97:443
Requested by https://habiaunavezchocolate.blogspot.com/search/label/Muskoka?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintB5:F6:4B:DC:96:53:57:F2:9C:41:9E:96:E6:9A:00:DF:E1:A9:C9:76
ValidityMon, 14 Aug 2023 08:21:40 GMT - Mon, 06 Nov 2023 08:21:39 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Picasa], baseline, precision 8, 500x257, components 3\012- data
Hash 9564c017f0271128d00b955d9ec2115a
678e35b2fc2d799109b565524fa4a2c7b1d2500b
cbabcc1080d4a2c68f13ef5d77e9a7f9ff579757cfb3a6a6c652d5fae0f174de
GET /blogger_img_proxy/AAOd8MwTSyp9Ni7UoxndRIU--MGbttTM-Y33awDhddWoZ4QVO_qEPYvAcwdrO-1pL2gmQ3xLq4y84dyPPky_8l8_9gsquda8AqnPOL-_rHHs0jWJ8d2VUwcWh2LIIM42QDBp=s0-d HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://habiaunavezchocolate.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
expires: Tue, 19 Sep 2023 05:11:18 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: attachment;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Mon, 18 Sep 2023 05:11:18 GMT
server: fife
content-length: 55041
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET lh3.googleusercontent.com/blogger_img_proxy/AAOd8Mzo-GbxwZQGHp7ZRBwgqVp5FwcEiX2AlL8yqzNd016jM7YVvDpEYxauUwbiCD8Iym4aPZptuaGlBzBEJ5k0I1_h4kiVyQ0wlsCjnr_lZBo1sy2du4thJbK90xis105HDA=s0-d
142.250.74.97200 OK 115 kB URL GET HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/AAOd8Mzo-GbxwZQGHp7ZRBwgqVp5FwcEiX2AlL8yqzNd016jM7YVvDpEYxauUwbiCD8Iym4aPZptuaGlBzBEJ5k0I1_h4kiVyQ0wlsCjnr_lZBo1sy2du4thJbK90xis105HDA=s0-d
IP 142.250.74.97:443
Requested by https://habiaunavezchocolate.blogspot.com/search/label/Muskoka?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintB5:F6:4B:DC:96:53:57:F2:9C:41:9E:96:E6:9A:00:DF:E1:A9:C9:76
ValidityMon, 14 Aug 2023 08:21:40 GMT - Mon, 06 Nov 2023 08:21:39 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Picasa], baseline, precision 8, 500x424, components 3\012- data
Size 115 kB (114749 bytes)
Hash 302519d7dd3932a4fb73116654274b79
a657effcfd66b5b0fc95c7b622864379cf99a033
d990214d35e5f1c5cad877aa0a88992c2d368e2a744371b5af4122858364ebf2
GET /blogger_img_proxy/AAOd8Mzo-GbxwZQGHp7ZRBwgqVp5FwcEiX2AlL8yqzNd016jM7YVvDpEYxauUwbiCD8Iym4aPZptuaGlBzBEJ5k0I1_h4kiVyQ0wlsCjnr_lZBo1sy2du4thJbK90xis105HDA=s0-d HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://habiaunavezchocolate.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
expires: Tue, 19 Sep 2023 05:11:18 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: attachment;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Mon, 18 Sep 2023 05:11:18 GMT
server: fife
content-length: 114749
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET 3.bp.blogspot.com/_rLYhkzmU7RY/TDvdaQEQJhI/AAAAAAAAAAM/tQr4P8Rb7AQ/s1600/line.gif
142.250.74.161200 OK 43 B URL GET HTTP/2 3.bp.blogspot.com/_rLYhkzmU7RY/TDvdaQEQJhI/AAAAAAAAAAM/tQr4P8Rb7AQ/s1600/line.gif
IP 142.250.74.161:443
Requested by https://habiaunavezchocolate.blogspot.com/search/label/Muskoka?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintDB:6F:B7:F7:A1:B7:4E:4D:A1:FA:56:E5:EB:89:CB:4E:AE:97:4D:CE
ValidityMon, 14 Aug 2023 08:21:16 GMT - Mon, 06 Nov 2023 08:21:15 GMT
File type GIF image data, version 89a, 1 x 3\012- data
Hash 275a41e651a37e9b08666e30446c66b2
3bea2ad31c09d90ace0953bcc8a9abdc72593925
a8f08113955fed16ed29d27c5d11a6dd00d47bb8487be127b22594b2171d6e7d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_rLYhkzmU7RY/TDvdaQEQJhI/AAAAAAAAAAM/tQr4P8Rb7AQ/s1600/line.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://habiaunavezchocolate.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="line.gif"
x-content-type-options: nosniff
server: fife
content-length: 43
x-xss-protection: 0
date: Mon, 18 Sep 2023 03:53:03 GMT
expires: Tue, 19 Sep 2023 03:53:03 GMT
cache-control: public, max-age=86400, no-transform
age: 4695
etag: "v25"
content-type: image/gif
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET lh3.googleusercontent.com/blogger_img_proxy/AAOd8MwBku1g3ZcgpS9AAMbe8jpipMcCXs7Q82-QtEI7lniYGtbuPCVxp_6TM9k3YG8XZBuwe8L6a9cX_0wjmoYregxicav-ArOaSmdtA0U0wlx3U1oDvEnrTCBnVXpdoBMDFA=s0-d
142.250.74.97200 OK 70 kB URL GET HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/AAOd8MwBku1g3ZcgpS9AAMbe8jpipMcCXs7Q82-QtEI7lniYGtbuPCVxp_6TM9k3YG8XZBuwe8L6a9cX_0wjmoYregxicav-ArOaSmdtA0U0wlx3U1oDvEnrTCBnVXpdoBMDFA=s0-d
IP 142.250.74.97:443
Requested by https://habiaunavezchocolate.blogspot.com/search/label/Muskoka?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintB5:F6:4B:DC:96:53:57:F2:9C:41:9E:96:E6:9A:00:DF:E1:A9:C9:76
ValidityMon, 14 Aug 2023 08:21:40 GMT - Mon, 06 Nov 2023 08:21:39 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Picasa], baseline, precision 8, 289x499, components 3\012- data
Hash 49410d2a6389743209356537bd9ce6be
b75beed27778f279b22b42f345a3273cc990d778
ff22d18238f0de5c66801bdc05a20a1553b99fa356c3013f61385fb384a56f71
GET /blogger_img_proxy/AAOd8MwBku1g3ZcgpS9AAMbe8jpipMcCXs7Q82-QtEI7lniYGtbuPCVxp_6TM9k3YG8XZBuwe8L6a9cX_0wjmoYregxicav-ArOaSmdtA0U0wlx3U1oDvEnrTCBnVXpdoBMDFA=s0-d HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://habiaunavezchocolate.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
expires: Tue, 19 Sep 2023 05:11:18 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: attachment;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Mon, 18 Sep 2023 05:11:18 GMT
server: fife
content-length: 70397
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET lh3.googleusercontent.com/blogger_img_proxy/AAOd8Mzw-qZ2diEd4J-W0ybBKXuE91vbJS-s59pu-ThaZMqaE-21HZwXGVvyl9x2gXbEwF9B1ppwT3N5gRno2otK4759g2MZJc4W5s4w1W7mL1oMZZnkoINrAieuYCaxW9of=s0-d
142.250.74.97200 OK 39 kB URL GET HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/AAOd8Mzw-qZ2diEd4J-W0ybBKXuE91vbJS-s59pu-ThaZMqaE-21HZwXGVvyl9x2gXbEwF9B1ppwT3N5gRno2otK4759g2MZJc4W5s4w1W7mL1oMZZnkoINrAieuYCaxW9of=s0-d
IP 142.250.74.97:443
Requested by https://habiaunavezchocolate.blogspot.com/search/label/Muskoka?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintB5:F6:4B:DC:96:53:57:F2:9C:41:9E:96:E6:9A:00:DF:E1:A9:C9:76
ValidityMon, 14 Aug 2023 08:21:40 GMT - Mon, 06 Nov 2023 08:21:39 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Picasa], baseline, precision 8, 499x171, components 3\012- data
Hash 55f5aed4dc5b729b3efe35b7a7dbf2fa
2885a2c551d102687bceaa3f69b83f992b8d32ce
92870a48061678f66e920477a2e4d9da11573cf396b7a834c09038b7476c3656
GET /blogger_img_proxy/AAOd8Mzw-qZ2diEd4J-W0ybBKXuE91vbJS-s59pu-ThaZMqaE-21HZwXGVvyl9x2gXbEwF9B1ppwT3N5gRno2otK4759g2MZJc4W5s4w1W7mL1oMZZnkoINrAieuYCaxW9of=s0-d HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://habiaunavezchocolate.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
expires: Tue, 19 Sep 2023 05:11:18 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: attachment;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Mon, 18 Sep 2023 05:11:18 GMT
server: fife
content-length: 38963
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET lh3.googleusercontent.com/blogger_img_proxy/AAOd8MxGTKqiFebXR8ho38jUVcW-vlpL9nJSwziBqvKfRMH3_DDsRST2Rc_kVQXaNuEAEDoUEqMyVvgau-yqNlwTz7Zlc6fzvhQ3ZidF1bShbbU9PqlIHKZYjrBu8fEJlgalJg=s0-d
142.250.74.97200 OK 64 kB URL GET HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/AAOd8MxGTKqiFebXR8ho38jUVcW-vlpL9nJSwziBqvKfRMH3_DDsRST2Rc_kVQXaNuEAEDoUEqMyVvgau-yqNlwTz7Zlc6fzvhQ3ZidF1bShbbU9PqlIHKZYjrBu8fEJlgalJg=s0-d
IP 142.250.74.97:443
Requested by https://habiaunavezchocolate.blogspot.com/search/label/Muskoka?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintB5:F6:4B:DC:96:53:57:F2:9C:41:9E:96:E6:9A:00:DF:E1:A9:C9:76
ValidityMon, 14 Aug 2023 08:21:40 GMT - Mon, 06 Nov 2023 08:21:39 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Picasa], baseline, precision 8, 500x350, components 3\012- data
Hash 678e5b21e5dbb5028376852078a7f3ff
394125a58d759e936b086297d574027b6d6c09cb
69b5eff51b87fde95c4f1f71af54e307c6dbab070edac37b8b5ae85fb3cd97ea
GET /blogger_img_proxy/AAOd8MxGTKqiFebXR8ho38jUVcW-vlpL9nJSwziBqvKfRMH3_DDsRST2Rc_kVQXaNuEAEDoUEqMyVvgau-yqNlwTz7Zlc6fzvhQ3ZidF1bShbbU9PqlIHKZYjrBu8fEJlgalJg=s0-d HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://habiaunavezchocolate.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
expires: Tue, 19 Sep 2023 05:11:18 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: attachment;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Mon, 18 Sep 2023 05:11:18 GMT
server: fife
content-length: 63560
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET lh3.googleusercontent.com/blogger_img_proxy/AAOd8MzWKLT0CK93n2nz4BZyvwrDB_IYChYGGZE0FPaToHnsND6WIL1EbBJHvb6Lr0EdNHVqvMPCFYpqHQsTT80HafZ_kbLGRdN3hv2MzsbOZkQ7Hj3feAVHVUhaBsyW3vUrnQ=s0-d
142.250.74.97200 OK 72 kB URL GET HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/AAOd8MzWKLT0CK93n2nz4BZyvwrDB_IYChYGGZE0FPaToHnsND6WIL1EbBJHvb6Lr0EdNHVqvMPCFYpqHQsTT80HafZ_kbLGRdN3hv2MzsbOZkQ7Hj3feAVHVUhaBsyW3vUrnQ=s0-d
IP 142.250.74.97:443
Requested by https://habiaunavezchocolate.blogspot.com/search/label/Muskoka?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintB5:F6:4B:DC:96:53:57:F2:9C:41:9E:96:E6:9A:00:DF:E1:A9:C9:76
ValidityMon, 14 Aug 2023 08:21:40 GMT - Mon, 06 Nov 2023 08:21:39 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Picasa], baseline, precision 8, 500x313, components 3\012- data
Hash d5a22d6700a25dfdec8865ce6832a064
2355430981cb9e8f123a2c109950398c6d7e5e12
f14e5451d32be7fe4b89770dbf0117d502b025e1076b2226da31f30441b8f215
GET /blogger_img_proxy/AAOd8MzWKLT0CK93n2nz4BZyvwrDB_IYChYGGZE0FPaToHnsND6WIL1EbBJHvb6Lr0EdNHVqvMPCFYpqHQsTT80HafZ_kbLGRdN3hv2MzsbOZkQ7Hj3feAVHVUhaBsyW3vUrnQ=s0-d HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://habiaunavezchocolate.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
expires: Tue, 19 Sep 2023 05:11:18 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: attachment;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Mon, 18 Sep 2023 05:11:18 GMT
server: fife
content-length: 72345
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET lh3.googleusercontent.com/blogger_img_proxy/AAOd8Mw_u7RnNz7BFlXaTv-422awFGbDyEWVmNUHMK3HZDAGNqa0xQOcjxiMM3LrjPq_bhgPLVwdaqp1pA6mwCzJK08iEJgZk5F6lffYv5-zBWlkdka0Jz8sv-PlwEPQFmMkVg=s0-d
142.250.74.97200 OK 99 kB URL GET HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/AAOd8Mw_u7RnNz7BFlXaTv-422awFGbDyEWVmNUHMK3HZDAGNqa0xQOcjxiMM3LrjPq_bhgPLVwdaqp1pA6mwCzJK08iEJgZk5F6lffYv5-zBWlkdka0Jz8sv-PlwEPQFmMkVg=s0-d
IP 142.250.74.97:443
Requested by https://habiaunavezchocolate.blogspot.com/search/label/Muskoka?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintB5:F6:4B:DC:96:53:57:F2:9C:41:9E:96:E6:9A:00:DF:E1:A9:C9:76
ValidityMon, 14 Aug 2023 08:21:40 GMT - Mon, 06 Nov 2023 08:21:39 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Picasa], baseline, precision 8, 500x431, components 3\012- data
Hash dba8539aedb589cd259411ca8de9012f
03a368781e9cb2624a9c55d4e6e095e895a2d43e
3b0576f4414aa909cb2b11b0376411a53ed3cd49c8df5134ded24baad44b45d2
GET /blogger_img_proxy/AAOd8Mw_u7RnNz7BFlXaTv-422awFGbDyEWVmNUHMK3HZDAGNqa0xQOcjxiMM3LrjPq_bhgPLVwdaqp1pA6mwCzJK08iEJgZk5F6lffYv5-zBWlkdka0Jz8sv-PlwEPQFmMkVg=s0-d HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://habiaunavezchocolate.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
expires: Tue, 19 Sep 2023 05:11:18 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: attachment;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Mon, 18 Sep 2023 05:11:18 GMT
server: fife
content-length: 99406
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.blogger.com/dyn-css/authorization.css?targetBlogID=163761964421696126&zx=fa43ea23-350c-458f-8885-653426b91cbb
142.250.74.105200 OK 21 B URL GET HTTP/3 www.blogger.com/dyn-css/authorization.css?targetBlogID=163761964421696126&zx=fa43ea23-350c-458f-8885-653426b91cbb
IP 142.250.74.105:443
Requested by https://habiaunavezchocolate.blogspot.com/search/label/Muskoka?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint0A:37:73:3D:BD:C2:5F:FA:38:2B:9B:AB:96:77:54:94:B6:E3:4A:EE
ValidityMon, 14 Aug 2023 08:16:07 GMT - Mon, 06 Nov 2023 08:16:06 GMT
File type very short file (no magic)
Hash 68b329da9893e34099c7d8ad5cb9c940
adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /dyn-css/authorization.css?targetBlogID=163761964421696126&zx=fa43ea23-350c-458f-8885-653426b91cbb HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://habiaunavezchocolate.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 18 Sep 2023 05:11:19 GMT
last-modified: Mon, 18 Sep 2023 05:11:19 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET habiaunavezchocolate.blogspot.com/favicon.ico
216.58.207.193200 OK 412 B URL GET HTTP/3 habiaunavezchocolate.blogspot.com/favicon.ico
IP 216.58.207.193:443
Requested by https://habiaunavezchocolate.blogspot.com/search/label/Muskoka?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintDB:6F:B7:F7:A1:B7:4E:4D:A1:FA:56:E5:EB:89:CB:4E:AE:97:4D:CE
ValidityMon, 14 Aug 2023 08:21:16 GMT - Mon, 06 Nov 2023 08:21:15 GMT
File type MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel\012- data
Hash 59a0c7b6e4848ccdabcea0636efda02b
30ef5c54b8bbc3487ea2b4c45cd11ea2932e4340
a1495da3cf3db37bf105a12658636ff628fee7b73975b9200049af7747e60b1f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: habiaunavezchocolate.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://habiaunavezchocolate.blogspot.com/search/label/Muskoka?m=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/x-icon
expires: Mon, 18 Sep 2023 05:11:19 GMT
date: Mon, 18 Sep 2023 05:11:19 GMT
cache-control: private, max-age=86400
last-modified: Sat, 18 Mar 2023 17:42:30 GMT
etag: W/"8aeab64e651cfa632dfc1a5a85b690efbea64b32bdceeeb157192b7c652c6c53"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 412
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET www.google.com/adsense/static/en_US/images/banner.gif
142.250.74.132403 Forbidden 0 B URL GET HTTP/2 www.google.com/adsense/static/en_US/images/banner.gif
IP 142.250.74.132:443
Requested by https://habiaunavezchocolate.blogspot.com/search/label/Muskoka?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
Fingerprint46:10:6A:3E:F0:E9:34:E0:79:83:32:6E:2E:D8:2A:57:15:BD:AC:4C
ValidityMon, 14 Aug 2023 08:23:03 GMT - Mon, 06 Nov 2023 08:23:02 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /adsense/static/en_US/images/banner.gif HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://habiaunavezchocolate.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 18 Sep 2023 05:11:18 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
acx-server-start-time: 1695013878356
acx-server-time: 10
server-timing: server-processing;dur=10
x-trace-id: -7101770058060927849
cross-origin-opener-policy: same-origin-allow-popups; report-to="encsid_AdqZYNf7CGMFwwtPNESRwEV_d6UttHwVGrb7g77tDuzmlyOrJKTPtkM"
report-to: {"group":"encsid_AdqZYNf7CGMFwwtPNESRwEV_d6UttHwVGrb7g77tDuzmlyOrJKTPtkM","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/encsid_AdqZYNf7CGMFwwtPNESRwEV_d6UttHwVGrb7g77tDuzmlyOrJKTPtkM"}]}
content-security-policy: base-uri 'self';object-src 'none';report-uri https://csp.withgoogle.com/csp/adsense/1;script-src 'nonce-MkXGjrJyYGjTI__HBmM3zA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';worker-src 'self' blob:
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
set-cookie: NID=511=Q2nzW5qKxIhSp_UTBa85d76S0f2CzabgUfLunVTi4O2G0qYsqf9JaSy8eKAqSgJYJTLDIJ2fqYyV_8aZvz-KOX6KwmvMxIDapMoIj9c3SOfJj8VJs7-Ya9lxuWIm2gIilhEMNoQLJKtjnu-M_VtoxIUvFIPdZ1lbXhCQ33hCbd8; expires=Tue, 19-Mar-2024 05:11:18 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.google.com/adsense/static/en_US/images/728x15.gif
142.250.74.132403 Forbidden 0 B URL GET HTTP/2 www.google.com/adsense/static/en_US/images/728x15.gif
IP 142.250.74.132:443
Requested by https://habiaunavezchocolate.blogspot.com/search/label/Muskoka?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
Fingerprint46:10:6A:3E:F0:E9:34:E0:79:83:32:6E:2E:D8:2A:57:15:BD:AC:4C
ValidityMon, 14 Aug 2023 08:23:03 GMT - Mon, 06 Nov 2023 08:23:02 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /adsense/static/en_US/images/728x15.gif HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://habiaunavezchocolate.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 18 Sep 2023 05:11:18 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
acx-server-start-time: 1695013878197
acx-server-time: 14
server-timing: server-processing;dur=14
x-trace-id: 1467786471771004446
cross-origin-opener-policy: same-origin-allow-popups; report-to="encsid_AdqZYNf7CGMFwwtPNESRwEV_d6UttHwVGrb7g77tDuzmlyOrJKTPtkM"
content-security-policy: base-uri 'self';object-src 'none';report-uri https://csp.withgoogle.com/csp/adsense/1;script-src 'nonce-D7uIO7KAkWmmE65uFyJ1bg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';worker-src 'self' blob:
report-to: {"group":"encsid_AdqZYNf7CGMFwwtPNESRwEV_d6UttHwVGrb7g77tDuzmlyOrJKTPtkM","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/encsid_AdqZYNf7CGMFwwtPNESRwEV_d6UttHwVGrb7g77tDuzmlyOrJKTPtkM"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
set-cookie: NID=511=hmP3onLbUOFMkHkBlkcfZIl15M2gZ-mulRFKWbtChHMiILUCHNZIiSGH6jeLxOE3qVeciWQJa24nELrxtywjZvCRzZqHskFLduC-w8yZVUQZBI85Dm5anFaMS362xHefTdmI8JkSfazXN0d98Lt20ny1wiavHc-aKteAr1dQvhE; expires=Tue, 19-Mar-2024 05:11:18 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2